UDP traffic
Datagrams matching country:KR sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.
A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.
114
Datagrams
24
Source addresses
7
Networks
1
Countries
54
Destination ports
Traffic by type
Service queries
14 datagrams from 14 sourcesRequests a service answers without a handshake. Scanners send them to find open DNS, NTP, SNMP or SSDP servers, which are also the servers reflection attacks abuse.
Latest NTP datagram, to 123/udp
payload bytes
00000000 1c 00 00 00 |....|
Unrecognised
100 datagrams from 10 sourcesDatagrams no decoder recognised. Their first bytes are kept.
Latest Unrecognised datagram, to 27015/udp
payload bytes
00000000 ff ff ff ff 54 53 6f 75 72 63 65 20 45 6e 67 69 |....TSource Engi| 00000010 6e 65 20 51 75 65 72 79 00 |ne Query.|
Amplification checks
Probes for services that answer a small request with a much larger reply, the property reflection attacks rely on.
| Service | Port | Datagrams | Sources | Factor |
|---|---|---|---|---|
| NTP | 123/udp | 13 | 13 | 556.9 |
The factor is how many bytes a reachable server can send back for each byte it receives, as published by CISA in alert TA14-017A.
Destination ports
Networks
- AS38684 CMB Daejeon Broadcasting Co,.Ltd from 3 sources56
- AS4766 Korea Telecom from 16 sources36
- AS3786 LG DACOM Corporation from 1 source13
- AS17586 LG HelloVision Corp. from 1 source4
- AS9694 Seokyung Cable Television Co.. Ltd. from 1 source3
- AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMIT from 1 source1
- AS17577 LG HelloVision Corp. from 1 source1
Countries
Source addresses (unverified)
| Address | Network | Cc | Sends | Datagrams | Last seen (UTC) |
|---|---|---|---|---|---|
| 110.35.12.5 | AS38684 CMB Daejeon Broadcasting Co,.Ltd | KR | Unrecognised | 31 | 2026-10-11 05:13 |
| 110.35.12.15 | AS38684 CMB Daejeon Broadcasting Co,.Ltd | KR | Unrecognised | 19 | 2026-10-11 05:52 |
| 14.39.180.249 | AS4766 Korea Telecom | KR | Unrecognised | 17 | 2026-10-11 04:26 |
| 1.215.138.43 | AS3786 LG DACOM Corporation | KR | Unrecognised | 13 | 2026-10-10 06:20 |
| 110.35.12.16 | AS38684 CMB Daejeon Broadcasting Co,.Ltd | KR | Unrecognised | 6 | 2026-10-11 04:43 |
| 221.164.137.248 | AS4766 Korea Telecom | KR | Unrecognised | 4 | 2026-10-10 11:28 |
| 124.146.44.248 | AS17586 LG HelloVision Corp. | KR | Unrecognised | 4 | 2026-10-09 03:39 |
