UDP traffic
Datagrams matching asn:15964 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.
A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.
14
Datagrams
2
Source addresses
1
Networks
1
Countries
10
Destination ports
Traffic by type
Other services
1 datagrams from 1 sourceFirst packets of sessions with VPN, voice, tunnelling, database and management services.
Latest Redis datagram, to 8081/udp
payload bytes
00000000 2a 2e 15 02 1b 45 3d 13 25 6c 6f 1c 2d 06 67 70 |*....E=.%lo.-.gp|
00000010 7e 7f 2e 17 66 56 3f 2a 68 21 6c 3b 08 0e 17 32 |~...fV?*h!l;...2|
00000020 41 2c 34 5c 71 72 6f 16 5e 5e 32 0b 64 1a 7b 62 |A,4\qro.^^2.d.{b|
00000030 19 2a 7a 7f 00 39 2a 68 5a 16 23 62 24 3a 14 65 |.*z..9*hZ.#b$:.e|
00000040 67 49 41 58 3b 30 6f 19 0e 21 24 72 3b 20 54 55 |gIAX;0o..!$r; TU|
00000050 4a 4e 54 4a 07 7e 32 62 13 9f |JNTJ.~2b..|Unrecognised
11 datagrams from 1 sourceDatagrams no decoder recognised. Their first bytes are kept.
Latest Unrecognised datagram, to 8081/udp
payload bytes
00000000 6f 2e 7d 6b 20 39 08 3c 70 08 31 50 56 18 0d 0f |o.}k 9.<p.1PV...| 00000010 78 63 5c 00 5a 3d 2e 66 05 18 3c 77 1b 71 50 0a |xc\.Z=.f..<w.qP.| 00000020 4e 4e 76 6e 07 7e 2a 78 06 5b 48 5c 74 55 6b 6c |NNvn.~*x.[H\tUkl| 00000030 38 47 6d 12 05 1b 78 0a dd 87 |8Gm...x...|
Peer-to-peer
2 datagrams from 2 sourcesFile-sharing clients trying to reach a peer that used one of these addresses before. This is not scanning, so it is left out of every other figure on this page.
Amplification checks
Probes for services that answer a small request with a much larger reply, the property reflection attacks rely on.
| Service | Port | Datagrams | Sources | Factor |
|---|---|---|---|---|
| mDNS | 5353/udp | 2 | 1 | 2 to 10 |
The factor is how many bytes a reachable server can send back for each byte it receives, as published by CISA in alert TA14-017A.
Source addresses (unverified)
| Address | Network | Cc | Sends | Datagrams | Last seen (UTC) |
|---|---|---|---|---|---|
| 195.24.207.184 | AS15964 CAMTEL | CM | Unrecognised | 13 | 2026-10-10 14:37 |
| 154.72.161.206 | AS15964 CAMTEL | CM | BitTorrent | 1 | 2026-10-10 21:03 |
Latest datagrams
payload bytes
