UDP traffic

Datagrams matching asn:34267 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

Unrecognised

9 datagrams from 4 sources

Datagrams no decoder recognised. Their first bytes are kept.

Unrecognised 9

Latest Unrecognised datagram, to 5060/udp

v.Vzw·pydY3)c$^?{·{·*

payload bytes

00000000  76 2e 56 7a 77 0e 70 79  64 59 33 29 63 24 5e 3f  |v.Vzw.pydY3)c$^?|
00000010  7b 0f 7b 92 2a                                    |{.{.*|

Peer-to-peer

2 datagrams from 2 sources

File-sharing clients trying to reach a peer that used one of these addresses before. This is not scanning, so it is left out of every other figure on this page.

BitTorrent 2

Amplification checks

Probes for services that answer a small request with a much larger reply, the property reflection attacks rely on.

Service	Port	Datagrams	Sources	Factor
mDNS	5353/udp	2	2	2 to 10

The factor is how many bytes a reachable server can send back for each byte it receives, as published by CISA in alert TA14-017A.

Destination ports

5060/udp SIP2
5353/udp mDNS2
6881/udp BitTorrent2
1027/udp1
1434/udp MSSQL Browser1
4000/udp1
8000/udp1
8081/udp1

Networks

AS34267 Rostelecom from 4 sources11

Countries

RU Russia11

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
213.155.195.206	AS34267 Rostelecom	RU	Unrecognised	5	2026-10-10 19:36
84.42.46.199	AS34267 Rostelecom	RU	Unrecognised	3	2026-10-09 03:48
84.42.46.192	AS34267 Rostelecom	RU	Unrecognised	2	2026-10-09 15:11
84.42.45.253	AS34267 Rostelecom	RU	Unrecognised	1	2026-10-06 21:25

Latest datagrams

2026-10-10 19:36:49213.155.195.206to 5060/udpUnrecognisedRU

v.Vzw·pydY3)c$^?{·{·*

payload bytes

00000000  76 2e 56 7a 77 0e 70 79  64 59 33 29 63 24 5e 3f  |v.Vzw.pydY3)c$^?|
00000010  7b 0f 7b 92 2a                                    |{.{.*|

2026-10-09 15:11:3284.42.46.192to 5060/udpUnrecognisedRU
j.·PO·@
payload bytes
```
00000000  6a 2e 0e 50 4f ab 40                              |j..PO.@|
```

2026-10-09 03:48:2684.42.46.199to 4000/udpUnrecognisedRU

a.=i|0;·AMv]-·`uk}G·%W·M5,·s_/·A·S*·f·E3·#` ·Ux·%s-s(Y·962zH·$V kO=vV<

payload bytes

00000000  61 2e 3d 69 7c 30 3b 07  41 4d 76 5d 2d 02 60 75  |a.=i|0;.AMv]-.`u|
00000010  6b 7d 47 1e 25 57 16 4d  35 2c 14 73 5f 2f 16 41  |k}G.%W.M5,.s_/.A|
00000020  12 53 2a 0e 04 66 15 45  33 0b 23 60 0d 03 55 78  |.S*..f.E3.#`..Ux|
00000030  00 1c 16 25 73 2d 73 28  59 07 1c 39 36 32 7a 48  |...%s-s(Y..962zH|
00000040  05 24 56 09 0a 6b 4f 3d  76 56 3c                 |.$V..kO=vV<|

2026-10-08 08:31:00213.155.195.206to 5353/udpUnrecognisedRU

·. ·A·iR·V %·-M7P1j0· A!+·G9W*·rm·.%q·9G!_UN, ·^wNa·-·Jfntg`bsh·Z·R!21w·^·

payload bytes

00000000  1a 2e 0a 16 41 19 69 52  14 56 20 25 0e 2d 4d 37  |....A.iR.V %.-M7|
00000010  50 31 6a 30 03 0a 41 21  2b 07 47 39 57 2a 01 72  |P1j0..A!+.G9W*.r|
00000020  6d 0c 08 2e 25 71 01 39  47 21 5f 55 4e 2c 0d 1e  |m...%q.9G!_UN,..|
00000030  5e 77 4e 61 02 0f 02 2d  16 4a 66 6e 74 67 60 62  |^wNa...-.Jfntg`b|
00000040  73 68 10 19 5a 11 52 21  32 31 77 00 5e 04 1e c9  |sh..Z.R!21w.^...|
00000050  e0                                                |.|

