UDP traffic

Datagrams matching country:SE sent to HoneyLabs sensors over UDP in the last 24 hours. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Datagrams

Source addresses

Networks

Countries

Destination ports

Protocols

raw from 3 sources4

Destination ports

5351/udp from 1 source2
9/udp from 1 source1
42732/udp from 1 source1

Networks

AS42237 w1n ltd from 1 source2
AS3301 Telia Company AB from 1 source1
AS29518 Bredband2 AB from 1 source1

Countries

SE Sweden4

Source addresses (unverified)

Address	Network	Cc	Datagrams	Last seen (UTC)
185.217.1.242	AS42237 w1n ltd	SE	2	2026-10-05 18:03
83.209.255.191	AS29518 Bredband2 AB	SE	1	2026-10-05 14:15
81.235.9.131	AS3301 Telia Company AB	SE	1	2026-10-05 19:11

Latest datagrams

2026-10-05 19:11:0781.235.9.131to 9/udprawSE

payload bytes

00000000  00                                                |.|

2026-10-05 18:03:39185.217.1.242to 5351/udprawSE

·L ·X

payload bytes

00000000  00 02 00 00 0f a0 4c 09  00 00 02 58              |......L....X|

2026-10-05 14:15:5983.209.255.191to 42732/udprawSE

·+·4Vx·|·

payload bytes

00000000  01 07 ef f5 2b e1 88 05  f4 00 ff ff 00 fe fe fe  |....+...........|
00000010  fe fd fd fd fd 12 34 56  78 ae e3 17 03 a0 7c b9  |......4Vx.....|.|
00000020  03                                                |.|

2026-10-05 13:59:14185.217.1.242to 5351/udprawSE

·($·X

payload bytes

00000000  00 02 00 00 0f a0 28 24  00 00 02 58              |......($...X|