UDP traffic

Datagrams matching asn:398722 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Datagrams

Source addresses

Networks

Countries

Destination ports

Protocols

raw from 5 sources5
dns from 3 sources3
ssdp from 1 source1
sip from 1 source1
snmp from 1 source1

Destination ports

161/udp from 1 source1
1900/udp from 1 source1
1967/udp from 1 source1
2361/udp from 1 source1
4070/udp from 1 source1
5061/udp from 1 source1
5349/udp from 1 source1
17185/udp from 1 source1
17186/udp from 1 source1
37810/udp from 1 source1
64738/udp from 1 source1

Networks

AS398722 Censys, Inc. from 8 sources11

Countries

US United States11

Source addresses (unverified)

Address	Network	Cc	Datagrams	Last seen (UTC)
199.45.154.191	AS398722 Censys, Inc.	US	2	2026-10-05 16:33
199.45.154.189	AS398722 Censys, Inc.	US	2	2026-10-05 19:55
199.45.154.184	AS398722 Censys, Inc.	US	2	2026-10-05 13:08
199.45.154.177	AS398722 Censys, Inc.	US	1	2026-10-05 17:06
199.45.154.183	AS398722 Censys, Inc.	US	1	2026-10-05 13:14
199.45.154.181	AS398722 Censys, Inc.	US	1	2026-10-05 19:04
199.45.154.186	AS398722 Censys, Inc.	US	1	2026-10-05 20:36
199.45.154.176	AS398722 Censys, Inc.	US	1	2026-10-05 18:54

Latest datagrams

2026-10-05 20:36:39199.45.154.186to 64738/udprawUS

·2·*·

payload bytes

00000000  00 00 00 00 32 99 14 bb  a4 2a af 94              |....2....*..|

2026-10-05 19:55:21199.45.154.189to 2361/udprawUS

DIGI·

payload bytes

00000000  44 49 47 49 00 01 00 06  ff ff ff ff ff ff        |DIGI..........|

2026-10-05 19:04:03199.45.154.181to 17186/udpdnsUS

DNS response 15

payload bytes

00000000  1a 09 fa ba 00 00 00 00  00 00 00 02 55 55 55 55  |............UUUU|
00000010  00 00 00 01 00 00 00 01  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00  ff ff 55 12 00 00 00 3c  |..........U....<|
00000030  00 00 00 01 00 00 00 02  00 00 00 00 00 00 00 00  |................|

2026-10-05 18:54:49199.45.154.176to 4070/udprawUS

discover;013;

payload bytes

00000000  64 69 73 63 6f 76 65 72  3b 30 31 33 3b           |discover;013;|

2026-10-05 17:06:37199.45.154.177to 37810/udprawUS
·
payload bytes
```
00000000  ff                                                |.|
```

2026-10-05 16:33:52199.45.154.191to 1900/udpssdpUS

M-SEARCH * HTTP/1.1 HOST:239.255.255.250:1900 ST:ssdp:all MAN:"ssdp:discover"

payload bytes

00000000  4d 2d 53 45 41 52 43 48  20 2a 20 48 54 54 50 2f  |M-SEARCH * HTTP/|
00000010  31 2e 31 0d 0a 48 4f 53  54 3a 32 33 39 2e 32 35  |1.1..HOST:239.25|
00000020  35 2e 32 35 35 2e 32 35  30 3a 31 39 30 30 0d 0a  |5.255.250:1900..|
00000030  53 54 3a 73 73 64 70 3a  61 6c 6c 0d 0a 4d 41 4e  |ST:ssdp:all..MAN|
00000040  3a 22 73 73 64 70 3a 64  69 73 63 6f 76 65 72 22  |:"ssdp:discover"|
00000050  0d 0a 0d 0a                                       |....|

