UDP traffic

Datagrams matching asn:4766 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

Service queries

12 datagrams from 12 sources

Requests a service answers without a handshake. Scanners send them to find open DNS, NTP, SNMP or SSDP servers, which are also the servers reflection attacks abuse.

NTP 12

Latest NTP datagram, to 123/udp

payload bytes

00000000  1c 00 00 00                                       |....|

Unrecognised

24 datagrams from 4 sources

Datagrams no decoder recognised. Their first bytes are kept.

Unrecognised 24

Latest Unrecognised datagram, to 26850/udp

·@·6j3YM·C·Bttf/_·a·vJB·s·ɔ·S·Bl·(~Њ·ZKg^_·)·{·x·@+!·j·Y·B·ø@{·|Dd`·T ·Wm؃;[z·N·"·=f ·$U·R)·}· ·=·f·{]jg·Mj·>·pd·X*·u·r·

payload bytes

00000000  85 b7 40 d2 36 6a 33 59  4d 07 ac 43 f2 42 74 74  |..@.6j3YM..C.Btt|
00000010  66 2f 5f a3 e1 83 ff 61  fc 76 4a 42 95 cf ff 94  |f/_....a.vJB....|
00000020  73 e6 81 ce c9 94 fc 53  dc f5 10 42 6c 19 f9 28  |s......S...Bl..(|
00000030  7e d0 8a e9 5a 4b 67 5e  5f eb 1c 9b 29 b3 ce 7b  |~...ZKg^_...)..{|
00000040  0e 95 78 c4 40 2b 21 a0  08 6a 1b dc 59 dd 42 d2  |..x.@+!..j..Y.B.|
00000050  fa f2 92 d2 c3 b8 40 7b  89 d6 0c 7c 44 64 60 b8  |......@{...|Dd`.|
00000060  90 54 20 fd 57 6d d8 83  3b 5b 7a 99 14 4e 83 22  |.T .Wm..;[z..N."|
00000070  00 1a f8 dd 3d 66 0a 9d  24 55 e2 d6 02 52 29 ee  |....=f..$U...R).|
00000080  dd 7d 1c f3 0d d6 e9 3d  e1 ef 66 f9 8d 0b 7b 5d  |.}.....=..f...{]|
00000090  6a 67 99 4d 6a 89 b3 3e  ba 70 64 f0 58 2a c6 75  |jg.Mj..>.pd.X*.u|
000000a0  bd b1 e2 f3 72 8e b8 51  5f c5 8a 82 bc ab 5a c6  |....r..Q_.....Z.|
000000b0  93 85 d3 20 e5 54 8d b5  36 df f9 61 fe 9f ed 72  |... .T..6..a...r|
000000c0  2d 73 ae ce 61 3c 5b 11  13 51 f4 be 5c 3b f8 a0  |-s..a<[..Q..\;..|
000000d0  75 03 72 1d 8e 8c 02 d5  f4 23 62 c9 5f c3 21 a8  |u.r......#b._.!.|
000000e0  85 14 c5 25 4f 8a 62 e4  b4 68 c7 3c 48 6f 5a 9a  |...%O.b..h.<HoZ.|
000000f0  ba 21 36 97 e1 f1 f6 67  63 b7 73 60 0a b4 1a 29  |.!6....gc.s`...)|

Amplification checks

Probes for services that answer a small request with a much larger reply, the property reflection attacks rely on.

Service	Port	Datagrams	Sources	Factor
NTP	123/udp	12	12	556.9

The factor is how many bytes a reachable server can send back for each byte it receives, as published by CISA in alert TA14-017A.

Destination ports

Networks

AS4766 Korea Telecom from 16 sources36

Countries

KR South Korea36

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
14.39.180.249	AS4766 Korea Telecom	KR	Unrecognised	17	2026-10-11 04:26
221.164.137.248	AS4766 Korea Telecom	KR	Unrecognised	4	2026-10-10 11:28
211.217.108.4	AS4766 Korea Telecom	KR	Unrecognised	2	2026-10-10 14:43
59.25.45.164	AS4766 Korea Telecom	KR	NTP	1	2026-10-10 15:24
14.56.250.242	AS4766 Korea Telecom	KR	NTP	1	2026-10-10 20:39
218.157.41.201	AS4766 Korea Telecom	KR	Unrecognised	1	2026-10-10 19:23
14.44.66.3	AS4766 Korea Telecom	KR	NTP	1	2026-10-10 11:04
14.45.214.121	AS4766 Korea Telecom	KR	NTP	1	2026-10-10 12:42
14.49.145.150	AS4766 Korea Telecom	KR	NTP	1	2026-10-10 14:37
14.32.83.9	AS4766 Korea Telecom	KR	NTP	1	2026-10-10 02:21
14.49.174.230	AS4766 Korea Telecom	KR	NTP	1	2026-10-10 14:36
14.48.253.6	AS4766 Korea Telecom	KR	NTP	1	2026-10-10 14:49
14.51.20.89	AS4766 Korea Telecom	KR	NTP	1	2026-10-10 16:15
14.42.178.201	AS4766 Korea Telecom	KR	NTP	1	2026-10-10 09:28
14.45.162.29	AS4766 Korea Telecom	KR	NTP	1	2026-10-10 11:41
14.50.165.253	AS4766 Korea Telecom	KR	NTP	1	2026-10-10 15:20

