UDP traffic

Datagrams matching asn:396982 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Datagrams

Source addresses

Networks

Countries

Destination ports

Protocols

raw from 13 sources13
snmp from 4 sources4
ssdp from 1 source1
bittorrent from 1 source1

Destination ports

161/udp from 4 sources4
1967/udp from 3 sources3
5351/udp from 2 sources2
17185/udp from 2 sources2
520/udp from 1 source1
1604/udp from 1 source1
1645/udp from 1 source1
1900/udp from 1 source1
3702/udp from 1 source1
6881/udp from 1 source1
10001/udp from 1 source1
64738/udp from 1 source1

Networks

AS396982 Google LLC from 19 sources19

Countries

US United States19

Source addresses (unverified)

Address	Network	Cc	Datagrams	Last seen (UTC)
198.235.24.76	AS396982 Google LLC	US	1	2026-10-05 15:24
198.235.24.215	AS396982 Google LLC	US	1	2026-10-05 17:22
198.235.24.216	AS396982 Google LLC	US	1	2026-10-05 15:05
147.185.132.13	AS396982 Google LLC	US	1	2026-10-05 17:09
205.210.31.110	AS396982 Google LLC	US	1	2026-10-05 17:22
198.235.24.96	AS396982 Google LLC	US	1	2026-10-05 16:23
147.185.132.84	AS396982 Google LLC	US	1	2026-10-05 18:00
147.185.132.42	AS396982 Google LLC	US	1	2026-10-05 16:54
198.235.24.103	AS396982 Google LLC	US	1	2026-10-05 16:14
147.185.132.61	AS396982 Google LLC	US	1	2026-10-05 15:42
147.185.132.19	AS396982 Google LLC	US	1	2026-10-05 17:32
147.185.132.231	AS396982 Google LLC	US	1	2026-10-05 17:10
147.185.132.48	AS396982 Google LLC	US	1	2026-10-05 16:11
216.25.89.113	AS396982 Google LLC	US	1	2026-10-05 18:03
205.210.31.214	AS396982 Google LLC	US	1	2026-10-05 17:00
205.210.31.213	AS396982 Google LLC	US	1	2026-10-05 17:25
198.235.24.202	AS396982 Google LLC	US	1	2026-10-05 17:58
216.25.89.116	AS396982 Google LLC	US	1	2026-10-05 15:35
147.185.132.201	AS396982 Google LLC	US	1	2026-10-05 17:40

Latest datagrams

2026-10-05 18:03:39216.25.89.113to 5351/udprawUS

·M)w'· ·+·N·

payload bytes

00000000  02 01 00 00 00 00 0e 10  00 00 00 00 00 00 00 00  |................|
00000010  00 00 ff ff 00 00 00 00  dd 4d 29 77 27 9f 09 81  |.........M)w'...|
00000020  2b e8 b6 4e 11 00 00 00  00 00 00 00 00 00 00 00  |+..N............|
00000030  00 00 00 00 00 00 ff ff  00 00 00 00              |............|

2026-10-05 18:00:47147.185.132.84to 1604/udprawUS

·0·

payload bytes

00000000  1e 00 01 30 02 fd a8 e3  00 00 00 00 00 00 00 00  |...0............|
00000010  00 00 00 00 00 00 00 00  00 00 00 00 00 00        |..............|

2026-10-05 17:58:40198.235.24.202to 5351/udprawUS

payload bytes

00000000  00 00                                             |..|

2026-10-05 17:40:46147.185.132.201to 64738/udprawUS

·abcdefgh

payload bytes

00000000  00 00 00 00 61 62 63 64  65 66 67 68              |....abcdefgh|

2026-10-05 17:32:50147.185.132.19to 1967/udprawUS

·4·՝[·P·

payload bytes

00000000  01 0f 00 34 00 00 00 00  00 04 00 10 00 00 00 00  |...4............|
00000010  d5 9d 5b eb 10 93 14 50  00 01 00 1c 00 00 00 00  |..[....P........|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00                                       |....|

