UDP traffic

Datagrams matching asn:398324 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Your plan searches up to 7d, so 30d was shortened. Plans

Datagrams

Source addresses

Networks

Countries

Destination ports

Protocols

raw from 22 sources28
dns from 10 sources15
rtsp from 1 source6
stun from 3 sources3
sip from 1 source2
coap from 2 sources2
ldap from 1 source1
soap from 1 source1
tftp from 1 source1
bittorrent from 1 source1

Destination ports

2361/udp from 2 sources2
19302/udp from 2 sources2
17184/udp from 2 sources2
500/udp from 2 sources2
5683/udp from 2 sources2
97/udp from 1 source1
44818/udp from 1 source1
1629/udp from 1 source1
2362/udp from 1 source1
3478/udp from 1 source1
4070/udp from 1 source1
4826/udp from 1 source1

DNS questions

3 queries and 12 unsolicited answers. An answer nobody asked for means a resolver was given a forged source address.

DNS record types

A2
SRV1

Networks

AS398324 Censys, Inc. from 33 sources60

Countries

US United States60

Source addresses (unverified)

Address	Network	Cc	Datagrams	Last seen (UTC)
66.132.172.254	AS398324 Censys, Inc.	US	7	2026-10-05 17:32
66.132.172.252	AS398324 Censys, Inc.	US	7	2026-10-05 17:06
66.132.172.248	AS398324 Censys, Inc.	US	5	2026-10-05 18:03
66.132.172.249	AS398324 Censys, Inc.	US	3	2026-10-05 17:10
66.132.172.243	AS398324 Censys, Inc.	US	3	2026-10-05 14:02
66.132.172.253	AS398324 Censys, Inc.	US	3	2026-10-05 17:13
66.132.172.242	AS398324 Censys, Inc.	US	2	2026-10-05 13:15
66.132.172.241	AS398324 Censys, Inc.	US	2	2026-10-05 16:39
66.132.186.239	AS398324 Censys, Inc.	US	2	2026-10-05 16:57
66.132.172.250	AS398324 Censys, Inc.	US	2	2026-10-05 16:30
66.132.186.218	AS398324 Censys, Inc.	US	2	2026-10-05 16:15
66.132.172.236	AS398324 Censys, Inc.	US	1	2026-10-05 17:49
66.132.186.252	AS398324 Censys, Inc.	US	1	2026-10-05 17:46
66.132.172.234	AS398324 Censys, Inc.	US	1	2026-10-05 17:34
66.132.186.250	AS398324 Censys, Inc.	US	1	2026-10-05 15:19
66.132.172.228	AS398324 Censys, Inc.	US	1	2026-10-05 15:33
66.132.224.19	AS398324 Censys, Inc.	US	1	2026-10-05 17:08
66.132.172.232	AS398324 Censys, Inc.	US	1	2026-10-05 15:32
66.132.186.214	AS398324 Censys, Inc.	US	1	2026-10-05 18:05
66.132.172.251	AS398324 Censys, Inc.	US	1	2026-10-05 17:27

Latest datagrams

2026-10-05 18:05:0466.132.186.214to 17184/udpdnsUS

DNS response 15

payload bytes

00000000  1a 09 fa ba 00 00 00 00  00 00 00 02 55 55 55 55  |............UUUU|
00000010  00 00 00 01 00 00 00 01  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00  ff ff 55 12 00 00 00 3c  |..........U....<|
00000030  00 00 00 01 00 00 00 02  00 00 00 00 00 00 00 00  |................|

2026-10-05 18:03:2166.132.172.248to 31212/udpldapUS

0·-·c·$· · ·objectclass0·

payload bytes

00000000  30 84 00 00 00 2d 02 01  01 63 84 00 00 00 24 04  |0....-...c....$.|
00000010  00 0a 01 00 0a 01 00 02  01 00 02 01 00 01 01 00  |................|
00000020  87 0b 6f 62 6a 65 63 74  63 6c 61 73 73 30 84 00  |..objectclass0..|
00000030  00 00 00 00 0a                                    |.....|

2026-10-05 17:49:5366.132.172.236to 17186/udpdnsUS

DNS response 15

payload bytes

00000000  1a 09 fa ba 00 00 00 00  00 00 00 02 55 55 55 55  |............UUUU|
00000010  00 00 00 01 00 00 00 01  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00  ff ff 55 12 00 00 00 3c  |..........U....<|
00000030  00 00 00 01 00 00 00 02  00 00 00 00 00 00 00 00  |................|

