UDP traffic

Datagrams matching asn:396982 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Your plan searches up to 7d, so 30d was shortened. Plans

Datagrams

Source addresses

Networks

Countries

Destination ports

Protocols

raw from 15 sources15
dns from 5 sources5
snmp from 4 sources4
ssdp from 1 source1
kerberos from 1 source1
bittorrent from 1 source1

Destination ports

161/udp from 4 sources4
1967/udp from 3 sources3
5351/udp from 3 sources3
13446/udp from 2 sources2
17185/udp from 2 sources2
53/udp from 1 source1
88/udp from 1 source1
500/udp from 1 source1
520/udp from 1 source1
1604/udp from 1 source1
1645/udp from 1 source1
1900/udp from 1 source1

DNS questions

1 queries and 4 unsolicited answers. An answer nobody asked for means a resolver was given a forged source address.

VERSION.BIND TXT1

DNS record types

TXT1

Networks

AS396982 Google LLC from 27 sources27

Countries

US United States27

Source addresses (unverified)

Address	Network	Cc	Datagrams	Last seen (UTC)
147.185.132.39	AS396982 Google LLC	US	1	2026-10-05 18:47
205.210.31.227	AS396982 Google LLC	US	1	2026-10-05 18:20
198.235.24.223	AS396982 Google LLC	US	1	2026-10-05 18:28
198.235.24.197	AS396982 Google LLC	US	1	2026-10-05 18:45
198.235.24.215	AS396982 Google LLC	US	1	2026-10-05 17:22
198.235.24.216	AS396982 Google LLC	US	1	2026-10-05 15:05
147.185.132.13	AS396982 Google LLC	US	1	2026-10-05 17:09
205.210.31.213	AS396982 Google LLC	US	1	2026-10-05 17:25
198.235.24.96	AS396982 Google LLC	US	1	2026-10-05 16:23
147.185.132.84	AS396982 Google LLC	US	1	2026-10-05 18:00
147.185.132.42	AS396982 Google LLC	US	1	2026-10-05 16:54
198.235.24.103	AS396982 Google LLC	US	1	2026-10-05 16:14
216.25.89.71	AS396982 Google LLC	US	1	2026-10-05 18:32
147.185.132.61	AS396982 Google LLC	US	1	2026-10-05 15:42
147.185.132.19	AS396982 Google LLC	US	1	2026-10-05 17:32
147.185.132.231	AS396982 Google LLC	US	1	2026-10-05 17:10
147.185.132.48	AS396982 Google LLC	US	1	2026-10-05 16:11
216.25.89.113	AS396982 Google LLC	US	1	2026-10-05 18:03
205.210.31.214	AS396982 Google LLC	US	1	2026-10-05 17:00
147.185.132.91	AS396982 Google LLC	US	1	2026-10-05 18:26

Latest datagrams

2026-10-05 18:47:25147.185.132.39to 53/udpdnsUS

DNS query TXT/CH VERSION.BIND

payload bytes

00000000  34 ef 01 00 00 01 00 00  00 00 00 00 07 56 45 52  |4............VER|
00000010  53 49 4f 4e 04 42 49 4e  44 00 00 10 00 03        |SION.BIND.....|

2026-10-05 18:45:29198.235.24.197to 12546/udpdnsUS

DNS response 15

payload bytes

00000000  16 fe ff 00 00 00 00 00  00 00 00 00 36 01 00 00  |............6...|
00000010  2a 00 00 00 00 00 00 00  2a fe fd 00 00 00 00 7c  |*.......*......||
00000020  77 40 1e 8a c8 22 a0 a0  18 ff 93 08 ca ac 0a 64  |w@...".........d|
00000030  2f c9 22 64 bc 08 a8 16  89 19 30 00 00 00 02 00  |/."d......0.....|
00000040  2f 01 00                                          |/..|

2026-10-05 18:39:56205.210.31.246to 88/udpkerberosUS

j·0· ·x0v·@·0· 0·Xpanse· REALM.com·0·0·krbtgt· REALM.com·20231123004255Z· Jv·0·

payload bytes

00000000  6a 81 87 30 81 84 a1 03  02 01 05 a2 03 02 01 0a  |j..0............|
00000010  a4 78 30 76 a0 07 03 05  00 40 00 00 00 a1 13 30  |.x0v.....@.....0|
00000020  11 a0 03 02 01 01 a1 0a  30 08 1b 06 58 70 61 6e  |........0...Xpan|
00000030  73 65 a2 0b 1b 09 52 45  41 4c 4d 2e 63 6f 6d a3  |se....REALM.com.|
00000040  1e 30 1c a0 03 02 01 02  a1 15 30 13 1b 06 6b 72  |.0........0...kr|
00000050  62 74 67 74 1b 09 52 45  41 4c 4d 2e 63 6f 6d a5  |btgt..REALM.com.|
00000060  11 18 0f 32 30 32 33 31  31 32 33 30 30 34 32 35  |...2023112300425|
00000070  35 5a a7 06 02 04 09 4a  76 81 a8 0e 30 0c 02 01  |5Z.....Jv...0...|
00000080  12 02 01 11 02 01 10 02  01 17                    |..........|

