UDP traffic

Datagrams matching country:MD sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

Other services

2 datagrams from 2 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

SOCKS5 1 OOKLA 1

Latest SOCKS5 datagram, to 27230/udp

·4Vx·

payload bytes

00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 06 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

Unrecognised

9 datagrams from 3 sources

Datagrams no decoder recognised. Their first bytes are kept.

Unrecognised 9

Latest Unrecognised datagram, to 8082/udp

!.^%D\yJ ·K·Ax=·@R·G·R·1%t|~K·S)B·;b·Z-·%S0e&O,.!85@iZ4eY·,(DD-d·

payload bytes

00000000  21 2e 5e 25 44 5c 79 4a  09 1e 4b 07 41 78 3d 15  |!.^%D\yJ..K.Ax=.|
00000010  40 52 1f 47 08 52 0b 07  1e 31 25 74 7c 7e 4b 1d  |@R.G.R...1%t|~K.|
00000020  53 29 42 18 05 3b 62 0e  5a 2d 16 1b 25 53 30 65  |S)B..;b.Z-..%S0e|
00000030  26 4f 2c 2e 21 38 35 40  69 5a 34 65 59 7f 02 2c  |&O,.!85@iZ4eY..,|
00000040  28 44 44 2d 64 c7                                 |(DD-d.|

Peer-to-peer

1 datagrams from 1 source

File-sharing clients trying to reach a peer that used one of these addresses before. This is not scanning, so it is left out of every other figure on this page.

BitTorrent 1

Destination ports

Networks

AS200019 Alexhost Srl from 1 source9
AS1547 INTERDNESTRKOM, Sovmestnoe Zakrytoe Akts from 3 sources3

Countries

MD Moldova12

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
176.123.5.126	AS200019 Alexhost Srl	MD	Unrecognised	9	2026-10-11 05:04
62.221.65.197	AS1547 INTERDNESTRKOM, Sovmestnoe Zakrytoe Akts	MD	Unrecognised	1	2026-10-07 19:44
31.31.30.224	AS1547 INTERDNESTRKOM, Sovmestnoe Zakrytoe Akts	MD	Unrecognised	1	2026-10-10 15:42
80.94.250.25	AS1547 INTERDNESTRKOM, Sovmestnoe Zakrytoe Akts	MD	SOCKS5	1	2026-10-09 23:41

Latest datagrams

2026-10-11 05:04:09176.123.5.126to 8082/udpUnrecognisedMD

!.^%D\yJ ·K·Ax=·@R·G·R·1%t|~K·S)B·;b·Z-·%S0e&O,.!85@iZ4eY·,(DD-d·

payload bytes

00000000  21 2e 5e 25 44 5c 79 4a  09 1e 4b 07 41 78 3d 15  |!.^%D\yJ..K.Ax=.|
00000010  40 52 1f 47 08 52 0b 07  1e 31 25 74 7c 7e 4b 1d  |@R.G.R...1%t|~K.|
00000020  53 29 42 18 05 3b 62 0e  5a 2d 16 1b 25 53 30 65  |S)B..;b.Z-..%S0e|
00000030  26 4f 2c 2e 21 38 35 40  69 5a 34 65 59 7f 02 2c  |&O,.!85@iZ4eY..,|
00000040  28 44 44 2d 64 c7                                 |(DD-d.|