2026-10-05 17:46:1366.132.186.252to 523/udprawUS

DB2GETADDR·SQL09010·

payload bytes

00000000  44 42 32 47 45 54 41 44  44 52 00 53 51 4c 30 39  |DB2GETADDR.SQL09|
00000010  30 31 30 00                                       |010.|

2026-10-05 17:45:0266.132.172.246to 33668/udpdnsUS

DNS response 15

payload bytes

00000000  16 fe ff 00 00 00 00 00  00 00 00 00 66 01 00 00  |............f...|
00000010  5a 00 00 00 00 00 00 00  5a fe fd 29 35 2b f9 c7  |Z.......Z..)5+..|
00000020  74 a8 9a 12 bf 07 b2 7b  fd d2 b9 77 63 1f 9e 9b  |t......{...wc...|
00000030  88 94 18 18 8a 1b 64 60  61 e4 38 00 00 00 32 c0  |......d`a.8...2.|
00000040  2c cc a9 c0 ad c0 0a c0  2b c0 ac c0 09 c0 30 cc  |,.......+.....0.|
00000050  a8 c0 14 c0 2f c0 13 00  9d c0 9d 00 35 00 9c c0  |..../.......5...|
00000060  9c 00 2f 00 9f cc aa c0  9f 00 39 00 9e c0 9e 00  |../.......9.....|
00000070  33 01 00                                          |3..|

2026-10-05 17:36:2466.132.172.240to 38360/udprawUS
·
payload bytes
```
00000000  ff                                                |.|
```

2026-10-05 17:34:2666.132.172.234to 1701/udprawUS

·f· · ·censys.io·censys.io· hi· ·

payload bytes

00000000  c8 02 00 66 00 00 00 00  00 00 00 00 80 08 00 00  |...f............|
00000010  00 00 00 01 80 08 00 00  00 02 01 00 80 0a 00 00  |................|
00000020  00 03 00 00 00 03 80 0a  00 00 00 04 00 00 00 00  |................|
00000030  00 08 00 00 00 06 06 90  80 0f 00 00 00 07 63 65  |..............ce|
00000040  6e 73 79 73 2e 69 6f 00  0f 00 00 00 08 63 65 6e  |nsys.io......cen|
00000050  73 79 73 2e 69 6f 80 08  00 00 00 09 68 69 80 08  |sys.io......hi..|
00000060  00 00 00 0a 00 08                                 |......|

2026-10-05 17:32:5466.132.172.254to 42795/udpdnsUS

DNS response 15

payload bytes

00000000  16 fe fd 00 00 00 00 00  00 00 00 00 7e 01 00 00  |............~...|
00000010  72 00 00 00 00 00 00 00  72 fe fd 5f 06 07 42 6e  |r.......r.._..Bn|
00000020  53 de 72 d8 ef 33 7e 5f  ee 59 10 19 49 8b 2d 4e  |S.r..3~_.Y..I.-N|
00000030  7f de 3e 09 f4 a8 3f 03  f9 57 06 00 00 00 0c c0  |..>...?..W......|
00000040  ac c0 ae c0 2b c0 2f c0  0a c0 14 01 00 00 3c 00  |....+./.......<.|
00000050  0d 00 10 00 0e 04 03 05  03 06 03 04 01 05 01 06  |................|
00000060  01 08 07 00 0a 00 08 00  06 00 1d 00 17 00 18 00  |................|
00000070  0b 00 02 01 00 00 17 00  00 00 00 00 0e 00 0c 00  |................|
00000080  00 09 31 32 37 2e 30 2e  30 2e 31                 |..127.0.0.1|

2026-10-05 17:32:0966.132.224.23to 19302/udpstunUS

·!·B"d?9·(·

payload bytes

00000000  00 01 00 00 21 12 a4 42  22 64 3f 39 ba 85 0f b5  |....!..B"d?9....|
00000010  f4 28 d7 fa                                       |.(..|

2026-10-05 17:28:2566.132.172.248to 31862/udprawUS
·
payload bytes
```
00000000  01                                                |.|
```

2026-10-05 17:27:4566.132.172.251to 8252/udpdnsUS

DNS response 15

payload bytes

00000000  1a a9 ff e1 00 00 00 00  00 00 00 02 00 01 86 a0  |................|
00000010  00 00 00 02 00 00 00 04  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00                           |........|

