UDP traffic
Datagrams matching asn:4766 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.
A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.
Your plan searches up to 7d, so 30d was shortened. Plans
36
Datagrams
16
Source addresses
1
Networks
1
Countries
18
Destination ports
Traffic by type
Service queries
12 datagrams from 12 sourcesRequests a service answers without a handshake. Scanners send them to find open DNS, NTP, SNMP or SSDP servers, which are also the servers reflection attacks abuse.
Latest NTP datagram, to 123/udp
payload bytes
00000000 1c 00 00 00 |....|
Unrecognised
24 datagrams from 4 sourcesDatagrams no decoder recognised. Their first bytes are kept.
Latest Unrecognised datagram, to 26850/udp
payload bytes
00000000 85 b7 40 d2 36 6a 33 59 4d 07 ac 43 f2 42 74 74 |..@.6j3YM..C.Btt|
00000010 66 2f 5f a3 e1 83 ff 61 fc 76 4a 42 95 cf ff 94 |f/_....a.vJB....|
00000020 73 e6 81 ce c9 94 fc 53 dc f5 10 42 6c 19 f9 28 |s......S...Bl..(|
00000030 7e d0 8a e9 5a 4b 67 5e 5f eb 1c 9b 29 b3 ce 7b |~...ZKg^_...)..{|
00000040 0e 95 78 c4 40 2b 21 a0 08 6a 1b dc 59 dd 42 d2 |..x.@+!..j..Y.B.|
00000050 fa f2 92 d2 c3 b8 40 7b 89 d6 0c 7c 44 64 60 b8 |......@{...|Dd`.|
00000060 90 54 20 fd 57 6d d8 83 3b 5b 7a 99 14 4e 83 22 |.T .Wm..;[z..N."|
00000070 00 1a f8 dd 3d 66 0a 9d 24 55 e2 d6 02 52 29 ee |....=f..$U...R).|
00000080 dd 7d 1c f3 0d d6 e9 3d e1 ef 66 f9 8d 0b 7b 5d |.}.....=..f...{]|
00000090 6a 67 99 4d 6a 89 b3 3e ba 70 64 f0 58 2a c6 75 |jg.Mj..>.pd.X*.u|
000000a0 bd b1 e2 f3 72 8e b8 51 5f c5 8a 82 bc ab 5a c6 |....r..Q_.....Z.|
000000b0 93 85 d3 20 e5 54 8d b5 36 df f9 61 fe 9f ed 72 |... .T..6..a...r|
000000c0 2d 73 ae ce 61 3c 5b 11 13 51 f4 be 5c 3b f8 a0 |-s..a<[..Q..\;..|
000000d0 75 03 72 1d 8e 8c 02 d5 f4 23 62 c9 5f c3 21 a8 |u.r......#b._.!.|
000000e0 85 14 c5 25 4f 8a 62 e4 b4 68 c7 3c 48 6f 5a 9a |...%O.b..h.<HoZ.|
000000f0 ba 21 36 97 e1 f1 f6 67 63 b7 73 60 0a b4 1a 29 |.!6....gc.s`...)|Amplification checks
Probes for services that answer a small request with a much larger reply, the property reflection attacks rely on.
| Service | Port | Datagrams | Sources | Factor |
|---|---|---|---|---|
| NTP | 123/udp | 12 | 12 | 556.9 |
The factor is how many bytes a reachable server can send back for each byte it receives, as published by CISA in alert TA14-017A.
