UDP traffic
Datagrams matching asn:398722 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.
A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.
Your plan searches up to 7d, so 30d was shortened. Plans
7
Datagrams
5
Source addresses
1
Networks
1
Countries
7
Destination ports
Source addresses (unverified)
| Address | Network | Cc | Datagrams | Last seen (UTC) |
|---|---|---|---|---|
| 199.45.154.191 | AS398722 Censys, Inc. | US | 2 | 2026-10-05 16:33 |
| 199.45.154.184 | AS398722 Censys, Inc. | US | 2 | 2026-10-05 13:08 |
| 199.45.154.189 | AS398722 Censys, Inc. | US | 1 | 2026-10-05 11:26 |
| 199.45.154.177 | AS398722 Censys, Inc. | US | 1 | 2026-10-05 17:06 |
| 199.45.154.183 | AS398722 Censys, Inc. | US | 1 | 2026-10-05 13:14 |
Latest datagrams
payload bytes
00000000 ff |.|
payload bytes
00000000 4d 2d 53 45 41 52 43 48 20 2a 20 48 54 54 50 2f |M-SEARCH * HTTP/| 00000010 31 2e 31 0d 0a 48 4f 53 54 3a 32 33 39 2e 32 35 |1.1..HOST:239.25| 00000020 35 2e 32 35 35 2e 32 35 30 3a 31 39 30 30 0d 0a |5.255.250:1900..| 00000030 53 54 3a 73 73 64 70 3a 61 6c 6c 0d 0a 4d 41 4e |ST:ssdp:all..MAN| 00000040 3a 22 73 73 64 70 3a 64 69 73 63 6f 76 65 72 22 |:"ssdp:discover"| 00000050 0d 0a 0d 0a |....|
payload bytes
00000000 4f 50 54 49 4f 4e 53 20 73 69 70 3a 63 65 6e 73 |OPTIONS sip:cens| 00000010 79 73 69 6e 73 70 65 63 74 40 63 65 6e 73 79 73 |ysinspect@censys| 00000020 2e 69 6f 20 53 49 50 2f 32 2e 30 0d 0a 54 6f 3a |.io SIP/2.0..To:| 00000030 20 3c 73 69 70 3a 74 65 73 74 2e 65 63 68 6f 40 | <sip:test.echo@| 00000040 73 69 70 35 30 36 30 2e 6e 65 74 3e 0d 0a 46 72 |sip5060.net>..Fr| 00000050 6f 6d 3a 20 43 65 6e 73 79 73 20 3c 73 69 70 3a |om: Censys <sip:| 00000060 63 65 6e 73 79 73 69 6e 73 70 65 63 74 40 63 65 |censysinspect@ce| 00000070 6e 73 79 73 2e 69 6f 3e 0d 0a 43 53 65 71 3a 20 |nsys.io>..CSeq: | 00000080 31 20 4f 50 54 49 4f 4e 53 0d 0a 43 61 6c 6c 2d |1 OPTIONS..Call-| 00000090 49 44 3a 20 61 38 34 62 34 63 37 36 65 36 36 37 |ID: a84b4c76e667| 000000a0 31 30 0d 0a 4d 61 78 2d 46 6f 72 77 61 72 64 73 |10..Max-Forwards| 000000b0 3a 20 37 30 0d 0a 56 69 61 3a 20 53 49 50 2f 32 |: 70..Via: SIP/2| 000000c0 2e 30 2f 55 44 50 20 31 32 37 2e 30 2e 30 2e 31 |.0/UDP 127.0.0.1| 000000d0 0d 0a 41 63 63 65 70 74 3a 20 61 70 70 6c 69 63 |..Accept: applic| 000000e0 61 74 69 6f 6e 2f 73 64 70 0d 0a 43 6f 6e 74 65 |ation/sdp..Conte| 000000f0 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 0d 0a |nt-Length: 0....|
payload bytes
00000000 16 fe fd 00 00 00 00 00 00 00 00 00 6d 01 00 00 |............m...| 00000010 61 00 00 00 00 00 00 00 61 fe fd 69 9f 53 c2 31 |a.......a..i.S.1| 00000020 0a ac c1 49 2f 2c 77 f9 aa 6e 8a d3 d5 46 04 6d |...I/,w..n...F.m| 00000030 43 98 ea 69 81 09 f2 bb 9c 7f ce 00 00 00 0c c0 |C..i............| 00000040 2b c0 2f c0 0a c0 14 c0 2c c0 30 01 00 00 2b 00 |+./.....,.0...+.| 00000050 0d 00 0c 00 0a 04 01 04 03 04 01 05 01 06 01 ff |................| 00000060 01 00 01 00 00 0a 00 08 00 06 00 1d 00 17 00 18 |................| 00000070 00 0b 00 02 01 00 00 17 00 00 |..........|
payload bytes
00000000 1a 09 fa ba 00 00 00 00 00 00 00 02 55 55 55 55 |............UUUU| 00000010 00 00 00 01 00 00 00 01 00 00 00 00 00 00 00 00 |................| 00000020 00 00 00 00 00 00 00 00 ff ff 55 12 00 00 00 3c |..........U....<| 00000030 00 00 00 01 00 00 00 02 00 00 00 00 00 00 00 00 |................|
payload bytes
00000000 01 |.|
payload bytes
00000000 30 29 02 01 01 04 06 70 75 62 6c 69 63 a0 1c 02 |0).....public...| 00000010 04 ec 59 7e 2a 02 01 00 02 01 00 30 0e 30 0c 06 |..Y~*......0.0..| 00000020 08 2b 06 01 02 01 01 05 00 05 00 |.+.........|