UDP traffic
Datagrams matching asn:9808 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.
A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.
Your plan searches up to 7d, so 30d was shortened. Plans
8
Datagrams
6
Source addresses
1
Networks
1
Countries
8
Destination ports
Traffic by type
Unrecognised
8 datagrams from 6 sourcesDatagrams no decoder recognised. Their first bytes are kept.
Latest Unrecognised datagram, to 5353/udp
payload bytes
00000000 68 2e 55 6b 5d 05 3a 3a 01 75 0a 00 1d 42 03 54 |h.Uk].::.u...B.T|
00000010 7b 5d 4a 12 25 22 04 25 79 74 31 0d 3c 2c 5e 24 |{]J.%".%yt1.<,^$|
00000020 5b 24 2a |[$*|Amplification checks
Probes for services that answer a small request with a much larger reply, the property reflection attacks rely on.
The factor is how many bytes a reachable server can send back for each byte it receives, as published by CISA in alert TA14-017A.
Source addresses (unverified)
| Address | Network | Cc | Sends | Datagrams | Last seen (UTC) |
|---|---|---|---|---|---|
| 183.250.25.11 | AS9808 China Mobile Communications Group Co., L | CN | Unrecognised | 3 | 2026-10-10 07:37 |
| 120.229.67.80 | AS9808 China Mobile Communications Group Co., L | CN | Unrecognised | 1 | 2026-10-09 11:37 |
| 223.73.0.102 | AS9808 China Mobile Communications Group Co., L | CN | Unrecognised | 1 | 2026-10-07 04:34 |
| 223.73.203.232 | AS9808 China Mobile Communications Group Co., L | CN | Unrecognised | 1 | 2026-10-07 09:15 |
| 120.192.235.150 | AS9808 China Mobile Communications Group Co., L | CN | Unrecognised | 1 | 2026-10-10 14:32 |
| 112.31.247.176 | AS9808 China Mobile Communications Group Co., L | CN | Unrecognised | 1 | 2026-10-08 10:27 |
Latest datagrams
payload bytes
00000000 68 2e 55 6b 5d 05 3a 3a 01 75 0a 00 1d 42 03 54 |h.Uk].::.u...B.T| 00000010 7b 5d 4a 12 25 22 04 25 79 74 31 0d 3c 2c 5e 24 |{]J.%".%yt1.<,^$| 00000020 5b 24 2a |[$*|payload bytes
00000000 c6 2e 78 6b 23 ad 29 1b 59 4f fd 0e 4f 65 be bb |..xk#.).YO..Oe..| 00000010 fa 3d 7a 1c b0 92 71 b1 96 13 4d 20 f4 e1 a9 3f |.=z...q...M ...?| 00000020 e5 1d c0 25 c6 21 3a ce ca 57 15 67 33 06 f5 43 |...%.!:..W.g3..C| 00000030 38 11 07 ee f7 29 bd 68 85 a7 72 c7 81 0f 23 dd |8....).h..r...#.| 00000040 31 91 6a 65 8b e9 53 c2 35 66 39 32 cd 8f e5 88 |1.je..S.5f92....| 00000050 77 f7 7c 1e b6 41 46 61 b2 ea 56 32 00 fb 46 42 |w.|..AFa..V2..FB| 00000060 cc 20 dd cf 70 ee f8 64 90 55 6b 8d 4a 46 e6 93 |. ..p..d.Uk.JF..| 00000070 80 42 84 b1 87 68 61 05 bc 5a 7b 66 c1 55 60 00 |.B...ha..Z{f.U`.| 00000080 55 a6 13 97 91 02 30 6f fe ec e8 62 94 d3 c2 df |U.....0o...b....