Source addresses (unverified)
| Address | Network | Cc | Sends | Datagrams | Last seen (UTC) |
|---|---|---|---|---|---|
| 14.39.180.249 | AS4766 Korea Telecom | KR | Unrecognised | 17 | 2026-10-11 04:26 |
| 221.164.137.248 | AS4766 Korea Telecom | KR | Unrecognised | 4 | 2026-10-10 11:28 |
| 211.217.108.4 | AS4766 Korea Telecom | KR | Unrecognised | 2 | 2026-10-10 14:43 |
| 59.25.45.164 | AS4766 Korea Telecom | KR | NTP | 1 | 2026-10-10 15:24 |
| 14.56.250.242 | AS4766 Korea Telecom | KR | NTP | 1 | 2026-10-10 20:39 |
| 218.157.41.201 | AS4766 Korea Telecom | KR | Unrecognised | 1 | 2026-10-10 19:23 |
| 14.44.66.3 | AS4766 Korea Telecom | KR | NTP | 1 | 2026-10-10 11:04 |
| 14.45.214.121 | AS4766 Korea Telecom | KR | NTP | 1 | 2026-10-10 12:42 |
| 14.49.145.150 | AS4766 Korea Telecom | KR | NTP | 1 | 2026-10-10 14:37 |
| 14.32.83.9 | AS4766 Korea Telecom | KR | NTP | 1 | 2026-10-10 02:21 |
| 14.49.174.230 | AS4766 Korea Telecom | KR | NTP | 1 | 2026-10-10 14:36 |
| 14.48.253.6 | AS4766 Korea Telecom | KR | NTP | 1 | 2026-10-10 14:49 |
| 14.51.20.89 | AS4766 Korea Telecom | KR | NTP | 1 | 2026-10-10 16:15 |
| 14.42.178.201 | AS4766 Korea Telecom | KR | NTP | 1 | 2026-10-10 09:28 |
| 14.45.162.29 | AS4766 Korea Telecom | KR | NTP | 1 | 2026-10-10 11:41 |
| 14.50.165.253 | AS4766 Korea Telecom | KR | NTP | 1 | 2026-10-10 15:20 |
Latest datagrams
payload bytes
00000000 85 b7 40 d2 36 6a 33 59 4d 07 ac 43 f2 42 74 74 |..@.6j3YM..C.Btt| 00000010 66 2f 5f a3 e1 83 ff 61 fc 76 4a 42 95 cf ff 94 |f/_....a.vJB....| 00000020 73 e6 81 ce c9 94 fc 53 dc f5 10 42 6c 19 f9 28 |s......S...Bl..(| 00000030 7e d0 8a e9 5a 4b 67 5e 5f eb 1c 9b 29 b3 ce 7b |~...ZKg^_...)..{| 00000040 0e 95 78 c4 40 2b 21 a0 08 6a 1b dc 59 dd 42 d2 |..x.@+!..j..Y.B.| 00000050 fa f2 92 d2 c3 b8 40 7b 89 d6 0c 7c 44 64 60 b8 |......@{...|Dd`.| 00000060 90 54 20 fd 57 6d d8 83 3b 5b 7a 99 14 4e 83 22 |.T .Wm..;[z..N."| 00000070 00 1a f8 dd 3d 66 0a 9d 24 55 e2 d6 02 52 29 ee |....=f..$U...R).| 00000080 dd 7d 1c f3 0d d6 e9 3d e1 ef 66 f9 8d 0b 7b 5d |.}.....=..f...{]| 00000090 6a 67 99 4d 6a 89 b3 3e ba 70 64 f0 58 2a c6 75 |jg.Mj..>.pd.X*.u| 000000a0 bd b1 e2 f3 72 8e b8 51 5f c5 8a 82 bc ab 5a c6 |....r..Q_.....Z.| 000000b0 93 85 d3 20 e5 54 8d b5 36 df f9 61 fe 9f ed 72 |... .T..6..a...r| 000000c0 2d 73 ae ce 61 3c 5b 11 13 51 f4 be 5c 3b f8 a0 |-s..a<[..Q..\;..| 000000d0 75 03 72 1d 8e 8c 02 d5 f4 23 62 c9 5f c3 21 a8 |u.r......#b._.!.| 000000e0 85 14 c5 25 4f 8a 62 e4 b4 68 c7 3c 48 6f 5a 9a |...%O.b..h.<HoZ.| 000000f0 ba 21 36 97 e1 f1 f6 67 63 b7 73 60 0a b4 1a 29 |.!6....gc.s`...)| ... 512 bytes shown in partpayload bytes
