UDP traffic

Datagrams matching asn:136180 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Your plan searches up to 7d, so 30d was shortened. Plans

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

Service queries

4 datagrams from 1 source

Requests a service answers without a handshake. Scanners send them to find open DNS, NTP, SNMP or SSDP servers, which are also the servers reflection attacks abuse.

SNMP 4

Latest SNMP datagram, to 161/udp

0&·public·c·0·0 ·+·

payload bytes

00000000  30 26 02 01 01 04 06 70  75 62 6c 69 63 a1 19 02  |0&.....public...|
00000010  04 dc 63 c2 9a 02 01 00  02 01 00 30 0b 30 09 06  |..c........0.0..|
00000020  05 2b 06 01 02 01 05 00                           |.+......|

Unrecognised

47 datagrams from 3 sources

Datagrams no decoder recognised. Their first bytes are kept.

Unrecognised 47

Latest Unrecognised datagram, to 1701/udp

·<·masscan1· · ·

payload bytes

00000000  c8 02 00 3c 00 00 00 00  00 00 00 00 80 08 00 00  |...<............|
00000010  00 00 00 01 80 08 00 00  00 02 01 00 80 0e 00 00  |................|
00000020  00 07 6d 61 73 73 63 61  6e 31 80 0a 00 00 00 03  |..masscan1......|
00000030  00 00 00 03 80 08 00 00  00 09 00 00              |............|

Amplification checks

Probes for services that answer a small request with a much larger reply, the property reflection attacks rely on.

Service	Port	Datagrams	Sources	Factor
SNMPv2	161/udp	4	1	6.3

The factor is how many bytes a reachable server can send back for each byte it receives, as published by CISA in alert TA14-017A.

Destination ports

500/udp IKE27
1701/udp L2TP20
161/udp SNMP4

Networks

AS136180 Beijing Tiantexin Tech. Co., Ltd. from 4 sources51

Countries

CN China51

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
103.203.57.10	AS136180 Beijing Tiantexin Tech. Co., Ltd.	CN	Unrecognised	20	2026-10-10 23:42
103.203.57.27	AS136180 Beijing Tiantexin Tech. Co., Ltd.	CN	Unrecognised	19	2026-10-11 04:47
103.203.57.24	AS136180 Beijing Tiantexin Tech. Co., Ltd.	CN	Unrecognised	8	2026-10-10 18:33
103.203.58.3	AS136180 Beijing Tiantexin Tech. Co., Ltd.	CN	SNMP	4	2026-10-09 14:03

Latest datagrams

2026-10-11 04:47:12103.203.57.27to 1701/udpUnrecognisedCN

·<·masscan1· · ·

payload bytes

00000000  c8 02 00 3c 00 00 00 00  00 00 00 00 80 08 00 00  |...<............|
00000010  00 00 00 01 80 08 00 00  00 02 01 00 80 0e 00 00  |................|
00000020  00 07 6d 61 73 73 63 61  6e 31 80 0a 00 00 00 03  |..masscan1......|
00000030  00 00 00 03 80 08 00 00  00 09 00 00              |............|

2026-10-11 03:42:20103.203.57.27to 500/udpUnrecognisedCN

·;·`·D·8· · · · ·

payload bytes

00000000  00 00 00 00 85 e9 bd 3b  00 00 00 00 00 00 00 00  |.......;........|
00000010  01 10 02 00 00 00 00 00  00 00 01 60 00 00 01 44  |...........`...D|
00000020  00 00 00 01 00 00 00 01  00 00 01 38 01 01 00 0d  |...........8....|
00000030  03 00 00 20 00 01 00 00  80 01 00 05 80 02 00 02  |... ............|
00000040  80 03 00 01 80 04 00 02  80 0b 00 01 80 0c 00 01  |................|
00000050  03 00 00 20 00 01 00 00  80 01 00 01 80 02 00 01  |... ............|
00000060  80 03 00 01 80 04 00 02  80 0b 00 01 80 0c 00 01  |................|
00000070  03 00 00 20 00 01 00 00  80 01 00 07 80 02 00 04  |... ............|
00000080  80 03 00 01 80 04 00 0e  80 0b 00 01 80 0c 00 01  |................|
00000090  03 00 00 14 00 01 00 00  80 01 00 05 80 02 00 02  |................|
000000a0  80 03 00 02 03 00 00 14  00 01 00 00 80 01 00 05  |................|
000000b0  80 02 00 02 80 03 00 03  03 00 00 14 00 01 00 00  |................|
000000c0  80 01 00 05 80 02 00 02  80 03 00 04 03 00 00 14  |................|
000000d0  00 01 00 00 80 01 00 05  80 02 00 02 80 03 00 08  |................|
000000e0  03 00 00 14 00 01 00 00  80 01 00 05 80 02 00 02  |................|
000000f0  80 03 fa dd 03 00 00 14  00 01 00 00 80 01 00 05  |................|
... 352 bytes shown in part

