UDP traffic

Datagrams matching proto:raw sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

393

Datagrams

225

Source addresses

108

Networks

Countries

190

Destination ports

Protocols

raw from 225 sources393

Destination ports

623/udp from 1 source30
500/udp from 7 sources13
1194/udp from 9 sources12
443/udp from 6 sources12
427/udp from 2 sources9
3389/udp from 2 sources7
3702/udp from 3 sources7
27015/udp from 5 sources6
502/udp from 1 source6
389/udp from 3 sources6
8080/udp from 4 sources5
5060/udp from 5 sources5

Networks

AS14061 DigitalOcean, LLC from 7 sources50
AS8075 Microsoft Corporation from 36 sources40
AS37963 Hangzhou Alibaba Advertising Co.,Ltd. from 4 sources32
AS16628 DedFiberCo from 1 source30
AS398324 Censys, Inc. from 19 sources24
AS401661 EMBNEX, LLC from 1 source24
AS202425 IP Volume inc from 5 sources12
AS54290 Hostwinds LLC. from 2 sources10
AS63949 Akamai Connected Cloud from 6 sources9
AS20052 Arbor Networks, Inc. from 5 sources8

Countries

Source addresses (unverified)

Address	Network	Cc	Datagrams	Last seen (UTC)
104.237.240.112	AS16628 DedFiberCo	US	30	2026-10-05 17:01
16.5.0.234	AS401661 EMBNEX, LLC	BR	24	2026-10-05 17:10
137.184.210.250	AS14061 DigitalOcean, LLC	US	18	2026-10-05 13:50
104.248.129.131	AS14061 DigitalOcean, LLC	DE	13	2026-10-05 16:14
201.79.2.46	AS14061 DigitalOcean, LLC	DE	13	2026-10-05 16:48
121.41.167.96	AS37963 Hangzhou Alibaba Advertising Co.,Ltd.	CN	8	2026-10-05 15:58
121.41.171.126	AS37963 Hangzhou Alibaba Advertising Co.,Ltd.	CN	8	2026-10-05 16:21
112.124.59.239	AS37963 Hangzhou Alibaba Advertising Co.,Ltd.	CN	8	2026-10-05 16:42
47.95.207.57	AS37963 Hangzhou Alibaba Advertising Co.,Ltd.	CN	8	2026-10-05 15:42
104.168.132.113	AS54290 Hostwinds LLC.	US	6	2026-10-05 12:07
151.243.11.230	AS209630 LLC Vash Kredit Bank	AE	4	2026-10-05 13:50
185.242.226.97	AS202425 IP Volume inc	US	4	2026-10-05 16:39
45.205.1.231	AS215925 Vpsvault.host Ltd	BR	4	2026-10-05 14:16
104.168.140.86	AS54290 Hostwinds LLC.	US	4	2026-10-05 15:34
139.162.88.198	AS63949 Akamai Connected Cloud	JP	4	2026-10-05 16:46
185.242.226.68	AS202425 IP Volume inc	US	3	2026-10-05 17:01
66.132.172.248	AS398324 Censys, Inc.	US	3	2026-10-05 16:48
146.88.241.140	AS20052 Arbor Networks, Inc.	US	2	2026-10-05 13:24
20.121.120.111	AS8075 Microsoft Corporation	US	2	2026-10-05 14:11
66.132.186.218	AS398324 Censys, Inc.	US	2	2026-10-05 16:15

Latest datagrams

2026-10-05 17:22:1086.129.237.184to 16214/udprawGB

·͈F·=]·4Vx҃·M·E

payload bytes

00000000  01 cd 88 46 1c 3d 5d a1  b7 00 ff ff 00 fe fe fe  |...F.=].........|
00000010  fe fd fd fd fd 12 34 56  78 d2 83 90 4d 9e 91 02  |......4Vx...M...|
00000020  45                                                |E|

2026-10-05 17:22:00205.210.31.110to 1967/udprawUS

·4·՝[·P·

payload bytes

00000000  01 0f 00 34 00 00 00 00  00 04 00 10 00 00 00 00  |...4............|
00000010  d5 9d 5b eb 10 93 14 50  00 01 00 1c 00 00 00 00  |..[....P........|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00                                       |....|