00000000 85 b7 40 d2 36 6a 33 59 4d 07 ac 43 f2 42 74 74 |..@.6j3YM..C.Btt| 00000010 66 2f 5f a3 e1 83 ff 61 fc 76 4a 42 95 cf ff 94 |f/_....a.vJB....| 00000020 73 e6 81 ce c9 94 fc 53 dc f5 10 42 6c 19 f9 28 |s......S...Bl..(| 00000030 7e d0 8a e9 5a 4b 67 5e 5f eb 1c 9b 29 b3 ce 7b |~...ZKg^_...)..{| 00000040 0e 95 78 c4 40 2b 21 a0 08 6a 1b dc 59 dd 42 d2 |..x.@+!..j..Y.B.| 00000050 fa f2 92 d2 c3 b8 40 7b 89 d6 0c 7c 44 64 60 b8 |......@{...|Dd`.| 00000060 90 54 20 fd 57 6d d8 83 3b 5b 7a 99 14 4e 83 22 |.T .Wm..;[z..N."| 00000070 00 1a f8 dd 3d 66 0a 9d 24 55 e2 d6 02 52 29 ee |....=f..$U...R).| 00000080 dd 7d 1c f3 0d d6 e9 3d e1 ef 66 f9 8d 0b 7b 5d |.}.....=..f...{]| 00000090 6a 67 99 4d 6a 89 b3 3e ba 70 64 f0 58 2a c6 75 |jg.Mj..>.pd.X*.u| 000000a0 bd b1 e2 f3 72 8e b8 51 5f c5 8a 82 bc ab 5a c6 |....r..Q_.....Z.| 000000b0 93 85 d3 20 e5 54 8d b5 36 df f9 61 fe 9f ed 72 |... .T..6..a...r| 000000c0 2d 73 ae ce 61 3c 5b 11 13 51 f4 be 5c 3b f8 a0 |-s..a<[..Q..\;..| 000000d0 75 03 72 1d 8e 8c 02 d5 f4 23 62 c9 5f c3 21 a8 |u.r......#b._.!.| 000000e0 85 14 c5 25 4f 8a 62 e4 b4 68 c7 3c 48 6f 5a 9a |...%O.b..h.<HoZ.| 000000f0 ba 21 36 97 e1 f1 f6 67 63 b7 73 60 0a b4 1a 29 |.!6....gc.s`...)| ... 512 bytes shown in partpayload bytes
00000000 bb c8 3a 04 c4 ee 49 59 9b c4 72 98 2f 21 fa a9 |..:...IY..r./!..| 00000010 bb 5b 57 7b db a5 7e 6d f3 e2 26 63 e1 44 ad 1b |.[W{..~m..&c.D..| 00000020 ac 4e e6 da 56 78 2e 42 9a 3b 4b 16 fe ff b0 67 |.N..Vx.B.;K....g| 00000030 8a 4e cb 8f ed 7b 16 be 5e 10 ce f1 96 4e 61 11 |.N...{..^....Na.| 00000040 2e ed 0b c4 51 2f cf c9 d6 9a 02 48 be 78 0c 53 |....Q/.....H.x.S| 00000050 6c 8d f5 c8 84 86 f0 78 66 77 78 24 df 32 81 14 |l......xfwx$.2..| 00000060 ce 43 7b 70 e3 2f 43 8c 4a ba 67 6b 33 6a 6d 76 |.C{p./C.J.gk3jmv| 00000070 03 32 a2 dc 43 22 0b 49 c2 74 e8 1f fe b9 c9 02 |.2..C".I.t......| 00000080 8e a1 36 cf 11 9b 3f df 50 aa 2d 83 82 f5 64 cc |..6...?.P.-...d.| 00000090 51 07 24 b6 97 e5 e0 95 51 a2 71 7b 58 80 52 90 |Q.