UDP traffic

Datagrams matching ip:137.184.210.250 sent to HoneyLabs sensors over UDP in the last 24 hours. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Datagrams

Source addresses

Networks

Countries

Destination ports

Protocols

raw from 1 source18
dns from 1 source3
ldap from 1 source2
quic from 1 source1
xdmcp from 1 source1

Destination ports

443/udp from 1 source5
137/udp from 1 source4
111/udp from 1 source3
135/udp from 1 source2
177/udp from 1 source2
389/udp from 1 source2
520/udp from 1 source2
407/udp from 1 source1
427/udp from 1 source1
517/udp from 1 source1
518/udp from 1 source1
523/udp from 1 source1

DNS questions

1 queries and 2 unsolicited answers. An answer nobody asked for means a resolver was given a forged source address.

CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA SRV1

DNS record types

SRV1

QUIC versions

Networks

AS14061 DigitalOcean, LLC from 1 source25

Countries

US United States25

Source addresses (unverified)

Address	Network	Cc	Datagrams	Last seen (UTC)
137.184.210.250	AS14061 DigitalOcean, LLC	US	25	2026-10-05 13:50

Latest datagrams

2026-10-05 13:50:17137.184.210.250to 443/udpquicUS
QUIC v1 Initial (ClientHello incomplete, 65 bytes)

2026-10-05 13:50:16137.184.210.250to 520/udprawUS

·000000000000000000000·

payload bytes

00000000  01 01 30 30 30 30 30 30  30 30 30 30 30 30 30 30  |..00000000000000|
00000010  30 30 30 30 30 30 30 10                           |0000000.|

2026-10-05 13:50:15137.184.210.250to 137/udprawUS

·0·0·000000 CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA00!0·

payload bytes

00000000  01 91 30 10 30 01 30 30  30 30 30 30 20 43 4b 41  |..0.0.000000 CKA|
00000010  41 41 41 41 41 41 41 41  41 41 41 41 41 41 41 41  |AAAAAAAAAAAAAAAA|
00000020  41 41 41 41 41 41 41 41  41 41 41 41 41 30 30 21  |AAAAAAAAAAAAA00!|
00000030  30 01                                             |0.|

2026-10-05 13:50:14137.184.210.250to 137/udprawUS

·000·000000 CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA00!0·

payload bytes

00000000  01 91 30 30 30 01 30 30  30 30 30 30 20 43 4b 41  |..000.000000 CKA|
00000010  41 41 41 41 41 41 41 41  41 41 41 41 41 41 41 41  |AAAAAAAAAAAAAAAA|
00000020  41 41 41 41 41 41 41 41  41 41 41 41 41 30 30 21  |AAAAAAAAAAAAA00!|
00000030  30 01                                             |0.|

2026-10-05 13:50:13137.184.210.250to 135/udprawUS

·0·000H000·000·0000·00000·0·#Eg·#Eg·00·ܺ·vT2·#Eg·00

payload bytes

00000000  05 30 0b 03 10 30 30 30  48 30 30 30 01 30 30 30  |.0...000H000.000|
00000010  b8 10 b8 10 30 30 30 30  01 30 30 30 30 30 01 30  |....0000.00000.0|
00000020  01 23 45 67 89 ab cd ef  01 23 45 67 89 ab cd ef  |.#Eg.....#Eg....|
00000030  e7 03 30 30 fe dc ba 98  76 54 32 10 01 23 45 67  |..00....vT2..#Eg|
00000040  89 ab cd ef e7 03 30 30                           |......00|

2026-10-05 13:50:12137.184.210.250to 111/udprawUS

>·0000000·0·aN000000000000000000000000

payload bytes

00000000  3e ec e3 ca 30 30 30 30  30 30 30 02 30 bc 61 4e  |>...0000000.0.aN|
00000010  30 30 30 30 30 30 30 30  30 30 30 30 30 30 30 30  |0000000000000000|
00000020  30 30 30 30 30 30 30 30                           |00000000|