Latest datagrams

2026-10-11 04:26:2014.39.180.249to 26850/udpUnrecognisedKR

·@·6j3YM·C·Bttf/_·a·vJB·s·ɔ·S·Bl·(~Њ·ZKg^_·)·{·x·@+!·j·Y·B·ø@{·|Dd`·T ·Wm؃;[z·N·"·

payload bytes

00000000  85 b7 40 d2 36 6a 33 59  4d 07 ac 43 f2 42 74 74  |..@.6j3YM..C.Btt|
00000010  66 2f 5f a3 e1 83 ff 61  fc 76 4a 42 95 cf ff 94  |f/_....a.vJB....|
00000020  73 e6 81 ce c9 94 fc 53  dc f5 10 42 6c 19 f9 28  |s......S...Bl..(|
00000030  7e d0 8a e9 5a 4b 67 5e  5f eb 1c 9b 29 b3 ce 7b  |~...ZKg^_...)..{|
00000040  0e 95 78 c4 40 2b 21 a0  08 6a 1b dc 59 dd 42 d2  |..x.@+!..j..Y.B.|
00000050  fa f2 92 d2 c3 b8 40 7b  89 d6 0c 7c 44 64 60 b8  |......@{...|Dd`.|
00000060  90 54 20 fd 57 6d d8 83  3b 5b 7a 99 14 4e 83 22  |.T .Wm..;[z..N."|
00000070  00 1a f8 dd 3d 66 0a 9d  24 55 e2 d6 02 52 29 ee  |....=f..$U...R).|
00000080  dd 7d 1c f3 0d d6 e9 3d  e1 ef 66 f9 8d 0b 7b 5d  |.}.....=..f...{]|
00000090  6a 67 99 4d 6a 89 b3 3e  ba 70 64 f0 58 2a c6 75  |jg.Mj..>.pd.X*.u|
000000a0  bd b1 e2 f3 72 8e b8 51  5f c5 8a 82 bc ab 5a c6  |....r..Q_.....Z.|
000000b0  93 85 d3 20 e5 54 8d b5  36 df f9 61 fe 9f ed 72  |... .T..6..a...r|
000000c0  2d 73 ae ce 61 3c 5b 11  13 51 f4 be 5c 3b f8 a0  |-s..a<[..Q..\;..|
000000d0  75 03 72 1d 8e 8c 02 d5  f4 23 62 c9 5f c3 21 a8  |u.r......#b._.!.|
000000e0  85 14 c5 25 4f 8a 62 e4  b4 68 c7 3c 48 6f 5a 9a  |...%O.b..h.<HoZ.|
000000f0  ba 21 36 97 e1 f1 f6 67  63 b7 73 60 0a b4 1a 29  |.!6....gc.s`...)|
... 512 bytes shown in part

2026-10-11 02:02:1614.39.180.249to 26850/udpUnrecognisedKR

·@·6j3YM·C·Bttf/_·a·vJB·s·ɔ·S·Bl·(~Њ·ZKg^_·)·{·x·@+!·j·Y·B·ø@{·|Dd`·T ·Wm؃;[z·N·"·