2026-10-05 14:35:32199.45.154.191to 5061/udpsipUS

OPTIONS sip:censysinspect@censys.io SIP/2.0 To: <sip:test.echo@sip5060.net> From: Censys <sip:censysinspect@censys.io> CSeq: 1 OPTIONS Call-ID: a84b4c76e66710 Max-Forwards: 70 Via: SIP/2.0/UDP 1

payload bytes

00000000  4f 50 54 49 4f 4e 53 20  73 69 70 3a 63 65 6e 73  |OPTIONS sip:cens|
00000010  79 73 69 6e 73 70 65 63  74 40 63 65 6e 73 79 73  |ysinspect@censys|
00000020  2e 69 6f 20 53 49 50 2f  32 2e 30 0d 0a 54 6f 3a  |.io SIP/2.0..To:|
00000030  20 3c 73 69 70 3a 74 65  73 74 2e 65 63 68 6f 40  | <sip:test.echo@|
00000040  73 69 70 35 30 36 30 2e  6e 65 74 3e 0d 0a 46 72  |sip5060.net>..Fr|
00000050  6f 6d 3a 20 43 65 6e 73  79 73 20 3c 73 69 70 3a  |om: Censys <sip:|
00000060  63 65 6e 73 79 73 69 6e  73 70 65 63 74 40 63 65  |censysinspect@ce|
00000070  6e 73 79 73 2e 69 6f 3e  0d 0a 43 53 65 71 3a 20  |nsys.io>..CSeq: |
00000080  31 20 4f 50 54 49 4f 4e  53 0d 0a 43 61 6c 6c 2d  |1 OPTIONS..Call-|
00000090  49 44 3a 20 61 38 34 62  34 63 37 36 65 36 36 37  |ID: a84b4c76e667|
000000a0  31 30 0d 0a 4d 61 78 2d  46 6f 72 77 61 72 64 73  |10..Max-Forwards|
000000b0  3a 20 37 30 0d 0a 56 69  61 3a 20 53 49 50 2f 32  |: 70..Via: SIP/2|
000000c0  2e 30 2f 55 44 50 20 31  32 37 2e 30 2e 30 2e 31  |.0/UDP 127.0.0.1|
000000d0  0d 0a 41 63 63 65 70 74  3a 20 61 70 70 6c 69 63  |..Accept: applic|
000000e0  61 74 69 6f 6e 2f 73 64  70 0d 0a 43 6f 6e 74 65  |ation/sdp..Conte|
000000f0  6e 74 2d 4c 65 6e 67 74  68 3a 20 30 0d 0a 0d 0a  |nt-Length: 0....|

2026-10-05 13:14:04199.45.154.183to 5349/udpdnsUS

DNS response 15

payload bytes

00000000  16 fe fd 00 00 00 00 00  00 00 00 00 6d 01 00 00  |............m...|
00000010  61 00 00 00 00 00 00 00  61 fe fd 69 9f 53 c2 31  |a.......a..i.S.1|
00000020  0a ac c1 49 2f 2c 77 f9  aa 6e 8a d3 d5 46 04 6d  |...I/,w..n...F.m|
00000030  43 98 ea 69 81 09 f2 bb  9c 7f ce 00 00 00 0c c0  |C..i............|
00000040  2b c0 2f c0 0a c0 14 c0  2c c0 30 01 00 00 2b 00  |+./.....,.0...+.|
00000050  0d 00 0c 00 0a 04 01 04  03 04 01 05 01 06 01 ff  |................|
00000060  01 00 01 00 00 0a 00 08  00 06 00 1d 00 17 00 18  |................|
00000070  00 0b 00 02 01 00 00 17  00 00                    |..........|

2026-10-05 13:08:01199.45.154.184to 17185/udpdnsUS

DNS response 15

payload bytes

00000000  1a 09 fa ba 00 00 00 00  00 00 00 02 55 55 55 55  |............UUUU|
00000010  00 00 00 01 00 00 00 01  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00  ff ff 55 12 00 00 00 3c  |..........U....<|
00000030  00 00 00 01 00 00 00 02  00 00 00 00 00 00 00 00  |................|

2026-10-05 12:53:58199.45.154.184to 1967/udprawUS
·
payload bytes
```
00000000  01                                                |.|
```

2026-10-05 11:26:35199.45.154.189to 161/udpsnmpUS

0)·public·Y~*·0·0·+·

payload bytes

00000000  30 29 02 01 01 04 06 70  75 62 6c 69 63 a0 1c 02  |0).....public...|
00000010  04 ec 59 7e 2a 02 01 00  02 01 00 30 0e 30 0c 06  |..Y~*......0.0..|
00000020  08 2b 06 01 02 01 01 05  00 05 00                 |.+.........|