2026-10-05 17:18:3645.185.145.66to 34086/udprawBR

·肿>·f·G·h=ѝ·;&·

payload bytes

00000000  cb e8 82 bf 3e 84 fc cd  66 ab 47 ac 07 ee 68 3d  |....>...f.G...h=|
00000010  d1 9d 04 95 3b 26 f0 bc                           |....;&..|

2026-10-05 17:14:44116.58.234.163to 24650/udprawTH

·+·:R·-·4Vx"·#i·t·

payload bytes

00000000  01 2b ff 3a 52 f1 2d 96  c6 00 ff ff 00 fe fe fe  |.+.:R.-.........|
00000010  fe fd fd fd fd 12 34 56  78 22 95 23 69 e8 74 89  |......4Vx".#i.t.|
00000020  d6                                                |.|

2026-10-05 17:13:5466.132.172.253to 4826/udprawUS

xb·_?·O·! "·"· · ·

payload bytes

00000000  78 62 9a 0f 5f 3f 16 4f  00 00 00 00 00 00 00 00  |xb.._?.O........|
00000010  21 20 22 08 00 00 00 00  00 00 01 88 22 00 00 ec  |! "........."...|
00000020  00 00 00 e8 01 01 00 1c  03 00 00 08 01 00 00 01  |................|
00000030  03 00 00 08 01 00 00 02  03 00 00 08 01 00 00 03  |................|
00000040  03 00 00 08 01 00 00 04  03 00 00 08 01 00 00 06  |................|
00000050  03 00 00 08 01 00 00 07  03 00 00 08 01 00 00 08  |................|
00000060  03 00 00 08 01 00 00 09  03 00 00 08 01 00 00 0b  |................|
00000070  03 00 00 08 01 00 00 0c  03 00 00 08 01 00 00 0d  |................|
00000080  03 00 00 08 02 00 00 01  03 00 00 08 02 00 00 02  |................|
00000090  03 00 00 08 03 00 00 00  03 00 00 08 03 00 00 01  |................|
000000a0  03 00 00 08 03 00 00 02  03 00 00 08 03 00 00 03  |................|
000000b0  03 00 00 08 03 00 00 04  03 00 00 08 03 00 00 05  |................|
000000c0  03 00 00 08 04 00 00 00  03 00 00 08 04 00 00 01  |................|
000000d0  03 00 00 08 04 00 00 02  03 00 00 08 04 00 00 05  |................|
000000e0  03 00 00 08 04 00 00 0e  03 00 00 08 04 00 00 0f  |................|
000000f0  03 00 00 08 04 00 00 10  03 00 00 08 04 00 00 11  |................|
... 392 bytes shown in part

2026-10-05 17:12:4914.225.1.210to 5353/udprawVN

3.·UW ·_(·t_,_@·%·0QW~I|o^^·A·~QgUZ{i:#·.·3·C83bJc3"b|·QZ|k·imv?Gq(·/0·c>Z·q<fUo·7k&·K

payload bytes

00000000  33 2e 10 55 57 09 14 13  5f 28 1e 74 5f 2c 5f 40  |3..UW..._(.t_,_@|
00000010  05 25 1f 12 30 51 57 7e  49 7c 6f 5e 5e 1a 41 12  |.%..0QW~I|o^^.A.|
00000020  7e 51 67 55 5a 7b 69 3a  23 07 2e 02 33 0e 43 38  |~QgUZ{i:#...3.C8|
00000030  33 62 4a 63 33 22 62 7c  1e 51 5a 7c 6b 1b 0e 69  |3bJc3"b|.QZ|k..i|
00000040  6d 76 3f 47 71 28 01 15  2f 30 17 63 3e 5a 1b 71  |mv?Gq(../0.c>Z.q|
00000050  3c 66 55 6f 08 37 6b 26  b7 4b                    |<fUo.7k&.K|