payload bytes

00000000  85 b7 40 d2 36 6a 33 59  4d 07 ac 43 f2 42 74 74  |..@.6j3YM..C.Btt|
00000010  66 2f 5f a3 e1 83 ff 61  fc 76 4a 42 95 cf ff 94  |f/_....a.vJB....|
00000020  73 e6 81 ce c9 94 fc 53  dc f5 10 42 6c 19 f9 28  |s......S...Bl..(|
00000030  7e d0 8a e9 5a 4b 67 5e  5f eb 1c 9b 29 b3 ce 7b  |~...ZKg^_...)..{|
00000040  0e 95 78 c4 40 2b 21 a0  08 6a 1b dc 59 dd 42 d2  |..x.@+!..j..Y.B.|
00000050  fa f2 92 d2 c3 b8 40 7b  89 d6 0c 7c 44 64 60 b8  |......@{...|Dd`.|
00000060  90 54 20 fd 57 6d d8 83  3b 5b 7a 99 14 4e 83 22  |.T .Wm..;[z..N."|
00000070  00 1a f8 dd 3d 66 0a 9d  24 55 e2 d6 02 52 29 ee  |....=f..$U...R).|
00000080  dd 7d 1c f3 0d d6 e9 3d  e1 ef 66 f9 8d 0b 7b 5d  |.}.....=..f...{]|
00000090  6a 67 99 4d 6a 89 b3 3e  ba 70 64 f0 58 2a c6 75  |jg.Mj..>.pd.X*.u|
000000a0  bd b1 e2 f3 72 8e b8 51  5f c5 8a 82 bc ab 5a c6  |....r..Q_.....Z.|
000000b0  93 85 d3 20 e5 54 8d b5  36 df f9 61 fe 9f ed 72  |... .T..6..a...r|
000000c0  2d 73 ae ce 61 3c 5b 11  13 51 f4 be 5c 3b f8 a0  |-s..a<[..Q..\;..|
000000d0  75 03 72 1d 8e 8c 02 d5  f4 23 62 c9 5f c3 21 a8  |u.r......#b._.!.|
000000e0  85 14 c5 25 4f 8a 62 e4  b4 68 c7 3c 48 6f 5a 9a  |...%O.b..h.<HoZ.|
000000f0  ba 21 36 97 e1 f1 f6 67  63 b7 73 60 0a b4 1a 29  |.!6....gc.s`...)|
... 512 bytes shown in part

2026-10-10 21:06:1414.39.180.249to 62951/udpUnrecognisedKR

·:·IY·r·/!·[W{ۥ~m·&c·D·N·Vx.B·;K·g·Nˏ·{·^·Na·.·Q/·֚·H·x·Sl·Ȅ·xfwx$·2·C{p·/C·J·gk3jmv·2·

payload bytes

00000000  bb c8 3a 04 c4 ee 49 59  9b c4 72 98 2f 21 fa a9  |..:...IY..r./!..|
00000010  bb 5b 57 7b db a5 7e 6d  f3 e2 26 63 e1 44 ad 1b  |.[W{..~m..&c.D..|
00000020  ac 4e e6 da 56 78 2e 42  9a 3b 4b 16 fe ff b0 67  |.N..Vx.B.;K....g|
00000030  8a 4e cb 8f ed 7b 16 be  5e 10 ce f1 96 4e 61 11  |.N...{..^....Na.|
00000040  2e ed 0b c4 51 2f cf c9  d6 9a 02 48 be 78 0c 53  |....Q/.....H.x.S|
00000050  6c 8d f5 c8 84 86 f0 78  66 77 78 24 df 32 81 14  |l......xfwx$.2..|
00000060  ce 43 7b 70 e3 2f 43 8c  4a ba 67 6b 33 6a 6d 76  |.C{p./C.J.gk3jmv|
00000070  03 32 a2 dc 43 22 0b 49  c2 74 e8 1f fe b9 c9 02  |.2..C".I.t......|
00000080  8e a1 36 cf 11 9b 3f df  50 aa 2d 83 82 f5 64 cc  |..6...?.P.-...d.|
00000090  51 07 24 b6 97 e5 e0 95  51 a2 71 7b 58 80 52 90  |Q.$.....Q.q{X.R.|
000000a0  8c 03 da 06 9d 92 84 94  76 c9 11 62 2c d5 45 66  |........v..b,.Ef|
000000b0  0b 7c 55 b0 e6 00 f5 00  f7 23 43 ec e6 67 e7 a4  |.|U......#C..g..|
000000c0  55 e2 49 bf 6a 37 13 17  e4 f2 ba e2 02 61 fd 7d  |U.I.j7.......a.}|
000000d0  a2 7f 56 8d 05 a1 70 03  5d 5e 68 36 e3 dc 0b a0  |..V...p.]^h6....|
000000e0  2f 0c 9e 9e 70 ee 60 18  97 c1 8e 6c 21 e4 9c 92  |/...p.`....l!...|
000000f0  29 7d 0d fc b6 1f 01 e3  38 f8 99 f9 c6 b6 51 8c  |)}......8.....Q.|
... 512 bytes shown in part

