UDP traffic

Datagrams matching asn:398324 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Datagrams

Source addresses

Networks

Countries

Destination ports

Protocols

raw from 19 sources24
dns from 6 sources10
rtsp from 1 source6
stun from 2 sources2
sip from 1 source2
coap from 2 sources2
soap from 1 source1
tftp from 1 source1
bittorrent from 1 source1

Destination ports

2361/udp from 2 sources2
500/udp from 2 sources2
5683/udp from 2 sources2
97/udp from 1 source1
46162/udp from 1 source1
1194/udp from 1 source1
2362/udp from 1 source1
3478/udp from 1 source1
4070/udp from 1 source1
4826/udp from 1 source1
5632/udp from 1 source1
520/udp from 1 source1

DNS questions

3 queries and 7 unsolicited answers. An answer nobody asked for means a resolver was given a forged source address.

DNS record types

A2
SRV1

Networks

AS398324 Censys, Inc. from 25 sources49

Countries

US United States49

Source addresses (unverified)

Address	Network	Cc	Datagrams	Last seen (UTC)
66.132.172.252	AS398324 Censys, Inc.	US	7	2026-10-05 17:06
66.132.172.254	AS398324 Censys, Inc.	US	6	2026-10-05 15:52
66.132.172.253	AS398324 Censys, Inc.	US	3	2026-10-05 17:13
66.132.172.243	AS398324 Censys, Inc.	US	3	2026-10-05 14:02
66.132.172.248	AS398324 Censys, Inc.	US	3	2026-10-05 16:48
66.132.172.249	AS398324 Censys, Inc.	US	3	2026-10-05 17:10
66.132.186.218	AS398324 Censys, Inc.	US	2	2026-10-05 16:15
66.132.172.250	AS398324 Censys, Inc.	US	2	2026-10-05 16:30
66.132.172.241	AS398324 Censys, Inc.	US	2	2026-10-05 16:39
66.132.186.239	AS398324 Censys, Inc.	US	2	2026-10-05 16:57
66.132.172.242	AS398324 Censys, Inc.	US	2	2026-10-05 13:15
66.132.224.27	AS398324 Censys, Inc.	US	1	2026-10-05 16:17
66.132.224.19	AS398324 Censys, Inc.	US	1	2026-10-05 17:08
66.132.186.250	AS398324 Censys, Inc.	US	1	2026-10-05 15:19
66.132.172.228	AS398324 Censys, Inc.	US	1	2026-10-05 15:33
66.132.172.232	AS398324 Censys, Inc.	US	1	2026-10-05 15:32
66.132.172.229	AS398324 Censys, Inc.	US	1	2026-10-05 12:42
66.132.224.29	AS398324 Censys, Inc.	US	1	2026-10-05 13:55
66.132.172.247	AS398324 Censys, Inc.	US	1	2026-10-05 11:48
66.132.172.245	AS398324 Censys, Inc.	US	1	2026-10-05 17:02

Latest datagrams

2026-10-05 17:13:5466.132.172.253to 4826/udprawUS

xb·_?·O·! "·"· · ·

payload bytes

00000000  78 62 9a 0f 5f 3f 16 4f  00 00 00 00 00 00 00 00  |xb.._?.O........|
00000010  21 20 22 08 00 00 00 00  00 00 01 88 22 00 00 ec  |! "........."...|
00000020  00 00 00 e8 01 01 00 1c  03 00 00 08 01 00 00 01  |................|
00000030  03 00 00 08 01 00 00 02  03 00 00 08 01 00 00 03  |................|
00000040  03 00 00 08 01 00 00 04  03 00 00 08 01 00 00 06  |................|
00000050  03 00 00 08 01 00 00 07  03 00 00 08 01 00 00 08  |................|
00000060  03 00 00 08 01 00 00 09  03 00 00 08 01 00 00 0b  |................|
00000070  03 00 00 08 01 00 00 0c  03 00 00 08 01 00 00 0d  |................|
00000080  03 00 00 08 02 00 00 01  03 00 00 08 02 00 00 02  |................|
00000090  03 00 00 08 03 00 00 00  03 00 00 08 03 00 00 01  |................|
000000a0  03 00 00 08 03 00 00 02  03 00 00 08 03 00 00 03  |................|
000000b0  03 00 00 08 03 00 00 04  03 00 00 08 03 00 00 05  |................|
000000c0  03 00 00 08 04 00 00 00  03 00 00 08 04 00 00 01  |................|
000000d0  03 00 00 08 04 00 00 02  03 00 00 08 04 00 00 05  |................|
000000e0  03 00 00 08 04 00 00 0e  03 00 00 08 04 00 00 0f  |................|
000000f0  03 00 00 08 04 00 00 10  03 00 00 08 04 00 00 11  |................|
... 392 bytes shown in part

