UDP traffic

Datagrams matching asn:396982 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Datagrams

Source addresses

Networks

Countries

Destination ports

Protocols

raw from 26 sources27
dns from 16 sources16
snmp from 5 sources5
ssdp from 2 sources2
sip from 2 sources2
kerberos from 2 sources2
bittorrent from 1 source1

Destination ports

161/udp from 5 sources5
17185/udp from 4 sources4
5351/udp from 4 sources4
44818/udp from 3 sources3
1967/udp from 3 sources3
1900/udp from 2 sources2
13446/udp from 2 sources2
500/udp from 2 sources2
5060/udp from 2 sources2
1434/udp from 2 sources2
88/udp from 2 sources2
53/udp from 1 source1

DNS questions

4 queries and 12 unsolicited answers. An answer nobody asked for means a resolver was given a forged source address.

DNS record types

Networks

AS396982 Google LLC from 52 sources55

Countries

US United States55

Source addresses (unverified)

Address	Network	Cc	Datagrams	Last seen (UTC)
198.235.24.97	AS396982 Google LLC	US	3	2026-10-05 19:54
198.235.24.80	AS396982 Google LLC	US	2	2026-10-05 19:58
198.235.24.221	AS396982 Google LLC	US	1	2026-10-05 19:10
205.210.31.227	AS396982 Google LLC	US	1	2026-10-05 18:20
147.185.132.39	AS396982 Google LLC	US	1	2026-10-05 18:47
198.235.24.76	AS396982 Google LLC	US	1	2026-10-05 15:24
198.235.24.223	AS396982 Google LLC	US	1	2026-10-05 18:28
198.235.24.195	AS396982 Google LLC	US	1	2026-10-05 20:19
205.210.31.58	AS396982 Google LLC	US	1	2026-10-05 19:00
198.235.24.197	AS396982 Google LLC	US	1	2026-10-05 18:45
198.235.24.215	AS396982 Google LLC	US	1	2026-10-05 17:22
147.185.132.112	AS396982 Google LLC	US	1	2026-10-05 20:13
198.235.24.216	AS396982 Google LLC	US	1	2026-10-05 15:05
205.210.31.72	AS396982 Google LLC	US	1	2026-10-05 20:04
147.185.132.13	AS396982 Google LLC	US	1	2026-10-05 17:09
147.185.132.87	AS396982 Google LLC	US	1	2026-10-05 19:33
205.210.31.250	AS396982 Google LLC	US	1	2026-10-05 19:28
198.235.24.96	AS396982 Google LLC	US	1	2026-10-05 16:23
147.185.132.84	AS396982 Google LLC	US	1	2026-10-05 18:00
147.185.132.42	AS396982 Google LLC	US	1	2026-10-05 16:54

Latest datagrams

2026-10-05 20:26:18205.210.31.167to 5353/udpdnsUS

DNS query PTR _services._dns-sd._udp.local

payload bytes

00000000  00 00 00 00 00 01 00 00  00 00 00 00 09 5f 73 65  |............._se|
00000010  72 76 69 63 65 73 07 5f  64 6e 73 2d 73 64 04 5f  |rvices._dns-sd._|
00000020  75 64 70 05 6c 6f 63 61  6c 00 00 0c 00 01        |udp.local.....|

2026-10-05 20:25:13205.210.31.197to 44818/udprawUS

c·

payload bytes

00000000  63 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |c...............|
00000010  00 00 00 00 00 00 00 00                           |........|

2026-10-05 20:19:48198.235.24.195to 12646/udpdnsUS

DNS response 15

payload bytes

00000000  16 fe ff 00 00 00 00 00  00 00 00 00 36 01 00 00  |............6...|
00000010  2a 00 00 00 00 00 00 00  2a fe fd 00 00 00 00 7c  |*.......*......||
00000020  77 40 1e 8a c8 22 a0 a0  18 ff 93 08 ca ac 0a 64  |w@...".........d|
00000030  2f c9 22 64 bc 08 a8 16  89 19 30 00 00 00 02 00  |/."d......0.....|
00000040  2f 01 00                                          |/..|

2026-10-05 20:18:00205.210.31.42to 1701/udprawUS

·:· ·Xpanse· ·

payload bytes

00000000  c8 02 00 3a 00 00 00 00  00 00 00 00 80 08 00 00  |...:............|
00000010  00 00 00 01 00 08 00 00  00 02 01 00 80 0a 00 00  |................|
00000020  00 03 00 00 00 03 80 0c  00 00 00 07 58 70 61 6e  |............Xpan|
00000030  73 65 80 08 00 00 00 09  00 01                    |se........|

