UDP traffic

Datagrams matching ip:104.248.129.131 sent to HoneyLabs sensors over UDP in the last 24 hours. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Datagrams

Source addresses

Networks

Countries

Destination ports

Protocols

raw from 1 source13
dns from 1 source1

Destination ports

17185/udp from 1 source3
26198/udp from 1 source2
13246/udp from 1 source1
23196/udp from 1 source1
26000/udp from 1 source1
27015/udp from 1 source1
27138/udp from 1 source1
27244/udp from 1 source1
27444/udp from 1 source1
27777/udp from 1 source1
27950/udp from 1 source1

Networks

AS14061 DigitalOcean, LLC from 1 source14

Countries

DE Germany14

Source addresses (unverified)

Address	Network	Cc	Datagrams	Last seen (UTC)
104.248.129.131	AS14061 DigitalOcean, LLC	DE	14	2026-10-05 16:14

Latest datagrams

2026-10-05 16:14:48104.248.129.131to 27444/udprawDE
png l44adsl
payload bytes
```
00000000  70 6e 67 20 6c 34 34 61  64 73 6c                 |png l44adsl|
```

2026-10-05 16:14:47104.248.129.131to 17185/udprawDE

r7r70000000·UUUU000·000·0000000000000000·U·000<000·000·00000000

payload bytes

00000000  72 37 72 37 30 30 30 30  30 30 30 02 55 55 55 55  |r7r70000000.UUUU|
00000010  30 30 30 01 30 30 30 01  30 30 30 30 30 30 30 30  |000.000.00000000|
00000020  30 30 30 30 30 30 30 30  ff ff 55 10 30 30 30 3c  |00000000..U.000<|
00000030  30 30 30 03 30 30 30 02  30 30 30 30 30 30 30 30  |000.000.00000000|

2026-10-05 16:14:46104.248.129.131to 17185/udprawDE

00000000000·UUUU000·00000000000000000000·U·0000000·000·00000000

payload bytes

00000000  30 30 30 30 30 30 30 30  30 30 30 02 55 55 55 55  |00000000000.UUUU|
00000010  30 30 30 01 30 30 30 30  30 30 30 30 30 30 30 30  |000.000000000000|
00000020  30 30 30 30 30 30 30 30  ff ff 55 13 30 30 30 30  |00000000..U.0000|
00000030  30 30 30 01 30 30 30 02  30 30 30 30 30 30 30 30  |000.000.00000000|

2026-10-05 16:14:45104.248.129.131to 13246/udprawDE
from:airhid
payload bytes
```
00000000  66 72 6f 6d 3a 61 69 72  68 69 64                 |from:airhid|
```
2026-10-05 16:14:44104.248.129.131to 27777/udprawDE
s
payload bytes
```
00000000  73                                                |s|
```
2026-10-05 16:14:43104.248.129.131to 27244/udprawDE
s
payload bytes
```
00000000  73                                                |s|
```
2026-10-05 16:14:42104.248.129.131to 27138/udprawDE
s
payload bytes
```
00000000  73                                                |s|
```
2026-10-05 16:14:41104.248.129.131to 26000/udprawDE
s
payload bytes
```
00000000  73                                                |s|
```
2026-10-05 16:14:40104.248.129.131to 23196/udprawDE
s
payload bytes
```
00000000  73                                                |s|
```

2026-10-05 16:14:39104.248.129.131to 27950/udprawDE

·getservers 68 empty full

payload bytes

00000000  ff ff ff ff 67 65 74 73  65 72 76 65 72 73 20 36  |....getservers 6|
00000010  38 20 65 6d 70 74 79 20  66 75 6c 6c              |8 empty full|

2026-10-05 16:14:38104.248.129.131to 26198/udprawDE
00·000000000
payload bytes
```
00000000  30 30 10 30 30 30 30 30  30 30 30 30              |00.000000000|
```

2026-10-05 16:14:37104.248.129.131to 26198/udprawDE

0·00·000000·version·bind00·0·

payload bytes

00000000  30 06 01 30 30 01 30 30  30 30 30 30 07 76 65 72  |0..00.000000.ver|
00000010  73 69 6f 6e 04 62 69 6e  64 30 30 10 30 03        |sion.bind00.0.|

2026-10-05 16:14:36104.248.129.131to 17185/udpdnsDE

DNS response 15

payload bytes

00000000  1a 09 fa ba 00 00 00 00  00 00 00 02 55 55 55 55  |............UUUU|
00000010  00 00 00 01 00 00 00 01  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00  ff ff 55 12 00 00 00 3c  |..........U....<|
00000030  00 00 00 01 00 00 00 02  00 00 00 00 00 00 00 00  |................|

2026-10-05 16:14:35104.248.129.131to 27015/udprawDE

·TSource Engine Query·

payload bytes

00000000  ff ff ff ff 54 53 6f 75  72 63 65 20 45 6e 67 69  |....TSource Engi|
00000010  6e 65 20 51 75 65 72 79  00                       |ne Query.|