| 211.246.177.37 | AS9694 Seokyung Cable Television Co.. Ltd. | KR | Unrecognised | 3 | 2026-10-10 22:26 |
| 211.217.108.4 | AS4766 Korea Telecom | KR | Unrecognised | 2 | 2026-10-10 14:43 |
| 59.25.45.164 | AS4766 Korea Telecom | KR | NTP | 1 | 2026-10-10 15:24 |
| 14.49.174.230 | AS4766 Korea Telecom | KR | NTP | 1 | 2026-10-10 14:36 |
| 14.48.253.6 | AS4766 Korea Telecom | KR | NTP | 1 | 2026-10-10 14:49 |
| 14.32.83.9 | AS4766 Korea Telecom | KR | NTP | 1 | 2026-10-10 02:21 |
| 14.49.145.150 | AS4766 Korea Telecom | KR | NTP | 1 | 2026-10-10 14:37 |
| 14.51.20.89 | AS4766 Korea Telecom | KR | NTP | 1 | 2026-10-10 16:15 |
| 14.45.214.121 | AS4766 Korea Telecom | KR | NTP | 1 | 2026-10-10 12:42 |
| 14.42.178.201 | AS4766 Korea Telecom | KR | NTP | 1 | 2026-10-10 09:28 |
| 14.45.162.29 | AS4766 Korea Telecom | KR | NTP | 1 | 2026-10-10 11:41 |
| 14.44.66.3 | AS4766 Korea Telecom | KR | NTP | 1 | 2026-10-10 11:04 |
| 218.157.41.201 | AS4766 Korea Telecom | KR | Unrecognised | 1 | 2026-10-10 19:23 |
Latest datagrams
payload bytes
00000000 ff ff ff ff 54 53 6f 75 72 63 65 20 45 6e 67 69 |....TSource Engi| 00000010 6e 65 20 51 75 65 72 79 00 |ne Query.|
payload bytes
00000000 ff ff ff ff 54 53 6f 75 72 63 65 20 45 6e 67 69 |....TSource Engi| 00000010 6e 65 20 51 75 65 72 79 00 |ne Query.|
payload bytes
00000000 ff ff ff ff 54 53 6f 75 72 63 65 20 45 6e 67 69 |....TSource Engi| 00000010 6e 65 20 51 75 65 72 79 00 |ne Query.|
payload bytes
00000000 85 b7 40 d2 36 6a 33 59 4d 07 ac 43 f2 42 74 74 |..@.6j3YM..C.Btt| 00000010 66 2f 5f a3 e1 83 ff 61 fc 76 4a 42 95 cf ff 94 |f/_....a.vJB....| 00000020 73 e6 81 ce c9 94 fc 53 dc f5 10 42 6c 19 f9 28 |s......S...Bl..(| 00000030 7e d0 8a e9 5a 4b 67 5e 5f eb 1c 9b 29 b3 ce 7b |~...ZKg^_...)..{| 00000040 0e 95 78 c4 40 2b 21 a0 08 6a 1b dc 59 dd 42 d2 |..x.@+!..j..Y.B.| 00000050 fa f2 92 d2 c3 b8 40 7b 89 d6 0c 7c 44 64 60 b8 |......@{...|Dd`.| 00000060 90 54 20 fd 57 6d d8 83 3b 5b 7a 99 14 4e 83 22 |.T .Wm..;[z..N."| 00000070 00 1a f8 dd 3d 66 0a 9d 24 55 e2 d6 02 52 29 ee |....=f..$U...R).| 00000080 dd 7d 1c f3 0d d6 e9 3d e1 ef 66 f9 8d 0b 7b 5d |.}.....=..f...{]| 00000090 6a 67 99 4d 6a 89 b3 3e ba 70 64 f0 58 2a c6 75 |jg.Mj..>.pd.X*.u| 000000a0 bd b1 e2 f3 72 8e b8 51 5f c5 8a 82 bc ab 5a c6 |....r..Q_.....Z.| 000000b0 93 85 d3 20 e5 54 8d b5 36 df f9 61 fe 9f ed 72 |... .T..6..a...r| 000000c0 2d 73 ae ce 61 3c 5b 11 13 51 f4 be 5c 3b f8 a0 |-s..a<[..Q..\;..| 000000d0 75 03 72 1d 8e 8c 02 d5 f4 23 62 c9 5f c3 21 a8 |u.r......#b._.!.| 000000e0 85 14 c5 25 4f 8a 62 e4 b4 68 c7 3c 48 6f 5a 9a |...%O.b..h.<HoZ.| 000000f0 ba 21 36 97 e1 f1 f6 67 63 b7 73 60 0a b4 1a 29 |.!6....gc.s`...)| ... 512 bytes shown in partpayload bytes