2026-10-05 20:13:32147.185.132.112to 161/udpsnmpUS

0&·public·c·0·0 ·+·

payload bytes

00000000  30 26 02 01 01 04 06 70  75 62 6c 69 63 a1 19 02  |0&.....public...|
00000010  04 dc 63 c2 9a 02 01 00  02 01 00 30 0b 30 09 06  |..c........0.0..|
00000020  05 2b 06 01 02 01 05 00                           |.+......|

2026-10-05 20:12:14198.235.24.220to 47808/udprawUS

· ·?·K

payload bytes

00000000  81 0a 00 11 01 04 00 05  01 0c 0c 02 3f ff ff 19  |............?...|
00000010  4b                                                |K|

2026-10-05 20:07:07198.235.24.169to 5351/udprawUS

payload bytes

00000000  00 00 00 00                                       |....|

2026-10-05 20:04:51205.210.31.72to 1434/udprawUS

payload bytes

00000000  02                                                |.|

2026-10-05 19:58:29198.235.24.80to 17185/udpdnsUS

DNS response 15

payload bytes

00000000  1a 09 fa ba 00 00 00 00  00 00 00 02 55 55 55 55  |............UUUU|
00000010  00 00 00 01 00 00 00 01  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00  ff ff 55 12 00 00 00 3c  |..........U....<|
00000030  00 00 00 01 00 00 00 02  00 00 00 00 00 00 00 00  |................|

2026-10-05 19:54:56198.235.24.97to 12246/udpdnsUS

DNS response 15

payload bytes

00000000  16 fe ff 00 00 00 00 00  00 00 00 00 36 01 00 00  |............6...|
00000010  2a 00 00 00 00 00 00 00  2a fe fd 00 00 00 00 7c  |*.......*......||
00000020  77 40 1e 8a c8 22 a0 a0  18 ff 93 08 ca ac 0a 64  |w@...".........d|
00000030  2f c9 22 64 bc 08 a8 16  89 19 30 00 00 00 02 00  |/."d......0.....|
00000040  2f 01 00                                          |/..|

2026-10-05 19:49:47198.235.24.140to 44818/udprawUS

c·

payload bytes

00000000  63 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |c...............|
00000010  00 00 00 00 00 00 00 00                           |........|

2026-10-05 19:49:45205.210.31.212to 4500/udprawUS

·Mw·hQ·! "·("·l·h·(·]5-·@]·,Q· ;·e&F·e

payload bytes

00000000  00 00 00 00 e0 13 4d 77  f3 f7 68 51 00 00 00 00  |......Mw..hQ....|
00000010  00 00 00 00 21 20 22 08  00 00 00 00 00 00 01 28  |....! "........(|
00000020  22 00 00 6c 00 00 00 68  01 01 00 0b 03 00 00 0c  |"..l...h........|
00000030  01 00 00 0c 80 0e 01 00  03 00 00 0c 01 00 00 0c  |................|
00000040  80 0e 00 80 03 00 00 08  01 00 00 03 03 00 00 08  |................|
00000050  01 00 00 02 03 00 00 08  02 00 00 02 03 00 00 08  |................|
00000060  02 00 00 01 03 00 00 08  03 00 00 02 03 00 00 08  |................|
00000070  03 00 00 01 03 00 00 08  04 00 00 02 03 00 00 08  |................|
00000080  04 00 00 05 00 00 00 08  04 00 00 0e 28 00 00 88  |............(...|
00000090  00 02 00 00 5d 35 2d ad  97 40 5d c6 2c 51 ef 0a  |....]5-..@].,Q..|
000000a0  3b a5 00 9c 65 26 46 9a  b2 65 4a 65 22 e2 b9 31  |;...e&F..eJe"..1|
000000b0  9a 4b dc 13 f0 eb 73 7b  85 e2 ea ae a6 fc 1b 1d  |.K....s{........|
000000c0  06 b3 1b 99 0e 36 a2 87  39 d4 9e 61 2d ab 91 c7  |.....6..9..a-...|
000000d0  9b 60 cb 6b 9f b6 11 f3  3b c2 e6 e6 87 af 6c 7c  |.`.k....;.....l||
000000e0  41 54 2b eb 60 37 24 2a  2d a9 63 0f 32 04 6a 0b  |AT+.`7$*-.c.2.j.|
000000f0  4f f4 d4 ba a8 b1 fb 63  a0 45 bc 18 98 ac af 2b  |O......c.E.....+|
... 300 bytes shown in part

