UDP traffic
Datagrams matching asn:19318 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.
A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.
12
Datagrams
4
Source addresses
1
Networks
1
Countries
9
Destination ports
Traffic by type
Other services
3 datagrams from 2 sourcesFirst packets of sessions with VPN, voice, tunnelling, database and management services.
Latest SIP datagram, to 5060/udp
Payload bytes withheld: they contain the sensor's address.
Unrecognised
8 datagrams from 2 sourcesDatagrams no decoder recognised. Their first bytes are kept.
Latest Unrecognised datagram, to 5353/udp
payload bytes
00000000 6e 2e 5b 28 15 72 74 50 51 07 7f 29 2c 51 18 42 |n.[(.rtPQ..),Q.B|
00000010 55 74 5e 1c 6b 16 34 4b 7b 48 64 09 65 6f 13 53 |Ut^.k.4K{Hd.eo.S|
00000020 70 6e 7b 05 60 6f 55 32 77 54 5b 23 26 73 65 7b |pn{.`oU2wT[#&se{|
00000030 67 44 17 52 5a 4c 1d 56 14 02 5f 7a 71 73 4d 61 |gD.RZL.V.._zqsMa|
00000040 61 49 66 42 38 3b 74 2f 10 4f 52 36 43 38 31 2a |aIfB8;t/.OR6C81*|
00000050 7c 49 7d 56 15 1a 2c 29 1c 0c 23 0d 7f 4d 32 ||I}V..,)..#..M2|Peer-to-peer
1 datagrams from 1 sourceFile-sharing clients trying to reach a peer that used one of these addresses before. This is not scanning, so it is left out of every other figure on this page.
Amplification checks
Probes for services that answer a small request with a much larger reply, the property reflection attacks rely on.
The factor is how many bytes a reachable server can send back for each byte it receives, as published by CISA in alert TA14-017A.
Source addresses (unverified)
| Address | Network | Cc | Sends | Datagrams | Last seen (UTC) |
|---|---|---|---|---|---|
| 162.35.175.206 | AS19318 Interserver, Inc | US | Unrecognised | 8 | 2026-10-11 06:24 |
| 162.141.167.132 | AS19318 Interserver, Inc | US | SIP | 2 | 2026-10-09 02:38 |
| 162.35.161.69 | AS19318 Interserver, Inc | US | Unrecognised | 1 | 2026-10-09 12:09 |
| 162.141.167.65 | AS19318 Interserver, Inc | US | SIP | 1 | 2026-10-08 03:17 |
Latest datagrams
payload bytes
00000000 6e 2e 5b 28 15 72 74 50 51 07 7f 29 2c 51 18 42 |n.[(.rtPQ..),Q.B| 00000010 55 74 5e 1c 6b 16 34 4b 7b 48 64 09 65 6f 13 53 |Ut^.k.4K{Hd.eo.S| 00000020 70 6e 7b 05 60 6f 55 32 77 54 5b 23 26 73 65 7b |pn{.`oU2wT[#&se{| 00000030 67 44 17 52 5a 4c 1d 56 14 02 5f 7a 71 73 4d 61 |gD.RZL.V.._zqsMa| 00000040 61 49 66 42 38 3b 74 2f 10 4f 52 36 43 38 31 2a |aIfB8;t/.OR6C81*| 00000050 7c 49 7d 56 15 1a 2c 29 1c 0c 23 0d 7f 4d 32 ||I}V..,)..#..M2|payload bytes