2026-10-05 17:13:5466.132.172.253to 4826/udprawUS

xb·_?·O·! "·"· · ·

payload bytes

00000000  78 62 9a 0f 5f 3f 16 4f  00 00 00 00 00 00 00 00  |xb.._?.O........|
00000010  21 20 22 08 00 00 00 00  00 00 01 88 22 00 00 ec  |! "........."...|
00000020  00 00 00 e8 01 01 00 1c  03 00 00 08 01 00 00 01  |................|
00000030  03 00 00 08 01 00 00 02  03 00 00 08 01 00 00 03  |................|
00000040  03 00 00 08 01 00 00 04  03 00 00 08 01 00 00 06  |................|
00000050  03 00 00 08 01 00 00 07  03 00 00 08 01 00 00 08  |................|
00000060  03 00 00 08 01 00 00 09  03 00 00 08 01 00 00 0b  |................|
00000070  03 00 00 08 01 00 00 0c  03 00 00 08 01 00 00 0d  |................|
00000080  03 00 00 08 02 00 00 01  03 00 00 08 02 00 00 02  |................|
00000090  03 00 00 08 03 00 00 00  03 00 00 08 03 00 00 01  |................|
000000a0  03 00 00 08 03 00 00 02  03 00 00 08 03 00 00 03  |................|
000000b0  03 00 00 08 03 00 00 04  03 00 00 08 03 00 00 05  |................|
000000c0  03 00 00 08 04 00 00 00  03 00 00 08 04 00 00 01  |................|
000000d0  03 00 00 08 04 00 00 02  03 00 00 08 04 00 00 05  |................|
000000e0  03 00 00 08 04 00 00 0e  03 00 00 08 04 00 00 0f  |................|
000000f0  03 00 00 08 04 00 00 10  03 00 00 08 04 00 00 11  |................|
... 392 bytes shown in part

2026-10-05 17:10:1566.132.172.249to 21358/udprawUS

j·n0·k· ·^0\·P·CE·0·0·krbtgt·CE·19700101000000Z·0·

payload bytes

00000000  6a 81 6e 30 81 6b a1 03  02 01 05 a2 03 02 01 0a  |j.n0.k..........|
00000010  a4 81 5e 30 5c a0 07 03  05 00 50 00 80 00 a2 04  |..^0\.....P.....|
00000020  1b 02 43 45 a3 17 30 15  a0 03 02 01 00 a1 0e 30  |..CE..0........0|
00000030  0c 1b 06 6b 72 62 74 67  74 1b 02 43 45 a5 11 18  |...krbtgt..CE...|
00000040  0f 31 39 37 30 30 31 30  31 30 30 30 30 30 30 5a  |.19700101000000Z|
00000050  a7 06 02 04 03 fc f0 03  a8 17 30 15 02 01 12 02  |..........0.....|
00000060  01 11 02 01 10 02 01 17  02 01 01 02 01 03 02 01  |................|
00000070  02 0a                                             |..|

2026-10-05 17:08:1866.132.224.19to 2361/udprawUS

DIGI·

payload bytes

00000000  44 49 47 49 00 01 00 06  ff ff ff ff ff ff        |DIGI..........|

2026-10-05 17:06:2466.132.172.252to 41346/udprtspUS

DESCRIBE / RTSP/1.0

payload bytes

00000000  44 45 53 43 52 49 42 45  20 2f 20 52 54 53 50 2f  |DESCRIBE / RTSP/|
00000010  31 2e 30 0d 0a 0d 0a                              |1.0....|

2026-10-05 17:04:2066.132.172.249to 6301/udpdnsUS

DNS query A ip.parrotdns.com

payload bytes

00000000  70 9a 01 00 00 01 00 00  00 00 00 01 02 69 70 09  |p............ip.|
00000010  70 61 72 72 6f 74 64 6e  73 03 63 6f 6d 00 00 01  |parrotdns.com...|
00000020  00 01 00 00 29 02 00 00  00 80 00 00 00           |....)........|