2026-10-05 17:10:1566.132.172.249to 21358/udprawUS

j·n0·k· ·^0\·P·CE·0·0·krbtgt·CE·19700101000000Z·0·

payload bytes

00000000  6a 81 6e 30 81 6b a1 03  02 01 05 a2 03 02 01 0a  |j.n0.k..........|
00000010  a4 81 5e 30 5c a0 07 03  05 00 50 00 80 00 a2 04  |..^0\.....P.....|
00000020  1b 02 43 45 a3 17 30 15  a0 03 02 01 00 a1 0e 30  |..CE..0........0|
00000030  0c 1b 06 6b 72 62 74 67  74 1b 02 43 45 a5 11 18  |...krbtgt..CE...|
00000040  0f 31 39 37 30 30 31 30  31 30 30 30 30 30 30 5a  |.19700101000000Z|
00000050  a7 06 02 04 03 fc f0 03  a8 17 30 15 02 01 12 02  |..........0.....|
00000060  01 11 02 01 10 02 01 17  02 01 01 02 01 03 02 01  |................|
00000070  02 0a                                             |..|

2026-10-05 17:08:1866.132.224.19to 2361/udprawUS

DIGI·

payload bytes

00000000  44 49 47 49 00 01 00 06  ff ff ff ff ff ff        |DIGI..........|

2026-10-05 17:06:2466.132.172.252to 41346/udprtspUS

DESCRIBE / RTSP/1.0

payload bytes

00000000  44 45 53 43 52 49 42 45  20 2f 20 52 54 53 50 2f  |DESCRIBE / RTSP/|
00000010  31 2e 30 0d 0a 0d 0a                              |1.0....|

2026-10-05 17:04:2066.132.172.249to 6301/udpdnsUS

DNS query A ip.parrotdns.com

payload bytes

00000000  70 9a 01 00 00 01 00 00  00 00 00 01 02 69 70 09  |p............ip.|
00000010  70 61 72 72 6f 74 64 6e  73 03 63 6f 6d 00 00 01  |parrotdns.com...|
00000020  00 01 00 00 29 02 00 00  00 80 00 00 00           |....)........|

2026-10-05 17:02:0466.132.172.245to 47993/udprawUS

payload bytes

00000000  00 14 00 01 03                                    |.....|

2026-10-05 16:57:0566.132.186.239to 500/udprawUS

Me·!·R·P·4·(·$·$·$·$·

payload bytes

00000000  4d 65 82 21 07 fc fd 52  00 00 00 00 00 00 00 00  |Me.!...R........|
00000010  01 10 02 00 00 00 00 00  00 00 01 50 00 00 01 34  |...........P...4|
00000020  00 00 00 01 00 00 00 01  00 00 01 28 01 01 00 08  |...........(....|
00000030  03 00 00 24 01 01 00 00  80 01 00 05 80 02 00 02  |...$............|
00000040  80 03 00 01 80 04 00 01  80 0b 00 01 00 0c 00 04  |................|
00000050  00 00 01 00 03 00 00 24  02 01 00 00 80 01 00 05  |.......$........|
00000060  80 02 00 02 80 03 00 01  80 04 00 02 80 0b 00 01  |................|
00000070  00 0c 00 04 00 00 01 00  03 00 00 24 03 01 00 00  |...........$....|
00000080  80 01 00 05 80 02 00 01  80 03 00 01 80 04 00 01  |................|
00000090  80 0b 00 01 00 0c 00 04  00 00 01 00 03 00 00 24  |...............$|
000000a0  04 01 00 00 80 01 00 05  80 02 00 01 80 03 00 01  |................|
000000b0  80 04 00 02 80 0b 00 01  00 0c 00 04 00 00 01 00  |................|
000000c0  03 00 00 24 05 01 00 00  80 01 00 01 80 02 00 01  |...$............|
000000d0  80 03 00 01 80 04 00 01  80 0b 00 01 00 0c 00 04  |................|
000000e0  00 00 01 00 03 00 00 24  06 01 00 00 80 01 00 01  |.......$........|
000000f0  80 02 00 01 80 03 00 01  80 04 00 02 80 0b 00 01  |................|
... 336 bytes shown in part

2026-10-05 16:48:0766.132.172.248to 61538/udprawUS

·!L_· ·̗·

payload bytes

00000000  ff ff ff ff 21 4c 5f a0  0a 00 00 00 08 9a cc 97  |....!L_.........|
00000010  ee a3 cd 02 10 00 02 00  00 00 08 00              |............|