00000000 64 31 3a 61 64 32 3a 69 64 32 30 3a cc 8d b5 f1 |d1:ad2:id20:....| 00000010 f1 bb e9 eb b3 a6 db 3c 87 0c 3e 99 24 5e 0d 90 |.......<..>.$^..| 00000020 36 3a 74 61 72 67 65 74 32 30 3a cc 8d b5 f1 f1 |6:target20:.....| 00000030 bb e9 eb b3 a6 db 3c 87 0c 3e 99 24 5e 0d 90 65 |......<..>.$^..e| 00000040 31 3a 71 39 3a 66 69 6e 64 5f 6e 6f 64 65 31 3a |1:q9:find_node1:| 00000050 74 34 3a 4d 40 00 00 31 3a 76 34 3a 55 54 b9 1e |t4:M@..1:v4:UT..| 00000060 31 3a 79 31 3a 71 65 |1:y1:qe|
payload bytes
00000000 6f 2e 7d 6b 20 39 08 3c 70 08 31 50 56 18 0d 0f |o.}k 9.<p.1PV...| 00000010 78 63 5c 00 5a 3d 2e 66 05 18 3c 77 1b 71 50 0a |xc\.Z=.f..<w.qP.| 00000020 4e 4e 76 6e 07 7e 2a 78 06 5b 48 5c 74 55 6b 6c |NNvn.~*x.[H\tUkl| 00000030 38 47 6d 12 05 1b 78 0a dd 87 |8Gm...x...|
payload bytes
00000000 1f 2e 4d 1b 04 7a 5e 04 5e 35 2d 1f 1e 2d 6d 14 |..M..z^.^5-..-m.| 00000010 26 13 3e 00 0e 25 1b 42 1d 38 26 41 20 45 56 3f |&.>..%.B.8&A EV?| 00000020 3d 23 5b 42 1e 39 46 7c 6e 73 1c 0c 20 09 21 46 |=#[B.9F|ns.. .!F| 00000030 1c 5f 47 2a 04 62 6c 22 1a 12 63 99 39 |._G*.bl"..c.9|
payload bytes
00000000 52 2e 75 42 30 7a 42 6b 12 0a 3d 00 0c 25 72 3c |R.uB0zBk..=..%r<| 00000010 7b 7a 4b 51 12 7f 72 5c 30 7a 53 07 56 01 4d 29 |{zKQ..r\0zS.V.M)| 00000020 02 42 6b 32 3d 2e 1d 4f 38 5b 4f 44 00 42 01 7c |.Bk2=..O8[OD.B.|| 00000030 3c 4c 4d 4e 4b 40 2a 7b 3a 7e 02 68 5f |<LMNK@*{:~.h_|payload bytes
00000000 2a 2e 15 02 1b 45 3d 13 25 6c 6f 1c 2d 06 67 70 |*....E=.%lo.-.gp| 00000010 7e 7f 2e 17 66 56 3f 2a 68 21 6c 3b 08 0e 17 32 |~...fV?*h!l;...2| 00000020 41 2c 34 5c 71 72 6f 16 5e 5e 32 0b 64 1a 7b 62 |A,4\qro.^^2.d.{b| 00000030 19 2a 7a 7f 00 39 2a 68 5a 16 23 62 24 3a 14 65 |.*z..9*hZ.#b$:.e| 00000040 67 49 41 58 3b 30 6f 19 0e 21 24 72 3b 20 54 55 |gIAX;0o..!$r; TU| 00000050 4a 4e 54 4a 07 7e 32 62 13 9f |JNTJ.~2b..|payload bytes
00000000 3c 2e 4b 2e 0e 38 74 63 23 3f 23 50 0a 3c 2b 5a |<.K..8tc#?#P.<+Z| 00000010 74 17 63 5c 3b 5c 3a 26 40 13 02 38 5c 7d 59 18 |t.c\;\:&@..8\}Y.| 00000020 4c 24 47 5a 5c 3b 3d 00 7b 61 50 05 1d 7b 5f 11 |L$GZ\;=.{aP..{_.| 00000030 12 97 58 |..X|payload bytes
00000000 7c 2e 18 51 0e 23 2b 4a 0a 0b 3b 2f 2f 2b 58 0b ||..Q.#+J..;//+X.| 00000010 15 56 2d 18 04 45 0b 1d 1e 6a 64 24 91 79 |.V-..E...jd$.y|
payload bytes
