UDP traffic

Datagrams matching country:SG sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Your plan searches up to 7d, so 30d was shortened. Plans

291

Datagrams

Source addresses

Networks

Countries

130

Destination ports

Traffic by type

Service queries

38 datagrams from 11 sources

Requests a service answers without a handshake. Scanners send them to find open DNS, NTP, SNMP or SSDP servers, which are also the servers reflection attacks abuse.

DNS 23 SSDP 4 SNMP 4 NTP 3 NetBIOS 2 CoAP 2

Latest DNS datagram, to 53/udp

DNS query TXT/CH VERSION.BIND

payload bytes

00000000  34 ef 01 00 00 01 00 00  00 00 00 00 07 56 45 52  |4............VER|
00000010  53 49 4f 4e 04 42 49 4e  44 00 00 10 00 03        |SION.BIND.....|

Other services

93 datagrams from 10 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

STUN 64 DTLS 16 HTTP 4 SIP 3 TARGUSDATASPEED 1 GTP-U 1 Redis 1 RADIUS 1 RTP 1 GTP-C 1

Latest STUN datagram, to 57048/udp

·T!·BAvEnWul0p/4x· Gx77:Y6nJ·ں·%[·W·)·$·n·jC&·c·-Z·[·d·hB·(· ·

payload bytes

00000000  00 01 00 54 21 12 a4 42  41 76 45 6e 57 75 6c 30  |...T!..BAvEnWul0|
00000010  70 2f 34 78 00 06 00 09  47 78 37 37 3a 59 36 6e  |p/4x....Gx77:Y6n|
00000020  4a 00 00 00 da ba 00 04  00 01 25 5b c0 57 00 04  |J.........%[.W..|
00000030  00 08 03 84 80 29 00 08  00 00 00 00 00 00 00 00  |.....)..........|
00000040  00 24 00 04 6e 7f 1e ff  00 08 00 14 ef 8b d1 6a  |.$..n..........j|
00000050  43 26 ee 63 a1 2d 5a eb  5b ec 80 64 e7 68 42 af  |C&.c.-Z.[..d.hB.|
00000060  80 28 00 04 0a a5 13 f5                           |.(......|

QUIC

5 datagrams from 1 source

Initial packets of HTTP/3 connections, decoded on the sensor.

QUIC 5

Latest QUIC datagram, to 853/udp

QUIC v1 Initial alpn=doq,doq-i07,doq-i08,doq-i09,doq-i10,doq-i11,doq-i06,doq-i12,doq-i05,doq-i04,doq-i03,doq-i02,doq-i01,doq-i00

Unrecognised

151 datagrams from 26 sources

Datagrams no decoder recognised. Their first bytes are kept.

Unrecognised 151

Latest Unrecognised datagram, to 27021/udp

·TSource Engine Query·

payload bytes

00000000  ff ff ff ff 54 53 6f 75  72 63 65 20 45 6e 67 69  |....TSource Engi|
00000010  6e 65 20 51 75 65 72 79  00                       |ne Query.|

Peer-to-peer

4 datagrams from 4 sources

File-sharing clients trying to reach a peer that used one of these addresses before. This is not scanning, so it is left out of every other figure on this page.

BitTorrent 4

Amplification checks

Probes for services that answer a small request with a much larger reply, the property reflection attacks rely on.

Service	Port	Datagrams	Sources	Factor
DNS	53/udp +2	16	7	28 to 54
mDNS	5353/udp	12	4	2 to 10
SSDP	1900/udp +2	4	3	30.8
SNMPv2	161/udp +1	4	2	6.3
NTP	123/udp	3	2	556.9
NetBIOS	137/udp	2	1	3.8
Portmap	111/udp	1	1	7 to 28
RIPv1	520/udp	1	1	131.24
TFTP	69/udp	1	1	60
WS-Discovery	3702/udp	1	1	10 to 500

The factor is how many bytes a reachable server can send back for each byte it receives, as published by CISA in alert TA14-017A.