2026-10-05 13:50:11137.184.210.250to 443/udprawUS

r·*·Q999·

payload bytes

00000000  72 89 c1 9c 1c 2a ff fc  f1 51 39 39 39 00        |r....*...Q999.|

2026-10-05 13:50:10137.184.210.250to 443/udpdnsUS

DNS response 15

payload bytes

00000000  16 fe ff 00 00 00 00 00  00 00 00 00 91 01 00 00  |................|
00000010  85 00 00 00 00 00 00 00  85 fe fd 00 00 00 00 7c  |...............||
00000020  77 40 1e 8a c8 22 a0 a0  18 ff 93 08 ca ac 0a 64  |w@...".........d|
00000030  2f c9 22 64 bc 08 a8 16  89 19 30 00 00 00 24 c0  |/."d......0...$.|
00000040  2b c0 2f c0 2c c0 30 cc  a9 cc a8 c0 ac c0 ae c0  |+./.,.0.........|
00000050  09 c0 13 c0 0a c0 14 00  9c 00 9d 00 3c 00 2f 00  |............<./.|
00000060  35 00 0a 01 00 00 37 00  0a 00 0a 00 08 00 1d 00  |5.....7.........|
00000070  17 00 18 00 19 00 0b 00  02 01 00 00 0d 00 16 00  |................|
00000080  14 04 03 08 04 04 01 05  03 08 05 05 01 08 06 06  |................|
00000090  01 02 03 02 01 00 17 00  00 ff 01 00 01 00        |..............|

2026-10-05 13:50:05137.184.210.250to 443/udprawUS

8d·x·ˏ00000

payload bytes

00000000  38 64 c1 78 01 b8 9b cb  8f 30 30 30 30 30        |8d.x.....00000|

2026-10-05 13:50:01137.184.210.250to 427/udprawUS

·6 ·en·service:service-agent·default·

payload bytes

00000000  02 01 00 00 36 20 00 00  00 00 00 01 00 02 65 6e  |....6 ........en|
00000010  00 00 00 15 73 65 72 76  69 63 65 3a 73 65 72 76  |....service:serv|
00000020  69 63 65 2d 61 67 65 6e  74 00 07 64 65 66 61 75  |ice-agent..defau|
00000030  6c 74 00 00 00 00                                 |lt....|

2026-10-05 13:50:00137.184.210.250to 177/udprawUS
0·0·0·0
payload bytes
```
00000000  30 01 30 02 30 01 30                              |0.0.0.0|
```

2026-10-05 13:49:59137.184.210.250to 389/udpldapUS

0·-·c·$· · ·d·objectClass0·

payload bytes

00000000  30 84 00 00 00 2d 02 01  07 63 84 00 00 00 24 04  |0....-...c....$.|
00000010  00 0a 01 00 0a 01 00 02  01 00 02 01 64 01 01 00  |............d...|
00000020  87 0b 6f 62 6a 65 63 74  43 6c 61 73 73 30 84 00  |..objectClass0..|
00000030  00 00 00                                          |...|

2026-10-05 13:49:58137.184.210.250to 137/udprawUS

·0·0·000000 CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA00!0·

payload bytes

00000000  80 f0 30 10 30 01 30 30  30 30 30 30 20 43 4b 41  |..0.0.000000 CKA|
00000010  41 41 41 41 41 41 41 41  41 41 41 41 41 41 41 41  |AAAAAAAAAAAAAAAA|
00000020  41 41 41 41 41 41 41 41  41 41 41 41 41 30 30 21  |AAAAAAAAAAAAA00!|
00000030  30 01                                             |0.|

2026-10-05 13:49:57137.184.210.250to 135/udprawUS
00·000000000
payload bytes
```
00000000  30 30 10 30 30 30 30 30  30 30 30 30              |00.000000000|
```