2026-10-05 18:39:08205.210.31.41to 13446/udpdnsUS

DNS response 15

payload bytes

00000000  16 fe ff 00 00 00 00 00  00 00 00 00 36 01 00 00  |............6...|
00000010  2a 00 00 00 00 00 00 00  2a fe fd 00 00 00 00 7c  |*.......*......||
00000020  77 40 1e 8a c8 22 a0 a0  18 ff 93 08 ca ac 0a 64  |w@...".........d|
00000030  2f c9 22 64 bc 08 a8 16  89 19 30 00 00 00 02 00  |/."d......0.....|
00000040  2f 01 00                                          |/..|

2026-10-05 18:32:29216.25.89.71to 5351/udprawUS

payload bytes

00000000  00 00 00 00                                       |....|

2026-10-05 18:28:17198.235.24.223to 13946/udpdnsUS

DNS response 15

payload bytes

00000000  16 fe ff 00 00 00 00 00  00 00 00 00 36 01 00 00  |............6...|
00000010  2a 00 00 00 00 00 00 00  2a fe fd 00 00 00 00 7c  |*.......*......||
00000020  77 40 1e 8a c8 22 a0 a0  18 ff 93 08 ca ac 0a 64  |w@...".........d|
00000030  2f c9 22 64 bc 08 a8 16  89 19 30 00 00 00 02 00  |/."d......0.....|
00000040  2f 01 00                                          |/..|

2026-10-05 18:26:32147.185.132.91to 13446/udpdnsUS

DNS response 15

payload bytes

00000000  16 fe ff 00 00 00 00 00  00 00 00 00 36 01 00 00  |............6...|
00000010  2a 00 00 00 00 00 00 00  2a fe fd 00 00 00 00 7c  |*.......*......||
00000020  77 40 1e 8a c8 22 a0 a0  18 ff 93 08 ca ac 0a 64  |w@...".........d|
00000030  2f c9 22 64 bc 08 a8 16  89 19 30 00 00 00 02 00  |/."d......0.....|
00000040  2f 01 00                                          |/..|

2026-10-05 18:20:56205.210.31.227to 500/udprawUS

U·)·sI·! "·("·l·h·(·ޠ·B|㥏·@bE·

payload bytes

00000000  55 14 d8 29 aa 73 49 c0  00 00 00 00 00 00 00 00  |U..).sI.........|
00000010  21 20 22 08 00 00 00 00  00 00 01 28 22 00 00 6c  |! "........("..l|
00000020  00 00 00 68 01 01 00 0b  03 00 00 0c 01 00 00 0c  |...h............|
00000030  80 0e 01 00 03 00 00 0c  01 00 00 0c 80 0e 00 80  |................|
00000040  03 00 00 08 01 00 00 03  03 00 00 08 01 00 00 02  |................|
00000050  03 00 00 08 02 00 00 02  03 00 00 08 02 00 00 01  |................|
00000060  03 00 00 08 03 00 00 02  03 00 00 08 03 00 00 01  |................|
00000070  03 00 00 08 04 00 00 02  03 00 00 08 04 00 00 05  |................|
00000080  00 00 00 08 04 00 00 0e  28 00 00 88 00 02 00 00  |........(.......|
00000090  f1 de a0 01 e3 a1 14 42  7c e3 a5 8f 8e fb b4 e8  |.......B|.......|
000000a0  40 62 45 f6 0e b5 e7 56  98 14 a4 7c d9 b6 8c c0  |@bE....V...|....|
000000b0  d3 52 a5 a9 60 63 ad 07  66 00 6e 30 b2 40 7d f1  |.R..`c..f.n0.@}.|
000000c0  32 14 78 ab a8 85 33 84  8e 17 72 63 39 4d 39 f8  |2.x...3...rc9M9.|
000000d0  bd 18 63 ec c7 86 e8 d4  a8 df c2 12 cb 4a 12 1d  |..c..........J..|
000000e0  77 fb a1 8b e0 0c e9 89  7f e3 97 93 4d 28 fb e9  |w...........M(..|
000000f0  a3 84 49 78 1b 64 84 75  4f 31 b5 63 fd f7 24 20  |..Ix.d.uO1.c..$ |
... 296 bytes shown in part