Destination ports

1194/udp OpenVPN37
53/udp DNS14
5353/udp DNS12
57048/udp STUN8
55407/udp STUN8
50072/udp STUN8
61104/udp STUN8
5060/udp SIP6
17185/udp5
56365/udp STUN5
53564/udp STUN5
50858/udp STUN5

DNS questions

DNS record types

TXT9
A7
PTR3

QUIC clients (JA4)

q13i0311dq_55b375c5d22e_c183556c78e2 from 1 source3
q13i0311h3_55b375c5d22e_c183556c78e2 from 1 source2

QUIC transport parameters

cde977acba33 from 1 source3
12d07494ae7c from 1 source2

QUIC versions

Networks

AS45102 Alibaba (US) Technology Co., Ltd. from 16 sources138
AS32934 Facebook, Inc. from 3 sources62
AS9009 M247 Europe SRL from 7 sources35
AS14061 DigitalOcean, LLC from 5 sources31
AS63949 Akamai Connected Cloud from 2 sources8
AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMIT from 2 sources8
AS132203 Tencent Building, Kejizhongyi Avenue from 1 source4
AS154402 Fredyun Network from 1 source4
AS4657 StarHub Ltd from 1 source1

Countries

SG Singapore291

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
43.98.165.95	AS45102 Alibaba (US) Technology Co., Ltd.	SG	Unrecognised	34	2026-10-06 07:19
47.84.101.219	AS45102 Alibaba (US) Technology Co., Ltd.	SG	Unrecognised	33	2026-10-06 07:47
43.98.186.223	AS45102 Alibaba (US) Technology Co., Ltd.	SG	Unrecognised	30	2026-10-06 07:19
157.240.15.57	AS32934 Facebook, Inc.	SG	STUN	30	2026-10-09 15:26
57.144.153.135	AS32934 Facebook, Inc.	SG	STUN	16	2026-10-11 00:17
57.144.145.135	AS32934 Facebook, Inc.	SG	STUN	16	2026-10-10 12:44
185.200.116.80	AS9009 M247 Europe SRL	SG	Unrecognised	12	2026-10-08 09:53
167.172.79.176	AS14061 DigitalOcean, LLC	SG	Unrecognised	10	2026-10-10 21:20
174.138.21.30	AS14061 DigitalOcean, LLC	SG	Unrecognised	9	2026-10-10 16:50
47.84.122.184	AS45102 Alibaba (US) Technology Co., Ltd.	SG	DTLS	8	2026-10-09 05:11
43.98.175.145	AS45102 Alibaba (US) Technology Co., Ltd.	SG	DTLS	8	2026-10-09 05:14
165.154.29.202	AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMIT	SG	NTP	7	2026-10-05 18:58
168.144.103.222	AS14061 DigitalOcean, LLC	SG	Unrecognised	6	2026-10-07 14:58
47.84.179.21	AS45102 Alibaba (US) Technology Co., Ltd.	SG	DNS	5	2026-10-06 17:04
47.245.117.221	AS45102 Alibaba (US) Technology Co., Ltd.	SG	QUIC	5	2026-10-09 01:03
47.245.84.83	AS45102 Alibaba (US) Technology Co., Ltd.	SG	DNS	5	2026-10-10 05:06
185.200.116.42	AS9009 M247 Europe SRL	SG	Unrecognised	4	2026-10-10 21:54
185.200.116.71	AS9009 M247 Europe SRL	SG	Unrecognised	4	2026-10-07 09:35
139.162.11.39	AS63949 Akamai Connected Cloud	SG	Unrecognised	4	2026-10-10 14:09
172.104.178.132	AS63949 Akamai Connected Cloud	SG	Unrecognised	4	2026-10-11 03:35

Latest datagrams

2026-10-11 03:35:40172.104.178.132to 27021/udpUnrecognisedSG

·TSource Engine Query·

payload bytes

00000000  ff ff ff ff 54 53 6f 75  72 63 65 20 45 6e 67 69  |....TSource Engi|
00000010  6e 65 20 51 75 65 72 79  00                       |ne Query.|

2026-10-11 03:24:22144.79.70.100to 53/udpDNSSG

DNS query TXT/CH VERSION.BIND

payload bytes

00000000  34 ef 01 00 00 01 00 00  00 00 00 00 07 56 45 52  |4............VER|
00000010  53 49 4f 4e 04 42 49 4e  44 00 00 10 00 03        |SION.BIND.....|