2026-10-10 23:42:18103.203.57.10to 1701/udpUnrecognisedCN

·<·masscan1· · ·

payload bytes

00000000  c8 02 00 3c 00 00 00 00  00 00 00 00 80 08 00 00  |...<............|
00000010  00 00 00 01 80 08 00 00  00 02 01 00 80 0e 00 00  |................|
00000020  00 07 6d 61 73 73 63 61  6e 31 80 0a 00 00 00 03  |..masscan1......|
00000030  00 00 00 03 80 08 00 00  00 09 00 00              |............|

2026-10-10 18:33:36103.203.57.24to 500/udpUnrecognisedCN

·9·`·D·8· · · · ·

payload bytes

00000000  00 00 00 00 cc 14 b8 39  00 00 00 00 00 00 00 00  |.......9........|
00000010  01 10 02 00 00 00 00 00  00 00 01 60 00 00 01 44  |...........`...D|
00000020  00 00 00 01 00 00 00 01  00 00 01 38 01 01 00 0d  |...........8....|
00000030  03 00 00 20 00 01 00 00  80 01 00 05 80 02 00 02  |... ............|
00000040  80 03 00 01 80 04 00 02  80 0b 00 01 80 0c 00 01  |................|
00000050  03 00 00 20 00 01 00 00  80 01 00 01 80 02 00 01  |... ............|
00000060  80 03 00 01 80 04 00 02  80 0b 00 01 80 0c 00 01  |................|
00000070  03 00 00 20 00 01 00 00  80 01 00 07 80 02 00 04  |... ............|
00000080  80 03 00 01 80 04 00 0e  80 0b 00 01 80 0c 00 01  |................|
00000090  03 00 00 14 00 01 00 00  80 01 00 05 80 02 00 02  |................|
000000a0  80 03 00 02 03 00 00 14  00 01 00 00 80 01 00 05  |................|
000000b0  80 02 00 02 80 03 00 03  03 00 00 14 00 01 00 00  |................|
000000c0  80 01 00 05 80 02 00 02  80 03 00 04 03 00 00 14  |................|
000000d0  00 01 00 00 80 01 00 05  80 02 00 02 80 03 00 08  |................|
000000e0  03 00 00 14 00 01 00 00  80 01 00 05 80 02 00 02  |................|
000000f0  80 03 fa dd 03 00 00 14  00 01 00 00 80 01 00 05  |................|
... 352 bytes shown in part

2026-10-10 17:52:00103.203.57.24to 500/udpUnrecognisedCN

·d·X·`·D·8· · · · ·

payload bytes

00000000  00 00 00 00 64 9f 58 f7  00 00 00 00 00 00 00 00  |....d.X.........|
00000010  01 10 02 00 00 00 00 00  00 00 01 60 00 00 01 44  |...........`...D|
00000020  00 00 00 01 00 00 00 01  00 00 01 38 01 01 00 0d  |...........8....|
00000030  03 00 00 20 00 01 00 00  80 01 00 05 80 02 00 02  |... ............|
00000040  80 03 00 01 80 04 00 02  80 0b 00 01 80 0c 00 01  |................|
00000050  03 00 00 20 00 01 00 00  80 01 00 01 80 02 00 01  |... ............|
00000060  80 03 00 01 80 04 00 02  80 0b 00 01 80 0c 00 01  |................|
00000070  03 00 00 20 00 01 00 00  80 01 00 07 80 02 00 04  |... ............|
00000080  80 03 00 01 80 04 00 0e  80 0b 00 01 80 0c 00 01  |................|
00000090  03 00 00 14 00 01 00 00  80 01 00 05 80 02 00 02  |................|
000000a0  80 03 00 02 03 00 00 14  00 01 00 00 80 01 00 05  |................|
000000b0  80 02 00 02 80 03 00 03  03 00 00 14 00 01 00 00  |................|
000000c0  80 01 00 05 80 02 00 02  80 03 00 04 03 00 00 14  |................|
000000d0  00 01 00 00 80 01 00 05  80 02 00 02 80 03 00 08  |................|
000000e0  03 00 00 14 00 01 00 00  80 01 00 05 80 02 00 02  |................|
000000f0  80 03 fa dd 03 00 00 14  00 01 00 00 80 01 00 05  |................|
... 352 bytes shown in part