$.....Q.q{X.R.| 000000a0 8c 03 da 06 9d 92 84 94 76 c9 11 62 2c d5 45 66 |........v..b,.Ef| 000000b0 0b 7c 55 b0 e6 00 f5 00 f7 23 43 ec e6 67 e7 a4 |.|U......#C..g..| 000000c0 55 e2 49 bf 6a 37 13 17 e4 f2 ba e2 02 61 fd 7d |U.I.j7.......a.}| 000000d0 a2 7f 56 8d 05 a1 70 03 5d 5e 68 36 e3 dc 0b a0 |..V...p.]^h6....| 000000e0 2f 0c 9e 9e 70 ee 60 18 97 c1 8e 6c 21 e4 9c 92 |/...p.`....l!...| 000000f0 29 7d 0d fc b6 1f 01 e3 38 f8 99 f9 c6 b6 51 8c |)}......8.....Q.| ... 512 bytes shown in partpayload bytes
00000000 1c 00 00 00 |....|
payload bytes
00000000 9c 4c 56 e4 ac d7 49 c9 56 a3 32 4d e6 d3 d8 87 |.LV...I.V.2M....| 00000010 2d 5d bc d1 01 04 cf 56 9d 35 3f 8e 5f 80 39 cf |-].....V.5?._.9.| 00000020 a0 f9 5f fc 26 05 9e d2 35 51 7a a5 bd 06 42 a6 |.._.&...5Qz...B.| 00000030 2c 79 d3 a5 85 ef 46 87 a1 f5 c2 f0 ea 72 03 46 |,y....F......r.F| 00000040 1f 79 27 78 59 8b ad c8 10 00 25 2f 3c b3 ec 72 |.y'xY.....%/<..r| 00000050 ff d3 40 31 cd 61 13 95 ff d6 31 92 d6 e2 53 85 |..@1.a....1...S.| 00000060 a8 06 bb b2 3b 04 a8 bc 7f bb 32 a0 fd b8 6d ba |....;.....2...m.| 00000070 5e 67 89 d0 a8 28 fc 2c 0b 87 20 19 82 7e 5d ce |^g...(.,.. ..~].| 00000080 80 43 75 55 ee 98 01 98 3a 4c 04 85 76 9b 88 a0 |.CuU....:L..v...| 00000090 a4 a5 1e 5f 41 80 4c cb 8e 60 8e 6c 42 15 39 88 |..._A.L..`.lB.9.| 000000a0 64 b2 a0 22 f9 70 41 8d cf fb d4 92 d2 7f 07 d2 |d..".pA.........| 000000b0 64 c4 13 f5 87 a4 53 73 a1 23 6c 46 51 3d 7c af |d.....Ss.#lFQ=|.| 000000c0 3e fc 27 c4 a1 0f be 2a 7c 50 e8 0d 25 72 30 43 |>.'....*|P..%r0C| 000000d0 71 b0 0d b8 d6 63 14 62 58 b4 30 2d 81 4a 51 ed |q....c.bX.0-.JQ.| 000000e0 62 e1 0a 38 66 3f c1 f9 72 c6 fb 51 8e 8b 99 36 |b..8f?..r..Q...6| 000000f0 ce 7d f7 59 99 43 3d a9 9a c8 7a 26 20 f2 45 dc |.}.Y.C=...z& .E.| ... 512 bytes shown in part
payload bytes
00000000 1c 00 00 00 |....|
payload bytes
00000000 1c 00 00 00 |....|
payload bytes
00000000 1c 00 00 00 |....|
payload bytes
00000000 1c 00 00 00 |....|
payload bytes