2026-10-08 05:11:08213.155.195.206to 1027/udpUnrecognisedRU

B.Q·mT·0·'q·E·DpYhL[X'<O[=!·;.F ·XwSg'a·z,]|pMUX·0·

payload bytes

00000000  42 2e 51 12 6d 54 0f 30  0e 27 71 19 1d 45 02 44  |B.Q.mT.0.'q..E.D|
00000010  70 59 68 4c 5b 58 27 3c  4f 5b 3d 21 04 3b 2e 46  |pYhL[X'<O[=!.;.F|
00000020  09 7f 58 77 53 67 27 61  0e 18 7a 2c 5d 7c 70 4d  |..XwSg'a..z,]|pM|
00000030  55 58 19 30 19 bc                                 |UX.0..|

2026-10-07 13:49:1884.42.46.199to 1434/udpUnrecognisedRU

b.)Cfym·!1·=·ZgM/Q1·l<·@>g!·*u·S8zL%·mW2 ·Id{·LG+9·*yA·T·DI,·&c&@Q}rZ·;>·Q·

payload bytes

00000000  62 2e 29 43 66 79 6d 1f  21 31 18 1c 3d 17 5a 67  |b.)Cfym.!1..=.Zg|
00000010  4d 2f 51 31 18 6c 3c 7f  40 3e 67 21 12 06 2a 75  |M/Q1.l<.@>g!..*u|
00000020  14 53 38 7a 4c 25 1a 6d  57 32 09 14 49 64 7b 16  |.S8zL%.mW2..Id{.|
00000030  13 4c 47 2b 39 03 2a 79  41 11 1a 54 18 44 49 2c  |.LG+9.*yA..T.DI,|
00000040  17 01 26 63 26 40 51 7d  72 5a 11 3b 3e 0c 51 7f  |..&c&@Q}rZ.;>.Q.|
00000050  1a                                                |.|

2026-10-07 08:12:43213.155.195.206to 6881/udpBitTorrentRU
&. ·
payload bytes
```
00000000  26 2e 0d e6 d6                                    |&....|
```
2026-10-07 01:59:2584.42.46.192to 5353/udpUnrecognisedRU
N.Wjb·H·3
payload bytes
```
00000000  4e 2e 57 6a 62 02 48 08  af 33                    |N.Wjb.H..3|
```

2026-10-06 21:25:3784.42.45.253to 8000/udpUnrecognisedRU

A.6sHj!l8[C j·+·Bxp·p} YV;_I·] 5·}}}·i5y-?cK^·` ·P/vM9P#t/lx·v-·s+·R·A·o·p}m·=@z·yJ.mz·e3·

payload bytes

00000000  41 2e 36 73 48 6a 21 6c  38 5b 43 0a 6a 1e 1e 2b  |A.6sHj!l8[C.j..+|
00000010  15 42 78 70 0f 70 7d 09  59 56 3b 5f 49 04 5d 0a  |.Bxp.p}.YV;_I.].|
00000020  35 13 7d 7d 7d 1e 69 35  79 2d 3f 63 4b 5e 0e 60  |5.}}}.i5y-?cK^.`|
00000030  20 06 50 2f 76 4d 39 50  23 74 2f 6c 78 0c 76 2d  | .P/vM9P#t/lx.v-|
00000040  1f 73 2b 1d 12 14 52 0b  41 12 6f 0c 70 7d 6d 10  |.s+...R.A.o.p}m.|
00000050  04 3d 40 7a 0b 79 4a 2e  6d 7a 1b 65 33 e0        |.=@z.yJ.mz.e3.|

2026-10-06 06:48:34213.155.195.206to 8081/udpUnrecognisedRU

6.·A<UR$*2·S·nCy·`m·e+bw ·

payload bytes

00000000  36 2e 19 41 3c 55 52 24  2a 32 1b 53 17 02 6e 43  |6..A<UR$*2.S..nC|
00000010  79 0c 60 6d 1f 65 2b 62  77 20 87                 |y.`m.e+bw .|

2026-10-05 18:15:4984.42.46.199to 6881/udpBitTorrentRU

.*C;(A)7vu ·OE·N$6@\c·H^·:1+v·8 ,|HU=q·3f->6r@·v·

payload bytes

00000000  0d 2e 2a 43 3b 28 41 29  37 76 75 20 0b 4f 45 01  |..*C;(A)7vu .OE.|
00000010  4e 24 36 40 5c 63 1e 48  5e 0f 3a 31 2b 76 02 38  |N$6@\c.H^.:1+v.8|
00000020  0d 2c 7c 48 55 3d 71 0c  33 66 2d 3e 36 72 40 04  |.,|HU=q.3f->6r@.|
00000030  17 76 11 ec                                       |.v..|