UDP traffic

Datagrams matching proto:raw sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Your plan searches up to 7d, so 30d was shortened. Plans

444

Datagrams

243

Source addresses

113

Networks

Countries

202

Destination ports

Protocols

raw from 243 sources444

Destination ports

623/udp from 1 source30
500/udp from 7 sources13
1194/udp from 9 sources12
443/udp from 6 sources12
3702/udp from 4 sources10
27015/udp from 6 sources10
389/udp from 3 sources9
427/udp from 2 sources9
520/udp from 5 sources8
3389/udp from 2 sources7
5060/udp from 6 sources6
502/udp from 1 source6

Networks

AS14061 DigitalOcean, LLC from 7 sources50
AS401661 EMBNEX, LLC from 1 source44
AS8075 Microsoft Corporation from 38 sources42
AS37963 Hangzhou Alibaba Advertising Co.,Ltd. from 4 sources32
AS16628 DedFiberCo from 1 source30
AS398324 Censys, Inc. from 22 sources28
AS202425 IP Volume inc from 5 sources13
AS396982 Google LLC from 13 sources13
AS215925 Vpsvault.host Ltd from 2 sources11
AS63949 Akamai Connected Cloud from 6 sources11

Countries

Source addresses (unverified)

Address	Network	Cc	Datagrams	Last seen (UTC)
16.5.0.234	AS401661 EMBNEX, LLC	BR	44	2026-10-05 18:05
104.237.240.112	AS16628 DedFiberCo	US	30	2026-10-05 17:01
137.184.210.250	AS14061 DigitalOcean, LLC	US	18	2026-10-05 13:50
104.248.129.131	AS14061 DigitalOcean, LLC	DE	13	2026-10-05 16:14
201.79.2.46	AS14061 DigitalOcean, LLC	DE	13	2026-10-05 16:48
121.41.167.96	AS37963 Hangzhou Alibaba Advertising Co.,Ltd.	CN	8	2026-10-05 15:58
121.41.171.126	AS37963 Hangzhou Alibaba Advertising Co.,Ltd.	CN	8	2026-10-05 16:21
112.124.59.239	AS37963 Hangzhou Alibaba Advertising Co.,Ltd.	CN	8	2026-10-05 16:42
47.95.207.57	AS37963 Hangzhou Alibaba Advertising Co.,Ltd.	CN	8	2026-10-05 15:42
45.205.1.231	AS215925 Vpsvault.host Ltd	BR	7	2026-10-05 17:53
104.168.132.113	AS54290 Hostwinds LLC.	US	6	2026-10-05 12:07
45.198.224.251	AS215925 Vpsvault.host Ltd	US	4	2026-10-05 17:57
151.243.11.230	AS209630 LLC Vash Kredit Bank	AE	4	2026-10-05 13:50
185.242.226.68	AS202425 IP Volume inc	US	4	2026-10-05 18:03
104.168.140.86	AS54290 Hostwinds LLC.	US	4	2026-10-05 15:34
66.132.172.248	AS398324 Censys, Inc.	US	4	2026-10-05 17:28
185.242.226.97	AS202425 IP Volume inc	US	4	2026-10-05 16:39
139.162.88.198	AS63949 Akamai Connected Cloud	JP	4	2026-10-05 16:46
103.203.57.27	AS136180 Beijing Tiantexin Tech. Co., Ltd.	CN	3	2026-10-05 17:46
139.162.116.104	AS63949 Akamai Connected Cloud	JP	3	2026-10-05 18:01

Latest datagrams

2026-10-05 18:05:1716.5.0.234to 30120/udprawBR

·getinfo

payload bytes

00000000  ff ff ff ff 67 65 74 69  6e 66 6f                 |....getinfo|

2026-10-05 18:05:13189.161.78.29to 45459/udprawMX

·q7·X·t·4Vx·p·]·f

payload bytes

00000000  01 71 37 c4 58 a7 00 74  fa 00 ff ff 00 fe fe fe  |.q7.X..t........|
00000010  fe fd fd fd fd 12 34 56  78 04 ff c5 70 18 5d 9e  |......4Vx...p.].|
00000020  66                                                |f|

2026-10-05 18:04:1116.5.0.234to 30120/udprawBR

·getinfo

payload bytes

00000000  ff ff ff ff 67 65 74 69  6e 66 6f                 |....getinfo|

2026-10-05 18:03:39185.217.1.242to 5351/udprawSE

·L ·X

payload bytes

00000000  00 02 00 00 0f a0 4c 09  00 00 02 58              |......L....X|

2026-10-05 18:03:39216.25.89.113to 5351/udprawUS

·M)w'· ·+·N·

payload bytes

00000000  02 01 00 00 00 00 0e 10  00 00 00 00 00 00 00 00  |................|
00000010  00 00 ff ff 00 00 00 00  dd 4d 29 77 27 9f 09 81  |.........M)w'...|
00000020  2b e8 b6 4e 11 00 00 00  00 00 00 00 00 00 00 00  |+..N............|
00000030  00 00 00 00 00 00 ff ff  00 00 00 00              |............|

2026-10-05 18:03:27185.242.226.68to 3800/udprawUS
·
payload bytes
```
00000000  00                                                |.|
```