00000000 85 b7 40 d2 36 6a 33 59 4d 07 ac 43 f2 42 74 74 |..@.6j3YM..C.Btt| 00000010 66 2f 5f a3 e1 83 ff 61 fc 76 4a 42 95 cf ff 94 |f/_....a.vJB....| 00000020 73 e6 81 ce c9 94 fc 53 dc f5 10 42 6c 19 f9 28 |s......S...Bl..(| 00000030 7e d0 8a e9 5a 4b 67 5e 5f eb 1c 9b 29 b3 ce 7b |~...ZKg^_...)..{| 00000040 0e 95 78 c4 40 2b 21 a0 08 6a 1b dc 59 dd 42 d2 |..x.@+!..j..Y.B.| 00000050 fa f2 92 d2 c3 b8 40 7b 89 d6 0c 7c 44 64 60 b8 |......@{...|Dd`.| 00000060 90 54 20 fd 57 6d d8 83 3b 5b 7a 99 14 4e 83 22 |.T .Wm..;[z..N."| 00000070 00 1a f8 dd 3d 66 0a 9d 24 55 e2 d6 02 52 29 ee |....=f..$U...R).| 00000080 dd 7d 1c f3 0d d6 e9 3d e1 ef 66 f9 8d 0b 7b 5d |.}.....=..f...{]| 00000090 6a 67 99 4d 6a 89 b3 3e ba 70 64 f0 58 2a c6 75 |jg.Mj..>.pd.X*.u| 000000a0 bd b1 e2 f3 72 8e b8 51 5f c5 8a 82 bc ab 5a c6 |....r..Q_.....Z.| 000000b0 93 85 d3 20 e5 54 8d b5 36 df f9 61 fe 9f ed 72 |... .T..6..a...r| 000000c0 2d 73 ae ce 61 3c 5b 11 13 51 f4 be 5c 3b f8 a0 |-s..a<[..Q..\;..| 000000d0 75 03 72 1d 8e 8c 02 d5 f4 23 62 c9 5f c3 21 a8 |u.r......#b._.!.| 000000e0 85 14 c5 25 4f 8a 62 e4 b4 68 c7 3c 48 6f 5a 9a |...%O.b..h.<HoZ.| 000000f0 ba 21 36 97 e1 f1 f6 67 63 b7 73 60 0a b4 1a 29 |.!6....gc.s`...)| ... 512 bytes shown in partpayload bytes
00000000 ff ff ff ff 54 53 6f 75 72 63 65 20 45 6e 67 69 |....TSource Engi| 00000010 6e 65 20 51 75 65 72 79 00 |ne Query.|
payload bytes
00000000 d0 40 6c 14 9f c1 4e 3e f0 b2 b1 10 0e 51 ad 2d |.@l...N>.....Q.-| 00000010 ab fe b1 5b 7b 8e bb 13 ce 98 00 8e 21 8d 62 c9 |...[{.......!.b.| 00000020 00 76 f2 1d 93 eb f5 d2 eb df b9 58 58 5a 6f 85 |.v.........XXZo.| 00000030 83 7e a3 0b 17 a5 77 76 b5 6a a7 e0 63 51 e5 1f |.~....wv.j..cQ..| 00000040 7a 63 a2 0f 84 20 36 c4 75 08 1f 1f bc 2c 44 2a |zc... 6.u....,D*| 00000050 3d 23 e1 36 65 17 a6 43 c4 e3 1d a4 37 1a 37 af |=#.6e..C....7.7.| 00000060 27 3c f0 90 63 0c 9e e3 17 d0 d6 a8 98 81 27 bf |'<..c.........'.| 00000070 5f 83 27 ae ec 7f c9 bd 2a 56 81 a3 83 28 29 20 |_.'.....*V...() | 00000080 a2 6a 86 b2 01 55 46 44 a5 6b df ed ad 2b db 84 |.j...UFD.k...