UDP traffic

Datagrams matching ip:66.132.172.254 sent to HoneyLabs sensors over UDP in the last 24 hours. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Datagrams

Source addresses

Networks

Countries

Destination ports

Protocols

dns from 1 source6
sip from 1 source2

Destination ports

6953/udp from 1 source1
28209/udp from 1 source1
39526/udp from 1 source1
42795/udp from 1 source1
44742/udp from 1 source1
45443/udp from 1 source1
49760/udp from 1 source1
62890/udp from 1 source1

Networks

AS398324 Censys, Inc. from 1 source8

Countries

US United States8

Source addresses (unverified)

Address	Network	Cc	Datagrams	Last seen (UTC)
66.132.172.254	AS398324 Censys, Inc.	US	8	2026-10-05 20:20

Latest datagrams

2026-10-05 20:20:2066.132.172.254to 44742/udpdnsUS

DNS response 15

payload bytes

00000000  16 fe fd 00 00 00 00 00  00 00 00 00 7e 01 00 00  |............~...|
00000010  72 00 00 00 00 00 00 00  72 fe fd 5f 06 07 42 6e  |r.......r.._..Bn|
00000020  53 de 72 d8 ef 33 7e 5f  ee 59 10 19 49 8b 2d 4e  |S.r..3~_.Y..I.-N|
00000030  7f de 3e 09 f4 a8 3f 03  f9 57 06 00 00 00 0c c0  |..>...?..W......|
00000040  ac c0 ae c0 2b c0 2f c0  0a c0 14 01 00 00 3c 00  |....+./.......<.|
00000050  0d 00 10 00 0e 04 03 05  03 06 03 04 01 05 01 06  |................|
00000060  01 08 07 00 0a 00 08 00  06 00 1d 00 17 00 18 00  |................|
00000070  0b 00 02 01 00 00 17 00  00 00 00 00 0e 00 0c 00  |................|
00000080  00 09 31 32 37 2e 30 2e  30 2e 31                 |..127.0.0.1|

2026-10-05 17:32:5466.132.172.254to 42795/udpdnsUS

DNS response 15

payload bytes

00000000  16 fe fd 00 00 00 00 00  00 00 00 00 7e 01 00 00  |............~...|
00000010  72 00 00 00 00 00 00 00  72 fe fd 5f 06 07 42 6e  |r.......r.._..Bn|
00000020  53 de 72 d8 ef 33 7e 5f  ee 59 10 19 49 8b 2d 4e  |S.r..3~_.Y..I.-N|
00000030  7f de 3e 09 f4 a8 3f 03  f9 57 06 00 00 00 0c c0  |..>...?..W......|
00000040  ac c0 ae c0 2b c0 2f c0  0a c0 14 01 00 00 3c 00  |....+./.......<.|
00000050  0d 00 10 00 0e 04 03 05  03 06 03 04 01 05 01 06  |................|
00000060  01 08 07 00 0a 00 08 00  06 00 1d 00 17 00 18 00  |................|
00000070  0b 00 02 01 00 00 17 00  00 00 00 00 0e 00 0c 00  |................|
00000080  00 09 31 32 37 2e 30 2e  30 2e 31                 |..127.0.0.1|

2026-10-05 15:52:0466.132.172.254to 45443/udpdnsUS

DNS response 15

payload bytes

00000000  16 fe fd 00 00 00 00 00  00 00 00 00 7e 01 00 00  |............~...|
00000010  72 00 00 00 00 00 00 00  72 fe fd 5f 06 07 42 6e  |r.......r.._..Bn|
00000020  53 de 72 d8 ef 33 7e 5f  ee 59 10 19 49 8b 2d 4e  |S.r..3~_.Y..I.-N|
00000030  7f de 3e 09 f4 a8 3f 03  f9 57 06 00 00 00 0c c0  |..>...?..W......|
00000040  ac c0 ae c0 2b c0 2f c0  0a c0 14 01 00 00 3c 00  |....+./.......<.|
00000050  0d 00 10 00 0e 04 03 05  03 06 03 04 01 05 01 06  |................|
00000060  01 08 07 00 0a 00 08 00  06 00 1d 00 17 00 18 00  |................|
00000070  0b 00 02 01 00 00 17 00  00 00 00 00 0e 00 0c 00  |................|
00000080  00 09 31 32 37 2e 30 2e  30 2e 31                 |..127.0.0.1|