2026-10-05 18:02:3016.5.0.234to 27960/udprawBR

·getinfo

payload bytes

00000000  ff ff ff ff 67 65 74 69  6e 66 6f                 |....getinfo|

2026-10-05 18:02:28189.113.8.254to 8082/udprawBR

·.· ·ehA&N·>Cd^/kkaU;3C·F·F·>Q-·`M·E5^k·s·A6k eV·F+GynR?m·\+i ·

payload bytes

00000000  10 2e 0e 20 0b 65 68 41  26 4e 15 1b 3e 43 64 5e  |... .ehA&N..>Cd^|
00000010  2f 6b 6b 61 55 3b 33 43  0b 46 7f 46 1d 3e 51 2d  |/kkaU;3C.F.F.>Q-|
00000020  12 60 4d 1d 45 35 5e 6b  03 73 06 41 36 6b 20 65  |.`M.E5^k.s.A6k e|
00000030  56 0b 46 2b 47 79 6e 52  3f 6d 18 5c 2b 69 09 e0  |V.F+GynR?m.\+i..|
00000040  e8                                                |.|

2026-10-05 18:01:30139.162.116.104to 3283/udprawJP

payload bytes

00000000  00 14 00 01 03                                    |.....|

2026-10-05 18:01:2916.5.0.234to 27960/udprawBR

·getinfo

payload bytes

00000000  ff ff ff ff 67 65 74 69  6e 66 6f                 |....getinfo|

2026-10-05 18:00:47147.185.132.84to 1604/udprawUS

·0·

payload bytes

00000000  1e 00 01 30 02 fd a8 e3  00 00 00 00 00 00 00 00  |...0............|
00000010  00 00 00 00 00 00 00 00  00 00 00 00 00 00        |..............|

2026-10-05 17:58:5516.5.0.234to 27960/udprawBR

·getinfo

payload bytes

00000000  ff ff ff ff 67 65 74 69  6e 66 6f                 |....getinfo|

2026-10-05 17:58:40198.235.24.202to 5351/udprawUS

payload bytes

00000000  00 00                                             |..|

2026-10-05 17:57:4416.5.0.234to 27960/udprawBR

·getinfo

payload bytes

00000000  ff ff ff ff 67 65 74 69  6e 66 6f                 |....getinfo|

2026-10-05 17:57:2416.5.0.234to 27960/udprawBR

·getinfo

payload bytes

00000000  ff ff ff ff 67 65 74 69  6e 66 6f                 |....getinfo|

2026-10-05 17:57:2145.198.224.251to 389/udprawUS

0%·c · · ·objectclass0·

payload bytes

00000000  30 25 02 01 01 63 20 04  00 0a 01 00 0a 01 00 02  |0%...c .........|
00000010  01 00 02 01 00 01 01 00  87 0b 6f 62 6a 65 63 74  |..........object|
00000020  63 6c 61 73 73 30 00                              |class0.|

2026-10-05 17:56:2316.5.0.234to 27015/udprawBR

·TSource Engine Query·

payload bytes

00000000  ff ff ff ff 54 53 6f 75  72 63 65 20 45 6e 67 69  |....TSource Engi|
00000010  6e 65 20 51 75 65 72 79  00                       |ne Query.|

2026-10-05 17:55:1416.5.0.234to 27015/udprawBR

·TSource Engine Query·

payload bytes

00000000  ff ff ff ff 54 53 6f 75  72 63 65 20 45 6e 67 69  |....TSource Engi|
00000010  6e 65 20 51 75 65 72 79  00                       |ne Query.|

2026-10-05 17:53:4645.205.1.231to 3702/udprawBR

<tds:GetDeviceInformation />

payload bytes

00000000  3c 74 64 73 3a 47 65 74  44 65 76 69 63 65 49 6e  |<tds:GetDeviceIn|
00000010  66 6f 72 6d 61 74 69 6f  6e 20 2f 3e              |formation />|

2026-10-05 17:53:3316.5.0.234to 27015/udprawBR

·TSource Engine Query·

payload bytes

00000000  ff ff ff ff 54 53 6f 75  72 63 65 20 45 6e 67 69  |....TSource Engi|
00000010  6e 65 20 51 75 65 72 79  00                       |ne Query.|

2026-10-05 17:51:2416.5.0.234to 27015/udprawBR

·TSource Engine Query·

payload bytes

00000000  ff ff ff ff 54 53 6f 75  72 63 65 20 45 6e 67 69  |....TSource Engi|
00000010  6e 65 20 51 75 65 72 79  00                       |ne Query.|

2026-10-05 17:50:52167.249.151.101to 27026/udprawBR

· ·?·J-·4Vx ·r·R·

payload bytes

00000000  01 09 13 11 84 3f a0 4a  2d 00 ff ff 00 fe fe fe  |.....?.J-.......|
00000010  fe fd fd fd fd 12 34 56  78 20 10 db 72 9b 52 e7  |......4Vx ..r.R.|
00000020  bd                                                |.|

2026-10-05 17:46:25103.203.57.27to 1701/udprawCN

·<·masscan1· · ·

payload bytes

00000000  c8 02 00 3c 00 00 00 00  00 00 00 00 80 08 00 00  |...<............|
00000010  00 00 00 01 80 08 00 00  00 02 01 00 80 0e 00 00  |................|
00000020  00 07 6d 61 73 73 63 61  6e 31 80 0a 00 00 00 03  |..masscan1......|
00000030  00 00 00 03 80 08 00 00  00 09 00 00              |............|

2026-10-05 17:46:1366.132.186.252to 523/udprawUS

DB2GETADDR·SQL09010·

payload bytes

00000000  44 42 32 47 45 54 41 44  44 52 00 53 51 4c 30 39  |DB2GETADDR.SQL09|
00000010  30 31 30 00                                       |010.|

2026-10-05 17:43:20139.162.116.104to 3283/udprawJP

payload bytes

00000000  00 14 00 01 03                                    |.....|