UDP traffic

Datagrams matching country:SG sent to HoneyLabs sensors over UDP in the last 24 hours. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

Service queries

7 datagrams from 3 sources

Requests a service answers without a handshake. Scanners send them to find open DNS, NTP, SNMP or SSDP servers, which are also the servers reflection attacks abuse.

DNS 6 NTP 1

Latest DNS datagram, to 53/udp

DNS query TXT/CH VERSION.BIND

payload bytes

00000000  34 ef 01 00 00 01 00 00  00 00 00 00 07 56 45 52  |4............VER|
00000010  53 49 4f 4e 04 42 49 4e  44 00 00 10 00 03        |SION.BIND.....|

Other services

32 datagrams from 2 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

STUN 32

Latest STUN datagram, to 57048/udp

·T!·BAvEnWul0p/4x· Gx77:Y6nJ·ں·%[·W·)·$·n·jC&·c·-Z·[·d·hB·(· ·

payload bytes

00000000  00 01 00 54 21 12 a4 42  41 76 45 6e 57 75 6c 30  |...T!..BAvEnWul0|
00000010  70 2f 34 78 00 06 00 09  47 78 37 37 3a 59 36 6e  |p/4x....Gx77:Y6n|
00000020  4a 00 00 00 da ba 00 04  00 01 25 5b c0 57 00 04  |J.........%[.W..|
00000030  00 08 03 84 80 29 00 08  00 00 00 00 00 00 00 00  |.....)..........|
00000040  00 24 00 04 6e 7f 1e ff  00 08 00 14 ef 8b d1 6a  |.$..n..........j|
00000050  43 26 ee 63 a1 2d 5a eb  5b ec 80 64 e7 68 42 af  |C&.c.-Z.[..d.hB.|
00000060  80 28 00 04 0a a5 13 f5                           |.(......|

Unrecognised

16 datagrams from 7 sources

Datagrams no decoder recognised. Their first bytes are kept.

Unrecognised 16

Latest Unrecognised datagram, to 1194/udp

8·

payload bytes

00000000  38 12 12 12 12 12 12 12  12 00 00 00 00 00        |8.............|

Amplification checks

Probes for services that answer a small request with a much larger reply, the property reflection attacks rely on.

Service	Port	Datagrams	Sources	Factor
DNS	53/udp	6	2	28 to 54
NTP	123/udp	1	1	556.9

The factor is how many bytes a reachable server can send back for each byte it receives, as published by CISA in alert TA14-017A.

Destination ports

DNS questions

DNS record types

TXT4
A2

Networks

AS32934 Facebook, Inc. from 2 sources32
AS9009 M247 Europe SRL from 3 sources7
AS14061 DigitalOcean, LLC from 3 sources5
AS63949 Akamai Connected Cloud from 2 sources5
AS154402 Fredyun Network from 1 source4
AS132203 Tencent Building, Kejizhongyi Avenue from 1 source2

Countries

SG Singapore55

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
57.144.145.135	AS32934 Facebook, Inc.	SG	STUN	16	2026-10-10 12:44
57.144.153.135	AS32934 Facebook, Inc.	SG	STUN	16	2026-10-11 00:17
144.79.70.100	AS154402 Fredyun Network	SG	DNS	4	2026-10-11 03:24
185.200.116.42	AS9009 M247 Europe SRL	SG	Unrecognised	4	2026-10-10 21:54
139.162.11.39	AS63949 Akamai Connected Cloud	SG	Unrecognised	3	2026-10-10 14:09
167.172.79.176	AS14061 DigitalOcean, LLC	SG	Unrecognised	3	2026-10-11 05:17
185.200.116.58	AS9009 M247 Europe SRL	SG	Unrecognised	2	2026-10-10 09:23
43.134.56.104	AS132203 Tencent Building, Kejizhongyi Avenue	SG	DNS	2	2026-10-10 14:44
172.104.178.132	AS63949 Akamai Connected Cloud	SG	Unrecognised	2	2026-10-11 03:35
174.138.21.30	AS14061 DigitalOcean, LLC	SG	Unrecognised	1	2026-10-10 16:50
128.199.255.160	AS14061 DigitalOcean, LLC	SG	NTP	1	2026-10-10 23:54
185.200.116.79	AS9009 M247 Europe SRL	SG	Unrecognised	1	2026-10-11 09:00