2026-10-10 15:42:2631.31.30.224to 10414/udpUnrecognisedMD

·l{·ٍ·-·Lh·n0·+7·&·l·^#· ·Ӣ`·mf·p;->·ȵn·l·z·ȉl·.·Yr·)} ·A·@·~·9aW· ·މ

payload bytes

00000000  e7 11 6c 7b d2 d9 8d 9d  2d 1a 4c 68 1d d1 6e 30  |..l{....-.Lh..n0|
00000010  de 1d 96 2b 37 12 26 d8  6c e6 b3 d0 5e 23 13 96  |...+7.&.l...^#..|
00000020  af a4 f0 0d 8c b8 af e5  d3 a2 60 aa 12 6d 66 a5  |..........`..mf.|
00000030  cd 70 3b 2d 3e c6 c8 b5  6e 9c 11 1a c3 6c 89 8c  |.p;->...n....l..|
00000040  87 d8 c2 7a d7 18 c8 89  6c 17 ac 1f 2e 8f 84 d8  |...z....l.......|
00000050  59 72 ee b4 b3 ca 29 7d  0d a5 41 02 94 a7 40 fe  |Yr....)}..A...@.|
00000060  bf 7e fb 39 61 57 b4 0a  f7 f2 d2 05 de 89 55 fe  |.~.9aW........U.|
00000070  2d 1e b9 1c 84 4d 1e b4  ba 54 c9 26 c4 32 80 74  |-....M...T.&.2.t|
00000080  0f 02 1c a0 e5 09 28 e6  1e fd 28 8a 8d e8 4b ff  |......(...(...K.|
00000090  11 81 07 bf 35 d0 c6 19  1e 1e cb d4 8a 8b 64 74  |....5.........dt|
000000a0  1e 83 e8 f7 ae a2 80 d8  4e 6c 37 54 99 85 5f 04  |........Nl7T.._.|
000000b0  7f 06 1c b7 e0 57 54 6a  f8 13 ee 85 91 3d 65 7d  |.....WTj.....=e}|
000000c0  bc e3 1d 2a 48 5a 3e e2  24 e4 ba 17 f7 da 67 43  |...*HZ>.$.....gC|
000000d0  24 d1 a2 86 a2 37 5e 96  89 7a 05 56 dc a2 c8 2b  |$....7^..z.V...+|
000000e0  70 7d 73 bb 9b ae f7 dc  be 56 5b a1 0b de eb cf  |p}s......V[.....|
000000f0  7b a2 53 ef 7c 4a b1 8e  b2 13 24 f5 9b 90 ae 64  |{.S.|J....$....d|
... 512 bytes shown in part

2026-10-10 10:04:12176.123.5.126to 8081/udpUnrecognisedMD

·.3'3w,q·8j·a6GN0f·o·R7·O(v[xKK·n~+"uW·}·q4S?d9]T=/·R~3IY+·$/·"Z$·

payload bytes

00000000  0b 2e 33 27 33 77 2c 71  11 38 6a 05 61 36 47 4e  |..3'3w,q.8j.a6GN|
00000010  30 66 1d 6f 03 52 37 15  4f 28 76 5b 78 4b 4b 03  |0f.o.R7.O(v[xKK.|
00000020  6e 7e 2b 22 75 57 13 07  10 7d 0c 71 34 53 3f 64  |n~+"uW...}.q4S?d|
00000030  39 5d 54 3d 2f 0b 52 7e  33 49 59 2b 14 24 2f 02  |9]T=/.R~3IY+.$/.|
00000040  22 5a 24 18 9e ac                                 |"Z$...|

2026-10-09 23:41:5780.94.250.25to 27230/udpSOCKS5MD

·4Vx·

payload bytes

00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 06 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
... 512 bytes shown in part

2026-10-09 07:34:36176.123.5.126to 4000/udpUnrecognisedMD

a.9hG·^·Ty$·}33OMSzHba)·"_3·@tx~.`EG>I·7n·5!Q·n%~7·_`"·@U·W·P·30Xzo"·&·4[1·`·*^V2>7T?·

payload bytes

00000000  61 2e 39 68 47 19 5e 04  54 79 24 02 7d 33 33 4f  |a.9hG.^.Ty$.}33O|
00000010  4d 53 7a 48 62 61 29 1a  22 5f 33 0f 17 40 74 78  |MSzHba)."_3..@tx|
00000020  7e 2e 60 45 47 3e 49 1b  37 6e 1e 35 21 51 04 6e  |~.`EG>I.7n.5!Q.n|
00000030  25 7e 37 07 5f 60 22 01  40 55 10 57 15 05 50 13  |%~7._`".@U.W..P.|
00000040  33 30 58 7a 6f 22 16 26  10 34 5b 31 05 60 1f 2a  |30Xzo".&.4[1.`.*|
00000050  5e 56 32 3e 37 54 3f 1c  aa                       |^V2>7T?..|