2026-10-05 19:35:08198.235.24.80to 1434/udprawUS

payload bytes

00000000  02                                                |.|

2026-10-05 19:33:00147.185.132.87to 88/udpkerberosUS

j·0· ·x0v·@·0· 0·Xpanse· REALM.com·0·0·krbtgt· REALM.com·20231123004255Z· Jv·0·

payload bytes

00000000  6a 81 87 30 81 84 a1 03  02 01 05 a2 03 02 01 0a  |j..0............|
00000010  a4 78 30 76 a0 07 03 05  00 40 00 00 00 a1 13 30  |.x0v.....@.....0|
00000020  11 a0 03 02 01 01 a1 0a  30 08 1b 06 58 70 61 6e  |........0...Xpan|
00000030  73 65 a2 0b 1b 09 52 45  41 4c 4d 2e 63 6f 6d a3  |se....REALM.com.|
00000040  1e 30 1c a0 03 02 01 02  a1 15 30 13 1b 06 6b 72  |.0........0...kr|
00000050  62 74 67 74 1b 09 52 45  41 4c 4d 2e 63 6f 6d a5  |btgt..REALM.com.|
00000060  11 18 0f 32 30 32 33 31  31 32 33 30 30 34 32 35  |...2023112300425|
00000070  35 5a a7 06 02 04 09 4a  76 81 a8 0e 30 0c 02 01  |5Z.....Jv...0...|
00000080  12 02 01 11 02 01 10 02  01 17                    |..........|

2026-10-05 19:31:09205.210.31.164to 12146/udpdnsUS

DNS response 15

payload bytes

00000000  16 fe ff 00 00 00 00 00  00 00 00 00 36 01 00 00  |............6...|
00000010  2a 00 00 00 00 00 00 00  2a fe fd 00 00 00 00 7c  |*.......*......||
00000020  77 40 1e 8a c8 22 a0 a0  18 ff 93 08 ca ac 0a 64  |w@...".........d|
00000030  2f c9 22 64 bc 08 a8 16  89 19 30 00 00 00 02 00  |/."d......0.....|
00000040  2f 01 00                                          |/..|

2026-10-05 19:28:52205.210.31.250to 13546/udpdnsUS

DNS response 15

payload bytes

00000000  16 fe ff 00 00 00 00 00  00 00 00 00 36 01 00 00  |............6...|
00000010  2a 00 00 00 00 00 00 00  2a fe fd 00 00 00 00 7c  |*.......*......||
00000020  77 40 1e 8a c8 22 a0 a0  18 ff 93 08 ca ac 0a 64  |w@...".........d|
00000030  2f c9 22 64 bc 08 a8 16  89 19 30 00 00 00 02 00  |/."d......0.....|
00000040  2f 01 00                                          |/..|

2026-10-05 19:28:10147.185.132.141to 13146/udpdnsUS

DNS response 15

payload bytes

00000000  16 fe ff 00 00 00 00 00  00 00 00 00 36 01 00 00  |............6...|
00000010  2a 00 00 00 00 00 00 00  2a fe fd 00 00 00 00 7c  |*.......*......||
00000020  77 40 1e 8a c8 22 a0 a0  18 ff 93 08 ca ac 0a 64  |w@...".........d|
00000030  2f c9 22 64 bc 08 a8 16  89 19 30 00 00 00 02 00  |/."d......0.....|
00000040  2f 01 00                                          |/..|

2026-10-05 19:28:08198.235.24.224to 1900/udpssdpUS

M-SEARCH * HTTP/1.1 Host:239.255.255.250:1900 ST:upnp:rootdevice Man:"ssdp:discover" MX:3

payload bytes

00000000  4d 2d 53 45 41 52 43 48  20 2a 20 48 54 54 50 2f  |M-SEARCH * HTTP/|
00000010  31 2e 31 0d 0a 48 6f 73  74 3a 32 33 39 2e 32 35  |1.1..Host:239.25|
00000020  35 2e 32 35 35 2e 32 35  30 3a 31 39 30 30 0d 0a  |5.255.250:1900..|
00000030  53 54 3a 75 70 6e 70 3a  72 6f 6f 74 64 65 76 69  |ST:upnp:rootdevi|
00000040  63 65 0d 0a 4d 61 6e 3a  22 73 73 64 70 3a 64 69  |ce..Man:"ssdp:di|
00000050  73 63 6f 76 65 72 22 0d  0a 4d 58 3a 33 0d 0a 0d  |scover"..MX:3...|
00000060  0a                                                |.|

