UDP traffic
Datagrams matching country:HU sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.
A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.
Your plan searches up to 7d, so 30d was shortened. Plans
77
Datagrams
3
Source addresses
3
Networks
1
Countries
3
Destination ports
Traffic by type
Service queries
3 datagrams from 1 sourceRequests a service answers without a handshake. Scanners send them to find open DNS, NTP, SNMP or SSDP servers, which are also the servers reflection attacks abuse.
Latest DNS datagram, to 53/udp
payload bytes
00000000 34 ef 01 00 00 01 00 00 00 00 00 00 07 56 45 52 |4............VER| 00000010 53 49 4f 4e 04 42 49 4e 44 00 00 10 00 03 |SION.BIND.....|
Other services
2 datagrams from 1 sourceFirst packets of sessions with VPN, voice, tunnelling, database and management services.
Latest SIP datagram, to 5060/udp
payload bytes
00000000 4f 50 54 49 4f 4e 53 20 73 69 70 3a 63 61 72 6f |OPTIONS sip:caro| 00000010 6c 40 63 68 69 63 61 67 6f 2e 63 6f 6d 20 53 49 |l@chicago.com SI| 00000020 50 2f 32 2e 30 0d 0a 56 69 61 3a 20 53 49 50 2f |P/2.0..Via: SIP/| 00000030 32 2e 30 2f 55 44 50 20 70 63 33 33 2e 61 74 6c |2.0/UDP pc33.atl| 00000040 61 6e 74 61 2e 63 6f 6d 3b 62 72 61 6e 63 68 3d |anta.com;branch=| 00000050 7a 39 68 47 4f 50 54 49 4f 4e 53 20 73 69 70 3a |z9hGOPTIONS sip:| 00000060 63 61 72 6f 6c 40 63 68 69 63 61 67 6f 2e 63 6f |carol@chicago.co| 00000070 6d 20 53 49 50 2f 32 2e 30 0d 0a 56 69 61 3a 20 |m SIP/2.0..Via: | 00000080 53 49 50 2f 32 2e 30 2f 55 44 50 20 70 63 33 33 |SIP/2.0/UDP pc33| 00000090 2e 61 74 6c 61 6e 74 61 2e 63 6f 6d 3b 62 72 61 |.atlanta.com;bra| 000000a0 6e 63 68 3d 7a 39 68 47 34 62 4b 68 6a 68 73 38 |nch=z9hG4bKhjhs8| 000000b0 61 73 73 38 37 37 0d 0a 4d 61 78 2d 46 6f 72 77 |ass877..Max-Forw| 000000c0 61 72 64 73 3a 20 37 30 0d 0a 54 6f 3a 20 3c 73 |ards: 70..To: <s| 000000d0 69 70 3a 63 61 72 6f 6c 40 63 68 69 63 61 67 6f |ip:carol@chicago| 000000e0 2e 63 6f 6d 3e 0d 0a 46 72 6f 6d 3a 20 41 6c 69 |.com>..From: Ali| 000000f0 63 65 20 3c 73 69 70 3a 61 6c 69 63 65 40 61 74 |ce <sip:alice@at|
Peer-to-peer
72 datagrams from 1 sourceFile-sharing clients trying to reach a peer that used one of these addresses before. This is not scanning, so it is left out of every other figure on this page.
Amplification checks
Probes for services that answer a small request with a much larger reply, the property reflection attacks rely on.
| Service | Port | Datagrams | Sources | Factor |
|---|---|---|---|---|
| DNS | 53/udp | 3 | 1 | 28 to 54 |
The factor is how many bytes a reachable server can send back for each byte it receives, as published by CISA in alert TA14-017A.