+..| 00000090 ee 92 89 05 03 21 11 73 87 ee 85 65 d9 27 5e 38 |.....!.s...e.'^8| 000000a0 de dc 09 71 c5 f2 ea 8b e9 c4 51 c1 f5 53 f8 08 |...q......Q..S..| 000000b0 18 91 28 37 e2 31 88 eb f6 d6 b1 a4 6e 5e 1c 6e |..(7.1......n^.n| 000000c0 e4 a2 cf 1d 9e 87 62 b7 e2 f1 4e 9d 0b 23 2d 11 |......b...N..#-.| 000000d0 48 7b 95 71 93 5c 68 d2 dd 66 43 38 a5 2f 0e 40 |H{.q.\h..fC8./.@| 000000e0 d7 53 9b 9a d3 08 87 0a d0 f2 d1 29 48 83 93 18 |.S.........)H...| 000000f0 66 6e d6 58 3f 34 25 6a d9 0c c4 cc ca 5f c9 48 |fn.X?4%j....._.H| ... 512 bytes shown in partpayload bytes
00000000 c2 b6 37 7d ca 59 d8 49 f3 10 b2 9d 84 41 c5 01 |..7}.Y.I.....A..| 00000010 d8 66 84 c1 2b 61 19 4a 13 d5 21 47 12 75 c3 6c |.f..+a.J..!G.u.l| 00000020 f4 6c 93 8e 34 54 02 0f 8a 91 c2 46 a5 17 de 31 |.l..4T.....F...1| 00000030 a6 29 3f 24 e1 7a 81 39 9a f2 9d 6b 73 a3 3f aa |.)?$.z.9...ks.?.| 00000040 8b dd 90 77 ea f7 f4 45 ec d4 79 c1 8b d3 0a 96 |...w...E..y.....| 00000050 44 38 87 67 f9 d8 2e 85 04 a2 ff 8a 5b ae a9 4a |D8.g........[..J| 00000060 52 fa b2 14 2d 01 a8 e7 5e 70 30 90 75 cf ec 97 |R...-...^p0.u...| 00000070 b0 d7 0f 14 75 1d 09 b3 ca 39 a8 a0 cd dd ce 51 |....u....9.....Q| 00000080 13 32 16 3b b1 62 0f c0 13 75 88 21 5a e4 8f 06 |.2.;.b...u.!Z...| 00000090 32 c8 83 8c f9 29 22 37 e3 e2 60 55 21 71 b4 2c |2....)"7..`U!q.,| 000000a0 dd ee e4 be 19 75 af 98 15 eb 8a ca 1c b6 38 45 |.....u........8E| 000000b0 60 2a 33 dc 42 8b d7 3f ee 1d 98 a2 f7 d7 90 22 |`*3.B..?......."| 000000c0 ef 99 b5 67 c0 83 bb e4 d4 85 ae 86 99 d5 25 22 |...g..........%"| 000000d0 d3 4a 94 e9 a2 71 09 d1 72 ce 7b 23 99 5e fe 2f |.J...q..r.{#.^./| 000000e0 67 4b 77 64 2a a2 69 fe cb eb 9c 03 b7 77 4b de |gKwd*.i......wK.| 000000f0 6a 33 b9 00 a5 b9 72 b3 b3 de 54 57 21 ed 27 d2 |j3....r...TW!.'.| ... 512 bytes shown in partpayload bytes
00000000 99 ef 9c f3 03 38 ad b8 4f a9 cb 3b 18 54 db 0b |.....8..O..;.T..| 00000010 dd 92 2f 1f 1b dc 93 ce 57 95 74 a8 d5 6f de 79 |../.....W.t..o.y| 00000020 49 a3 04 1a 16 d7 27 4a 28 2d f5 46 e4 42 df cc |I.....'J(-.F.B..| 00000030 dd ae fe f3 d3 48 15 87 74 a9 66 68 fe 0e 98 5e |.....H..t.fh...^| 00000040 b6 cb 16 58 b7 43 68 75 67 69 18 28 64 7d 69 b6 |...X.Chugi.(d}i.| 00000050 64 5b cc 58 31 de 8e 6f f6 d1 36 84 49 1e 49 79 |d[.X1..o..6.I.Iy| 00000060 7f 7d 64 43 74 5c 02 5a a3 8f 89 68 ad 6f 03 59 |.