2026-10-05 19:25:50205.210.31.240to 13846/udpdnsUS

DNS response 15

payload bytes

00000000  16 fe ff 00 00 00 00 00  00 00 00 00 36 01 00 00  |............6...|
00000010  2a 00 00 00 00 00 00 00  2a fe fd 00 00 00 00 7c  |*.......*......||
00000020  77 40 1e 8a c8 22 a0 a0  18 ff 93 08 ca ac 0a 64  |w@...".........d|
00000030  2f c9 22 64 bc 08 a8 16  89 19 30 00 00 00 02 00  |/."d......0.....|
00000040  2f 01 00                                          |/..|

2026-10-05 19:25:09198.235.24.47to 5632/udprawUS

payload bytes

00000000  53 54                                             |ST|

2026-10-05 19:24:03198.235.24.164to 5060/udpsipUS
OPTIONS sip:duATfhfC@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 10.132.0.164:49711;branch=rymRpw.8369188151;rport;alias From: sip:yPJTAleX@10.132.0.164:49711;tag=10755452 To: sip:vDYFYdAL@<HONEYPOT> Call
payload bytes

2026-10-05 19:22:18216.25.89.119to 500/udprawUS

U·)·sI·! "·("·l·h·(·ޠ·B|㥏·@bE·

payload bytes

00000000  55 14 d8 29 aa 73 49 c0  00 00 00 00 00 00 00 00  |U..).sI.........|
00000010  21 20 22 08 00 00 00 00  00 00 01 28 22 00 00 6c  |! "........("..l|
00000020  00 00 00 68 01 01 00 0b  03 00 00 0c 01 00 00 0c  |...h............|
00000030  80 0e 01 00 03 00 00 0c  01 00 00 0c 80 0e 00 80  |................|
00000040  03 00 00 08 01 00 00 03  03 00 00 08 01 00 00 02  |................|
00000050  03 00 00 08 02 00 00 02  03 00 00 08 02 00 00 01  |................|
00000060  03 00 00 08 03 00 00 02  03 00 00 08 03 00 00 01  |................|
00000070  03 00 00 08 04 00 00 02  03 00 00 08 04 00 00 05  |................|
00000080  00 00 00 08 04 00 00 0e  28 00 00 88 00 02 00 00  |........(.......|
00000090  f1 de a0 01 e3 a1 14 42  7c e3 a5 8f 8e fb b4 e8  |.......B|.......|
000000a0  40 62 45 f6 0e b5 e7 56  98 14 a4 7c d9 b6 8c c0  |@bE....V...|....|
000000b0  d3 52 a5 a9 60 63 ad 07  66 00 6e 30 b2 40 7d f1  |.R..`c..f.n0.@}.|
000000c0  32 14 78 ab a8 85 33 84  8e 17 72 63 39 4d 39 f8  |2.x...3...rc9M9.|
000000d0  bd 18 63 ec c7 86 e8 d4  a8 df c2 12 cb 4a 12 1d  |..c..........J..|
000000e0  77 fb a1 8b e0 0c e9 89  7f e3 97 93 4d 28 fb e9  |w...........M(..|
000000f0  a3 84 49 78 1b 64 84 75  4f 31 b5 63 fd f7 24 20  |..Ix.d.uO1.c..$ |
... 296 bytes shown in part

2026-10-05 19:11:58198.235.24.97to 44818/udprawUS

c·

payload bytes

00000000  63 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |c...............|
00000010  00 00 00 00 00 00 00 00                           |........|

2026-10-05 19:11:38198.235.24.109to 123/udpdnsUS

DNS query TYPE0/CLASS0 .

payload bytes

00000000  e3 00 04 fa 00 01 00 00  00 01 00 00 00 00 00 00  |................|
00000010  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00  c5 4f 23 4b 71 b1 52 f3  |.........O#Kq.R.|

2026-10-05 19:11:15198.235.24.97to 1194/udprawUS

8·8·&·

payload bytes

00000000  38 12 12 12 12 12 12 12  12 00 00 00 00 00 38 b1  |8.............8.|
00000010  26 de                                             |&.|