Explore

CVEs Early actors Payloads Campaigns Emissions Index Ports User-agentsUDP traffic

Integrations

Overview MCP Feeds API / Enrich Splunk ES Microsoft Sentinel Elastic MISP OpenCTI CrowdSec

Pricing Docs Blog

UDP traffic

Datagrams matching port:427 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

9

Datagrams

2

Source addresses

2

Networks

2

Countries

1

Destination ports

Protocols

raw from 2 sources9

Destination ports

427/udp from 2 sources9

Networks

AS401661 EMBNEX, LLC from 1 source8
AS14061 DigitalOcean, LLC from 1 source1

Countries

Source addresses (unverified)

Address	Network	Cc	Datagrams	Last seen (UTC)
16.5.0.234	AS401661 EMBNEX, LLC	BR	8	2026-10-05 16:51
137.184.210.250	AS14061 DigitalOcean, LLC	US	1	2026-10-05 13:50

Latest datagrams

2026-10-05 16:51:1516.5.0.234to 427/udprawBR

\x02\t\x00\x00\x1d\x00\x00\x00\x00\x00s_\x00\x02en\x00\x00\xff\xff\x00\x07default

payload bytes

00000000  5c 78 30 32 5c 74 5c 78  30 30 5c 78 30 30 5c 78  |\x02\t\x00\x00\x|
00000010  31 64 5c 78 30 30 5c 78  30 30 5c 78 30 30 5c 78  |1d\x00\x00\x00\x|
00000020  30 30 5c 78 30 30 73 5f  5c 78 30 30 5c 78 30 32  |00\x00s_\x00\x02|
00000030  65 6e 5c 78 30 30 5c 78  30 30 5c 78 66 66 5c 78  |en\x00\x00\xff\x|
00000040  66 66 5c 78 30 30 5c 78  30 37 64 65 66 61 75 6c  |ff\x00\x07defaul|
00000050  74                                                |t|

2026-10-05 16:50:4316.5.0.234to 427/udprawBR

\x02\t\x00\x00\x1d\x00\x00\x00\x00\x00s_\x00\x02en\x00\x00\xff\xff\x00\x07default

payload bytes

00000000  5c 78 30 32 5c 74 5c 78  30 30 5c 78 30 30 5c 78  |\x02\t\x00\x00\x|
00000010  31 64 5c 78 30 30 5c 78  30 30 5c 78 30 30 5c 78  |1d\x00\x00\x00\x|
00000020  30 30 5c 78 30 30 73 5f  5c 78 30 30 5c 78 30 32  |00\x00s_\x00\x02|
00000030  65 6e 5c 78 30 30 5c 78  30 30 5c 78 66 66 5c 78  |en\x00\x00\xff\x|
00000040  66 66 5c 78 30 30 5c 78  30 37 64 65 66 61 75 6c  |ff\x00\x07defaul|
00000050  74                                                |t|

2026-10-05 16:49:4316.5.0.234to 427/udprawBR

\x02\t\x00\x00\x1d\x00\x00\x00\x00\x00s_\x00\x02en\x00\x00\xff\xff\x00\x07default

payload bytes

00000000  5c 78 30 32 5c 74 5c 78  30 30 5c 78 30 30 5c 78  |\x02\t\x00\x00\x|
00000010  31 64 5c 78 30 30 5c 78  30 30 5c 78 30 30 5c 78  |1d\x00\x00\x00\x|
00000020  30 30 5c 78 30 30 73 5f  5c 78 30 30 5c 78 30 32  |00\x00s_\x00\x02|
00000030  65 6e 5c 78 30 30 5c 78  30 30 5c 78 66 66 5c 78  |en\x00\x00\xff\x|
00000040  66 66 5c 78 30 30 5c 78  30 37 64 65 66 61 75 6c  |ff\x00\x07defaul|
00000050  74                                                |t|

2026-10-05 16:49:3916.5.0.234to 427/udprawBR

\x02\t\x00\x00\x1d\x00\x00\x00\x00\x00s_\x00\x02en\x00\x00\xff\xff\x00\x07default

payload bytes

00000000  5c 78 30 32 5c 74 5c 78  30 30 5c 78 30 30 5c 78  |\x02\t\x00\x00\x|
00000010  31 64 5c 78 30 30 5c 78  30 30 5c 78 30 30 5c 78  |1d\x00\x00\x00\x|
00000020  30 30 5c 78 30 30 73 5f  5c 78 30 30 5c 78 30 32  |00\x00s_\x00\x02|
00000030  65 6e 5c 78 30 30 5c 78  30 30 5c 78 66 66 5c 78  |en\x00\x00\xff\x|
00000040  66 66 5c 78 30 30 5c 78  30 37 64 65 66 61 75 6c  |ff\x00\x07defaul|
00000050  74                                                |t|