2026-10-05 16:44:2666.132.172.252to 34474/udprtspUS

DESCRIBE / RTSP/1.0

payload bytes

00000000  44 45 53 43 52 49 42 45  20 2f 20 52 54 53 50 2f  |DESCRIBE / RTSP/|
00000010  31 2e 30 0d 0a 0d 0a                              |1.0....|

2026-10-05 16:39:5766.132.172.241to 18393/udprawUS

DIGI·

payload bytes

00000000  44 49 47 49 00 01 00 06  ff ff ff ff ff ff        |DIGI..........|

2026-10-05 16:38:3466.132.186.239to 5683/udpcoapUS

F·'·censys·.well-known·core

payload bytes

00000000  46 01 27 10 63 65 6e 73  79 73 bb 2e 77 65 6c 6c  |F.'.censys..well|
00000010  2d 6b 6e 6f 77 6e 04 63  6f 72 65                 |-known.core|

2026-10-05 16:34:3566.132.172.252to 19820/udprtspUS

DESCRIBE / RTSP/1.0

payload bytes

00000000  44 45 53 43 52 49 42 45  20 2f 20 52 54 53 50 2f  |DESCRIBE / RTSP/|
00000010  31 2e 30 0d 0a 0d 0a                              |1.0....|

2026-10-05 16:30:5566.132.172.250to 25775/udpbittorrentUS

d1:ad2:id20:censysinspectscannere1:q4:ping1:t2:aa1:y1:qe

payload bytes

00000000  64 31 3a 61 64 32 3a 69  64 32 30 3a 63 65 6e 73  |d1:ad2:id20:cens|
00000010  79 73 69 6e 73 70 65 63  74 73 63 61 6e 6e 65 72  |ysinspectscanner|
00000020  65 31 3a 71 34 3a 70 69  6e 67 31 3a 74 32 3a 61  |e1:q4:ping1:t2:a|
00000030  61 31 3a 79 31 3a 71 65                           |a1:y1:qe|

2026-10-05 16:17:1866.132.224.27to 1194/udprawUS

8Me·!·R·

payload bytes

00000000  38 4d 65 82 21 07 fc fd  52 00 00 00 00 00        |8Me.!...R.....|

2026-10-05 16:15:3066.132.186.218to 44818/udprawUS

c·censys·

payload bytes

00000000  63 00 00 00 00 00 00 00  00 00 00 00 00 00 63 65  |c.............ce|
00000010  6e 73 79 73 00 00 00 00                           |nsys....|

2026-10-05 16:08:5666.132.224.26to 2361/udprawUS

DIGI·

payload bytes

00000000  44 49 47 49 00 01 00 06  ff ff ff ff ff ff        |DIGI..........|

2026-10-05 15:55:1766.132.172.238to 4070/udprawUS

discover;013;

payload bytes

00000000  64 69 73 63 6f 76 65 72  3b 30 31 33 3b           |discover;013;|

2026-10-05 15:52:0466.132.172.254to 45443/udpdnsUS

DNS response 15

payload bytes

00000000  16 fe fd 00 00 00 00 00  00 00 00 00 7e 01 00 00  |............~...|
00000010  72 00 00 00 00 00 00 00  72 fe fd 5f 06 07 42 6e  |r.......r.._..Bn|
00000020  53 de 72 d8 ef 33 7e 5f  ee 59 10 19 49 8b 2d 4e  |S.r..3~_.Y..I.-N|
00000030  7f de 3e 09 f4 a8 3f 03  f9 57 06 00 00 00 0c c0  |..>...?..W......|
00000040  ac c0 ae c0 2b c0 2f c0  0a c0 14 01 00 00 3c 00  |....+./.......<.|
00000050  0d 00 10 00 0e 04 03 05  03 06 03 04 01 05 01 06  |................|
00000060  01 08 07 00 0a 00 08 00  06 00 1d 00 17 00 18 00  |................|
00000070  0b 00 02 01 00 00 17 00  00 00 00 00 0e 00 0c 00  |................|
00000080  00 09 31 32 37 2e 30 2e  30 2e 31                 |..127.0.0.1|

