UDP traffic
Datagrams matching asn:20115 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.
A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.
Your plan searches up to 7d, so 30d was shortened. Plans
39
Datagrams
5
Source addresses
1
Networks
1
Countries
4
Destination ports
Traffic by type
Service queries
36 datagrams from 2 sourcesRequests a service answers without a handshake. Scanners send them to find open DNS, NTP, SNMP or SSDP servers, which are also the servers reflection attacks abuse.
Latest SNMP datagram, to 161/udp
payload bytes
00000000 30 29 02 01 00 04 06 70 75 62 6c 69 63 a0 1c 02 |0).....public...| 00000010 04 18 86 5a 4d 02 01 00 02 01 00 30 0e 30 0c 06 |...ZM......0.0..| 00000020 08 2b 06 01 02 01 01 01 00 05 00 |.+.........|
Unrecognised
3 datagrams from 3 sourcesDatagrams no decoder recognised. Their first bytes are kept.
Latest Unrecognised datagram, to 8083/udp
payload bytes
00000000 7a 2e 1e 6a 59 64 4e 61 0b 20 56 62 15 4e 64 3b |z..jYdNa. Vb.Nd;|
00000010 51 00 52 73 7b 65 12 58 6a 6f 8a |Q.Rs{e.Xjo.|Amplification checks
Probes for services that answer a small request with a much larger reply, the property reflection attacks rely on.
| Service | Port | Datagrams | Sources | Factor |
|---|---|---|---|---|
| SNMPv2 | 161/udp | 36 | 2 | 6.3 |
The factor is how many bytes a reachable server can send back for each byte it receives, as published by CISA in alert TA14-017A.
Source addresses (unverified)
| Address | Network | Cc | Sends | Datagrams | Last seen (UTC) |
|---|---|---|---|---|---|
| 68.187.186.160 | AS20115 Charter Communications LLC | US | SNMP | 30 | 2026-10-06 19:15 |
| 24.197.39.34 | AS20115 Charter Communications LLC | US | SNMP | 6 | 2026-10-08 19:31 |
| 75.130.77.237 | AS20115 Charter Communications LLC | US | Unrecognised | 1 | 2026-10-11 09:11 |
| 68.114.217.128 | AS20115 Charter Communications LLC | US | Unrecognised | 1 | 2026-10-10 04:21 |
| 47.14.93.231 | AS20115 Charter Communications LLC | US | Unrecognised | 1 | 2026-10-09 21:49 |
Latest datagrams
payload bytes
00000000 7a 2e 1e 6a 59 64 4e 61 0b 20 56 62 15 4e 64 3b |z..jYdNa. Vb.Nd;| 00000010 51 00 52 73 7b 65 12 58 6a 6f 8a |Q.Rs{e.Xjo.|payload bytes
00000000 01 2a e4 55 db 73 45 3f 94 00 ff ff 00 fe fe fe |.*.U.sE?........| 00000010 fe fd fd fd fd 12 34 56 78 be d7 e3 f6 2d f0 c7 |......4Vx....-..| 00000020 57 |W|
payload bytes
00000000 cb 41 db 0b 9b 6a 5d be df 41 d6 af 1d e5 ad dc |.A...j]..A......| 00000010 5a 32 a9 0d c6 88 f5 58 be e2 30 45 08 62 06 f6 |Z2.....X..0E.b..| 00000020 70 a5 79 b2 41 b8 3e 46 2a 87 d9 84 9b a3 0a 41 |p.y.A.>F*......A| 00000030 ef dc 27 3e da 97 68 8d 8a b1 c0 c5 d2 c4 c2 d1 |..'>..h.........| 00000040 a1 ba 02 d1 1c 31 1d 18 74 9f 91 d8 e0 34 b2 1f |.....1..t....4..| 00000050 05 52 a1 db bc 0d c5 2a af 5d fb 7e a4 73 60 f0 |.R.....*.].~.s`.| 00000060 d7 26 80 21 b6 67 2a 23 59 50 98 87 5d ee 96 74 |.&.!.g*#YP..]..t| 00000070 86 c8 00 54 67 02 67 24 2a 84 38 61 56 6a 1f a2 |...Tg.g$*.8aVj..| 00000080 6b c2 09 f0 37 92 61 ec 45 42 dd 49 f2 dc c9 10 |k...7.a.EB.I....| 00000090 1a 5e 6d ae ca 91 7d 4e 2a 3d 11 ed 36 42 61 b3 |.^m...}N*=..6Ba.| 000000a0 ce 47 38 77 22 7b 69 d5 c8 f4 f5 b1 32 60 3c 08 |.G8w"{i.....2`<.| 000000b0 cc 50 8f bd 34 9c a1 23 3c 7f ec 3d 43 b5 3a d6 |.P..4..#<..=C.:.| 000000c0 78 96 f4 11 4e e8 9b 3e 3e 65 d0 60 ca 54 43 63 |x...N..>>e.`.TCc| 000000d0 8c 49 b1 d6 8c 12 89 37 d6 78 93 d4 8a 83 0f ad |.I.....7.x......| 000000e0 8e 42 ae f1 45 33 cc 8e 82 bf d6 c1 e1 67 14 10 |.B..E3.......g..| 000000f0 5f ed 2d 93 64 b2 94 7c db 38 ca 08 4c 7d 52 bb |_.-.d..|.8..L}R.| ... 512 bytes shown in partpayload bytes