2026-10-05 16:48:5316.5.0.234to 427/udprawBR

\x02\t\x00\x00\x1d\x00\x00\x00\x00\x00s_\x00\x02en\x00\x00\xff\xff\x00\x07default

payload bytes

00000000  5c 78 30 32 5c 74 5c 78  30 30 5c 78 30 30 5c 78  |\x02\t\x00\x00\x|
00000010  31 64 5c 78 30 30 5c 78  30 30 5c 78 30 30 5c 78  |1d\x00\x00\x00\x|
00000020  30 30 5c 78 30 30 73 5f  5c 78 30 30 5c 78 30 32  |00\x00s_\x00\x02|
00000030  65 6e 5c 78 30 30 5c 78  30 30 5c 78 66 66 5c 78  |en\x00\x00\xff\x|
00000040  66 66 5c 78 30 30 5c 78  30 37 64 65 66 61 75 6c  |ff\x00\x07defaul|
00000050  74                                                |t|

2026-10-05 16:48:4816.5.0.234to 427/udprawBR

\x02\t\x00\x00\x1d\x00\x00\x00\x00\x00s_\x00\x02en\x00\x00\xff\xff\x00\x07default

payload bytes

00000000  5c 78 30 32 5c 74 5c 78  30 30 5c 78 30 30 5c 78  |\x02\t\x00\x00\x|
00000010  31 64 5c 78 30 30 5c 78  30 30 5c 78 30 30 5c 78  |1d\x00\x00\x00\x|
00000020  30 30 5c 78 30 30 73 5f  5c 78 30 30 5c 78 30 32  |00\x00s_\x00\x02|
00000030  65 6e 5c 78 30 30 5c 78  30 30 5c 78 66 66 5c 78  |en\x00\x00\xff\x|
00000040  66 66 5c 78 30 30 5c 78  30 37 64 65 66 61 75 6c  |ff\x00\x07defaul|
00000050  74                                                |t|

2026-10-05 16:47:3016.5.0.234to 427/udprawBR

\x02\t\x00\x00\x1d\x00\x00\x00\x00\x00s_\x00\x02en\x00\x00\xff\xff\x00\x07default

payload bytes

00000000  5c 78 30 32 5c 74 5c 78  30 30 5c 78 30 30 5c 78  |\x02\t\x00\x00\x|
00000010  31 64 5c 78 30 30 5c 78  30 30 5c 78 30 30 5c 78  |1d\x00\x00\x00\x|
00000020  30 30 5c 78 30 30 73 5f  5c 78 30 30 5c 78 30 32  |00\x00s_\x00\x02|
00000030  65 6e 5c 78 30 30 5c 78  30 30 5c 78 66 66 5c 78  |en\x00\x00\xff\x|
00000040  66 66 5c 78 30 30 5c 78  30 37 64 65 66 61 75 6c  |ff\x00\x07defaul|
00000050  74                                                |t|

2026-10-05 16:44:1416.5.0.234to 427/udprawBR

\x02\t\x00\x00\x1d\x00\x00\x00\x00\x00s_\x00\x02en\x00\x00\xff\xff\x00\x07default

payload bytes

00000000  5c 78 30 32 5c 74 5c 78  30 30 5c 78 30 30 5c 78  |\x02\t\x00\x00\x|
00000010  31 64 5c 78 30 30 5c 78  30 30 5c 78 30 30 5c 78  |1d\x00\x00\x00\x|
00000020  30 30 5c 78 30 30 73 5f  5c 78 30 30 5c 78 30 32  |00\x00s_\x00\x02|
00000030  65 6e 5c 78 30 30 5c 78  30 30 5c 78 66 66 5c 78  |en\x00\x00\xff\x|
00000040  66 66 5c 78 30 30 5c 78  30 37 64 65 66 61 75 6c  |ff\x00\x07defaul|
00000050  74                                                |t|

2026-10-05 13:50:01137.184.210.250to 427/udprawUS

·6 ·en·service:service-agent·default·

payload bytes

00000000  02 01 00 00 36 20 00 00  00 00 00 01 00 02 65 6e  |....6 ........en|
00000010  00 00 00 15 73 65 72 76  69 63 65 3a 73 65 72 76  |....service:serv|
00000020  69 63 65 2d 61 67 65 6e  74 00 07 64 65 66 61 75  |ice-agent..defau|
00000030  6c 74 00 00 00 00                                 |lt....|