UDP traffic
Datagrams matching port:3702 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.
A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.
Your plan searches up to 7d, so 30d was shortened. Plans
13
Datagrams
5
Source addresses
5
Networks
5
Countries
1
Destination ports
Protocols
Destination ports
- 3702/udp from 5 sources13
Networks
- AS209630 LLC Vash Kredit Bank from 1 source4
- AS215925 Vpsvault.host Ltd from 1 source3
- AS211298 Driftnet Ltd from 1 source3
- AS209605 UAB Host Baltic from 1 source2
- AS396982 Google LLC from 1 source1
Countries
Source addresses (unverified)
| Address | Network | Cc | Datagrams | Last seen (UTC) |
|---|---|---|---|---|
| 151.243.11.230 | AS209630 LLC Vash Kredit Bank | AE | 4 | 2026-10-05 13:50 |
| 45.205.1.231 | AS215925 Vpsvault.host Ltd | BR | 3 | 2026-10-05 17:53 |
| 193.163.125.241 | AS211298 Driftnet Ltd | GB | 3 | 2026-10-05 14:25 |
| 141.98.11.129 | AS209605 UAB Host Baltic | LT | 2 | 2026-10-05 15:59 |
| 147.185.132.231 | AS396982 Google LLC | US | 1 | 2026-10-05 17:10 |
Latest datagrams
payload bytes
00000000 3c 74 64 73 3a 47 65 74 44 65 76 69 63 65 49 6e |<tds:GetDeviceIn| 00000010 66 6f 72 6d 61 74 69 6f 6e 20 2f 3e |formation />|
payload bytes
00000000 3c 74 64 73 3a 47 65 74 44 65 76 69 63 65 49 6e |<tds:GetDeviceIn| 00000010 66 6f 72 6d 61 74 69 6f 6e 20 2f 3e |formation />|
payload bytes
00000000 3c 74 64 73 3a 47 65 74 44 65 76 69 63 65 49 6e |<tds:GetDeviceIn| 00000010 66 6f 72 6d 61 74 69 6f 6e 20 2f 3e |formation />|
payload bytes
00000000 3c 65 6e 76 3a 45 6e 76 65 6c 6f 70 65 20 78 6d |<env:Envelope xm| 00000010 6c 6e 73 3a 65 6e 76 3d 22 68 74 74 70 3a 2f 2f |lns:env="http://| 00000020 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f |www.w3.org/2003/| 00000030 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 |05/soap-envelope| 00000040 22 20 78 6d 6c 6e 73 3a 77 73 61 3d 22 68 74 74 |" xmlns:wsa="htt| 00000050 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 |p://schemas.xmls| 00000060 6f 61 70 2e 6f 72 67 2f 77 73 2f 32 30 30 34 2f |oap.org/ws/2004/| 00000070 30 38 2f 61 64 64 72 65 73 73 69 6e 67 22 20 78 |08/addressing" x| 00000080 6d 6c 6e 73 3a 77 73 64 3d 22 68 74 74 70 3a 2f |mlns:wsd="http:/| 00000090 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 |/schemas.xmlsoap| 000000a0 2e 6f 72 67 2f 77 73 2f 32 30 30 35 2f 30 34 2f |.org/ws/2005/04/| 000000b0 64 69 73 63 6f 76 65 72 79 22 3e 3c 65 6e 76 3a |discovery"><env:| 000000c0 48 65 61 64 65 72 3e 3c 77 73 64 3a 41 70 70 53 |Header><wsd:AppS| 000000d0 65 71 75 65 6e 63 65 20 49 6e 73 74 61 6e 63 65 |equence Instance| 000000e0 49 64 3d 22 31 32 38 35 36 32 34 39 35 38 37 33 |Id="128562495873| 000000f0 37 22 20 4d 65 73 73 61 67 65 4e 75 6d 62 65 72 |7" MessageNumber| ... 512 bytes shown in part
payload bytes
00000000 3c 3a 3e |<:>|
payload bytes
00000000 3c 3a 3e |<:>|
payload bytes
00000000 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 |<?xml version="1| 00000010 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 |.0" encoding="UT| 00000020 46 2d 38 22 3f 3e 3c 65 3a 45 6e 76 65 6c 6f 70 |F-8"?><e:Envelop| 00000030 65 20 78 6d 6c 6e 73 3a 65 3d 22 68 74 74 70 3a |e xmlns:e="http:| 00000040 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 |//www.w3.org/200| 00000050 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f |3/05/soap-envelo| 00000060 70 65 22 20 78 6d 6c 6e 73 3a 77 3d 22 68 74 74 |pe" xmlns:w="htt| 00000070 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 |p://schemas.xmls| 00000080 6f 61 70 2e 6f 72 67 2f 77 73 2f 32 30 30 34 2f |oap.org/ws/2004/| 00000090 30 38 2f 61 64 64 72 65 73 73 69 6e 67 22 20 78 |08/addressing" x| 000000a0 6d 6c 6e 73 3a 64 3d 22 68 74 74 70 3a 2f 2f 73 |mlns:d="http://s| 000000b0 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f |chemas.xmlsoap.o| 000000c0 72 67 2f 77 73 2f 32 30 30 35 2f 30 34 2f 64 69 |rg/ws/2005/04/di| 000000d0 73 63 6f 76 65 72 79 22 20 78 6d 6c 6e 73 3a 64 |scovery" xmlns:d| 000000e0 6e 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 6e |n="http://www.on| 000000f0 76 69 66 2e 6f 72 67 2f 76 65 72 31 30 2f 6e 65 |vif.org/ver10/ne| ... 512 bytes shown in part
