UDP traffic

Datagrams matching asn:20115 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

Service queries

36 datagrams from 2 sources

Requests a service answers without a handshake. Scanners send them to find open DNS, NTP, SNMP or SSDP servers, which are also the servers reflection attacks abuse.

SNMP 36

Latest SNMP datagram, to 161/udp

0)·public·ZM·0·0·+·

payload bytes

00000000  30 29 02 01 00 04 06 70  75 62 6c 69 63 a0 1c 02  |0).....public...|
00000010  04 18 86 5a 4d 02 01 00  02 01 00 30 0e 30 0c 06  |...ZM......0.0..|
00000020  08 2b 06 01 02 01 01 01  00 05 00                 |.+.........|

Unrecognised

3 datagrams from 3 sources

Datagrams no decoder recognised. Their first bytes are kept.

Unrecognised 3

Latest Unrecognised datagram, to 8083/udp

z.·jYdNa· Vb·Nd;Q·Rs{e·Xjo·

payload bytes

00000000  7a 2e 1e 6a 59 64 4e 61  0b 20 56 62 15 4e 64 3b  |z..jYdNa. Vb.Nd;|
00000010  51 00 52 73 7b 65 12 58  6a 6f 8a                 |Q.Rs{e.Xjo.|

Amplification checks

Probes for services that answer a small request with a much larger reply, the property reflection attacks rely on.

Service	Port	Datagrams	Sources	Factor
SNMPv2	161/udp	36	2	6.3

The factor is how many bytes a reachable server can send back for each byte it receives, as published by CISA in alert TA14-017A.

Destination ports

Networks

AS20115 Charter Communications LLC from 5 sources39

Countries

US United States39

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
68.187.186.160	AS20115 Charter Communications LLC	US	SNMP	30	2026-10-06 19:15
24.197.39.34	AS20115 Charter Communications LLC	US	SNMP	6	2026-10-08 19:31
75.130.77.237	AS20115 Charter Communications LLC	US	Unrecognised	1	2026-10-11 09:11
68.114.217.128	AS20115 Charter Communications LLC	US	Unrecognised	1	2026-10-10 04:21
47.14.93.231	AS20115 Charter Communications LLC	US	Unrecognised	1	2026-10-09 21:49

Latest datagrams

2026-10-11 09:11:3875.130.77.237to 8083/udpUnrecognisedUS

z.·jYdNa· Vb·Nd;Q·Rs{e·Xjo·

payload bytes

00000000  7a 2e 1e 6a 59 64 4e 61  0b 20 56 62 15 4e 64 3b  |z..jYdNa. Vb.Nd;|
00000010  51 00 52 73 7b 65 12 58  6a 6f 8a                 |Q.Rs{e.Xjo.|

2026-10-10 04:21:4568.114.217.128to 43399/udpUnrecognisedUS

·*·U·sE?·4Vx·-·W

payload bytes

00000000  01 2a e4 55 db 73 45 3f  94 00 ff ff 00 fe fe fe  |.*.U.sE?........|
00000010  fe fd fd fd fd 12 34 56  78 be d7 e3 f6 2d f0 c7  |......4Vx....-..|
00000020  57                                                |W|

2026-10-09 21:49:2747.14.93.231to 33801/udpUnrecognisedUS

·A·j]·A֯·Z2· ƈ·X·0E·b·p·y·A·>F*·ل· A·'>ڗh·ѡ·1·t·4·R·ۼ ·*·]·~·s`·&·!·g*#YP·

payload bytes

00000000  cb 41 db 0b 9b 6a 5d be  df 41 d6 af 1d e5 ad dc  |.A...j]..A......|
00000010  5a 32 a9 0d c6 88 f5 58  be e2 30 45 08 62 06 f6  |Z2.....X..0E.b..|
00000020  70 a5 79 b2 41 b8 3e 46  2a 87 d9 84 9b a3 0a 41  |p.y.A.>F*......A|
00000030  ef dc 27 3e da 97 68 8d  8a b1 c0 c5 d2 c4 c2 d1  |..'>..h.........|
00000040  a1 ba 02 d1 1c 31 1d 18  74 9f 91 d8 e0 34 b2 1f  |.....1..t....4..|
00000050  05 52 a1 db bc 0d c5 2a  af 5d fb 7e a4 73 60 f0  |.R.....*.].~.s`.|
00000060  d7 26 80 21 b6 67 2a 23  59 50 98 87 5d ee 96 74  |.&.!.g*#YP..]..t|
00000070  86 c8 00 54 67 02 67 24  2a 84 38 61 56 6a 1f a2  |...Tg.g$*.8aVj..|
00000080  6b c2 09 f0 37 92 61 ec  45 42 dd 49 f2 dc c9 10  |k...7.a.EB.I....|
00000090  1a 5e 6d ae ca 91 7d 4e  2a 3d 11 ed 36 42 61 b3  |.^m...}N*=..6Ba.|
000000a0  ce 47 38 77 22 7b 69 d5  c8 f4 f5 b1 32 60 3c 08  |.G8w"{i.....2`<.|
000000b0  cc 50 8f bd 34 9c a1 23  3c 7f ec 3d 43 b5 3a d6  |.P..4..#<..=C.:.|
000000c0  78 96 f4 11 4e e8 9b 3e  3e 65 d0 60 ca 54 43 63  |x...N..>>e.`.TCc|
000000d0  8c 49 b1 d6 8c 12 89 37  d6 78 93 d4 8a 83 0f ad  |.I.....7.x......|
000000e0  8e 42 ae f1 45 33 cc 8e  82 bf d6 c1 e1 67 14 10  |.B..E3.......g..|
000000f0  5f ed 2d 93 64 b2 94 7c  db 38 ca 08 4c 7d 52 bb  |_.-.d..|.8..L}R.|
... 512 bytes shown in part