2026-10-05 15:33:5466.132.172.228to 500/udprawUS

Me·!·R·P·4·(·$·$·$·$·

payload bytes

00000000  4d 65 82 21 07 fc fd 52  00 00 00 00 00 00 00 00  |Me.!...R........|
00000010  01 10 02 00 00 00 00 00  00 00 01 50 00 00 01 34  |...........P...4|
00000020  00 00 00 01 00 00 00 01  00 00 01 28 01 01 00 08  |...........(....|
00000030  03 00 00 24 01 01 00 00  80 01 00 05 80 02 00 02  |...$............|
00000040  80 03 00 01 80 04 00 01  80 0b 00 01 00 0c 00 04  |................|
00000050  00 00 01 00 03 00 00 24  02 01 00 00 80 01 00 05  |.......$........|
00000060  80 02 00 02 80 03 00 01  80 04 00 02 80 0b 00 01  |................|
00000070  00 0c 00 04 00 00 01 00  03 00 00 24 03 01 00 00  |...........$....|
00000080  80 01 00 05 80 02 00 01  80 03 00 01 80 04 00 01  |................|
00000090  80 0b 00 01 00 0c 00 04  00 00 01 00 03 00 00 24  |...............$|
000000a0  04 01 00 00 80 01 00 05  80 02 00 01 80 03 00 01  |................|
000000b0  80 04 00 02 80 0b 00 01  00 0c 00 04 00 00 01 00  |................|
000000c0  03 00 00 24 05 01 00 00  80 01 00 01 80 02 00 01  |...$............|
000000d0  80 03 00 01 80 04 00 01  80 0b 00 01 00 0c 00 04  |................|
000000e0  00 00 01 00 03 00 00 24  06 01 00 00 80 01 00 01  |.......$........|
000000f0  80 02 00 01 80 03 00 01  80 04 00 02 80 0b 00 01  |................|
... 336 bytes shown in part

2026-10-05 15:32:1766.132.172.232to 47809/udprawUS

· ·?·K

payload bytes

00000000  81 0a 00 11 01 04 00 05  01 0c 0c 02 3f ff ff 19  |............?...|
00000010  4b                                                |K|

2026-10-05 15:20:1266.132.172.254to 39526/udpdnsUS

DNS response 15

payload bytes

00000000  16 fe fd 00 00 00 00 00  00 00 00 00 7e 01 00 00  |............~...|
00000010  72 00 00 00 00 00 00 00  72 fe fd 5f 06 07 42 6e  |r.......r.._..Bn|
00000020  53 de 72 d8 ef 33 7e 5f  ee 59 10 19 49 8b 2d 4e  |S.r..3~_.Y..I.-N|
00000030  7f de 3e 09 f4 a8 3f 03  f9 57 06 00 00 00 0c c0  |..>...?..W......|
00000040  ac c0 ae c0 2b c0 2f c0  0a c0 14 01 00 00 3c 00  |....+./.......<.|
00000050  0d 00 10 00 0e 04 03 05  03 06 03 04 01 05 01 06  |................|
00000060  01 08 07 00 0a 00 08 00  06 00 1d 00 17 00 18 00  |................|
00000070  0b 00 02 01 00 00 17 00  00 00 00 00 0e 00 0c 00  |................|
00000080  00 09 31 32 37 2e 30 2e  30 2e 31                 |..127.0.0.1|

2026-10-05 15:19:1966.132.186.250to 5683/udpcoapUS

F·'·censys·.well-known·core

payload bytes

00000000  46 01 27 10 63 65 6e 73  79 73 bb 2e 77 65 6c 6c  |F.'.censys..well|
00000010  2d 6b 6e 6f 77 6e 04 63  6f 72 65                 |-known.core|

2026-10-05 14:52:3866.132.172.253to 54169/udpdnsUS

DNS response 15

payload bytes

00000000  16 fe fd 00 00 00 00 00  00 00 05 00 71 01 00 00  |............q...|
00000010  65 00 00 00 00 00 00 00  65 fe fd 65 0a 15 cc c7  |e.......e..e....|
00000020  c7 88 b7 17 ab 0a f2 29  6f 74 12 c5 18 d8 3d d0  |.......)ot....=.|
00000030  7e cc 7e a5 45 1b 29 78  43 2f 70 00 00 00 0c c0  |~.~.E.)xC/p.....|
00000040  ac c0 ae c0 2b c0 2f c0  0a c0 14 01 00 00 2f 00  |....+./......./.|
00000050  0d 00 10 00 0e 04 03 05  03 06 03 04 01 05 01 06  |................|
00000060  01 08 07 ff 01 00 01 00  00 0a 00 08 00 06 00 1d  |................|
00000070  00 17 00 18 00 0b 00 02  01 00 00 17 00 00        |..............|

2026-10-05 14:34:1866.132.172.252to 10758/udptftpUS
·/a·netascii·
payload bytes
```
00000000  00 01 2f 61 00 6e 65 74  61 73 63 69 69 00        |../a.netascii.|
```

2026-10-05 14:30:3766.132.172.252to 25043/udprtspUS

DESCRIBE / RTSP/1.0

payload bytes

00000000  44 45 53 43 52 49 42 45  20 2f 20 52 54 53 50 2f  |DESCRIBE / RTSP/|
00000010  31 2e 30 0d 0a 0d 0a                              |1.0....|