2026-10-10 17:42:31103.203.57.10to 500/udpUnrecognisedCN

·fG·`·D·8· · · · ·

payload bytes

00000000  00 00 00 00 66 47 a0 dd  00 00 00 00 00 00 00 00  |....fG..........|
00000010  01 10 02 00 00 00 00 00  00 00 01 60 00 00 01 44  |...........`...D|
00000020  00 00 00 01 00 00 00 01  00 00 01 38 01 01 00 0d  |...........8....|
00000030  03 00 00 20 00 01 00 00  80 01 00 05 80 02 00 02  |... ............|
00000040  80 03 00 01 80 04 00 02  80 0b 00 01 80 0c 00 01  |................|
00000050  03 00 00 20 00 01 00 00  80 01 00 01 80 02 00 01  |... ............|
00000060  80 03 00 01 80 04 00 02  80 0b 00 01 80 0c 00 01  |................|
00000070  03 00 00 20 00 01 00 00  80 01 00 07 80 02 00 04  |... ............|
00000080  80 03 00 01 80 04 00 0e  80 0b 00 01 80 0c 00 01  |................|
00000090  03 00 00 14 00 01 00 00  80 01 00 05 80 02 00 02  |................|
000000a0  80 03 00 02 03 00 00 14  00 01 00 00 80 01 00 05  |................|
000000b0  80 02 00 02 80 03 00 03  03 00 00 14 00 01 00 00  |................|
000000c0  80 01 00 05 80 02 00 02  80 03 00 04 03 00 00 14  |................|
000000d0  00 01 00 00 80 01 00 05  80 02 00 02 80 03 00 08  |................|
000000e0  03 00 00 14 00 01 00 00  80 01 00 05 80 02 00 02  |................|
000000f0  80 03 fa dd 03 00 00 14  00 01 00 00 80 01 00 05  |................|
... 352 bytes shown in part

2026-10-10 16:31:07103.203.57.10to 500/udpUnrecognisedCN

·BJ·`·D·8· · · · ·

payload bytes

00000000  00 00 00 00 f7 c3 42 4a  00 00 00 00 00 00 00 00  |......BJ........|
00000010  01 10 02 00 00 00 00 00  00 00 01 60 00 00 01 44  |...........`...D|
00000020  00 00 00 01 00 00 00 01  00 00 01 38 01 01 00 0d  |...........8....|
00000030  03 00 00 20 00 01 00 00  80 01 00 05 80 02 00 02  |... ............|
00000040  80 03 00 01 80 04 00 02  80 0b 00 01 80 0c 00 01  |................|
00000050  03 00 00 20 00 01 00 00  80 01 00 01 80 02 00 01  |... ............|
00000060  80 03 00 01 80 04 00 02  80 0b 00 01 80 0c 00 01  |................|
00000070  03 00 00 20 00 01 00 00  80 01 00 07 80 02 00 04  |... ............|
00000080  80 03 00 01 80 04 00 0e  80 0b 00 01 80 0c 00 01  |................|
00000090  03 00 00 14 00 01 00 00  80 01 00 05 80 02 00 02  |................|
000000a0  80 03 00 02 03 00 00 14  00 01 00 00 80 01 00 05  |................|
000000b0  80 02 00 02 80 03 00 03  03 00 00 14 00 01 00 00  |................|
000000c0  80 01 00 05 80 02 00 02  80 03 00 04 03 00 00 14  |................|
000000d0  00 01 00 00 80 01 00 05  80 02 00 02 80 03 00 08  |................|
000000e0  03 00 00 14 00 01 00 00  80 01 00 05 80 02 00 02  |................|
000000f0  80 03 fa dd 03 00 00 14  00 01 00 00 80 01 00 05  |................|
... 352 bytes shown in part