2026-10-05 18:03:39216.25.89.113to 5351/udprawUS

·M)w'· ·+·N·

payload bytes

00000000  02 01 00 00 00 00 0e 10  00 00 00 00 00 00 00 00  |................|
00000010  00 00 ff ff 00 00 00 00  dd 4d 29 77 27 9f 09 81  |.........M)w'...|
00000020  2b e8 b6 4e 11 00 00 00  00 00 00 00 00 00 00 00  |+..N............|
00000030  00 00 00 00 00 00 ff ff  00 00 00 00              |............|

2026-10-05 18:00:47147.185.132.84to 1604/udprawUS

·0·

payload bytes

00000000  1e 00 01 30 02 fd a8 e3  00 00 00 00 00 00 00 00  |...0............|
00000010  00 00 00 00 00 00 00 00  00 00 00 00 00 00        |..............|

2026-10-05 17:58:40198.235.24.202to 5351/udprawUS

payload bytes

00000000  00 00                                             |..|

2026-10-05 17:40:46147.185.132.201to 64738/udprawUS

·abcdefgh

payload bytes

00000000  00 00 00 00 61 62 63 64  65 66 67 68              |....abcdefgh|

2026-10-05 17:32:50147.185.132.19to 1967/udprawUS

·4·՝[·P·

payload bytes

00000000  01 0f 00 34 00 00 00 00  00 04 00 10 00 00 00 00  |...4............|
00000010  d5 9d 5b eb 10 93 14 50  00 01 00 1c 00 00 00 00  |..[....P........|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00                                       |....|

2026-10-05 17:25:55205.210.31.213to 1900/udpssdpUS

M-SEARCH * HTTP/1.1 Host:239.255.255.250:1900 ST:upnp:rootdevice Man:"ssdp:discover" MX:3

payload bytes

00000000  4d 2d 53 45 41 52 43 48  20 2a 20 48 54 54 50 2f  |M-SEARCH * HTTP/|
00000010  31 2e 31 0d 0a 48 6f 73  74 3a 32 33 39 2e 32 35  |1.1..Host:239.25|
00000020  35 2e 32 35 35 2e 32 35  30 3a 31 39 30 30 0d 0a  |5.255.250:1900..|
00000030  53 54 3a 75 70 6e 70 3a  72 6f 6f 74 64 65 76 69  |ST:upnp:rootdevi|
00000040  63 65 0d 0a 4d 61 6e 3a  22 73 73 64 70 3a 64 69  |ce..Man:"ssdp:di|
00000050  73 63 6f 76 65 72 22 0d  0a 4d 58 3a 33 0d 0a 0d  |scover"..MX:3...|
00000060  0a                                                |.|

2026-10-05 17:22:17198.235.24.215to 520/udprawUS

payload bytes

00000000  01 01 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000010  00 00 00 00 00 00 00 10                           |........|

2026-10-05 17:22:00205.210.31.110to 1967/udprawUS

·4·՝[·P·

payload bytes

00000000  01 0f 00 34 00 00 00 00  00 04 00 10 00 00 00 00  |...4............|
00000010  d5 9d 5b eb 10 93 14 50  00 01 00 1c 00 00 00 00  |..[....P........|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00                                       |....|

2026-10-05 17:10:15147.185.132.231to 3702/udprawUS

<env:Envelope xmlns:env="http://www.w3.org/2003/05/soap-envelope" xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/08/addressing" xmlns:wsd="http://schemas.xmlsoap.org/ws/2005/04/discovery"><env:Header><