2026-10-10 20:39:5714.56.250.242to 123/udpNTPKR

payload bytes

00000000  1c 00 00 00                                       |....|

2026-10-10 19:23:11218.157.41.201to 20257/udpUnrecognisedKR

·LV·I·V·2M·؇-]·V·5?·_·9Ϡ·_·&·5Qz·B·,yӥ·F·r·F·y'xY·%/<·r·@1·a·1·S·;·

payload bytes

00000000  9c 4c 56 e4 ac d7 49 c9  56 a3 32 4d e6 d3 d8 87  |.LV...I.V.2M....|
00000010  2d 5d bc d1 01 04 cf 56  9d 35 3f 8e 5f 80 39 cf  |-].....V.5?._.9.|
00000020  a0 f9 5f fc 26 05 9e d2  35 51 7a a5 bd 06 42 a6  |.._.&...5Qz...B.|
00000030  2c 79 d3 a5 85 ef 46 87  a1 f5 c2 f0 ea 72 03 46  |,y....F......r.F|
00000040  1f 79 27 78 59 8b ad c8  10 00 25 2f 3c b3 ec 72  |.y'xY.....%/<..r|
00000050  ff d3 40 31 cd 61 13 95  ff d6 31 92 d6 e2 53 85  |..@1.a....1...S.|
00000060  a8 06 bb b2 3b 04 a8 bc  7f bb 32 a0 fd b8 6d ba  |....;.....2...m.|
00000070  5e 67 89 d0 a8 28 fc 2c  0b 87 20 19 82 7e 5d ce  |^g...(.,.. ..~].|
00000080  80 43 75 55 ee 98 01 98  3a 4c 04 85 76 9b 88 a0  |.CuU....:L..v...|
00000090  a4 a5 1e 5f 41 80 4c cb  8e 60 8e 6c 42 15 39 88  |..._A.L..`.lB.9.|
000000a0  64 b2 a0 22 f9 70 41 8d  cf fb d4 92 d2 7f 07 d2  |d..".pA.........|
000000b0  64 c4 13 f5 87 a4 53 73  a1 23 6c 46 51 3d 7c af  |d.....Ss.#lFQ=|.|
000000c0  3e fc 27 c4 a1 0f be 2a  7c 50 e8 0d 25 72 30 43  |>.'....*|P..%r0C|
000000d0  71 b0 0d b8 d6 63 14 62  58 b4 30 2d 81 4a 51 ed  |q....c.bX.0-.JQ.|
000000e0  62 e1 0a 38 66 3f c1 f9  72 c6 fb 51 8e 8b 99 36  |b..8f?..r..Q...6|
000000f0  ce 7d f7 59 99 43 3d a9  9a c8 7a 26 20 f2 45 dc  |.}.Y.C=...z& .E.|
... 512 bytes shown in part