2026-10-05 13:49:56137.184.210.250to 518/udprawUS

r·0000000·0·0·|00000000000000000000

payload bytes

00000000  72 fe 1d 13 30 30 30 30  30 30 30 02 30 01 86 a0  |r...0000000.0...|
00000010  30 01 97 7c 30 30 30 30  30 30 30 30 30 30 30 30  |0..|000000000000|
00000020  30 30 30 30 30 30 30 30                           |00000000|

2026-10-05 13:49:55137.184.210.250to 517/udprawUS

r·0000000·0·0·|00000000000000000000

payload bytes

00000000  72 fe 1d 13 30 30 30 30  30 30 30 02 30 01 86 a0  |r...0000000.0...|
00000010  30 01 97 7c 30 30 30 30  30 30 30 30 30 30 30 30  |0..|000000000000|
00000020  30 30 30 30 30 30 30 30                           |00000000|

2026-10-05 13:49:54137.184.210.250to 407/udprawUS

r·0000000·0·0·|00000000000000000000

payload bytes

00000000  72 fe 1d 13 30 30 30 30  30 30 30 02 30 01 86 a0  |r...0000000.0...|
00000010  30 01 97 7c 30 30 30 30  30 30 30 30 30 30 30 30  |0..|000000000000|
00000020  30 30 30 30 30 30 30 30                           |00000000|

2026-10-05 13:49:53137.184.210.250to 111/udprawUS

r·0000000·0·0·|00000000000000000000

payload bytes

00000000  72 fe 1d 13 30 30 30 30  30 30 30 02 30 01 86 a0  |r...0000000.0...|
00000010  30 01 97 7c 30 30 30 30  30 30 30 30 30 30 30 30  |0..|000000000000|
00000020  30 30 30 30 30 30 30 30                           |00000000|

2026-10-05 13:49:52137.184.210.250to 443/udprawUS

12345678Q999·

payload bytes

00000000  0d 31 32 33 34 35 36 37  38 51 39 39 39 00        |.12345678Q999.|

2026-10-05 13:49:51137.184.210.250to 177/udpxdmcpUS

payload bytes

00000000  00 01 00 02 00 01 00                              |.......|

2026-10-05 13:49:50137.184.210.250to 520/udprawUS

payload bytes

00000000  01 01 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000010  00 00 00 00 00 00 10 00                           |........|

2026-10-05 13:49:47137.184.210.250to 111/udpdnsUS

DNS response 15

payload bytes

00000000  1a a9 ff e1 00 00 00 00  00 00 00 02 00 01 86 a0  |................|
00000010  00 00 00 02 00 00 00 04  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00                           |........|

2026-10-05 13:49:46137.184.210.250to 137/udpdnsUS

DNS query SRV CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

payload bytes

00000000  e5 d8 00 00 00 01 00 00  00 00 00 00 20 43 4b 41  |............ CKA|
00000010  41 41 41 41 41 41 41 41  41 41 41 41 41 41 41 41  |AAAAAAAAAAAAAAAA|
00000020  41 41 41 41 41 41 41 41  41 41 41 41 41 00 00 21  |AAAAAAAAAAAAA..!|
00000030  00 01                                             |..|

2026-10-05 13:49:45137.184.210.250to 389/udpldapUS

0·-·c·$· · ·objectclass0·

payload bytes

00000000  30 84 00 00 00 2d 02 01  01 63 84 00 00 00 24 04  |0....-...c....$.|
00000010  00 0a 01 00 0a 01 00 02  01 00 02 01 00 01 01 00  |................|
00000020  87 0b 6f 62 6a 65 63 74  63 6c 61 73 73 30 84 00  |..objectclass0..|
00000030  00 00 00 00 0a                                    |.....|

2026-10-05 13:49:44137.184.210.250to 523/udprawUS

DB2GETADDR·SQL09010·

payload bytes

00000000  44 42 32 47 45 54 41 44  44 52 00 53 51 4c 30 39  |DB2GETADDR.SQL09|
00000010  30 31 30 00                                       |010.|