2026-10-05 17:10:1566.132.172.249to 21358/udprawUS

j·n0·k· ·^0\·P·CE·0·0·krbtgt·CE·19700101000000Z·0·

payload bytes

00000000  6a 81 6e 30 81 6b a1 03  02 01 05 a2 03 02 01 0a  |j.n0.k..........|
00000010  a4 81 5e 30 5c a0 07 03  05 00 50 00 80 00 a2 04  |..^0\.....P.....|
00000020  1b 02 43 45 a3 17 30 15  a0 03 02 01 00 a1 0e 30  |..CE..0........0|
00000030  0c 1b 06 6b 72 62 74 67  74 1b 02 43 45 a5 11 18  |...krbtgt..CE...|
00000040  0f 31 39 37 30 30 31 30  31 30 30 30 30 30 30 5a  |.19700101000000Z|
00000050  a7 06 02 04 03 fc f0 03  a8 17 30 15 02 01 12 02  |..........0.....|
00000060  01 11 02 01 10 02 01 17  02 01 01 02 01 03 02 01  |................|
00000070  02 0a                                             |..|

2026-10-05 17:10:15147.185.132.231to 3702/udprawUS

<env:Envelope xmlns:env="http://www.w3.org/2003/05/soap-envelope" xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/08/addressing" xmlns:wsd="http://schemas.xmlsoap.org/ws/2005/04/discovery"><env:Header><

payload bytes

00000000  3c 65 6e 76 3a 45 6e 76  65 6c 6f 70 65 20 78 6d  |<env:Envelope xm|
00000010  6c 6e 73 3a 65 6e 76 3d  22 68 74 74 70 3a 2f 2f  |lns:env="http://|
00000020  77 77 77 2e 77 33 2e 6f  72 67 2f 32 30 30 33 2f  |www.w3.org/2003/|
00000030  30 35 2f 73 6f 61 70 2d  65 6e 76 65 6c 6f 70 65  |05/soap-envelope|
00000040  22 20 78 6d 6c 6e 73 3a  77 73 61 3d 22 68 74 74  |" xmlns:wsa="htt|
00000050  70 3a 2f 2f 73 63 68 65  6d 61 73 2e 78 6d 6c 73  |p://schemas.xmls|
00000060  6f 61 70 2e 6f 72 67 2f  77 73 2f 32 30 30 34 2f  |oap.org/ws/2004/|
00000070  30 38 2f 61 64 64 72 65  73 73 69 6e 67 22 20 78  |08/addressing" x|
00000080  6d 6c 6e 73 3a 77 73 64  3d 22 68 74 74 70 3a 2f  |mlns:wsd="http:/|
00000090  2f 73 63 68 65 6d 61 73  2e 78 6d 6c 73 6f 61 70  |/schemas.xmlsoap|
000000a0  2e 6f 72 67 2f 77 73 2f  32 30 30 35 2f 30 34 2f  |.org/ws/2005/04/|
000000b0  64 69 73 63 6f 76 65 72  79 22 3e 3c 65 6e 76 3a  |discovery"><env:|
000000c0  48 65 61 64 65 72 3e 3c  77 73 64 3a 41 70 70 53  |Header><wsd:AppS|
000000d0  65 71 75 65 6e 63 65 20  49 6e 73 74 61 6e 63 65  |equence Instance|
000000e0  49 64 3d 22 31 32 38 35  36 32 34 39 35 38 37 33  |Id="128562495873|
000000f0  37 22 20 4d 65 73 73 61  67 65 4e 75 6d 62 65 72  |7" MessageNumber|
... 512 bytes shown in part

2026-10-05 17:10:0016.5.0.234to 502/udprawBR

GET-REPORT-SVR-INFO

payload bytes

00000000  47 45 54 2d 52 45 50 4f  52 54 2d 53 56 52 2d 49  |GET-REPORT-SVR-I|
00000010  4e 46 4f                                          |NFO|

2026-10-05 17:09:4716.5.0.234to 502/udprawBR

GET-REPORT-SVR-INFO

payload bytes

00000000  47 45 54 2d 52 45 50 4f  52 54 2d 53 56 52 2d 49  |GET-REPORT-SVR-I|
00000010  4e 46 4f                                          |NFO|

2026-10-05 17:09:2116.5.0.234to 502/udprawBR

GET-REPORT-SVR-INFO

payload bytes

00000000  47 45 54 2d 52 45 50 4f  52 54 2d 53 56 52 2d 49  |GET-REPORT-SVR-I|
00000010  4e 46 4f                                          |NFO|