Latest datagrams

2026-10-11 09:00:00185.200.116.79to 1194/udpUnrecognisedSG

8·

payload bytes

00000000  38 12 12 12 12 12 12 12  12 00 00 00 00 00        |8.............|

2026-10-11 05:17:49167.172.79.176to 8000/udpUnrecognisedSG

G.GF ·r·9·&·bp!WrJWuK>J+ciw·OW^·'%]0:O0tSV·5G1 9|d.·

payload bytes

00000000  47 2e 47 46 09 15 72 7f  39 04 26 1c 62 70 21 57  |G.GF..r.9.&.bp!W|
00000010  72 4a 57 75 4b 3e 4a 2b  63 69 77 15 4f 57 5e 16  |rJWuK>J+ciw.OW^.|
00000020  27 25 5d 30 3a 4f 30 74  53 56 10 35 47 31 0d 39  |'%]0:O0tSV.5G1.9|
00000030  7c 64 2e 9c 9b                                    ||d...|

2026-10-11 03:35:40172.104.178.132to 27021/udpUnrecognisedSG

·TSource Engine Query·

payload bytes

00000000  ff ff ff ff 54 53 6f 75  72 63 65 20 45 6e 67 69  |....TSource Engi|
00000010  6e 65 20 51 75 65 72 79  00                       |ne Query.|

2026-10-11 03:24:22144.79.70.100to 53/udpDNSSG

DNS query TXT/CH VERSION.BIND

payload bytes

00000000  34 ef 01 00 00 01 00 00  00 00 00 00 07 56 45 52  |4............VER|
00000010  53 49 4f 4e 04 42 49 4e  44 00 00 10 00 03        |SION.BIND.....|

2026-10-11 03:23:24144.79.70.100to 53/udpDNSSG

DNS query TXT/CH VERSION.BIND

payload bytes

00000000  34 ef 01 00 00 01 00 00  00 00 00 00 07 56 45 52  |4............VER|
00000010  53 49 4f 4e 04 42 49 4e  44 00 00 10 00 03        |SION.BIND.....|

2026-10-11 03:19:10144.79.70.100to 53/udpDNSSG

DNS query TXT/CH VERSION.BIND

payload bytes

00000000  34 ef 01 00 00 01 00 00  00 00 00 00 07 56 45 52  |4............VER|
00000010  53 49 4f 4e 04 42 49 4e  44 00 00 10 00 03        |SION.BIND.....|

2026-10-11 03:01:51144.79.70.100to 53/udpDNSSG

DNS query TXT/CH VERSION.BIND

payload bytes

00000000  34 ef 01 00 00 01 00 00  00 00 00 00 07 56 45 52  |4............VER|
00000010  53 49 4f 4e 04 42 49 4e  44 00 00 10 00 03        |SION.BIND.....|

2026-10-11 00:17:4557.144.153.135to 57048/udpSTUNSG

·T!·BAvEnWul0p/4x· Gx77:Y6nJ·ں·%[·W·)·$·n·jC&·c·-Z·[·d·hB·(· ·

payload bytes

00000000  00 01 00 54 21 12 a4 42  41 76 45 6e 57 75 6c 30  |...T!..BAvEnWul0|
00000010  70 2f 34 78 00 06 00 09  47 78 37 37 3a 59 36 6e  |p/4x....Gx77:Y6n|
00000020  4a 00 00 00 da ba 00 04  00 01 25 5b c0 57 00 04  |J.........%[.W..|
00000030  00 08 03 84 80 29 00 08  00 00 00 00 00 00 00 00  |.....)..........|
00000040  00 24 00 04 6e 7f 1e ff  00 08 00 14 ef 8b d1 6a  |.$..n..........j|
00000050  43 26 ee 63 a1 2d 5a eb  5b ec 80 64 e7 68 42 af  |C&.c.-Z.[..d.hB.|
00000060  80 28 00 04 0a a5 13 f5                           |.(......|