Destination ports
DNS questions
DNS record types
- TXT3
Networks
- AS47159 Celldomolki Kabeltelevizio Kft. from 1 source72
- AS211619 MAXKO d.o.o. from 1 source3
- AS41075 ATW Internet Kft. from 1 source2
Countries
Source addresses (unverified)
| Address | Network | Cc | Sends | Datagrams | Last seen (UTC) |
|---|---|---|---|---|---|
| 79.172.247.168 | AS47159 Celldomolki Kabeltelevizio Kft. | HU | BitTorrent | 72 | 2026-10-12 19:40 |
| 45.9.168.192 | AS211619 MAXKO d.o.o. | HU | DNS | 3 | 2026-10-12 06:35 |
| 37.221.209.87 | AS41075 ATW Internet Kft. | HU | SIP | 2 | 2026-10-11 20:37 |
Latest datagrams
payload bytes
00000000 64 31 3a 61 64 32 3a 69 64 32 30 3a f0 44 da bd |d1:ad2:id20:.D..| 00000010 7f 4e 86 46 1d 98 21 9e dc 60 0b 10 7a bb e2 f6 |.N.F..!..`..z...| 00000020 39 3a 69 6e 66 6f 5f 68 61 73 68 32 30 3a f0 44 |9:info_hash20:.D| 00000030 dc c4 7b 09 df 49 46 5b fb a7 fc d1 5e ae eb c6 |..{..IF[....^...| 00000040 4d 9e 65 31 3a 71 39 3a 67 65 74 5f 70 65 65 72 |M.e1:q9:get_peer| 00000050 73 31 3a 74 32 3a dc 61 31 3a 76 34 3a 4c 54 01 |s1:t2:.a1:v4:LT.| 00000060 2f 31 3a 79 31 3a 71 65 |/1:y1:qe|payload bytes
00000000 64 31 3a 61 64 32 3a 69 64 32 30 3a f0 44 da bd |d1:ad2:id20:.D..| 00000010 7f 4e 86 46 1d 98 21 9e dc 60 0b 10 7a bb e2 f6 |.N.F..!..`..z...| 00000020 39 3a 69 6e 66 6f 5f 68 61 73 68 32 30 3a f0 44 |9:info_hash20:.D| 00000030 db 7c 27 b7 f2 b8 0e 0b c2 9c 9a ad 5e da 98 e1 |.|'.........^...| 00000040 41 81 65 31 3a 71 39 3a 67 65 74 5f 70 65 65 72 |A.e1:q9:get_peer| 00000050 73 31 3a 74 32 3a a5 fe 31 3a 76 34 3a 4c 54 01 |s1:t2:..1:v4:LT.| 00000060 2f 31 3a 79 31 3a 71 65 |/1:y1:qe|
payload bytes
00000000 64 31 3a 61 64 32 3a 69 64 32 30 3a f0 44 da bd |d1:ad2:id20:.D..| 00000010 7f 4e 86 46 1d 98 21 9e dc 60 0b 10 7a bb e2 f6 |.N.F..!..`..z...| 00000020 39 3a 69 6e 66 6f 5f 68 61 73 68 32 30 3a f0 44 |9:info_hash20:.D| 00000030 d8 17 50 2f f9 22 cb 6d b4 35 f3 0b 9f ae 2d 53 |..P/.".m.5....-S| 00000040 6c 4e 65 31 3a 71 39 3a 67 65 74 5f 70 65 65 72 |lNe1:q9:get_peer| 00000050 73 31 3a 74 32 3a bb bd 31 3a 76 34 3a 4c 54 01 |s1:t2:..1:v4:LT.| 00000060 2f 31 3a 79 31 3a 71 65 |/1:y1:qe|
payload bytes