2026-10-09 01:33:22176.123.5.126to 8080/udpOOKLAMD

|.CxUvVj60D·i·00$0BH6[p|8w6^·67·?z|·qR·'·D<lZl·~·^FS97Oq.P·

payload bytes

00000000  7c 2e 43 78 55 76 56 6a  36 30 44 15 69 16 30 30  ||.CxUvVj60D.i.00|
00000010  24 30 42 48 36 5b 70 7c  38 77 36 5e 08 36 37 04  |$0BH6[p|8w6^.67.|
00000020  3f 7a 7c 15 71 52 7f 27  03 44 3c 6c 5a 6c 1c 7e  |?z|.qR.'.D<lZl.~|
00000030  1c 5e 46 53 39 37 4f 71  2e 50 d4                 |.^FS97Oq.P.|

2026-10-07 19:44:2762.221.65.197to 39856/udpUnrecognisedMD

·<2>·;·4VxV·g#·CH·

payload bytes

00000000  01 bb 9f c2 3c 32 3e 1b  3b 00 ff ff 00 fe fe fe  |....<2>.;.......|
00000010  fe fd fd fd fd 12 34 56  78 56 cf 67 23 b8 43 48  |......4VxV.g#.CH|
00000020  d3                                                |.|

2026-10-06 23:10:51176.123.5.126to 8080/udpUnrecognisedMD

9.·H|·u_S&·^"`,fn8·g$·W·^Y?PqyLx·]@|y5\L[[*};Vc)·i·3uh9TAxx·

payload bytes

00000000  39 2e 06 07 10 48 7c 1c  75 5f 53 26 7f 5e 22 60  |9....H|.u_S&.^"`|
00000010  2c 66 6e 38 06 67 24 0c  57 05 5e 59 3f 50 71 79  |,fn8.g$.W.^Y?Pqy|
00000020  4c 78 00 5d 40 7c 79 35  5c 4c 5b 5b 2a 7d 3b 56  |Lx.]@|y5\L[[*};V|
00000030  63 29 0f 69 10 33 75 68  39 54 41 78 78 e8        |c).i.3uh9TAxx.|

2026-10-06 16:52:37176.123.5.126to 1027/udpUnrecognisedMD
·.Z·;fOk
payload bytes
```
00000000  16 2e 5a 18 3b 66 4f 6b                           |..Z.;fOk|
```

2026-10-06 14:11:22176.123.5.126to 30301/udpUnrecognisedMD

s.!jR.+&7·Z· Fx^·5CUDj·R·Uo·HB32·a]:·c·8l[1Jnf D*x`Fw2J·:!P|]·

payload bytes

00000000  73 2e 21 6a 52 2e 2b 26  37 06 5a 1f 09 46 78 5e  |s.!jR.+&7.Z..Fx^|
00000010  13 35 43 55 44 6a 1c 1c  7f 52 04 17 55 6f 12 48  |.5CUDj...R..Uo.H|
00000020  42 33 32 14 61 5d 3a 19  63 15 38 6c 5b 31 4a 6e  |B32.a]:.c.8l[1Jn|
00000030  66 0d 44 2a 78 60 46 77  32 4a 0e 07 3a 21 50 7c  |f.D*x`Fw2J..:!P||
00000040  5d ad                                             |].|

2026-10-06 04:09:26176.123.5.126to 6881/udpBitTorrentMD

l.Q? r`@·](·P2 G·0·lIg·f_M·%h/U

payload bytes

00000000  6c 2e 51 3f 20 72 60 40  05 5d 28 10 50 32 0a 47  |l.Q? r`@.](.P2.G|
00000010  19 30 03 6c 49 67 0f 66  5f 4d 1c 04 25 68 2f 55  |.0.lIg.f_M..%h/U|

2026-10-06 03:25:25176.123.5.126to 8082/udpUnrecognisedMD

=.·S9#·RuB·N·B ·P^R/{.6)·O`S·5'dnJs@?5\ @·Fny·tGT·Ift·

payload bytes

00000000  3d 2e 08 53 39 23 0e 52  75 42 1c 4e 0b 42 0d 05  |=..S9#.RuB.N.B..|
00000010  50 5e 52 2f 7b 2e 36 29  02 12 4f 60 53 0e 1f 11  |P^R/{.6)..O`S...|
00000020  35 27 64 6e 4a 73 40 3f  35 5c 0d 40 1e 1b 46 6e  |5'dnJs@?5\.@..Fn|
00000030  79 18 1e 74 47 54 1d 49  66 74 c2                 |y..tGT.Ift.|