2026-10-10 10:43:31103.203.57.10to 500/udpUnrecognisedCN

·h·b·`·D·8· · · · ·

payload bytes

00000000  00 00 00 00 0c 68 a8 62  00 00 00 00 00 00 00 00  |.....h.b........|
00000010  01 10 02 00 00 00 00 00  00 00 01 60 00 00 01 44  |...........`...D|
00000020  00 00 00 01 00 00 00 01  00 00 01 38 01 01 00 0d  |...........8....|
00000030  03 00 00 20 00 01 00 00  80 01 00 05 80 02 00 02  |... ............|
00000040  80 03 00 01 80 04 00 02  80 0b 00 01 80 0c 00 01  |................|
00000050  03 00 00 20 00 01 00 00  80 01 00 01 80 02 00 01  |... ............|
00000060  80 03 00 01 80 04 00 02  80 0b 00 01 80 0c 00 01  |................|
00000070  03 00 00 20 00 01 00 00  80 01 00 07 80 02 00 04  |... ............|
00000080  80 03 00 01 80 04 00 0e  80 0b 00 01 80 0c 00 01  |................|
00000090  03 00 00 14 00 01 00 00  80 01 00 05 80 02 00 02  |................|
000000a0  80 03 00 02 03 00 00 14  00 01 00 00 80 01 00 05  |................|
000000b0  80 02 00 02 80 03 00 03  03 00 00 14 00 01 00 00  |................|
000000c0  80 01 00 05 80 02 00 02  80 03 00 04 03 00 00 14  |................|
000000d0  00 01 00 00 80 01 00 05  80 02 00 02 80 03 00 08  |................|
000000e0  03 00 00 14 00 01 00 00  80 01 00 05 80 02 00 02  |................|
000000f0  80 03 fa dd 03 00 00 14  00 01 00 00 80 01 00 05  |................|
... 352 bytes shown in part

2026-10-10 08:13:23103.203.57.27to 500/udpUnrecognisedCN

· ·C·`·D·8· · · · ·

payload bytes

00000000  00 00 00 00 0d 80 f7 43  00 00 00 00 00 00 00 00  |.......C........|
00000010  01 10 02 00 00 00 00 00  00 00 01 60 00 00 01 44  |...........`...D|
00000020  00 00 00 01 00 00 00 01  00 00 01 38 01 01 00 0d  |...........8....|
00000030  03 00 00 20 00 01 00 00  80 01 00 05 80 02 00 02  |... ............|
00000040  80 03 00 01 80 04 00 02  80 0b 00 01 80 0c 00 01  |................|
00000050  03 00 00 20 00 01 00 00  80 01 00 01 80 02 00 01  |... ............|
00000060  80 03 00 01 80 04 00 02  80 0b 00 01 80 0c 00 01  |................|
00000070  03 00 00 20 00 01 00 00  80 01 00 07 80 02 00 04  |... ............|
00000080  80 03 00 01 80 04 00 0e  80 0b 00 01 80 0c 00 01  |................|
00000090  03 00 00 14 00 01 00 00  80 01 00 05 80 02 00 02  |................|
000000a0  80 03 00 02 03 00 00 14  00 01 00 00 80 01 00 05  |................|
000000b0  80 02 00 02 80 03 00 03  03 00 00 14 00 01 00 00  |................|
000000c0  80 01 00 05 80 02 00 02  80 03 00 04 03 00 00 14  |................|
000000d0  00 01 00 00 80 01 00 05  80 02 00 02 80 03 00 08  |................|
000000e0  03 00 00 14 00 01 00 00  80 01 00 05 80 02 00 02  |................|
000000f0  80 03 fa dd 03 00 00 14  00 01 00 00 80 01 00 05  |................|
... 352 bytes shown in part