00000000 64 31 3a 61 64 32 3a 69 64 32 30 3a f0 44 da bd |d1:ad2:id20:.D..| 00000010 7f 4e 86 46 1d 98 21 9e dc 60 0b 10 7a bb e2 f6 |.N.F..!..`..z...| 00000020 39 3a 69 6e 66 6f 5f 68 61 73 68 32 30 3a f0 44 |9:info_hash20:.D| 00000030 da 0e 37 de 4a 4c c9 d0 de a7 fa 7c b3 b0 3c db |..7.JL.....|..<.| 00000040 f0 f1 65 31 3a 71 39 3a 67 65 74 5f 70 65 65 72 |..e1:q9:get_peer| 00000050 73 31 3a 74 32 3a 26 65 31 3a 76 34 3a 4c 54 01 |s1:t2:&e1:v4:LT.| 00000060 2f 31 3a 79 31 3a 71 65 |/1:y1:qe|
payload bytes
00000000 41 00 06 63 13 d1 51 a8 00 00 00 00 00 00 00 00 |A..c..Q.........| 00000010 2b 1e 00 00 |+...|
payload bytes
00000000 34 ef 01 00 00 01 00 00 00 00 00 00 07 56 45 52 |4............VER| 00000010 53 49 4f 4e 04 42 49 4e 44 00 00 10 00 03 |SION.BIND.....|
payload bytes
00000000 34 ef 01 00 00 01 00 00 00 00 00 00 07 56 45 52 |4............VER| 00000010 53 49 4f 4e 04 42 49 4e 44 00 00 10 00 03 |SION.BIND.....|
payload bytes
00000000 34 ef 01 00 00 01 00 00 00 00 00 00 07 56 45 52 |4............VER| 00000010 53 49 4f 4e 04 42 49 4e 44 00 00 10 00 03 |SION.BIND.....|
payload bytes
00000000 64 31 3a 61 64 32 3a 69 64 32 30 3a b0 58 ed aa |d1:ad2:id20:.X..| 00000010 09 75 c4 a5 29 8e 58 b9 73 c3 87 b7 f8 80 2a c7 |.u..).X.s.....*.| 00000020 39 3a 69 6e 66 6f 5f 68 61 73 68 32 30 3a b0 58 |9:info_hash20:.X| 00000030 ed c6 79 95 ff ca ec c0 b8 bf 89 54 7b 7b c8 b9 |..y........T{{..| 00000040 89 77 65 31 3a 71 39 3a 67 65 74 5f 70 65 65 72 |.we1:q9:get_peer| 00000050 73 31 3a 74 32 3a 19 d7 31 3a 76 34 3a 4c 54 01 |s1:t2:..1:v4:LT.| 00000060 2f 31 3a 79 31 3a 71 65 |/1:y1:qe|payload bytes
00000000 64 31 3a 61 64 32 3a 69 64 32 30 3a b0 58 ed aa |d1:ad2:id20:.X..| 00000010 09 75 c4 a5 29 8e 58 b9 73 c3 87 b7 f8 80 2a c7 |.u..).X.s.....*.| 00000020 39 3a 69 6e 66 6f 5f 68 61 73 68 32 30 3a b0 58 |9:info_hash20:.X| 00000030 ec e4 ef dd ab 4f 3d 1f f1 0a 67 aa de 85 4a 94 |.....O=...g...J.| 00000040 1f 28 65 31 3a 71 39 3a 67 65 74 5f 70 65 65 72 |.(e1:q9:get_peer| 00000050 73 31 3a 74 32 3a a5 ff 31 3a 76 34 3a 4c 54 01 |s1:t2:..1:v4:LT.| 00000060 2f 31 3a 79 31 3a 71 65 |/1:y1:qe|
payload bytes
00000000 64 31 3a 61 64 32 3a 69 64 32 30 3a b0 58 ed aa |d1:ad2:id20:.X..| 00000010 09 75 c4 a5 29 8e 58 b9 73 c3 87 b7 f8 80 2a c7 |.u..).X.s.....*.| 00000020 39 3a 69 6e 66 6f 5f 68 61 73 68 32 30 3a b0 58 |9:info_hash20:.X| 00000030 ef 18 d1 99 d0 be cc c7 a4 20 0d c8 c0 e8 77 0d |......... ....w.| 00000040 f4 95 65 31 3a 71 39 3a 67 65 74 5f 70 65 65 72 |..e1:q9:get_peer| 00000050 73 31 3a 74 32 3a d5 1c 31 3a 76 34 3a 4c 54 01 |s1:t2:..1:v4:LT.| 00000060 2f 31 3a 79 31 3a 71 65 |/1:y1:qe|