00000000 30 29 02 01 00 04 06 70 75 62 6c 69 63 a0 1c 02 |0).....public...| 00000010 04 18 86 5a 4d 02 01 00 02 01 00 30 0e 30 0c 06 |...ZM......0.0..| 00000020 08 2b 06 01 02 01 01 01 00 05 00 |.+.........|
payload bytes
00000000 30 29 02 01 00 04 06 70 75 62 6c 69 63 a0 1c 02 |0).....public...| 00000010 04 18 86 59 dc 02 01 00 02 01 00 30 0e 30 0c 06 |...Y.......0.0..| 00000020 08 2b 06 01 02 01 01 01 00 05 00 |.+.........|
payload bytes
00000000 30 29 02 01 00 04 06 70 75 62 6c 69 63 a0 1c 02 |0).....public...| 00000010 04 18 86 59 79 02 01 00 02 01 00 30 0e 30 0c 06 |...Yy......0.0..| 00000020 08 2b 06 01 02 01 01 01 00 05 00 |.+.........|
payload bytes
00000000 30 2e 02 01 00 04 05 61 64 6d 69 6e a0 22 02 01 |0......admin."..| 00000010 09 02 01 00 02 01 00 30 17 30 15 06 11 2b 06 01 |.......0.0...+..| 00000020 02 01 04 22 01 03 01 04 81 40 03 76 81 12 05 00 |...".....@.v....|
payload bytes
00000000 30 26 02 01 00 04 05 61 64 6d 69 6e a1 1a 02 01 |0&.....admin....| 00000010 07 02 01 00 02 01 00 30 0f 30 0d 06 09 2b 06 01 |.......0.0...+..| 00000020 02 01 04 14 01 02 05 00 |........|
payload bytes
00000000 30 2c 02 01 00 04 05 61 64 6d 69 6e a0 20 02 01 |0,.....admin. ..| 00000010 05 02 01 00 02 01 00 30 15 30 13 06 0f 2b 06 01 |.......0.0...+..| 00000020 02 01 04 14 01 02 81 40 03 76 81 12 05 00 |.......@.v....|
payload bytes
00000000 30 2b 02 01 00 04 05 61 64 6d 69 6e a0 1f 02 01 |0+.....admin....| 00000010 03 02 01 00 02 01 00 30 14 30 12 06 0e 2b 06 01 |.......0.0...+..| 00000020 04 01 81 68 09 02 05 01 01 04 02 05 00 |...h.........|
payload bytes
00000000 30 2b 02 01 00 04 05 61 64 6d 69 6e a0 1f 02 01 |0+.....admin....| 00000010 02 02 01 00 02 01 00 30 14 30 12 06 0e 2b 06 01 |.......0.0...+..| 00000020 04 01 81 68 09 02 05 01 01 04 02 05 00 |...h.........|
payload bytes
00000000 30 2e 02 01 01 04 05 61 64 6d 69 6e a0 22 02 01 |0......admin."..| 00000010 09 02 01 00 02 01 00 30 17 30 15 06 11 2b 06 01 |.......0.0...+..| 00000020 02 01 04 22 01 03 01 04 81 40 03 76 81 12 05 00 |...".....@.v....|
payload bytes
00000000 30 26 02 01 01 04 05 61 64 6d 69 6e a1 1a 02 01 |0&.....admin....| 00000010 07 02 01 00 02 01 00 30 0f 30 0d 06 09 2b 06 01 |.......0.0...+..| 00000020 02 01 04 14 01 02 05 00 |........|
payload bytes
00000000 30 2c 02 01 01 04 05 61 64 6d 69 6e a0 20 02 01 |0,.....admin. ..| 00000010 05 02 01 00 02 01 00 30 15 30 13 06 0f 2b 06 01 |.......0.0...+..| 00000020 02 01 04 14 01 02 81 40 03 76 81 12 05 00 |.......@.v....|
payload bytes
00000000 30 2b 02 01 01 04 05 61 64 6d 69 6e a0 1f 02 01 |0+.....admin....| 00000010 03 02 01 00 02 01 00 30 14 30 12 06 0e 2b 06 01 |.......0.0...+..| 00000020 04 01 81 68 09 02 05 01 01 04 02 05 00 |...h.........|