2026-10-09 21:58:37103.203.57.27to 500/udpUnrecognisedCN

·A\·`·D·8· · · · ·

payload bytes

00000000  00 00 00 00 e5 f7 41 5c  00 00 00 00 00 00 00 00  |......A\........|
00000010  01 10 02 00 00 00 00 00  00 00 01 60 00 00 01 44  |...........`...D|
00000020  00 00 00 01 00 00 00 01  00 00 01 38 01 01 00 0d  |...........8....|
00000030  03 00 00 20 00 01 00 00  80 01 00 05 80 02 00 02  |... ............|
00000040  80 03 00 01 80 04 00 02  80 0b 00 01 80 0c 00 01  |................|
00000050  03 00 00 20 00 01 00 00  80 01 00 01 80 02 00 01  |... ............|
00000060  80 03 00 01 80 04 00 02  80 0b 00 01 80 0c 00 01  |................|
00000070  03 00 00 20 00 01 00 00  80 01 00 07 80 02 00 04  |... ............|
00000080  80 03 00 01 80 04 00 0e  80 0b 00 01 80 0c 00 01  |................|
00000090  03 00 00 14 00 01 00 00  80 01 00 05 80 02 00 02  |................|
000000a0  80 03 00 02 03 00 00 14  00 01 00 00 80 01 00 05  |................|
000000b0  80 02 00 02 80 03 00 03  03 00 00 14 00 01 00 00  |................|
000000c0  80 01 00 05 80 02 00 02  80 03 00 04 03 00 00 14  |................|
000000d0  00 01 00 00 80 01 00 05  80 02 00 02 80 03 00 08  |................|
000000e0  03 00 00 14 00 01 00 00  80 01 00 05 80 02 00 02  |................|
000000f0  80 03 fa dd 03 00 00 14  00 01 00 00 80 01 00 05  |................|
... 352 bytes shown in part

2026-10-09 18:49:56103.203.57.10to 1701/udpUnrecognisedCN

·<·masscan1· · ·

payload bytes

00000000  c8 02 00 3c 00 00 00 00  00 00 00 00 80 08 00 00  |...<............|
00000010  00 00 00 01 80 08 00 00  00 02 01 00 80 0e 00 00  |................|
00000020  00 07 6d 61 73 73 63 61  6e 31 80 0a 00 00 00 03  |..masscan1......|
00000030  00 00 00 03 80 08 00 00  00 09 00 00              |............|

2026-10-09 17:27:29103.203.57.10to 1701/udpUnrecognisedCN

·<·masscan1· · ·

payload bytes

00000000  c8 02 00 3c 00 00 00 00  00 00 00 00 80 08 00 00  |...<............|
00000010  00 00 00 01 80 08 00 00  00 02 01 00 80 0e 00 00  |................|
00000020  00 07 6d 61 73 73 63 61  6e 31 80 0a 00 00 00 03  |..masscan1......|
00000030  00 00 00 03 80 08 00 00  00 09 00 00              |............|

2026-10-09 14:03:10103.203.58.3to 161/udpSNMPCN

0&·public·c·0·0 ·+·

payload bytes

00000000  30 26 02 01 01 04 06 70  75 62 6c 69 63 a1 19 02  |0&.....public...|
00000010  04 dc 63 c2 9a 02 01 00  02 01 00 30 0b 30 09 06  |..c........0.0..|
00000020  05 2b 06 01 02 01 05 00                           |.+......|

2026-10-09 09:38:36103.203.57.27to 1701/udpUnrecognisedCN

·<·masscan1· · ·

payload bytes

00000000  c8 02 00 3c 00 00 00 00  00 00 00 00 80 08 00 00  |...<............|
00000010  00 00 00 01 80 08 00 00  00 02 01 00 80 0e 00 00  |................|
00000020  00 07 6d 61 73 73 63 61  6e 31 80 0a 00 00 00 03  |..masscan1......|
00000030  00 00 00 03 80 08 00 00  00 09 00 00              |............|

2026-10-09 06:53:26103.203.58.3to 161/udpSNMPCN

0&·public·c·0·0 ·+·

payload bytes

00000000  30 26 02 01 01 04 06 70  75 62 6c 69 63 a1 19 02  |0&.....public...|
00000010  04 dc 63 c2 9a 02 01 00  02 01 00 30 0b 30 09 06  |..c........0.0..|
00000020  05 2b 06 01 02 01 05 00                           |.+......|