UDP traffic

Datagrams matching asn:63949 sent to HoneyLabs sensors over UDP in the last 24 hours. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Datagrams

Source addresses

Networks

Countries

Destination ports

Protocols

raw from 8 sources14
dns from 2 sources4
nfs from 1 source2
snmp from 1 source2
ntp from 1 source1

Destination ports

1194/udp from 2 sources5
3283/udp from 1 source4
5353/udp from 1 source3
111/udp from 1 source2
161/udp from 1 source2
19/udp from 1 source1
53/udp from 1 source1
123/udp from 1 source1
443/udp from 1 source1
500/udp from 1 source1
2123/udp from 1 source1
3389/udp from 1 source1

DNS questions

4 queries and 0 unsolicited answers. An answer nobody asked for means a resolver was given a forged source address.

DNS record types

PTR3
A1

Networks

AS63949 Akamai Connected Cloud from 13 sources23

Countries

Source addresses (unverified)

Address	Network	Cc	Datagrams	Last seen (UTC)
139.162.116.104	AS63949 Akamai Connected Cloud	JP	4	2026-10-05 19:11
139.162.88.198	AS63949 Akamai Connected Cloud	JP	4	2026-10-05 16:46
172.104.155.101	AS63949 Akamai Connected Cloud	DE	3	2026-10-05 16:57
80.85.84.130	AS63949 Akamai Connected Cloud	GB	2	2026-10-05 19:23
170.187.181.200	AS63949 Akamai Connected Cloud	CA	2	2026-10-05 18:27
139.162.109.245	AS63949 Akamai Connected Cloud	JP	1	2026-10-05 19:11
66.228.41.127	AS63949 Akamai Connected Cloud	US	1	2026-10-05 12:27
172.105.106.177	AS63949 Akamai Connected Cloud	CA	1	2026-10-05 20:10
139.162.66.65	AS63949 Akamai Connected Cloud	JP	1	2026-10-05 17:39
139.162.116.160	AS63949 Akamai Connected Cloud	JP	1	2026-10-05 13:22
172.105.76.59	AS63949 Akamai Connected Cloud	DE	1	2026-10-05 14:19
45.79.190.10	AS63949 Akamai Connected Cloud	US	1	2026-10-05 18:09
139.162.120.104	AS63949 Akamai Connected Cloud	JP	1	2026-10-05 15:34

Latest datagrams

2026-10-05 20:10:40172.105.106.177to 19/udprawCA

payload bytes

00000000  0a                                                |.|

2026-10-05 19:23:0780.85.84.130to 111/udpnfsGB

er 7·

payload bytes

00000000  65 72 0a 37 00 00 00 00  00 00 00 02 00 01 86 a0  |er.7............|
00000010  00 00 00 02 00 00 00 04  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00                           |........|

2026-10-05 19:11:48139.162.116.104to 3283/udprawJP

payload bytes

00000000  00 14 00 01 03                                    |.....|

2026-10-05 19:11:12139.162.109.245to 123/udpntpJP

payload bytes

00000000  e3 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000010  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

2026-10-05 18:27:13170.187.181.200to 161/udpsnmpCA

0&·public·c·0·0 ·+·

payload bytes

00000000  30 26 02 01 01 04 06 70  75 62 6c 69 63 a1 19 02  |0&.....public...|
00000010  04 dc 63 c2 9a 02 01 00  02 01 00 30 0b 30 09 06  |..c........0.0..|
00000020  05 2b 06 01 02 01 05 00                           |.+......|

2026-10-05 18:09:5345.79.190.10to 443/udprawUS

·Q012·

payload bytes

00000000  0d 00 00 00 01 02 03 04  05 06 07 08 00 00 00 00  |................|
00000010  00 00 00 00 51 30 31 32  00 00 00 00              |....Q012....|

2026-10-05 18:01:30139.162.116.104to 3283/udprawJP

payload bytes

00000000  00 14 00 01 03                                    |.....|

2026-10-05 17:43:20139.162.116.104to 3283/udprawJP

payload bytes

00000000  00 14 00 01 03                                    |.....|

2026-10-05 17:39:50139.162.66.65to 53/udpdnsJP

DNS query A inanis.asertdnsresearch.com

payload bytes

00000000  80 0a 01 00 00 01 00 00  00 00 00 00 06 69 6e 61  |.............ina|
00000010  6e 69 73 10 61 73 65 72  74 64 6e 73 72 65 73 65  |nis.asertdnsrese|
00000020  61 72 63 68 03 63 6f 6d  00 00 01 00 01           |arch.com.....|