2026-10-05 15:20:1266.132.172.254to 39526/udpdnsUS

DNS response 15

payload bytes

00000000  16 fe fd 00 00 00 00 00  00 00 00 00 7e 01 00 00  |............~...|
00000010  72 00 00 00 00 00 00 00  72 fe fd 5f 06 07 42 6e  |r.......r.._..Bn|
00000020  53 de 72 d8 ef 33 7e 5f  ee 59 10 19 49 8b 2d 4e  |S.r..3~_.Y..I.-N|
00000030  7f de 3e 09 f4 a8 3f 03  f9 57 06 00 00 00 0c c0  |..>...?..W......|
00000040  ac c0 ae c0 2b c0 2f c0  0a c0 14 01 00 00 3c 00  |....+./.......<.|
00000050  0d 00 10 00 0e 04 03 05  03 06 03 04 01 05 01 06  |................|
00000060  01 08 07 00 0a 00 08 00  06 00 1d 00 17 00 18 00  |................|
00000070  0b 00 02 01 00 00 17 00  00 00 00 00 0e 00 0c 00  |................|
00000080  00 09 31 32 37 2e 30 2e  30 2e 31                 |..127.0.0.1|

2026-10-05 13:53:4566.132.172.254to 62890/udpdnsUS

DNS response 15

payload bytes

00000000  16 fe fd 00 00 00 00 00  00 00 00 00 7e 01 00 00  |............~...|
00000010  72 00 00 00 00 00 00 00  72 fe fd 5f 06 07 42 6e  |r.......r.._..Bn|
00000020  53 de 72 d8 ef 33 7e 5f  ee 59 10 19 49 8b 2d 4e  |S.r..3~_.Y..I.-N|
00000030  7f de 3e 09 f4 a8 3f 03  f9 57 06 00 00 00 0c c0  |..>...?..W......|
00000040  ac c0 ae c0 2b c0 2f c0  0a c0 14 01 00 00 3c 00  |....+./.......<.|
00000050  0d 00 10 00 0e 04 03 05  03 06 03 04 01 05 01 06  |................|
00000060  01 08 07 00 0a 00 08 00  06 00 1d 00 17 00 18 00  |................|
00000070  0b 00 02 01 00 00 17 00  00 00 00 00 0e 00 0c 00  |................|
00000080  00 09 31 32 37 2e 30 2e  30 2e 31                 |..127.0.0.1|

2026-10-05 12:34:1766.132.172.254to 28209/udpsipUS

OPTIONS sip:censysinspect@censys.io SIP/2.0 To: <sip:test.echo@sip5060.net> From: Censys <sip:censysinspect@censys.io> CSeq: 1 OPTIONS Call-ID: a84b4c76e66710 Max-Forwards: 70 Via: SIP/2.0/UDP 1

payload bytes

00000000  4f 50 54 49 4f 4e 53 20  73 69 70 3a 63 65 6e 73  |OPTIONS sip:cens|
00000010  79 73 69 6e 73 70 65 63  74 40 63 65 6e 73 79 73  |ysinspect@censys|
00000020  2e 69 6f 20 53 49 50 2f  32 2e 30 0d 0a 54 6f 3a  |.io SIP/2.0..To:|
00000030  20 3c 73 69 70 3a 74 65  73 74 2e 65 63 68 6f 40  | <sip:test.echo@|
00000040  73 69 70 35 30 36 30 2e  6e 65 74 3e 0d 0a 46 72  |sip5060.net>..Fr|
00000050  6f 6d 3a 20 43 65 6e 73  79 73 20 3c 73 69 70 3a  |om: Censys <sip:|
00000060  63 65 6e 73 79 73 69 6e  73 70 65 63 74 40 63 65  |censysinspect@ce|
00000070  6e 73 79 73 2e 69 6f 3e  0d 0a 43 53 65 71 3a 20  |nsys.io>..CSeq: |
00000080  31 20 4f 50 54 49 4f 4e  53 0d 0a 43 61 6c 6c 2d  |1 OPTIONS..Call-|
00000090  49 44 3a 20 61 38 34 62  34 63 37 36 65 36 36 37  |ID: a84b4c76e667|
000000a0  31 30 0d 0a 4d 61 78 2d  46 6f 72 77 61 72 64 73  |10..Max-Forwards|
000000b0  3a 20 37 30 0d 0a 56 69  61 3a 20 53 49 50 2f 32  |: 70..Via: SIP/2|
000000c0  2e 30 2f 55 44 50 20 31  32 37 2e 30 2e 30 2e 31  |.0/UDP 127.0.0.1|
000000d0  3b 72 70 6f 72 74 0d 0a  41 63 63 65 70 74 3a 20  |;rport..Accept: |
000000e0  61 70 70 6c 69 63 61 74  69 6f 6e 2f 73 64 70 0d  |application/sdp.|
000000f0  0a 43 6f 6e 74 65 6e 74  2d 4c 65 6e 67 74 68 3a  |.Content-Length:|
... 262 bytes shown in part