}dCt\.Z...h.o.Y| 00000070 77 6e ec 39 c2 74 45 71 de 19 95 55 c6 6a a9 17 |wn.9.tEq...U.j..| 00000080 92 21 6c 4d 99 af d5 17 54 1f 73 ea 86 a7 d0 b6 |.!lM....T.s.....| 00000090 7f 60 9c 9a d2 bd 8f 20 28 8f 74 52 77 fe ab 61 |.`..... (.tRw..a| 000000a0 a5 f5 4d 18 53 ba 71 45 1a 70 8a b3 5a 78 ec 8d |..M.S.qE.p..Zx..| 000000b0 9f 54 7b fa a1 ca 10 32 59 66 fa d2 f4 fa 3a 3c |.T{....2Yf....:<| 000000c0 40 8e c5 1c bb 0a 34 a8 4a 79 fd a9 db db fb 42 |@.....4.Jy.....B| 000000d0 4a ea 7c 72 6c 57 15 7a 4d 46 60 38 99 67 d9 a4 |J.|rlW.zMF`8.g..| 000000e0 f2 e7 62 31 85 78 1c e1 c5 18 74 db 9d 49 fe b4 |..b1.x....t..I..| 000000f0 87 75 85 92 02 ef 5f 90 fc 7f 96 eb b2 71 62 ad |.u...._......qb.| ... 512 bytes shown in partpayload bytes
00000000 d6 38 df 5c 52 c5 d0 c1 c3 bf 83 41 7e 17 e6 5d |.8.\R......A~..]| 00000010 9c 8d 5a f8 90 3d e7 bf 08 f0 c6 e3 e9 56 f6 8e |..Z..=.......V..| 00000020 c6 1c ec a2 b6 be 61 24 82 4c f3 f0 6b 0d 8e cc |......a$.L..k...| 00000030 10 32 46 0e 60 a9 fb 27 41 66 06 4d df df 5f f1 |.2F.`..'Af.M.._.| 00000040 56 a5 b6 ce 49 a5 fc 34 f9 f9 b6 4a 57 76 18 45 |V...I..4...JWv.E| 00000050 b7 f7 ff 3e cc cb f8 ef fb 9e 7c 12 2d f8 50 94 |...>......|.-.P.| 00000060 5f e7 d3 55 82 e0 5c 7c b4 22 21 8a 4d 32 a3 99 |_..U..\|."!.M2..| 00000070 39 d7 80 53 3b 75 43 c8 05 da f4 4b 6c b8 45 cb |9..S;uC....Kl.E.| 00000080 22 87 29 9e 71 d3 10 4d 24 0c d9 a0 8b 46 b9 46 |".).q..M$....F.F| 00000090 e9 c9 7b 94 4c 0b 3b 5f a3 94 eb 37 cb 01 ea bb |..{.L.;_...7....| 000000a0 de a3 94 f1 cb b7 72 76 2a 7b 57 1d 12 c5 58 f6 |......rv*{W...X.| 000000b0 54 02 86 a2 20 35 a9 41 14 98 81 e7 a3 a1 c1 d7 |T... 5.A........| 000000c0 ad 8d c7 45 00 b0 cf 4d 95 c0 65 a6 43 a1 73 7c |...E...M..e.C.s|| 000000d0 85 e1 a0 05 81 1e df 35 c7 11 36 bd 9b c6 ae 5c |.......5..6....\| 000000e0 42 a8 00 5e 15 9e e6 93 87 1d 53 9e c8 8a e3 b4 |B..^......S.....| 000000f0 ae 66 fa ef 72 5b 4b 48 d9 c8 f2 4e 05 be ef e6 |.f..r[KH...N....| ... 512 bytes shown in partpayload bytes
00000000 bb c8 3a 04 c4 ee 49 59 9b c4 72 98 2f 21 fa a9 |..:...IY..r./!..| 00000010 bb 5b 57 7b db a5 7e 6d f3 e2 26 63 e1 44 ad 1b |.[W{..~m..&c.D..| 00000020 ac 4e e6 da 56 78 2e 42 9a 3b 4b 16 fe ff b0 67 |.N..Vx.B.;K....g| 00000030 8a 4e cb 8f ed 7b 16 be 5e 10 ce f1 96 4e 61 11 |.N...{..^....Na.| 00000040 2e ed 0b c4 51 2f cf c9 d6 9a 02 48 be 78 0c 53 |....Q/.....H.x.S| 00000050 6c 8d f5 c8 84 86 f0 78 66 77 78 24 df 32 81 14 |l......xfwx$.2..