00000000 4f 2e 23 21 73 46 6d 71 4b 1f 58 7c 1c 2e 36 16 |O.#!sFmqK.X|..6.| 00000010 65 40 68 76 16 2f 2b 26 5f 09 5f 1a 10 5c 4d 60 |e@hv./+&_._..\M`| 00000020 5e 70 01 52 37 6f 43 02 0e 1b 7e 2a 4a 34 40 2f |^p.R7oC...~*J4@/| 00000030 75 29 25 0b 39 ae |u)%.9.|
payload bytes
00000000 31 2e 51 4e 7c 39 3c 61 5a 10 52 17 2a 1b 0e 69 |1.QN|9<aZ.R.*..i| 00000010 01 6d 67 1a 50 51 1e 25 25 15 75 39 26 54 64 57 |.mg.PQ.%%.u9&TdW| 00000020 05 36 25 02 6f 62 63 49 72 35 60 1d 50 6e 06 51 |.6%.obcIr5`.Pn.Q| 00000030 5c 6e 6c 2c 3f 0a 52 64 1f 47 1d 45 1b 02 1d 21 |\nl,?.Rd.G.E...!| 00000040 38 42 23 27 24 06 70 17 3b 50 34 0b 3f 3a 5d 76 |8B#'$.p.;P4.?:]v| 00000050 39 |9|
payload bytes
00000000 07 2e 49 3a 6f 58 60 77 25 67 72 70 2d 51 42 1c |..I:oX`w%grp-QB.| 00000010 3a 1a 5f 39 74 52 7c 0c 06 5f 2d 47 0f 43 42 16 |:._9tR|.._-G.CB.| 00000020 0c 0b 50 7c 63 31 73 08 18 65 78 45 36 3a 61 71 |..P|c1s..exE6:aq| 00000030 55 41 2a 49 13 27 55 19 06 03 60 ab 86 |UA*I.'U...`..|
payload bytes
00000000 13 2e 1a 15 2b 05 1d 31 11 11 30 1e 7c 04 5d 4e |....+..1..0.|.]N| 00000010 1b 25 54 7b 4b 6c 76 51 17 6c 76 6a 50 21 1d 64 |.%T{KlvQ.lvjP!.d| 00000020 48 38 79 73 3d 16 24 4e 27 55 6c 23 59 49 71 74 |H8ys=.$N'Ul#YIqt| 00000030 6e 45 7a 68 |nEzh|Payload bytes withheld: they contain the sensor's address.
payload bytes
00000000 1b 2e 74 79 52 5f 56 61 2b 35 16 2a 7a 5e 35 3a |..tyR_Va+5.*z^5:| 00000010 01 20 6d 23 0d 42 09 60 7a 2f 06 7d 79 35 5f 14 |. m#.B.`z/.}y5_.| 00000020 7e 53 0e 51 32 64 32 5e 19 48 08 13 26 3d 4d 28 |~S.Q2d2^.H..&=M(| 00000030 5d 3a 4b 6b 7d 69 28 |]:Kk}i(|
Payload bytes withheld: they contain the sensor's address.
Payload bytes withheld: they contain the sensor's address.
payload bytes
00000000 55 2e 30 30 52 56 73 5e 1b 4d 2f 1c 10 4c 27 5a |U.00RVs^.M/..L'Z| 00000010 55 53 0a 24 43 1b 0f 71 78 1c 27 04 29 44 7f 7e |US.$C..qx.'.)D.~| 00000020 54 2f 2e 26 05 21 04 20 6f 82 31 |T/.&.!. o.1|
payload bytes
00000000 16 2e 1e 19 56 5d 06 2a 1b 4b 59 4f 52 6f 44 03 |....V].*.KYORoD.| 00000010 46 4c 67 4f 2e 5c 58 35 57 11 4a 5f 44 4c 61 5a |FLgO.\X5W.J_DLaZ| 00000020 32 7f 73 08 5c 79 32 78 44 0c 47 16 7b 0b 19 41 |2.s.\y2xD.G.{..A| 00000030 57 01 10 05 5d 68 3b 35 7a 05 8a 90 |W...]h;5z...|payload bytes
00000000 6f 2e 5d 6b 31 6d 40 2d 7c 6e 42 78 07 30 28 6c |o.]k1m@-|nBx.0(l| 00000010 17 1b 19 16 4c 4c 39 68 1e 17 3d 2c 3f 7e 33 2e |....LL9h..=,?~3.| 00000020 48 10 1a 7a 7d 5a 27 79 48 69 72 4f 19 1a 3b 30 |H..z}Z'yHirO..;0| 00000030 35 55 47 02 21 00 6a 3f 18 27 6c 57 25 1f 06 6d |5UG.!.j?.'lW%..m| 00000040 2f 20 67 2c 7a 0f 26 1e d8 |/ g,z.&..|