UDP traffic
Datagrams matching port:1434 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.
A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.
222
Datagrams
140
Source addresses
42
Networks
21
Countries
1
Destination ports
Traffic by type
Unrecognised
222 datagrams from 140 sourcesDatagrams no decoder recognised. Their first bytes are kept.
Latest Unrecognised datagram, to 1434/udp
payload bytes
00000000 03 2e 42 5f 1d 38 65 14 0f 11 00 73 58 71 52 77 |..B_.8e....sXqRw|
00000010 39 37 5b 13 3e 3f 70 3d 72 5b 6f 41 20 5e 05 23 |97[.>?p=r[oA ^.#|
00000020 7f 47 02 1c 00 68 30 0f 79 30 02 51 21 54 48 5a |.G...h0.y0.Q!THZ|
00000030 0b 24 6d 4a 63 5d 07 56 38 76 17 58 55 1c 7b 54 |.$mJc].V8v.XU.{T|
00000040 64 7e 70 64 66 20 73 5f 50 75 30 71 4a 78 4b 55 |d~pdf s_Pu0qJxKU|
00000050 1c 38 1f 00 15 27 56 4d 1d 6d 4b 82 |.8...'VM.mK.|Destination ports
- 1434/udp MSSQL Browser222
Networks
- AS215925 Vpsvault.host Ltd from 2 sources36
- AS8075 Microsoft Corporation from 29 sources30
- AS396982 Google LLC from 24 sources24
- AS6939 Hurricane Electric LLC from 20 sources20
- AS209630 LLC Vash Kredit Bank from 1 source16
- AS14061 DigitalOcean, LLC from 9 sources12
- AS20052 Arbor Networks, Inc. from 4 sources9
- AS21859 Zenlayer Inc from 3 sources9
- AS213412 ONYPHE SAS from 6 sources8
- AS197170 TechTies Inc. from 1 source4
Countries
Source addresses (unverified)
| Address | Network | Cc | Sends | Datagrams | Last seen (UTC) |
|---|---|---|---|---|---|
| 45.205.1.231 | AS215925 Vpsvault.host Ltd | BR | Unrecognised | 20 | 2026-10-11 03:13 |
| 151.243.11.230 | AS209630 LLC Vash Kredit Bank | AE | Unrecognised | 16 | 2026-10-10 03:39 |
| 45.198.224.251 | AS215925 Vpsvault.host Ltd | US | Unrecognised | 16 | 2026-10-10 04:15 |
| 178.79.137.171 | AS63949 Akamai Connected Cloud | GB | Unrecognised | 4 | 2026-10-07 13:25 |
| 45.153.34.163 | AS197170 TechTies Inc. | NL | Unrecognised | 4 | 2026-10-07 02:41 |
| 146.88.241.120 | AS20052 Arbor Networks, Inc. | US | Unrecognised | 4 | 2026-10-11 03:06 |
| 185.226.197.27 | AS21859 Zenlayer Inc | PT | Unrecognised | 3 | 2026-10-10 02:43 |
| 109.105.210.62 | AS21859 Zenlayer Inc | PT | Unrecognised | 3 | 2026-10-09 08:14 |
| 31.132.169.138 | AS57044 JSC ER-Telecom Holding | RU | Unrecognised | 3 | 2026-10-11 03:17 |
| 217.71.127.125 | AS198545 Flex Network Sarl | FR | Unrecognised | 3 | 2026-10-10 10:11 |
| 185.180.141.9 | AS21859 Zenlayer Inc | PT | Unrecognised | 3 | 2026-10-09 08:13 |
| 64.226.83.235 | AS14061 DigitalOcean, LLC | DE | Unrecognised | 3 | 2026-10-10 07:19 |
| 45.156.129.87 | AS211680 Sistemas Informaticos, S.A. | PT | Unrecognised | 3 | 2026-10-08 02:47 |
| 62.210.89.150 | AS12876 Scaleway SAS | FR | Unrecognised | 3 | 2026-10-08 11:37 |
| 134.33.97.154 | AS8075 Microsoft Corporation | US | Unrecognised | 2 | 2026-10-11 03:16 |
| 146.88.241.170 | AS20052 Arbor Networks, Inc. | US | Unrecognised | 2 | 2026-10-11 02:21 |
| 91.230.168.118 | AS213412 ONYPHE SAS | US | Unrecognised | 2 | 2026-10-07 15:14 |
| 91.231.89.166 | AS213412 ONYPHE SAS | FR | Unrecognised | 2 | 2026-10-07 15:23 |
| 146.88.240.43 | AS20052 Arbor Networks, Inc. | US | Unrecognised | 2 | 2026-10-05 12:46 |
| 82.115.30.245 | AS60024 Hk Cedoc Limited | AU | Unrecognised | 2 | 2026-10-10 08:07 |
Latest datagrams
payload bytes
00000000 03 2e 42 5f 1d 38 65 14 0f 11 00 73 58 71 52 77 |..B_.8e....sXqRw| 00000010 39 37 5b 13 3e 3f 70 3d 72 5b 6f 41 20 5e 05 23 |97[.>?p=r[oA ^.#| 00000020 7f 47 02 1c 00 68 30 0f 79 30 02 51 21 54 48 5a |.G...h0.y0.Q!THZ| 00000030 0b 24 6d 4a 63 5d 07 56 38 76 17 58 55 1c 7b 54 |.$mJc].V8v.XU.{T| 00000040 64 7e 70 64 66 20 73 5f 50 75 30 71 4a 78 4b 55 |d~pdf s_Pu0qJxKU| 00000050 1c 38 1f 00 15 27 56 4d 1d 6d 4b 82 |.8...'VM.mK.|Payload bytes withheld: they contain the sensor's address.
payload bytes
00000000 02 |.|
Payload bytes withheld: they contain the sensor's address.
Payload bytes withheld: they contain the sensor's address.
payload bytes
00000000 02 |.|
payload bytes
00000000 02 |.|
payload bytes
00000000 6a 2e 56 6e 00 2e 37 06 56 36 75 65 69 27 3b 2a |j.Vn..7.V6uei';*| 00000010 6a 2c 68 78 14 dc 50 |j,hx..P|
payload bytes
00000000 02 |.|
payload bytes
00000000 02 |.|
payload bytes
00000000 02 |.|
payload bytes
00000000 02 |.|
payload bytes
00000000 02 |.|
payload bytes
00000000 02 |.|
payload bytes
00000000 01 2e 67 64 7c 15 75 18 51 17 43 38 1a 72 08 72 |..gd|.u.Q.C8.r.r| 00000010 4e 4b 2f 37 08 67 58 53 5f 25 5c 7c 13 29 70 14 |NK/7.gXS_%\|.)p.| 00000020 46 57 78 42 6c 6d 5b 3e 04 1e 76 1f 10 7e 11 5e |FWxBlm[>..v..~.^| 00000030 4a 40 15 52 28 6d 25 07 13 01 04 26 2a 74 3a 71 |J@.R(m%....&*t:q| 00000040 4c 33 33 38 20 0e 76 25 2c 6c 44 3c 6b 55 1b bd |L338 .v%,lD<kU..| 00000050 13 |.|