2026-10-11 00:17:4457.144.153.135to 55407/udpSTUNSG

·T!·BfA7gOam0DR5a· Gx77:Y6nJ·ں· ·W·)·$·n·p>·r·Vh·P%·(·*

payload bytes

00000000  00 01 00 54 21 12 a4 42  66 41 37 67 4f 61 6d 30  |...T!..BfA7gOam0|
00000010  44 52 35 61 00 06 00 09  47 78 37 37 3a 59 36 6e  |DR5a....Gx77:Y6n|
00000020  4a 00 00 00 da ba 00 04  00 01 20 a6 c0 57 00 04  |J......... ..W..|
00000030  00 08 03 84 80 29 00 08  00 00 00 00 00 00 00 00  |.....)..........|
00000040  00 24 00 04 6e 7f 1e ff  00 08 00 14 8a 00 01 bb  |.$..n...........|
00000050  70 3e ba bb 88 72 d4 17  56 68 eb b3 ea 50 25 ec  |p>...r..Vh...P%.|
00000060  80 28 00 04 c9 1c 95 2a                           |.(.....*|

2026-10-11 00:17:2957.144.153.135to 57048/udpSTUNSG

·T!·BorZrBVoHg7pq· Gx77:Y6nJ·ں·W·)·$·n·z·ow·~yF·C·@·&·z·(·ވ·

payload bytes

00000000  00 01 00 54 21 12 a4 42  6f 72 5a 72 42 56 6f 48  |...T!..BorZrBVoH|
00000010  67 37 70 71 00 06 00 09  47 78 37 37 3a 59 36 6e  |g7pq....Gx77:Y6n|
00000020  4a 00 00 00 da ba 00 04  00 00 e4 f1 c0 57 00 04  |J............W..|
00000030  00 08 03 84 80 29 00 08  00 00 00 00 00 00 00 00  |.....)..........|
00000040  00 24 00 04 6e 7f 1e ff  00 08 00 14 7a 18 6f 77  |.$..n.......z.ow|
00000050  88 82 1c 7e 79 46 03 43  18 40 f2 1b 26 9f 13 7a  |...~yF.C.@..&..z|
00000060  80 28 00 04 ef de 88 97                           |.(......|

2026-10-11 00:17:2757.144.153.135to 55407/udpSTUNSG

·T!·BTBvID9IUeo6C· Gx77:Y6nJ·ں·>·W·)·$·n·IY2·8·<·4fjF ·R`6·̀(·xls·

payload bytes

00000000  00 01 00 54 21 12 a4 42  54 42 76 49 44 39 49 55  |...T!..BTBvID9IU|
00000010  65 6f 36 43 00 06 00 09  47 78 37 37 3a 59 36 6e  |eo6C....Gx77:Y6n|
00000020  4a 00 00 00 da ba 00 04  00 00 e0 3e c0 57 00 04  |J..........>.W..|
00000030  00 08 03 84 80 29 00 08  00 00 00 00 00 00 00 00  |.....)..........|
00000040  00 24 00 04 6e 7f 1e ff  00 08 00 14 49 59 32 e5  |.$..n.......IY2.|
00000050  38 82 8c 3c ad 34 66 6a  46 0a d6 52 60 36 85 cd  |8..<.4fjF..R`6..|
00000060  80 28 00 04 78 6c 73 8a                           |.(..xls.|