2026-10-10 16:15:0414.51.20.89to 123/udpNTPKR

payload bytes

00000000  1c 00 00 00                                       |....|

2026-10-10 15:24:0359.25.45.164to 123/udpNTPKR

payload bytes

00000000  1c 00 00 00                                       |....|

2026-10-10 15:20:1514.50.165.253to 123/udpNTPKR

payload bytes

00000000  1c 00 00 00                                       |....|

2026-10-10 14:49:3014.48.253.6to 123/udpNTPKR

payload bytes

00000000  1c 00 00 00                                       |....|

2026-10-10 14:43:52211.217.108.4to 61893/udpUnrecognisedKR

·<·;B~#·z·;·ѱ=·,·=·W·E4·D· 6·8X·*·E·xG·Ȋ·oz1^·ʧj·1ܘ'·%^J]·}·)·{ͩ·

payload bytes

00000000  99 a5 3c f3 9b 3b 42 7e  23 81 ef 7a c2 da 3b b7  |..<..;B~#..z..;.|
00000010  d1 b1 3d a1 8e d8 cc ce  ed be 2c c8 e0 80 a8 a1  |..=.......,.....|
00000020  3d 1e 57 ed b1 a3 f7 45  34 a6 81 e8 44 94 cb 0d  |=.W....E4...D...|
00000030  36 c5 38 58 ab 0f 2a a0  9c ad 7f 45 c3 78 47 14  |6.8X..*....E.xG.|
00000040  08 1e c8 8a ad 0f 6f 7a  31 5e c4 c2 ca a7 6a ed  |......oz1^....j.|
00000050  31 dc 98 27 08 ad 88 25  5e 4a 5d c5 c8 f1 b1 7d  |1..'...%^J]....}|
00000060  1b d3 29 9c 7b cd a9 fc  0a 67 89 d3 02 f3 44 21  |..).{....g....D!|
00000070  3a 4d 27 f3 30 84 57 41  27 0a 7e d9 e9 2e a4 df  |:M'.0.WA'.~.....|
00000080  ba e6 23 16 4a 96 a8 eb  2a 96 ae c2 f0 3b 83 3c  |..#.J...*....;.<|
00000090  ec 1c 9c 35 d3 c6 29 9a  7a 0c 80 2c a1 ee f9 09  |...5..).z..,....|
000000a0  0e e8 57 dc 09 b2 9c 08  bc 8c 53 24 71 e2 19 e2  |..W.......S$q...|
000000b0  a4 71 6d 81 7a 97 8c 6c  3b c0 02 d4 a0 ba 25 f9  |.qm.z..l;.....%.|
000000c0  71 14 2f 13 29 66 10 1b  68 7e d1 d9 48 2f f5 0d  |q./.)f..h~..H/..|
000000d0  1b 3e 12 66 de 3d ab fe  5d 3e db ac e1 cb f0 08  |.>.f.=..]>......|
000000e0  02 ce e5 ff ed 59 07 58  66 ad 5b 2d ef c4 7a a3  |.....Y.Xf.[-..z.|
000000f0  5c 9b 3e 72 c7 6c 94 10  2e c3 54 e0 77 3e 7c 95  |\.>r.l....T.w>|.|
... 512 bytes shown in part

2026-10-10 14:37:3114.49.145.150to 123/udpNTPKR

payload bytes

00000000  1c 00 00 00                                       |....|

2026-10-10 14:36:3714.49.174.230to 123/udpNTPKR

payload bytes

00000000  1c 00 00 00                                       |....|

2026-10-10 12:42:1414.45.214.121to 123/udpNTPKR

payload bytes

00000000  1c 00 00 00                                       |....|

2026-10-10 11:41:4714.45.162.29to 123/udpNTPKR

payload bytes

00000000  1c 00 00 00                                       |....|

2026-10-10 11:28:40221.164.137.248to 27498/udpUnrecognisedKR

~·7·卿a·Y· '·&·OL·c·T·a·r· ·V·i·J·Ɂ\·.·9·^;x·=·|[·ׯ·k ·G·Е·W·NQ·c·];l·~jB·

payload bytes

00000000  7e af 37 d4 e5 8d bf 61  98 81 59 ce 0a 27 8d 97  |~.7....a..Y..'..|
00000010  da 26 a8 fe 4f 4c e5 63  ea 54 b2 61 a1 9a f9 9f  |.&..OL.c.T.a....|
00000020  72 e1 d8 20 12 56 16 69  de 4a f0 9a b3 e7 8f c9  |r.. .V.i.J......|
00000030  81 5c bb 2e 82 39 c6 f5  5e 3b 78 ed 3d eb 7c 5b  |.\...9..^;x.=.|[|
00000040  87 eb d7 af d6 dd 19 6b  20 b9 97 47 ec 97 0e fb  |.......k ..G....|
00000050  d9 d0 95 eb 10 57 c7 4e  51 b9 63 b4 c6 e9 5d 3b  |.....W.NQ.c...];|
00000060  6c e5 0b 7e 6a 42 00 0a  4a db 00 a3 35 05 c7 77  |l..~jB..J...5..w|
00000070  24 ae c6 56 84 a5 dd 5e  9e ff a2 fb 72 a3 03 b4  |$..V...^....r...|
00000080  58 8c d7 d7 a3 e2 95 64  a0 bf 27 88 e5 85 96 21  |X......d..'....!|
00000090  c3 78 48 4a d3 0b 03 81  ec 7e 6c 34 29 6c 40 a1  |.xHJ.....~l4)l@.|
000000a0  a2 96 c7 a8 fa 4d 03 31  28 ce cf 66 fc c7 4c c4  |.....M.1(..f..L.|
000000b0  51 2b aa 50 23 d0 ed 7b  f8 ef 4b 63 4a b7 9a c1  |Q+.P#..{..KcJ...|
000000c0  8b fc 6b c0 6d 40 12 d5  18 41 1a e9 96 9b 2e fd  |..k.m@...A......|
000000d0  1c af 3e 62 1e 9a 68 25  2a 0d 41 1e 5f d7 3a 97  |..>b..h%*.A._.:.|
000000e0  eb cc eb 00 82 1e 32 61  d3 67 0c 77 42 c6 cd 36  |......2a.g.wB..6|
000000f0  e4 d8 1f 68 6b 1d 28 99  62 c3 0e 8d 57 fb a9 d5  |...hk.(.b...W...|
... 512 bytes shown in part