2026-10-05 17:25:55205.210.31.213to 1900/udpssdpUS

M-SEARCH * HTTP/1.1 Host:239.255.255.250:1900 ST:upnp:rootdevice Man:"ssdp:discover" MX:3

payload bytes

00000000  4d 2d 53 45 41 52 43 48  20 2a 20 48 54 54 50 2f  |M-SEARCH * HTTP/|
00000010  31 2e 31 0d 0a 48 6f 73  74 3a 32 33 39 2e 32 35  |1.1..Host:239.25|
00000020  35 2e 32 35 35 2e 32 35  30 3a 31 39 30 30 0d 0a  |5.255.250:1900..|
00000030  53 54 3a 75 70 6e 70 3a  72 6f 6f 74 64 65 76 69  |ST:upnp:rootdevi|
00000040  63 65 0d 0a 4d 61 6e 3a  22 73 73 64 70 3a 64 69  |ce..Man:"ssdp:di|
00000050  73 63 6f 76 65 72 22 0d  0a 4d 58 3a 33 0d 0a 0d  |scover"..MX:3...|
00000060  0a                                                |.|

2026-10-05 17:22:17198.235.24.215to 520/udprawUS

payload bytes

00000000  01 01 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000010  00 00 00 00 00 00 00 10                           |........|

2026-10-05 17:22:00205.210.31.110to 1967/udprawUS

·4·՝[·P·

payload bytes

00000000  01 0f 00 34 00 00 00 00  00 04 00 10 00 00 00 00  |...4............|
00000010  d5 9d 5b eb 10 93 14 50  00 01 00 1c 00 00 00 00  |..[....P........|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00                                       |....|

2026-10-05 17:10:15147.185.132.231to 3702/udprawUS

<env:Envelope xmlns:env="http://www.w3.org/2003/05/soap-envelope" xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/08/addressing" xmlns:wsd="http://schemas.xmlsoap.org/ws/2005/04/discovery"><env:Header><

payload bytes

00000000  3c 65 6e 76 3a 45 6e 76  65 6c 6f 70 65 20 78 6d  |<env:Envelope xm|
00000010  6c 6e 73 3a 65 6e 76 3d  22 68 74 74 70 3a 2f 2f  |lns:env="http://|
00000020  77 77 77 2e 77 33 2e 6f  72 67 2f 32 30 30 33 2f  |www.w3.org/2003/|
00000030  30 35 2f 73 6f 61 70 2d  65 6e 76 65 6c 6f 70 65  |05/soap-envelope|
00000040  22 20 78 6d 6c 6e 73 3a  77 73 61 3d 22 68 74 74  |" xmlns:wsa="htt|
00000050  70 3a 2f 2f 73 63 68 65  6d 61 73 2e 78 6d 6c 73  |p://schemas.xmls|
00000060  6f 61 70 2e 6f 72 67 2f  77 73 2f 32 30 30 34 2f  |oap.org/ws/2004/|
00000070  30 38 2f 61 64 64 72 65  73 73 69 6e 67 22 20 78  |08/addressing" x|
00000080  6d 6c 6e 73 3a 77 73 64  3d 22 68 74 74 70 3a 2f  |mlns:wsd="http:/|
00000090  2f 73 63 68 65 6d 61 73  2e 78 6d 6c 73 6f 61 70  |/schemas.xmlsoap|
000000a0  2e 6f 72 67 2f 77 73 2f  32 30 30 35 2f 30 34 2f  |.org/ws/2005/04/|
000000b0  64 69 73 63 6f 76 65 72  79 22 3e 3c 65 6e 76 3a  |discovery"><env:|
000000c0  48 65 61 64 65 72 3e 3c  77 73 64 3a 41 70 70 53  |Header><wsd:AppS|
000000d0  65 71 75 65 6e 63 65 20  49 6e 73 74 61 6e 63 65  |equence Instance|
000000e0  49 64 3d 22 31 32 38 35  36 32 34 39 35 38 37 33  |Id="128562495873|
000000f0  37 22 20 4d 65 73 73 61  67 65 4e 75 6d 62 65 72  |7" MessageNumber|
... 512 bytes shown in part