2026-10-08 19:31:2024.197.39.34to 161/udpSNMPUS

0)·public·ZM·0·0·+·

payload bytes

00000000  30 29 02 01 00 04 06 70  75 62 6c 69 63 a0 1c 02  |0).....public...|
00000010  04 18 86 5a 4d 02 01 00  02 01 00 30 0e 30 0c 06  |...ZM......0.0..|
00000020  08 2b 06 01 02 01 01 01  00 05 00                 |.+.........|

2026-10-08 19:31:0924.197.39.34to 161/udpSNMPUS

0)·public·Y·0·0·+·

payload bytes

00000000  30 29 02 01 00 04 06 70  75 62 6c 69 63 a0 1c 02  |0).....public...|
00000010  04 18 86 59 dc 02 01 00  02 01 00 30 0e 30 0c 06  |...Y.......0.0..|
00000020  08 2b 06 01 02 01 01 01  00 05 00                 |.+.........|

2026-10-08 19:30:5924.197.39.34to 161/udpSNMPUS

0)·public·Yy·0·0·+·

payload bytes

00000000  30 29 02 01 00 04 06 70  75 62 6c 69 63 a0 1c 02  |0).....public...|
00000010  04 18 86 59 79 02 01 00  02 01 00 30 0e 30 0c 06  |...Yy......0.0..|
00000020  08 2b 06 01 02 01 01 01  00 05 00                 |.+.........|

2026-10-06 19:15:4168.187.186.160to 161/udpSNMPUS

0.·admin·"· ·0·0·+·"·@·v·

payload bytes

00000000  30 2e 02 01 00 04 05 61  64 6d 69 6e a0 22 02 01  |0......admin."..|
00000010  09 02 01 00 02 01 00 30  17 30 15 06 11 2b 06 01  |.......0.0...+..|
00000020  02 01 04 22 01 03 01 04  81 40 03 76 81 12 05 00  |...".....@.v....|

2026-10-06 19:15:3968.187.186.160to 161/udpSNMPUS

0&·admin·0·0 · +·

payload bytes

00000000  30 26 02 01 00 04 05 61  64 6d 69 6e a1 1a 02 01  |0&.....admin....|
00000010  07 02 01 00 02 01 00 30  0f 30 0d 06 09 2b 06 01  |.......0.0...+..|
00000020  02 01 04 14 01 02 05 00                           |........|

2026-10-06 19:15:3768.187.186.160to 161/udpSNMPUS

0,·admin· ·0·0·+·@·v·

payload bytes

00000000  30 2c 02 01 00 04 05 61  64 6d 69 6e a0 20 02 01  |0,.....admin. ..|
00000010  05 02 01 00 02 01 00 30  15 30 13 06 0f 2b 06 01  |.......0.0...+..|
00000020  02 01 04 14 01 02 81 40  03 76 81 12 05 00        |.......@.v....|

2026-10-06 19:15:3568.187.186.160to 161/udpSNMPUS

0+·admin·0·0·+·h ·

payload bytes

00000000  30 2b 02 01 00 04 05 61  64 6d 69 6e a0 1f 02 01  |0+.....admin....|
00000010  03 02 01 00 02 01 00 30  14 30 12 06 0e 2b 06 01  |.......0.0...+..|
00000020  04 01 81 68 09 02 05 01  01 04 02 05 00           |...h.........|

2026-10-06 19:15:3368.187.186.160to 161/udpSNMPUS

0+·admin·0·0·+·h ·

payload bytes

00000000  30 2b 02 01 00 04 05 61  64 6d 69 6e a0 1f 02 01  |0+.....admin....|
00000010  02 02 01 00 02 01 00 30  14 30 12 06 0e 2b 06 01  |.......0.0...+..|
00000020  04 01 81 68 09 02 05 01  01 04 02 05 00           |...h.........|

2026-10-06 19:15:3168.187.186.160to 161/udpSNMPUS

0.·admin·"· ·0·0·+·"·@·v·

payload bytes

00000000  30 2e 02 01 01 04 05 61  64 6d 69 6e a0 22 02 01  |0......admin."..|
00000010  09 02 01 00 02 01 00 30  17 30 15 06 11 2b 06 01  |.......0.0...+..|
00000020  02 01 04 22 01 03 01 04  81 40 03 76 81 12 05 00  |...".....@.v....|

2026-10-06 19:15:2968.187.186.160to 161/udpSNMPUS

0&·admin·0·0 · +·

payload bytes

00000000  30 26 02 01 01 04 05 61  64 6d 69 6e a1 1a 02 01  |0&.....admin....|
00000010  07 02 01 00 02 01 00 30  0f 30 0d 06 09 2b 06 01  |.......0.0...+..|
00000020  02 01 04 14 01 02 05 00                           |........|

2026-10-06 19:15:2768.187.186.160to 161/udpSNMPUS

0,·admin· ·0·0·+·@·v·

payload bytes

00000000  30 2c 02 01 01 04 05 61  64 6d 69 6e a0 20 02 01  |0,.....admin. ..|
00000010  05 02 01 00 02 01 00 30  15 30 13 06 0f 2b 06 01  |.......0.0...+..|
00000020  02 01 04 14 01 02 81 40  03 76 81 12 05 00        |.......@.v....|

2026-10-06 19:15:2568.187.186.160to 161/udpSNMPUS

0+·admin·0·0·+·h ·

payload bytes

00000000  30 2b 02 01 01 04 05 61  64 6d 69 6e a0 1f 02 01  |0+.....admin....|
00000010  03 02 01 00 02 01 00 30  14 30 12 06 0e 2b 06 01  |.......0.0...+..|
00000020  04 01 81 68 09 02 05 01  01 04 02 05 00           |...h.........|