00000000 99 a5 3c f3 9b 3b 42 7e 23 81 ef 7a c2 da 3b b7 |..<..;B~#..z..;.| 00000010 d1 b1 3d a1 8e d8 cc ce ed be 2c c8 e0 80 a8 a1 |..=.......,.....| 00000020 3d 1e 57 ed b1 a3 f7 45 34 a6 81 e8 44 94 cb 0d |=.W....E4...D...| 00000030 36 c5 38 58 ab 0f 2a a0 9c ad 7f 45 c3 78 47 14 |6.8X..*....E.xG.| 00000040 08 1e c8 8a ad 0f 6f 7a 31 5e c4 c2 ca a7 6a ed |......oz1^....j.| 00000050 31 dc 98 27 08 ad 88 25 5e 4a 5d c5 c8 f1 b1 7d |1..'...%^J]....}| 00000060 1b d3 29 9c 7b cd a9 fc 0a 67 89 d3 02 f3 44 21 |..).{....g....D!| 00000070 3a 4d 27 f3 30 84 57 41 27 0a 7e d9 e9 2e a4 df |:M'.0.WA'.~.....| 00000080 ba e6 23 16 4a 96 a8 eb 2a 96 ae c2 f0 3b 83 3c |..#.J...*....;.<| 00000090 ec 1c 9c 35 d3 c6 29 9a 7a 0c 80 2c a1 ee f9 09 |...5..).z..,....| 000000a0 0e e8 57 dc 09 b2 9c 08 bc 8c 53 24 71 e2 19 e2 |..W.......S$q...| 000000b0 a4 71 6d 81 7a 97 8c 6c 3b c0 02 d4 a0 ba 25 f9 |.qm.z..l;.....%.| 000000c0 71 14 2f 13 29 66 10 1b 68 7e d1 d9 48 2f f5 0d |q./.)f..h~..H/..| 000000d0 1b 3e 12 66 de 3d ab fe 5d 3e db ac e1 cb f0 08 |.>.f.=..]>......| 000000e0 02 ce e5 ff ed 59 07 58 66 ad 5b 2d ef c4 7a a3 |.....Y.Xf.[-..z.| 000000f0 5c 9b 3e 72 c7 6c 94 10 2e c3 54 e0 77 3e 7c 95 |\.>r.l....T.w>|.| ... 512 bytes shown in partpayload bytes
00000000 1c 00 00 00 |....|
payload bytes
00000000 1c 00 00 00 |....|
payload bytes
00000000 1c 00 00 00 |....|
payload bytes
00000000 1c 00 00 00 |....|
payload bytes
00000000 7e af 37 d4 e5 8d bf 61 98 81 59 ce 0a 27 8d 97 |~.7....a..Y..'..| 00000010 da 26 a8 fe 4f 4c e5 63 ea 54 b2 61 a1 9a f9 9f |.&..OL.c.T.a....| 00000020 72 e1 d8 20 12 56 16 69 de 4a f0 9a b3 e7 8f c9 |r.. .V.i.J......| 00000030 81 5c bb 2e 82 39 c6 f5 5e 3b 78 ed 3d eb 7c 5b |.\...9..^;x.=.|[| 00000040 87 eb d7 af d6 dd 19 6b 20 b9 97 47 ec 97 0e fb |.......k ..G....| 00000050 d9 d0 95 eb 10 57 c7 4e 51 b9 63 b4 c6 e9 5d 3b |.....W.NQ.c...];| 00000060 6c e5 0b 7e 6a 42 00 0a 4a db 00 a3 35 05 c7 77 |l..~jB..J...5..w| 00000070 24 ae c6 56 84 a5 dd 5e 9e ff a2 fb 72 a3 03 b4 |$..V...^....r...| 00000080 58 8c d7 d7 a3 e2 95 64 a0 bf 27 88 e5 85 96 21 |X......d..'....!| 00000090 c3 78 48 4a d3 0b 03 81 ec 7e 6c 34 29 6c 40 a1 |.xHJ.....~l4)l@.| 000000a0 a2 96 c7 a8 fa 4d 03 31 28 ce cf 66 fc c7 4c c4 |.....M.1(..f..L.| 000000b0 51 2b aa 50 23 d0 ed 7b f8 ef 4b 63 4a b7 9a c1 |Q+.P#..{..KcJ...| 000000c0 8b fc 6b c0 6d 40 12 d5 18 41 1a e9 96 9b 2e fd |..k.m@...A......| 000000d0 1c af 3e 62 1e 9a 68 25 2a 0d 41 1e 5f d7 3a 97 |..>b..h%*.A._.:.| 000000e0 eb cc eb 00 82 1e 32 61 d3 67 0c 77 42 c6 cd 36 |......2a.g.wB..6| 000000f0 e4 d8 1f 68 6b 1d 28 99 62 c3 0e 8d 57 fb a9 d5 |...hk.(.b...W...| ... 512 bytes shown in part