2026-10-05 17:09:1216.5.0.234to 502/udprawBR

GET-REPORT-SVR-INFO

payload bytes

00000000  47 45 54 2d 52 45 50 4f  52 54 2d 53 56 52 2d 49  |GET-REPORT-SVR-I|
00000010  4e 46 4f                                          |NFO|

2026-10-05 17:09:06147.185.132.13to 1967/udprawUS

·4·՝[·P·

payload bytes

00000000  01 0f 00 34 00 00 00 00  00 04 00 10 00 00 00 00  |...4............|
00000010  d5 9d 5b eb 10 93 14 50  00 01 00 1c 00 00 00 00  |..[....P........|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00                                       |....|

2026-10-05 17:08:4316.5.0.234to 502/udprawBR

GET-REPORT-SVR-INFO

payload bytes

00000000  47 45 54 2d 52 45 50 4f  52 54 2d 53 56 52 2d 49  |GET-REPORT-SVR-I|
00000010  4e 46 4f                                          |NFO|

2026-10-05 17:08:1866.132.224.19to 2361/udprawUS

DIGI·

payload bytes

00000000  44 49 47 49 00 01 00 06  ff ff ff ff ff ff        |DIGI..........|

2026-10-05 17:07:1964.89.163.247to 500/udprawUS

!·

payload bytes

00000000  21 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |!...............|
00000010  01                                                |.|

2026-10-05 17:06:37199.45.154.177to 37810/udprawUS
·
payload bytes
```
00000000  ff                                                |.|
```

2026-10-05 17:06:3690.52.184.55to 14401/udprawFR

·+14·]p·4VxO1}x%7·

payload bytes

00000000  01 2b 31 34 f2 f0 5d 70  f2 00 ff ff 00 fe fe fe  |.+14..]p........|
00000010  fe fd fd fd fd 12 34 56  78 4f 31 7d 78 25 37 19  |......4VxO1}x%7.|
00000020  0f                                                |.|

2026-10-05 17:06:21217.239.14.187to 4000/udprawDE
·.·mq1·
payload bytes
```
00000000  18 2e 17 6d 71 31 c0 09                           |...mq1..|
```

2026-10-05 17:06:13138.255.249.242to 62608/udprawDO

·Fq·C+·4Vx·L·k·

payload bytes

00000000  01 1f 8a 46 71 9e 43 2b  cc 00 ff ff 00 fe fe fe  |...Fq.C+........|
00000010  fe fd fd fd fd 12 34 56  78 a2 83 4c 1c 8c df 6b  |......4Vx..L...k|
00000020  f7                                                |.|

2026-10-05 17:05:5616.5.0.234to 502/udprawBR

GET-REPORT-SVR-INFO

payload bytes

00000000  47 45 54 2d 52 45 50 4f  52 54 2d 53 56 52 2d 49  |GET-REPORT-SVR-I|
00000010  4e 46 4f                                          |NFO|

2026-10-05 17:05:44174.1.85.183to 19444/udprawCA

·k,Z{%·< c·r·U·h

payload bytes

00000000  af 1f a4 c7 6b 2c 5a 7b  25 e6 ef cd ef 1d dd 18  |....k,Z{%.......|
00000010  3c 20 63 ff cf 72 f0 55  9a 68                    |< c..r.U.h|

2026-10-05 17:03:3745.198.224.251to 389/udprawUS

0%·c · · ·objectclass0·

payload bytes

00000000  30 25 02 01 01 63 20 04  00 0a 01 00 0a 01 00 02  |0%...c .........|
00000010  01 00 02 01 00 01 01 00  87 0b 6f 62 6a 65 63 74  |..........object|
00000020  63 6c 61 73 73 30 00                              |class0.|

2026-10-05 17:03:28100.29.192.4to 47808/udprawUS

· ·?·K

payload bytes

00000000  81 0a 00 11 01 04 00 05  01 0c 0c 02 3f ff ff 19  |............?...|
00000010  4b                                                |K|

2026-10-05 17:03:1120.55.92.10to 8009/udprawUS
MGLNDD_<HONEYPOT>_8009
payload bytes