2026-10-11 03:23:24144.79.70.100to 53/udpDNSSG

DNS query TXT/CH VERSION.BIND

payload bytes

00000000  34 ef 01 00 00 01 00 00  00 00 00 00 07 56 45 52  |4............VER|
00000010  53 49 4f 4e 04 42 49 4e  44 00 00 10 00 03        |SION.BIND.....|

2026-10-11 03:19:10144.79.70.100to 53/udpDNSSG

DNS query TXT/CH VERSION.BIND

payload bytes

00000000  34 ef 01 00 00 01 00 00  00 00 00 00 07 56 45 52  |4............VER|
00000010  53 49 4f 4e 04 42 49 4e  44 00 00 10 00 03        |SION.BIND.....|

2026-10-11 03:01:51144.79.70.100to 53/udpDNSSG

DNS query TXT/CH VERSION.BIND

payload bytes

00000000  34 ef 01 00 00 01 00 00  00 00 00 00 07 56 45 52  |4............VER|
00000010  53 49 4f 4e 04 42 49 4e  44 00 00 10 00 03        |SION.BIND.....|

2026-10-11 00:17:4557.144.153.135to 57048/udpSTUNSG

·T!·BAvEnWul0p/4x· Gx77:Y6nJ·ں·%[·W·)·$·n·jC&·c·-Z·[·d·hB·(· ·

payload bytes

00000000  00 01 00 54 21 12 a4 42  41 76 45 6e 57 75 6c 30  |...T!..BAvEnWul0|
00000010  70 2f 34 78 00 06 00 09  47 78 37 37 3a 59 36 6e  |p/4x....Gx77:Y6n|
00000020  4a 00 00 00 da ba 00 04  00 01 25 5b c0 57 00 04  |J.........%[.W..|
00000030  00 08 03 84 80 29 00 08  00 00 00 00 00 00 00 00  |.....)..........|
00000040  00 24 00 04 6e 7f 1e ff  00 08 00 14 ef 8b d1 6a  |.$..n..........j|
00000050  43 26 ee 63 a1 2d 5a eb  5b ec 80 64 e7 68 42 af  |C&.c.-Z.[..d.hB.|
00000060  80 28 00 04 0a a5 13 f5                           |.(......|

2026-10-11 00:17:4457.144.153.135to 55407/udpSTUNSG

·T!·BfA7gOam0DR5a· Gx77:Y6nJ·ں· ·W·)·$·n·p>·r·Vh·P%·(·*

payload bytes

00000000  00 01 00 54 21 12 a4 42  66 41 37 67 4f 61 6d 30  |...T!..BfA7gOam0|
00000010  44 52 35 61 00 06 00 09  47 78 37 37 3a 59 36 6e  |DR5a....Gx77:Y6n|
00000020  4a 00 00 00 da ba 00 04  00 01 20 a6 c0 57 00 04  |J......... ..W..|
00000030  00 08 03 84 80 29 00 08  00 00 00 00 00 00 00 00  |.....)..........|
00000040  00 24 00 04 6e 7f 1e ff  00 08 00 14 8a 00 01 bb  |.$..n...........|
00000050  70 3e ba bb 88 72 d4 17  56 68 eb b3 ea 50 25 ec  |p>...r..Vh...P%.|
00000060  80 28 00 04 c9 1c 95 2a                           |.(.....*|

2026-10-11 00:17:2957.144.153.135to 57048/udpSTUNSG

·T!·BorZrBVoHg7pq· Gx77:Y6nJ·ں·W·)·$·n·z·ow·~yF·C·@·&·z·(·ވ·

payload bytes

00000000  00 01 00 54 21 12 a4 42  6f 72 5a 72 42 56 6f 48  |...T!..BorZrBVoH|
00000010  67 37 70 71 00 06 00 09  47 78 37 37 3a 59 36 6e  |g7pq....Gx77:Y6n|
00000020  4a 00 00 00 da ba 00 04  00 00 e4 f1 c0 57 00 04  |J............W..|
00000030  00 08 03 84 80 29 00 08  00 00 00 00 00 00 00 00  |.....)..........|
00000040  00 24 00 04 6e 7f 1e ff  00 08 00 14 7a 18 6f 77  |.$..n.......z.ow|
00000050  88 82 1c 7e 79 46 03 43  18 40 f2 1b 26 9f 13 7a  |...~yF.C.@..&..z|
00000060  80 28 00 04 ef de 88 97                           |.(......|