2026-10-05 17:02:0466.132.172.245to 47993/udprawUS

payload bytes

00000000  00 14 00 01 03                                    |.....|

2026-10-05 16:57:0566.132.186.239to 500/udprawUS

Me·!·R·P·4·(·$·$·$·$·

payload bytes

00000000  4d 65 82 21 07 fc fd 52  00 00 00 00 00 00 00 00  |Me.!...R........|
00000010  01 10 02 00 00 00 00 00  00 00 01 50 00 00 01 34  |...........P...4|
00000020  00 00 00 01 00 00 00 01  00 00 01 28 01 01 00 08  |...........(....|
00000030  03 00 00 24 01 01 00 00  80 01 00 05 80 02 00 02  |...$............|
00000040  80 03 00 01 80 04 00 01  80 0b 00 01 00 0c 00 04  |................|
00000050  00 00 01 00 03 00 00 24  02 01 00 00 80 01 00 05  |.......$........|
00000060  80 02 00 02 80 03 00 01  80 04 00 02 80 0b 00 01  |................|
00000070  00 0c 00 04 00 00 01 00  03 00 00 24 03 01 00 00  |...........$....|
00000080  80 01 00 05 80 02 00 01  80 03 00 01 80 04 00 01  |................|
00000090  80 0b 00 01 00 0c 00 04  00 00 01 00 03 00 00 24  |...............$|
000000a0  04 01 00 00 80 01 00 05  80 02 00 01 80 03 00 01  |................|
000000b0  80 04 00 02 80 0b 00 01  00 0c 00 04 00 00 01 00  |................|
000000c0  03 00 00 24 05 01 00 00  80 01 00 01 80 02 00 01  |...$............|
000000d0  80 03 00 01 80 04 00 01  80 0b 00 01 00 0c 00 04  |................|
000000e0  00 00 01 00 03 00 00 24  06 01 00 00 80 01 00 01  |.......$........|
000000f0  80 02 00 01 80 03 00 01  80 04 00 02 80 0b 00 01  |................|
... 336 bytes shown in part

2026-10-05 16:48:0766.132.172.248to 61538/udprawUS

·!L_· ·̗·

payload bytes

00000000  ff ff ff ff 21 4c 5f a0  0a 00 00 00 08 9a cc 97  |....!L_.........|
00000010  ee a3 cd 02 10 00 02 00  00 00 08 00              |............|

2026-10-05 16:44:2666.132.172.252to 34474/udprtspUS

DESCRIBE / RTSP/1.0

payload bytes

00000000  44 45 53 43 52 49 42 45  20 2f 20 52 54 53 50 2f  |DESCRIBE / RTSP/|
00000010  31 2e 30 0d 0a 0d 0a                              |1.0....|

2026-10-05 16:39:5766.132.172.241to 18393/udprawUS

DIGI·

payload bytes

00000000  44 49 47 49 00 01 00 06  ff ff ff ff ff ff        |DIGI..........|

2026-10-05 16:38:3466.132.186.239to 5683/udpcoapUS

F·'·censys·.well-known·core

payload bytes

00000000  46 01 27 10 63 65 6e 73  79 73 bb 2e 77 65 6c 6c  |F.'.censys..well|
00000010  2d 6b 6e 6f 77 6e 04 63  6f 72 65                 |-known.core|

2026-10-05 16:34:3566.132.172.252to 19820/udprtspUS

DESCRIBE / RTSP/1.0

payload bytes

00000000  44 45 53 43 52 49 42 45  20 2f 20 52 54 53 50 2f  |DESCRIBE / RTSP/|
00000010  31 2e 30 0d 0a 0d 0a                              |1.0....|

2026-10-05 16:30:5566.132.172.250to 25775/udpbittorrentUS

d1:ad2:id20:censysinspectscannere1:q4:ping1:t2:aa1:y1:qe

payload bytes

00000000  64 31 3a 61 64 32 3a 69  64 32 30 3a 63 65 6e 73  |d1:ad2:id20:cens|
00000010  79 73 69 6e 73 70 65 63  74 73 63 61 6e 6e 65 72  |ysinspectscanner|
00000020  65 31 3a 71 34 3a 70 69  6e 67 31 3a 74 32 3a 61  |e1:q4:ping1:t2:a|
00000030  61 31 3a 79 31 3a 71 65                           |a1:y1:qe|

2026-10-05 16:17:1866.132.224.27to 1194/udprawUS

8Me·!·R·

payload bytes

00000000  38 4d 65 82 21 07 fc fd  52 00 00 00 00 00        |8Me.!...R.....|