2026-10-05 16:57:17172.104.155.101to 5353/udpdnsDE

DNS query PTR _services._dns-sd._udp.local

payload bytes

00000000  00 00 00 00 00 01 00 00  00 00 00 00 09 5f 73 65  |............._se|
00000010  72 76 69 63 65 73 07 5f  64 6e 73 2d 73 64 04 5f  |rvices._dns-sd._|
00000020  75 64 70 05 6c 6f 63 61  6c 00 00 0c 00 01        |udp.local.....|

2026-10-05 16:46:20139.162.88.198to 1194/udprawJP

8·

payload bytes

00000000  38 00 00 00 00 00 00 00  00 00 00 00 01           |8............|

2026-10-05 16:31:17170.187.181.200to 161/udpsnmpCA

0&·public·c·0·0 ·+·

payload bytes

00000000  30 26 02 01 01 04 06 70  75 62 6c 69 63 a1 19 02  |0&.....public...|
00000010  04 dc 63 c2 9a 02 01 00  02 01 00 30 0b 30 09 06  |..c........0.0..|
00000020  05 2b 06 01 02 01 05 00                           |.+......|

2026-10-05 15:45:28139.162.88.198to 1194/udprawJP

8·

payload bytes

00000000  38 00 00 00 00 00 00 00  00 00 00 00 01           |8............|

2026-10-05 15:44:10139.162.88.198to 1194/udprawJP

8·

payload bytes

00000000  38 00 00 00 00 00 00 00  00 00 00 00 01           |8............|

2026-10-05 15:34:40139.162.88.198to 1194/udprawJP

8·

payload bytes

00000000  38 00 00 00 00 00 00 00  00 00 00 00 01           |8............|

2026-10-05 15:34:31139.162.120.104to 1194/udprawJP

8·8·&·

payload bytes

00000000  38 12 12 12 12 12 12 12  12 00 00 00 00 00 38 b1  |8.............8.|
00000010  26 de                                             |&.|

2026-10-05 14:19:24172.105.76.59to 3389/udprawDE

payload bytes

00000000  00 00 00 00 00 00 00 ff  00 00 00 00 00 00 00 00  |................|
00000010  00 00                                             |..|

2026-10-05 14:17:0380.85.84.130to 111/udpnfsGB

er 7·

payload bytes

00000000  65 72 0a 37 00 00 00 00  00 00 00 02 00 01 86 a0  |er.7............|
00000010  00 00 00 02 00 00 00 04  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00                           |........|

2026-10-05 14:00:41172.104.155.101to 5353/udpdnsDE

DNS query PTR _services._dns-sd._udp.local

payload bytes

00000000  00 00 00 00 00 01 00 00  00 00 00 00 09 5f 73 65  |............._se|
00000010  72 76 69 63 65 73 07 5f  64 6e 73 2d 73 64 04 5f  |rvices._dns-sd._|
00000020  75 64 70 05 6c 6f 63 61  6c 00 00 0c 00 01        |udp.local.....|

2026-10-05 13:37:37139.162.116.104to 3283/udprawJP

payload bytes

00000000  00 14 00 01 03                                    |.....|

2026-10-05 13:22:31139.162.116.160to 500/udprawJP

·! "·

payload bytes

00000000  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000010  21 20 22 08 00 00 00 00  00 00 00 1c              |! ".........|

2026-10-05 12:41:45172.104.155.101to 5353/udpdnsDE

DNS query PTR _services._dns-sd._udp.local

payload bytes

00000000  00 00 00 00 00 01 00 00  00 00 00 00 09 5f 73 65  |............._se|
00000010  72 76 69 63 65 73 07 5f  64 6e 73 2d 73 64 04 5f  |rvices._dns-sd._|
00000020  75 64 70 05 6c 6f 63 61  6c 00 00 0c 00 01        |udp.local.....|

2026-10-05 12:27:0066.228.41.127to 2123/udprawUS

2·

payload bytes

00000000  32 01 00 02 00 00 00 00  00 00                    |2.........|