2026-10-11 00:17:2757.144.153.135to 55407/udpSTUNSG

·T!·BTBvID9IUeo6C· Gx77:Y6nJ·ں·>·W·)·$·n·IY2·8·<·4fjF ·R`6·̀(·xls·

payload bytes

00000000  00 01 00 54 21 12 a4 42  54 42 76 49 44 39 49 55  |...T!..BTBvID9IU|
00000010  65 6f 36 43 00 06 00 09  47 78 37 37 3a 59 36 6e  |eo6C....Gx77:Y6n|
00000020  4a 00 00 00 da ba 00 04  00 00 e0 3e c0 57 00 04  |J..........>.W..|
00000030  00 08 03 84 80 29 00 08  00 00 00 00 00 00 00 00  |.....)..........|
00000040  00 24 00 04 6e 7f 1e ff  00 08 00 14 49 59 32 e5  |.$..n.......IY2.|
00000050  38 82 8c 3c ad 34 66 6a  46 0a d6 52 60 36 85 cd  |8..<.4fjF..R`6..|
00000060  80 28 00 04 78 6c 73 8a                           |.(..xls.|

2026-10-11 00:17:1457.144.153.135to 57048/udpSTUNSG

·T!·BGQZwpnri1wuM· Gx77:Y6nJ·ں·k·W·)·$·n·f·7·7·0·)1K·(·@;·

payload bytes

00000000  00 01 00 54 21 12 a4 42  47 51 5a 77 70 6e 72 69  |...T!..BGQZwpnri|
00000010  31 77 75 4d 00 06 00 09  47 78 37 37 3a 59 36 6e  |1wuM....Gx77:Y6n|
00000020  4a 00 00 00 da ba 00 04  00 00 ac 6b c0 57 00 04  |J..........k.W..|
00000030  00 08 03 84 80 29 00 08  00 00 00 00 00 00 00 00  |.....)..........|
00000040  00 24 00 04 6e 7f 1e ff  00 08 00 14 d5 ed 66 85  |.$..n.........f.|
00000050  37 86 8c dc eb 37 8f e5  30 bc 29 31 4b 01 b5 15  |7....7..0.)1K...|
00000060  80 28 00 04 40 3b e0 0b                           |.(..@;..|

2026-10-11 00:17:1357.144.153.135to 55407/udpSTUNSG

·T!·BqFy2LVxy4vjU· Gx77:Y6nJ·ں·W·)·$·n·t·嬽·]6·R·9_&!·(·V·

payload bytes

00000000  00 01 00 54 21 12 a4 42  71 46 79 32 4c 56 78 79  |...T!..BqFy2LVxy|
00000010  34 76 6a 55 00 06 00 09  47 78 37 37 3a 59 36 6e  |4vjU....Gx77:Y6n|
00000020  4a 00 00 00 da ba 00 04  00 00 a7 b8 c0 57 00 04  |J............W..|
00000030  00 08 03 84 80 29 00 08  00 00 00 00 00 00 00 00  |.....)..........|
00000040  00 24 00 04 6e 7f 1e ff  00 08 00 14 13 ae e2 fa  |.$..n...........|
00000050  74 f9 e5 ac bd ce 5d 36  e5 52 99 39 5f 26 21 00  |t.....]6.R.9_&!.|
00000060  80 28 00 04 1d f3 56 ba                           |.(....V.|

2026-10-11 00:17:0057.144.153.135to 57048/udpSTUNSG

·T!·B3D3pZFCdfqKr· Gx77:Y6nJ·ں·s·W·)·$·n·dݶ·y·gp(Eu;C]^Bۮ·(·e4·!