payload bytes
00000000 64 31 3a 61 64 32 3a 69 64 32 30 3a b0 58 ed aa |d1:ad2:id20:.X..| 00000010 09 75 c4 a5 29 8e 58 b9 73 c3 87 b7 f8 80 2a c7 |.u..).X.s.....*.| 00000020 39 3a 69 6e 66 6f 5f 68 61 73 68 32 30 3a b0 58 |9:info_hash20:.X| 00000030 ed e5 d6 df 84 23 5b dc cd 95 77 04 f9 cb 6a c3 |.....#[...w...j.| 00000040 02 4c 65 31 3a 71 39 3a 67 65 74 5f 70 65 65 72 |.Le1:q9:get_peer| 00000050 73 31 3a 74 32 3a a3 34 31 3a 76 34 3a 4c 54 01 |s1:t2:.41:v4:LT.| 00000060 2f 31 3a 79 31 3a 71 65 |/1:y1:qe|
payload bytes
00000000 64 31 3a 61 64 32 3a 69 64 32 30 3a b0 58 ed aa |d1:ad2:id20:.X..| 00000010 09 75 c4 a5 29 8e 58 b9 73 c3 87 b7 f8 80 2a c7 |.u..).X.s.....*.| 00000020 39 3a 69 6e 66 6f 5f 68 61 73 68 32 30 3a b0 58 |9:info_hash20:.X| 00000030 ee 60 33 0a d6 4e e3 3f 83 fd f5 70 d8 aa 56 3f |.`3..N.?...p..V?| 00000040 6a 56 65 31 3a 71 39 3a 67 65 74 5f 70 65 65 72 |jVe1:q9:get_peer| 00000050 73 31 3a 74 32 3a 36 70 31 3a 76 34 3a 4c 54 01 |s1:t2:6p1:v4:LT.| 00000060 2f 31 3a 79 31 3a 71 65 |/1:y1:qe|
payload bytes
00000000 64 31 3a 61 64 32 3a 69 64 32 30 3a b0 58 ed aa |d1:ad2:id20:.X..| 00000010 09 75 c4 a5 29 8e 58 b9 73 c3 87 b7 f8 80 2a c7 |.u..).X.s.....*.| 00000020 39 3a 69 6e 66 6f 5f 68 61 73 68 32 30 3a b0 58 |9:info_hash20:.X| 00000030 ef f9 95 1d f6 22 d7 4c 5e 96 8f 94 ef b8 84 f6 |.....".L^.......| 00000040 19 91 65 31 3a 71 39 3a 67 65 74 5f 70 65 65 72 |..e1:q9:get_peer| 00000050 73 31 3a 74 32 3a ae 9f 31 3a 76 34 3a 4c 54 01 |s1:t2:..1:v4:LT.| 00000060 2f 31 3a 79 31 3a 71 65 |/1:y1:qe|
payload bytes
00000000 64 31 3a 61 64 32 3a 69 64 32 30 3a b0 58 ed aa |d1:ad2:id20:.X..| 00000010 09 75 c4 a5 29 8e 58 b9 73 c3 87 b7 f8 80 2a c7 |.u..).X.s.....*.| 00000020 39 3a 69 6e 66 6f 5f 68 61 73 68 32 30 3a b0 58 |9:info_hash20:.X| 00000030 ed 33 0d a1 70 0b 36 62 97 d5 ff a2 18 42 6d c3 |.3..p.6b.....Bm.| 00000040 94 13 65 31 3a 71 39 3a 67 65 74 5f 70 65 65 72 |..e1:q9:get_peer| 00000050 73 31 3a 74 32 3a 71 fe 31 3a 76 34 3a 4c 54 01 |s1:t2:q.1:v4:LT.| 00000060 2f 31 3a 79 31 3a 71 65 |/1:y1:qe|