2026-10-05 12:06:4366.132.172.254to 6953/udpdnsUS

DNS response 15

payload bytes

00000000  16 fe fd 00 00 00 00 00  00 00 00 00 7e 01 00 00  |............~...|
00000010  72 00 00 00 00 00 00 00  72 fe fd 5f 06 07 42 6e  |r.......r.._..Bn|
00000020  53 de 72 d8 ef 33 7e 5f  ee 59 10 19 49 8b 2d 4e  |S.r..3~_.Y..I.-N|
00000030  7f de 3e 09 f4 a8 3f 03  f9 57 06 00 00 00 0c c0  |..>...?..W......|
00000040  ac c0 ae c0 2b c0 2f c0  0a c0 14 01 00 00 3c 00  |....+./.......<.|
00000050  0d 00 10 00 0e 04 03 05  03 06 03 04 01 05 01 06  |................|
00000060  01 08 07 00 0a 00 08 00  06 00 1d 00 17 00 18 00  |................|
00000070  0b 00 02 01 00 00 17 00  00 00 00 00 0e 00 0c 00  |................|
00000080  00 09 31 32 37 2e 30 2e  30 2e 31                 |..127.0.0.1|

2026-10-05 11:01:0666.132.172.254to 49760/udpsipUS

OPTIONS sip:censysinspect@censys.io SIP/2.0 To: <sip:test.echo@sip5060.net> From: Censys <sip:censysinspect@censys.io> CSeq: 1 OPTIONS Call-ID: a84b4c76e66710 Max-Forwards: 70 Via: SIP/2.0/UDP 1

payload bytes

00000000  4f 50 54 49 4f 4e 53 20  73 69 70 3a 63 65 6e 73  |OPTIONS sip:cens|
00000010  79 73 69 6e 73 70 65 63  74 40 63 65 6e 73 79 73  |ysinspect@censys|
00000020  2e 69 6f 20 53 49 50 2f  32 2e 30 0d 0a 54 6f 3a  |.io SIP/2.0..To:|
00000030  20 3c 73 69 70 3a 74 65  73 74 2e 65 63 68 6f 40  | <sip:test.echo@|
00000040  73 69 70 35 30 36 30 2e  6e 65 74 3e 0d 0a 46 72  |sip5060.net>..Fr|
00000050  6f 6d 3a 20 43 65 6e 73  79 73 20 3c 73 69 70 3a  |om: Censys <sip:|
00000060  63 65 6e 73 79 73 69 6e  73 70 65 63 74 40 63 65  |censysinspect@ce|
00000070  6e 73 79 73 2e 69 6f 3e  0d 0a 43 53 65 71 3a 20  |nsys.io>..CSeq: |
00000080  31 20 4f 50 54 49 4f 4e  53 0d 0a 43 61 6c 6c 2d  |1 OPTIONS..Call-|
00000090  49 44 3a 20 61 38 34 62  34 63 37 36 65 36 36 37  |ID: a84b4c76e667|
000000a0  31 30 0d 0a 4d 61 78 2d  46 6f 72 77 61 72 64 73  |10..Max-Forwards|
000000b0  3a 20 37 30 0d 0a 56 69  61 3a 20 53 49 50 2f 32  |: 70..Via: SIP/2|
000000c0  2e 30 2f 55 44 50 20 31  32 37 2e 30 2e 30 2e 31  |.0/UDP 127.0.0.1|
000000d0  3b 72 70 6f 72 74 0d 0a  41 63 63 65 70 74 3a 20  |;rport..Accept: |
000000e0  61 70 70 6c 69 63 61 74  69 6f 6e 2f 73 64 70 0d  |application/sdp.|
000000f0  0a 43 6f 6e 74 65 6e 74  2d 4c 65 6e 67 74 68 3a  |.Content-Length:|
... 262 bytes shown in part