UDP traffic

Datagrams matching asn:7018 sent to HoneyLabs sensors over UDP in the last 24 hours. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Datagrams

Source addresses

Networks

Countries

Destination ports

Protocols

socks5 from 1 source2
raw from 2 sources2

Destination ports

80/udp from 1 source1
39137/udp from 1 source1
47011/udp from 1 source1
61128/udp from 1 source1

Networks

AS7018 AT&T Enterprises, LLC from 3 sources4

Countries

US United States4

Source addresses (unverified)

Address	Network	Cc	Datagrams	Last seen (UTC)
99.38.106.37	AS7018 AT&T Enterprises, LLC	US	2	2026-10-05 20:16
99.36.125.191	AS7018 AT&T Enterprises, LLC	US	1	2026-10-05 19:58
71.143.136.80	AS7018 AT&T Enterprises, LLC	US	1	2026-10-05 18:16

Latest datagrams

2026-10-05 20:16:4099.38.106.37to 47011/udpsocks5US

·4Vx·

payload bytes

00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 06 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
... 512 bytes shown in part

2026-10-05 19:58:4899.36.125.191to 80/udprawUS

x·E·: ·D·W·%d·7·R·a·R??{·c·Z^mn6· ·OK·t·:w·W_q·etR·7]7·6·F·$·5·]

payload bytes

00000000  78 a4 a5 f0 90 45 fd 3a  0a 92 05 44 86 57 90 f8  |x....E.:...D.W..|
00000010  88 aa cb 25 64 ba ca f5  15 f3 37 9d 52 ab 61 e7  |...%d.....7.R.a.|
00000020  dc c2 86 9f d2 52 3f 3f  7b a1 b2 1d a4 a2 63 f7  |.....R??{.....c.|
00000030  b6 0e 5a 5e 6d 6e 36 9b  09 bd 07 13 4f 4b 9b f9  |..Z^mn6.....OK..|
00000040  74 c5 3a 77 f8 88 57 5f  ee 99 96 71 a0 65 74 52  |t.:w..W_...q.etR|
00000050  ff 1b c4 f3 37 5d 37 10  36 ef ab d5 46 c9 03 24  |....7]7.6...F..$|
00000060  da 35 cb f7 f1 10 bf 5d  2f 96 e7 d7 6c 3c 94 ed  |.5.....]/...l<..|
00000070  e1 a1 5f 43 e3 09 c2 e6  fa ad 7f 0d 65 87 44 41  |.._C........e.DA|
00000080  05 76 aa ff 02 f5 d1 09  bf 99 31 f9 53 56 2b 9c  |.v........1.SV+.|
00000090  8d 01 9d 30 79 9b 62 b6  6b 10 eb c3 8b 5f b4 05  |...0y.b.k...._..|
000000a0  d9 a7 fd dd 4c 56 e6 7f  93 79 15 e4 9d 2a fa 43  |....LV...y...*.C|
000000b0  54 8e 09 73 4f e2 10 3e  ff dd 86 71 90 bf ba e3  |T..sO..>...q....|
000000c0  9d f6 fe dc d7 75 45 65  a5 35 6b 22 47 48 1b 14  |.....uEe.5k"GH..|
000000d0  47 1e 7a 3f b2 3f df 71  31 ea 62 0a 4a c2 f5 c4  |G.z?.?.q1.b.J...|
000000e0  b5 74 92 2b da fc 38 a3  ee b9 16 be f4 db 9b d4  |.t.+..8.........|
000000f0  0e 2a 14 6c 7a d5 ae 08  48 c4 7c 03 a8 fb 32 09  |.*.lz...H.|...2.|
... 512 bytes shown in part

2026-10-05 18:16:2171.143.136.80to 39137/udprawUS

ޑB0WR·r·'·@^·

payload bytes

00000000  de 91 42 30 57 52 ff 72  b4 9a e1 c4 27 fd b6 82  |..B0WR.r....'...|
00000010  ce 40 5e a6                                       |.@^.|

2026-10-05 15:16:5099.38.106.37to 61128/udpsocks5US

·4Vx·

payload bytes

00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 08 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
... 512 bytes shown in part