payload bytes

00000000  00 01 00 54 21 12 a4 42  33 44 33 70 5a 46 43 64  |...T!..B3D3pZFCd|
00000010  66 71 4b 72 00 06 00 09  47 78 37 37 3a 59 36 6e  |fqKr....Gx77:Y6n|
00000020  4a 00 00 00 da ba 00 04  00 00 73 e2 c0 57 00 04  |J.........s..W..|
00000030  00 08 03 84 80 29 00 08  00 00 00 00 00 00 00 00  |.....)..........|
00000040  00 24 00 04 6e 7f 1e ff  00 08 00 14 cc 64 dd b6  |.$..n........d..|
00000050  9d 79 94 67 70 28 45 75  3b 43 5d 5e 42 db ae 84  |.y.gp(Eu;C]^B...|
00000060  80 28 00 04 65 34 b8 21                           |.(..e4.!|

2026-10-11 00:16:5957.144.153.135to 55407/udpSTUNSG

·T!·BDp9PbdvYg4Wg· Gx77:Y6nJ·ں·o,·W·)·$·n·v[·N·S΁z4P·(·J)

payload bytes

00000000  00 01 00 54 21 12 a4 42  44 70 39 50 62 64 76 59  |...T!..BDp9PbdvY|
00000010  67 34 57 67 00 06 00 09  47 78 37 37 3a 59 36 6e  |g4Wg....Gx77:Y6n|
00000020  4a 00 00 00 da ba 00 04  00 00 6f 2c c0 57 00 04  |J.........o,.W..|
00000030  00 08 03 84 80 29 00 08  00 00 00 00 00 00 00 00  |.....)..........|
00000040  00 24 00 04 6e 7f 1e ff  00 08 00 14 76 5b d8 0f  |.$..n.......v[..|
00000050  98 b1 fe af 4e 06 97 53  ce 81 7a 34 50 d4 f4 96  |....N..S..z4P...|
00000060  80 28 00 04 ef e0 4a 29                           |.(....J)|

2026-10-11 00:16:4557.144.153.135to 57048/udpSTUNSG

·T!·BGVNje5CUe/Ok· Gx77:Y6nJ·ں·;B·W·)·$·n·N· m·Ԟ·/·+·(·R

payload bytes

00000000  00 01 00 54 21 12 a4 42  47 56 4e 6a 65 35 43 55  |...T!..BGVNje5CU|
00000010  65 2f 4f 6b 00 06 00 09  47 78 37 37 3a 59 36 6e  |e/Ok....Gx77:Y6n|
00000020  4a 00 00 00 da ba 00 04  00 00 3b 42 c0 57 00 04  |J.........;B.W..|
00000030  00 08 03 84 80 29 00 08  00 00 00 00 00 00 00 00  |.....)..........|
00000040  00 24 00 04 6e 7f 1e ff  00 08 00 14 4e 11 0d 6d  |.$..n.......N..m|
00000050  e7 a9 d4 9e 97 f7 f1 bd  03 a3 2f 02 a3 c4 2b 10  |........../...+.|
00000060  80 28 00 04 ce cf f9 52                           |.(.....R|

2026-10-11 00:16:4457.144.153.135to 55407/udpSTUNSG

·T!·BRF4RJx5JhV+o· Gx77:Y6nJ·ں·6·W·)·$·n·R·_·.֐·p^·ˀ(·%·

payload bytes

00000000  00 01 00 54 21 12 a4 42  52 46 34 52 4a 78 35 4a  |...T!..BRF4RJx5J|
00000010  68 56 2b 6f 00 06 00 09  47 78 37 37 3a 59 36 6e  |hV+o....Gx77:Y6n|
00000020  4a 00 00 00 da ba 00 04  00 00 36 87 c0 57 00 04  |J.........6..W..|
00000030  00 08 03 84 80 29 00 08  00 00 00 00 00 00 00 00  |.....)..........|
00000040  00 24 00 04 6e 7f 1e ff  00 08 00 14 9a b7 aa 52  |.$..n..........R|
00000050  f6 d1 5f c0 2e d6 90 b7  70 5e b8 bf 03 b6 99 cb  |.._.....p^......|
00000060  80 28 00 04 25 c2 93 1c                           |.(..%...|