2026-10-05 17:09:06147.185.132.13to 1967/udprawUS

·4·՝[·P·

payload bytes

00000000  01 0f 00 34 00 00 00 00  00 04 00 10 00 00 00 00  |...4............|
00000010  d5 9d 5b eb 10 93 14 50  00 01 00 1c 00 00 00 00  |..[....P........|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00                                       |....|

2026-10-05 17:00:09205.210.31.214to 1645/udprawUS

payload bytes

00000000  01 00 00 14 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000010  00 00 00 00                                       |....|

2026-10-05 16:54:33147.185.132.42to 10001/udprawUS

payload bytes

00000000  02 08 00 00                                       |....|

2026-10-05 16:23:47198.235.24.96to 17185/udprawUS

·UUUU·U·0·

payload bytes

00000000  00 00 00 00 00 00 00 00  00 00 00 02 55 55 55 55  |............UUUU|
00000010  00 00 00 01 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00  ff ff 55 13 00 00 00 30  |..........U....0|
00000030  00 00 00 01 00 00 00 02  00 00 00 00 00 00 00 00  |................|

2026-10-05 16:14:49198.235.24.103to 6881/udpbittorrentUS

d1:ad2:id20:abcdefghij0123456789e1:q4:ping1:t2:aa1:y1:qe

payload bytes

00000000  64 31 3a 61 64 32 3a 69  64 32 30 3a 61 62 63 64  |d1:ad2:id20:abcd|
00000010  65 66 67 68 69 6a 30 31  32 33 34 35 36 37 38 39  |efghij0123456789|
00000020  65 31 3a 71 34 3a 70 69  6e 67 31 3a 74 32 3a 61  |e1:q4:ping1:t2:a|
00000030  61 31 3a 79 31 3a 71 65                           |a1:y1:qe|

2026-10-05 16:11:02147.185.132.48to 17185/udprawUS

·UUUU·U·0·

payload bytes

00000000  00 00 00 00 00 00 00 00  00 00 00 02 55 55 55 55  |............UUUU|
00000010  00 00 00 01 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00  ff ff 55 13 00 00 00 30  |..........U....0|
00000030  00 00 00 01 00 00 00 02  00 00 00 00 00 00 00 00  |................|

2026-10-05 15:42:16147.185.132.61to 161/udpsnmpUS

0)·public·VZ·]·0·0·+·

payload bytes

00000000  30 29 02 01 00 04 06 70  75 62 6c 69 63 a0 1c 02  |0).....public...|
00000010  04 56 5a dc 5d 02 01 00  02 01 00 30 0e 30 0c 06  |.VZ.]......0.0..|
00000020  08 2b 06 01 02 01 01 01  00 05 00                 |.+.........|

2026-10-05 15:35:04216.25.89.116to 161/udpsnmpUS

0)·public·VZ·]·0·0·+·

payload bytes

00000000  30 29 02 01 00 04 06 70  75 62 6c 69 63 a0 1c 02  |0).....public...|
00000010  04 56 5a dc 5d 02 01 00  02 01 00 30 0e 30 0c 06  |.VZ.]......0.0..|
00000020  08 2b 06 01 02 01 01 01  00 05 00                 |.+.........|

2026-10-05 15:24:44198.235.24.76to 161/udpsnmpUS

0)·public·VZ·]·0·0·+·

payload bytes

00000000  30 29 02 01 00 04 06 70  75 62 6c 69 63 a0 1c 02  |0).....public...|
00000010  04 56 5a dc 5d 02 01 00  02 01 00 30 0e 30 0c 06  |.VZ.]......0.0..|
00000020  08 2b 06 01 02 01 01 01  00 05 00                 |.+.........|

2026-10-05 15:05:34198.235.24.216to 161/udpsnmpUS

0)·public·VZ·]·0·0·+·

payload bytes

00000000  30 29 02 01 00 04 06 70  75 62 6c 69 63 a0 1c 02  |0).....public...|
00000010  04 56 5a dc 5d 02 01 00  02 01 00 30 0e 30 0c 06  |.VZ.]......0.0..|
00000020  08 2b 06 01 02 01 01 01  00 05 00                 |.+.........|