2026-10-11 00:17:1457.144.153.135to 57048/udpSTUNSG

·T!·BGQZwpnri1wuM· Gx77:Y6nJ·ں·k·W·)·$·n·f·7·7·0·)1K·(·@;·

payload bytes

00000000  00 01 00 54 21 12 a4 42  47 51 5a 77 70 6e 72 69  |...T!..BGQZwpnri|
00000010  31 77 75 4d 00 06 00 09  47 78 37 37 3a 59 36 6e  |1wuM....Gx77:Y6n|
00000020  4a 00 00 00 da ba 00 04  00 00 ac 6b c0 57 00 04  |J..........k.W..|
00000030  00 08 03 84 80 29 00 08  00 00 00 00 00 00 00 00  |.....)..........|
00000040  00 24 00 04 6e 7f 1e ff  00 08 00 14 d5 ed 66 85  |.$..n.........f.|
00000050  37 86 8c dc eb 37 8f e5  30 bc 29 31 4b 01 b5 15  |7....7..0.)1K...|
00000060  80 28 00 04 40 3b e0 0b                           |.(..@;..|

2026-10-11 00:17:1357.144.153.135to 55407/udpSTUNSG

·T!·BqFy2LVxy4vjU· Gx77:Y6nJ·ں·W·)·$·n·t·嬽·]6·R·9_&!·(·V·

payload bytes

00000000  00 01 00 54 21 12 a4 42  71 46 79 32 4c 56 78 79  |...T!..BqFy2LVxy|
00000010  34 76 6a 55 00 06 00 09  47 78 37 37 3a 59 36 6e  |4vjU....Gx77:Y6n|
00000020  4a 00 00 00 da ba 00 04  00 00 a7 b8 c0 57 00 04  |J............W..|
00000030  00 08 03 84 80 29 00 08  00 00 00 00 00 00 00 00  |.....)..........|
00000040  00 24 00 04 6e 7f 1e ff  00 08 00 14 13 ae e2 fa  |.$..n...........|
00000050  74 f9 e5 ac bd ce 5d 36  e5 52 99 39 5f 26 21 00  |t.....]6.R.9_&!.|
00000060  80 28 00 04 1d f3 56 ba                           |.(....V.|

2026-10-11 00:17:0057.144.153.135to 57048/udpSTUNSG

·T!·B3D3pZFCdfqKr· Gx77:Y6nJ·ں·s·W·)·$·n·dݶ·y·gp(Eu;C]^Bۮ·(·e4·!

payload bytes

00000000  00 01 00 54 21 12 a4 42  33 44 33 70 5a 46 43 64  |...T!..B3D3pZFCd|
00000010  66 71 4b 72 00 06 00 09  47 78 37 37 3a 59 36 6e  |fqKr....Gx77:Y6n|
00000020  4a 00 00 00 da ba 00 04  00 00 73 e2 c0 57 00 04  |J.........s..W..|
00000030  00 08 03 84 80 29 00 08  00 00 00 00 00 00 00 00  |.....)..........|
00000040  00 24 00 04 6e 7f 1e ff  00 08 00 14 cc 64 dd b6  |.$..n........d..|
00000050  9d 79 94 67 70 28 45 75  3b 43 5d 5e 42 db ae 84  |.y.gp(Eu;C]^B...|
00000060  80 28 00 04 65 34 b8 21                           |.(..e4.!|

2026-10-11 00:16:5957.144.153.135to 55407/udpSTUNSG

·T!·BDp9PbdvYg4Wg· Gx77:Y6nJ·ں·o,·W·)·$·n·v[·N·S΁z4P·(·J)

payload bytes

00000000  00 01 00 54 21 12 a4 42  44 70 39 50 62 64 76 59  |...T!..BDp9PbdvY|
00000010  67 34 57 67 00 06 00 09  47 78 37 37 3a 59 36 6e  |g4Wg....Gx77:Y6n|
00000020  4a 00 00 00 da ba 00 04  00 00 6f 2c c0 57 00 04  |J.........o,.W..|
00000030  00 08 03 84 80 29 00 08  00 00 00 00 00 00 00 00  |.....)..........|
00000040  00 24 00 04 6e 7f 1e ff  00 08 00 14 76 5b d8 0f  |.$..n.......v[..|
00000050  98 b1 fe af 4e 06 97 53  ce 81 7a 34 50 d4 f4 96  |....N..S..z4P...|
00000060  80 28 00 04 ef e0 4a 29                           |.(....J)|