payload bytes

00000000  3c 65 6e 76 3a 45 6e 76  65 6c 6f 70 65 20 78 6d  |<env:Envelope xm|
00000010  6c 6e 73 3a 65 6e 76 3d  22 68 74 74 70 3a 2f 2f  |lns:env="http://|
00000020  77 77 77 2e 77 33 2e 6f  72 67 2f 32 30 30 33 2f  |www.w3.org/2003/|
00000030  30 35 2f 73 6f 61 70 2d  65 6e 76 65 6c 6f 70 65  |05/soap-envelope|
00000040  22 20 78 6d 6c 6e 73 3a  77 73 61 3d 22 68 74 74  |" xmlns:wsa="htt|
00000050  70 3a 2f 2f 73 63 68 65  6d 61 73 2e 78 6d 6c 73  |p://schemas.xmls|
00000060  6f 61 70 2e 6f 72 67 2f  77 73 2f 32 30 30 34 2f  |oap.org/ws/2004/|
00000070  30 38 2f 61 64 64 72 65  73 73 69 6e 67 22 20 78  |08/addressing" x|
00000080  6d 6c 6e 73 3a 77 73 64  3d 22 68 74 74 70 3a 2f  |mlns:wsd="http:/|
00000090  2f 73 63 68 65 6d 61 73  2e 78 6d 6c 73 6f 61 70  |/schemas.xmlsoap|
000000a0  2e 6f 72 67 2f 77 73 2f  32 30 30 35 2f 30 34 2f  |.org/ws/2005/04/|
000000b0  64 69 73 63 6f 76 65 72  79 22 3e 3c 65 6e 76 3a  |discovery"><env:|
000000c0  48 65 61 64 65 72 3e 3c  77 73 64 3a 41 70 70 53  |Header><wsd:AppS|
000000d0  65 71 75 65 6e 63 65 20  49 6e 73 74 61 6e 63 65  |equence Instance|
000000e0  49 64 3d 22 31 32 38 35  36 32 34 39 35 38 37 33  |Id="128562495873|
000000f0  37 22 20 4d 65 73 73 61  67 65 4e 75 6d 62 65 72  |7" MessageNumber|
... 512 bytes shown in part

2026-10-05 17:09:06147.185.132.13to 1967/udprawUS

·4·՝[·P·

payload bytes

00000000  01 0f 00 34 00 00 00 00  00 04 00 10 00 00 00 00  |...4............|
00000010  d5 9d 5b eb 10 93 14 50  00 01 00 1c 00 00 00 00  |..[....P........|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00                                       |....|

2026-10-05 17:00:09205.210.31.214to 1645/udprawUS

payload bytes

00000000  01 00 00 14 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000010  00 00 00 00                                       |....|

2026-10-05 16:54:33147.185.132.42to 10001/udprawUS

payload bytes

00000000  02 08 00 00                                       |....|

2026-10-05 16:23:47198.235.24.96to 17185/udprawUS

·UUUU·U·0·

payload bytes

00000000  00 00 00 00 00 00 00 00  00 00 00 02 55 55 55 55  |............UUUU|
00000010  00 00 00 01 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00  ff ff 55 13 00 00 00 30  |..........U....0|
00000030  00 00 00 01 00 00 00 02  00 00 00 00 00 00 00 00  |................|

2026-10-05 16:14:49198.235.24.103to 6881/udpbittorrentUS

d1:ad2:id20:abcdefghij0123456789e1:q4:ping1:t2:aa1:y1:qe

payload bytes

00000000  64 31 3a 61 64 32 3a 69  64 32 30 3a 61 62 63 64  |d1:ad2:id20:abcd|
00000010  65 66 67 68 69 6a 30 31  32 33 34 35 36 37 38 39  |efghij0123456789|
00000020  65 31 3a 71 34 3a 70 69  6e 67 31 3a 74 32 3a 61  |e1:q4:ping1:t2:a|
00000030  61 31 3a 79 31 3a 71 65                           |a1:y1:qe|

2026-10-05 16:11:02147.185.132.48to 17185/udprawUS

·UUUU·U·0·

payload bytes

00000000  00 00 00 00 00 00 00 00  00 00 00 02 55 55 55 55  |............UUUU|
00000010  00 00 00 01 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00  ff ff 55 13 00 00 00 30  |..........U....0|
00000030  00 00 00 01 00 00 00 02  00 00 00 00 00 00 00 00  |................|

2026-10-05 15:42:16147.185.132.61to 161/udpsnmpUS

0)·public·VZ·]·0·0·+·

payload bytes

00000000  30 29 02 01 00 04 06 70  75 62 6c 69 63 a0 1c 02  |0).....public...|
00000010  04 56 5a dc 5d 02 01 00  02 01 00 30 0e 30 0c 06  |.VZ.]......0.0..|
00000020  08 2b 06 01 02 01 01 01  00 05 00                 |.+.........|

2026-10-05 15:35:04216.25.89.116to 161/udpsnmpUS

0)·public·VZ·]·0·0·+·

payload bytes

00000000  30 29 02 01 00 04 06 70  75 62 6c 69 63 a0 1c 02  |0).....public...|
00000010  04 56 5a dc 5d 02 01 00  02 01 00 30 0e 30 0c 06  |.VZ.]......0.0..|
00000020  08 2b 06 01 02 01 01 01  00 05 00                 |.+.........|