Interestingly most traffic coming out of this AS was actually UDP: https://dashboard.terracenetworks.com/sources/asns/13238

Pretty benign AS as far as actual exploit or malicious crawling is concerned.

Probably QUIC if true, but you should also ask how these people get their data, because this isn't something you can just see or look up.