| 00000090 f1 8c 41 79 71 8d 96 6f e8 bb cf c4 e2 74 2d 36 |..Ayq..o.....t-6| 000000a0 71 60 3f 88 6c 43 e1 25 5a b0 c6 86 19 ee 4d 7b |q`?.lC.%Z.....M{| 000000b0 69 02 ad b1 1a 3b 23 7d c6 63 52 4a ad 8d 5a 68 |i....;#}.cRJ..Zh| 000000c0 d1 9e 05 4d 12 7d f4 c8 ce 50 05 cf 09 c9 58 77 |...M.}...P....Xw| 000000d0 28 5c 80 6e d5 7a ea 19 9b 4a f3 04 d8 03 0a fa |(\.n.z...J......| 000000e0 14 90 be 64 16 b8 b4 cd da a6 b7 cd 1a 32 22 b9 |...d.........2".| 000000f0 8b c0 dc 05 58 0d 0f 6c b7 fa c3 7f 3c 56 18 d3 |....X..l....<V..| ... 512 bytes shown in partpayload bytes
00000000 21 2e 7a 11 79 33 04 33 3a 14 01 16 6d 62 37 64 |!.z.y3.3:...mb7d| 00000010 19 0e 32 27 4c 4a 6a 4f 58 69 37 65 07 5f 23 28 |..2'LJjOXi7e._#(| 00000020 2b 1d 39 24 51 3d 57 0b 52 58 21 3f 3b 58 23 54 |+.9$Q=W.RX!?;X#T| 00000030 67 55 7b 33 20 65 02 78 4e 39 5d 55 18 00 7d 43 |gU{3 e.xN9]U..}C| 00000040 1d 36 67 6e 74 3e 79 46 17 1b 8f fa |.6gnt>yF....|payload bytes
00000000 dd 7b 69 3a 49 9f 3b 4a 37 cb 4e 19 1f b2 f4 a8 |.{i:I.;J7.N.....| 00000010 19 86 7c dd a9 73 51 cc c4 a5 79 7d 4c 3a c2 f5 |..|..sQ...y}L:..| 00000020 66 70 3f 3b 55 be ff 08 ba 3f 0a 53 20 88 5a 8b |fp?;U....?.S .Z.| 00000030 c7 e6 30 46 65 02 d1 0d 27 2d 22 6c 45 13 78 00 |..0Fe...'-"lE.x.| 00000040 b3 81 14 e4 c0 78 31 20 8e 08 55 01 50 05 ef b8 |.....x1 ..U.P...| 00000050 eb 98 f7 68 ea 68 2a 0a 26 04 ca 1b 59 03 99 4c |...h.h*.&...Y..L| 00000060 75 0c 06 b3 de 9f 4a 62 de cb 17 b8 9b 47 3c d4 |u.....Jb.....G<.| 00000070 8e 6b 88 91 aa 83 0f 64 2c 73 bb 5b 8e 70 83 9d |.k.....d,s.[.p..| 00000080 5c 8d bd c2 ee c7 61 18 5f df b6 f8 55 b9 ba f5 |\.....a._...U...| 00000090 64 eb 7e 2d b1 f1 1c 09 13 3b 14 b9 8b cd 6a 39 |d.~-.....;....j9| 000000a0 b4 e8 77 7b 8d c0 24 bb 46 95 77 66 a6 e9 41 2f |..w{..$.F.wf..A/| 000000b0 51 4d a9 26 dd 24 ba 48 30 e7 c8 cd dc eb 17 c7 |QM.&.$.H0.......| 000000c0 e0 d3 91 e5 18 dd 81 4d 16 72 83 3b 92 a3 fb 1d |.......M.r.;....| 000000d0 ee 83 0c 15 1a a0 2f 61 98 49 1c 55 15 bf 67 52 |....../a.I.U..gR| 000000e0 e3 aa 22 54 f8 6a c2 67 28 11 c2 8b c6 7a b5 2c |.."T.j.g(....z.,| 000000f0 74 70 97 35 da a7 1a 26 7c 04 9e 63 6f c4 97 1a |tp.5...&|..co...| ... 512 bytes shown in partpayload bytes
00000000 71 2e 54 19 6e 34 17 09 23 1f 4f 21 35 14 5a 7b |q.T.n4..#.O!5.Z{| 00000010 44 74 3b 62 74 06 31 5c 2c 01 39 7d 11 7f 2e 02 |Dt;bt.1\,.9}....| 00000020 17 02 1c 05 37 33 0f 5a 52 5e 7b 07 73 56 03 37 |....73.ZR^{.sV.7| 00000030 4a 3e 19 3e 45 4b 1a 71 4c 53 6f 5d 52 1d 60 6a |J>.>EK.qLSo]R.`j| 00000040 1f 7c 6f 56 2f 7e 30 02 5d 2c 09 50 02 0c 07 4c |.|oV/~0.],.P...L| 00000050 4b 20 0a 40 ed |K .@.|payload bytes