| 00000060 ce 43 7b 70 e3 2f 43 8c 4a ba 67 6b 33 6a 6d 76 |.C{p./C.J.gk3jmv| 00000070 03 32 a2 dc 43 22 0b 49 c2 74 e8 1f fe b9 c9 02 |.2..C".I.t......| 00000080 8e a1 36 cf 11 9b 3f df 50 aa 2d 83 82 f5 64 cc |..6...?.P.-...d.| 00000090 51 07 24 b6 97 e5 e0 95 51 a2 71 7b 58 80 52 90 |Q.$.....Q.q{X.R.| 000000a0 8c 03 da 06 9d 92 84 94 76 c9 11 62 2c d5 45 66 |........v..b,.Ef| 000000b0 0b 7c 55 b0 e6 00 f5 00 f7 23 43 ec e6 67 e7 a4 |.|U......#C..g..| 000000c0 55 e2 49 bf 6a 37 13 17 e4 f2 ba e2 02 61 fd 7d |U.I.j7.......a.}| 000000d0 a2 7f 56 8d 05 a1 70 03 5d 5e 68 36 e3 dc 0b a0 |..V...p.]^h6....| 000000e0 2f 0c 9e 9e 70 ee 60 18 97 c1 8e 6c 21 e4 9c 92 |/...p.`....l!...| 000000f0 29 7d 0d fc b6 1f 01 e3 38 f8 99 f9 c6 b6 51 8c |)}......8.....Q.| ... 512 bytes shown in partpayload bytes
00000000 1c 00 00 00 |....|
payload bytes
00000000 ff ff ff ff 54 53 6f 75 72 63 65 20 45 6e 67 69 |....TSource Engi| 00000010 6e 65 20 51 75 65 72 79 00 |ne Query.|
payload bytes
00000000 9c 4c 56 e4 ac d7 49 c9 56 a3 32 4d e6 d3 d8 87 |.LV...I.V.2M....| 00000010 2d 5d bc d1 01 04 cf 56 9d 35 3f 8e 5f 80 39 cf |-].....V.5?._.9.| 00000020 a0 f9 5f fc 26 05 9e d2 35 51 7a a5 bd 06 42 a6 |.._.&...5Qz...B.| 00000030 2c 79 d3 a5 85 ef 46 87 a1 f5 c2 f0 ea 72 03 46 |,y....F......r.F| 00000040 1f 79 27 78 59 8b ad c8 10 00 25 2f 3c b3 ec 72 |.y'xY.....%/<..r| 00000050 ff d3 40 31 cd 61 13 95 ff d6 31 92 d6 e2 53 85 |..@1.a....1...S.| 00000060 a8 06 bb b2 3b 04 a8 bc 7f bb 32 a0 fd b8 6d ba |....;.....2...m.| 00000070 5e 67 89 d0 a8 28 fc 2c 0b 87 20 19 82 7e 5d ce |^g...(.,.. ..~].| 00000080 80 43 75 55 ee 98 01 98 3a 4c 04 85 76 9b 88 a0 |.CuU....:L..v...| 00000090 a4 a5 1e 5f 41 80 4c cb 8e 60 8e 6c 42 15 39 88 |..._A.L..`.lB.9.| 000000a0 64 b2 a0 22 f9 70 41 8d cf fb d4 92 d2 7f 07 d2 |d..".pA.........| 000000b0 64 c4 13 f5 87 a4 53 73 a1 23 6c 46 51 3d 7c af |d.....Ss.#lFQ=|.| 000000c0 3e fc 27 c4 a1 0f be 2a 7c 50 e8 0d 25 72 30 43 |>.'....*|P..%r0C| 000000d0 71 b0 0d b8 d6 63 14 62 58 b4 30 2d 81 4a 51 ed |q....c.bX.0-.JQ.| 000000e0 62 e1 0a 38 66 3f c1 f9 72 c6 fb 51 8e 8b 99 36 |b..8f?..r..Q...6| 000000f0 ce 7d f7 59 99 43 3d a9 9a c8 7a 26 20 f2 45 dc |.}.Y.C=...z& .E.| ... 512 bytes shown in part
payload bytes
00000000 ff ff ff ff 54 53 6f 75 72 63 65 20 45 6e 67 69 |....TSource Engi| 00000010 6e 65 20 51 75 65 72 79 00 |ne Query.|