payload bytes
00000000 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 |<?xml version="1| 00000010 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 |.0" encoding="ut| 00000020 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 |f-8"?><soap:Enve| 00000030 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d |lope xmlns:soap=| 00000040 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f |"http://www.w3.o| 00000050 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d |rg/2003/05/soap-| 00000060 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a |envelope" xmlns:| 00000070 77 73 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 |wsa="http://sche| 00000080 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f |mas.xmlsoap.org/| 00000090 77 73 2f 32 30 30 34 2f 30 38 2f 61 64 64 72 65 |ws/2004/08/addre| 000000a0 73 73 69 6e 67 22 20 78 6d 6c 6e 73 3a 77 73 64 |ssing" xmlns:wsd| 000000b0 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 |="http://schemas| 000000c0 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 77 73 2f |.xmlsoap.org/ws/| 000000d0 32 30 30 35 2f 30 34 2f 64 69 73 63 6f 76 65 72 |2005/04/discover| 000000e0 79 22 20 78 6d 6c 6e 73 3a 77 73 64 70 3d 22 68 |y" xmlns:wsdp="h| 000000f0 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d |ttp://schemas.xm| ... 512 bytes shown in part
payload bytes
00000000 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 |<?xml version="1| 00000010 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 |.0" encoding="UT| 00000020 46 2d 38 22 3f 3e 3c 65 6e 76 3a 45 6e 76 65 6c |F-8"?><env:Envel| 00000030 6f 70 65 20 78 6d 6c 6e 73 3a 65 6e 76 3d 22 68 |ope xmlns:env="h| 00000040 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 |ttp://www.w3.org| 00000050 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e |/2003/05/soap-en| 00000060 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 |velope" xmlns:ws| 00000070 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 |a="http://schema| 00000080 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 77 73 |s.xmlsoap.org/ws| 00000090 2f 32 30 30 34 2f 30 38 2f 61 64 64 72 65 73 73 |/2004/08/address| 000000a0 69 6e 67 22 20 78 6d 6c 6e 73 3a 77 73 64 3d 22 |ing" xmlns:wsd="| 000000b0 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 |http://schemas.x| 000000c0 6d 6c 73 6f 61 70 2e 6f 72 67 2f 77 73 2f 32 30 |mlsoap.org/ws/20| 000000d0 30 35 2f 30 34 2f 64 69 73 63 6f 76 65 72 79 22 |05/04/discovery"| 000000e0 3e 3c 65 6e 76 3a 48 65 61 64 65 72 3e 3c 77 73 |><env:Header><ws| 000000f0 61 3a 54 6f 3e 75 72 6e 3a 73 63 68 65 6d 61 73 |a:To>urn:schemas| ... 512 bytes shown in part
payload bytes
00000000 3c 74 64 73 3a 47 65 74 44 65 76 69 63 65 49 6e |<tds:GetDeviceIn| 00000010 66 6f 72 6d 61 74 69 6f 6e 20 2f 3e |formation />|
payload bytes
00000000 3c 74 64 73 3a 47 65 74 44 65 76 69 63 65 49 6e |<tds:GetDeviceIn| 00000010 66 6f 72 6d 61 74 69 6f 6e 20 2f 3e |formation />|
payload bytes
00000000 3c 74 64 73 3a 47 65 74 44 65 76 69 63 65 49 6e |<tds:GetDeviceIn| 00000010 66 6f 72 6d 61 74 69 6f 6e 20 2f 3e |formation />|
payload bytes
00000000 3c 74 64 73 3a 47 65 74 44 65 76 69 63 65 49 6e |<tds:GetDeviceIn| 00000010 66 6f 72 6d 61 74 69 6f 6e 20 2f 3e |formation />|