00000000 44 2e 77 6e 21 55 07 36 5f 06 0b 16 6d 0c 0c 05 |D.wn!U.6_...m...| 00000010 0f 37 63 60 1e 2c 58 59 4d 62 2e 72 54 15 36 19 |.7c`.,XYMb.rT.6.| 00000020 05 2e 07 26 03 0e 5c 62 14 67 78 02 73 04 07 02 |...&..\b.gx.s...| 00000030 3b 6b 62 5a 19 a5 |;kbZ..|
payload bytes
00000000 30 2e 07 10 2c 5a 0f 52 0c 5d 6e 5c 66 6d 62 5b |0...,Z.R.]n\fmb[| 00000010 1c 2f 67 78 76 1b 42 4b 22 05 2e 32 6c 61 5b 1d |./gxv.BK"..2la[.| 00000020 50 62 2d 7d 3c 3c 4f 48 19 3d 25 7f 2a 07 5a 46 |Pb-}<<OH.=%.*.ZF| 00000030 36 41 3e 2c 5d 01 77 7f 06 25 32 73 06 0d 10 57 |6A>,].w..%2s...W| 00000040 6f 3d 54 2c 79 23 74 12 60 4a f3 |o=T,y#t.`J.|
payload bytes
00000000 73 2e 18 78 00 03 76 3f 74 12 0e 5d 0e 27 1f 27 |s..x..v?t..].'.'| 00000010 62 44 28 20 7f 27 39 13 1e 14 5b 6c 36 6d 3e 29 |bD( .'9...[l6m>)| 00000020 5c 56 21 5c 59 18 1c 4e 2a 2a 24 c4 |\V!\Y..N**$.|
payload bytes
00000000 5a 2e 71 1b 05 1c 46 0a 75 74 76 48 1b 5f 13 5f |Z.q...F.utvH._._| 00000010 29 2c 3c 13 2f 01 64 54 20 7b 00 2c 3c 1a 67 17 |),<./.dT {.,<.g.| 00000020 66 58 32 6c 74 78 76 69 6d 6c 32 08 4b 45 67 75 |fX2ltxviml2.KEgu| 00000030 71 23 08 20 25 6c 74 45 68 74 72 24 0e 59 3b 75 |q#. %ltEhtr$.Y;u| 00000040 32 6e 61 26 66 57 10 53 43 42 5c 0f 07 43 04 78 |2na&fW.SCB\..C.x| 00000050 67 0c 18 0c 78 0c 51 60 00 43 05 0e 1d 40 62 e7 |g...x.Q`.C...@b.|payload bytes
00000000 7f 2e 3e 73 0c 39 38 21 01 67 00 13 73 15 76 01 |..>s.98!.g..s.v.| 00000010 01 45 0d 34 5e 22 67 1c 21 49 f0 0d |.E.4^"g.!I..|
payload bytes
00000000 08 2e 1f 51 15 3f 1b 46 04 38 27 31 47 71 73 14 |...Q.?.F.8'1Gqs.| 00000010 29 4c 0f 13 7a 1b 40 4c 59 33 3b 19 33 17 28 3b |)L..z.@LY3;.3.(;| 00000020 0f 47 0c 24 07 27 6b 0b 60 12 3c 27 03 30 3b 2c |.G.$.'k.`.<'.0;,| 00000030 7c 4a 3f 76 65 7f 42 3e 33 7d 57 66 14 00 21 24 ||J?ve.B>3}Wf..!$| 00000040 47 2d 48 4e 54 33 5a 34 bf 72 |G-HNT3Z4.r|
payload bytes
00000000 1b 2e 5a 04 4f 3e 3f 65 48 1a 39 35 26 09 60 49 |..Z.O>?eH.95&.`I| 00000010 1b 1c 22 7a 7e 7a 5c 1b 6d 5a 46 68 3b 4f 1d 56 |.."z~z\.mZFh;O.V| 00000020 22 77 5b 71 35 1a 56 7d 34 0f 33 5a 18 13 23 34 |"w[q5.V}4.3Z..#4| 00000030 2f 45 2e 2d 40 0a 48 2d 64 0f 15 20 5e 32 76 00 |/E.-@.H-d.. ^2v.| 00000040 29 51 72 5e 6c 48 5c 20 58 0f 7b 70 22 1e 24 51 |)Qr^lH\ X.{p".$Q| 00000050 64 53 7e 24 5d 46 51 42 3f 90 |dS~$]FQB?.|