00000000 7d 5d 45 a4 b3 40 f2 cd 45 31 61 f8 fd 92 f6 e7 |}]E..@..E1a.....| 00000010 6a 75 fc 94 de 17 bd 8d 10 e7 39 16 7a a8 d0 23 |ju........9.z..#| 00000020 bf fc 12 be dc 64 2b 19 f5 62 96 0a c9 77 69 4d |.....d+..b...wiM| 00000030 96 41 fb 3f 6b 80 36 0d 8a b3 2f b1 f8 fc 02 ab |.A.?k.6.../.....| 00000040 61 fd 86 88 0b a7 e4 e4 18 7a 8c 86 00 8b 3c 78 |a........z....<x| 00000050 8d cf 33 27 b9 7b 66 be 75 a9 d3 ab 2c 98 49 9a |..3'.{f.u...,.I.| 00000060 d8 3a 11 25 ba 16 d2 0a 81 19 7a 68 6f 23 27 48 |.:.%......zho#'H| 00000070 67 98 a0 b0 6b 12 a8 cb 21 92 55 fb 57 fd 2f e6 |g...k...!.U.W./.| 00000080 f5 c2 98 89 0b 68 22 0a b8 e6 93 11 06 da 19 f4 |.....h".........| 00000090 e7 3d cf 76 ad 0f d9 e9 21 fd a9 42 f7 3e 01 30 |.=.v....!..B.>.0| 000000a0 fe 71 26 de 2d 62 68 68 e1 19 63 3f e6 29 c9 ad |.q&.-bhh..c?.)..| 000000b0 91 19 44 60 af 06 5f 03 85 2c d1 47 2d e0 04 ee |..D`.._..,.G-...| 000000c0 76 81 7f 76 eb e2 c8 e2 08 a7 9a 30 25 4d 28 be |v..v.......0%M(.| 000000d0 58 4a 99 ae a5 12 ef 9d 91 50 97 15 dd 14 55 59 |XJ.......P....UY| 000000e0 d1 9f 20 bc e3 c3 53 15 f6 3e 98 47 89 ff a5 44 |.. ...S..>.G...D| 000000f0 a1 4d ee 07 58 ef 5a c0 5a 11 0d 3a 2e b0 56 b9 |.M..X.Z.Z..:..V.| ... 512 bytes shown in partpayload bytes
00000000 6f 5c cb 03 ee 75 f9 16 1f ba 93 a3 c0 83 bc be |o\...u..........| 00000010 5c 98 cd e7 4e d7 46 3a 5b d1 3b 04 9f f0 c3 5e |\...N.F:[.;....^| 00000020 63 8c 47 d5 22 cd b7 d9 46 6e dc 03 aa 21 da 42 |c.G."...Fn...!.B| 00000030 06 99 17 ab 9b 8f ae cc 16 66 e0 2c 51 c5 a4 bf |.........f.,Q...| 00000040 0a a4 6c a8 cb 34 06 10 0b 30 f9 3f e8 f4 ee a6 |..l..4...0.?....| 00000050 cb 58 6f 6b 01 99 ee 4a 3f 81 61 bc ef 6b f9 6d |.Xok...J?.a..k.m| 00000060 9b cf 41 7c 83 77 59 42 8e 6e 81 f2 22 c5 81 54 |..A|.wYB.n.."..T| 00000070 3e e5 ce 26 0b 6b a2 af 6f 95 ae 56 4d e2 5c 0c |>..&.k..o..VM.\.| 00000080 ed 11 ea 5d 68 d3 ac e1 df 27 8b c3 69 fb 2e 28 |...]h....'..i..(| 00000090 f8 e2 46 25 ab 42 f6 a2 f5 3c d9 38 34 7d 73 67 |..F%.B...<.84}sg| 000000a0 00 02 30 75 17 f5 c3 65 ce 53 0c 94 a6 06 6a 68 |..0u...e.S....jh| 000000b0 a9 29 bf 9d 44 1c ae e7 5c b1 ca 11 f5 da ad 29 |.)..D...\......)| 000000c0 08 4c 3b 4d d7 35 e0 da 86 3f e4 9e dd 24 d9 d9 |.L;M.5...?...$..| 000000d0 e2 68 15 4e 7a a2 80 95 43 a7 27 2a 16 91 c8 3a |.h.Nz...C.'*...:| 000000e0 d5 bc 7f df 32 46 7c 4f 21 ed 76 58 18 87 48 26 |....2F|O!.vX..H&| 000000f0 10 0e f3 04 6a 95 13 a9 8c 7a e3 46 0f 45 f1 24 |....j....z.F.E.$| ... 512 bytes shown in part
payload bytes
00000000 01 c9 d2 6c 91 dc fb 4d b3 00 ff ff 00 fe fe fe |...l...M........| 00000010 fe fd fd fd fd 12 34 56 78 a3 d9 94 72 b3 c9 f6 |......4Vx...r...| 00000020 c7 |.|