UDP traffic

Datagrams matching port:1434 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Your plan searches up to 7d, so 30d was shortened. Plans

224

Datagrams

142

Source addresses

Networks

Countries

Destination ports

Traffic by type

Unrecognised

224 datagrams from 142 sources

Datagrams no decoder recognised. Their first bytes are kept.

Unrecognised 224

Latest Unrecognised datagram, to 1434/udp

payload bytes

00000000  02                                                |.|

Destination ports

1434/udp MSSQL Browser224

Networks

AS215925 Vpsvault.host Ltd from 2 sources36
AS8075 Microsoft Corporation from 29 sources30
AS396982 Google LLC from 24 sources24
AS6939 Hurricane Electric LLC from 22 sources22
AS209630 LLC Vash Kredit Bank from 1 source16
AS14061 DigitalOcean, LLC from 9 sources12
AS20052 Arbor Networks, Inc. from 4 sources9
AS21859 Zenlayer Inc from 3 sources9
AS213412 ONYPHE SAS from 6 sources8
AS197170 TechTies Inc. from 1 source4

Countries

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
45.205.1.231	AS215925 Vpsvault.host Ltd	BR	Unrecognised	20	2026-10-11 03:13
151.243.11.230	AS209630 LLC Vash Kredit Bank	AE	Unrecognised	16	2026-10-10 03:39
45.198.224.251	AS215925 Vpsvault.host Ltd	US	Unrecognised	16	2026-10-10 04:15
45.153.34.163	AS197170 TechTies Inc.	NL	Unrecognised	4	2026-10-07 02:41
178.79.137.171	AS63949 Akamai Connected Cloud	GB	Unrecognised	4	2026-10-07 13:25
146.88.241.120	AS20052 Arbor Networks, Inc.	US	Unrecognised	4	2026-10-11 03:06
185.226.197.27	AS21859 Zenlayer Inc	PT	Unrecognised	3	2026-10-10 02:43
31.132.169.138	AS57044 JSC ER-Telecom Holding	RU	Unrecognised	3	2026-10-11 03:17
217.71.127.125	AS198545 Flex Network Sarl	FR	Unrecognised	3	2026-10-10 10:11
185.180.141.9	AS21859 Zenlayer Inc	PT	Unrecognised	3	2026-10-09 08:13
109.105.210.62	AS21859 Zenlayer Inc	PT	Unrecognised	3	2026-10-09 08:14
64.226.83.235	AS14061 DigitalOcean, LLC	DE	Unrecognised	3	2026-10-10 07:19
45.156.129.87	AS211680 Sistemas Informaticos, S.A.	PT	Unrecognised	3	2026-10-08 02:47
62.210.89.150	AS12876 Scaleway SAS	FR	Unrecognised	3	2026-10-08 11:37
134.33.97.154	AS8075 Microsoft Corporation	US	Unrecognised	2	2026-10-11 03:16
146.88.241.170	AS20052 Arbor Networks, Inc.	US	Unrecognised	2	2026-10-11 02:21
91.230.168.118	AS213412 ONYPHE SAS	US	Unrecognised	2	2026-10-07 15:14
91.231.89.166	AS213412 ONYPHE SAS	FR	Unrecognised	2	2026-10-07 15:23
146.88.240.43	AS20052 Arbor Networks, Inc.	US	Unrecognised	2	2026-10-05 12:46
82.115.30.245	AS60024 Hk Cedoc Limited	AU	Unrecognised	2	2026-10-10 08:07

Latest datagrams

2026-10-11 04:04:3664.62.197.222to 1434/udpUnrecognisedUS
·
payload bytes
```
00000000  02                                                |.|
```
2026-10-11 03:53:5965.49.1.52to 1434/udpUnrecognisedUS
·
payload bytes
```
00000000  02                                                |.|
```

2026-10-11 03:17:2131.132.169.138to 1434/udpUnrecognisedRU

·.B_·8e·sXqRw97[·>?p=r[oA ^·#·G·h0·y0·Q!THZ·$mJc]·V8v·XU·{Td~pdf s_Pu0qJxKU·8·'VM·mK·

payload bytes

00000000  03 2e 42 5f 1d 38 65 14  0f 11 00 73 58 71 52 77  |..B_.8e....sXqRw|
00000010  39 37 5b 13 3e 3f 70 3d  72 5b 6f 41 20 5e 05 23  |97[.>?p=r[oA ^.#|
00000020  7f 47 02 1c 00 68 30 0f  79 30 02 51 21 54 48 5a  |.G...h0.y0.Q!THZ|
00000030  0b 24 6d 4a 63 5d 07 56  38 76 17 58 55 1c 7b 54  |.$mJc].V8v.XU.{T|
00000040  64 7e 70 64 66 20 73 5f  50 75 30 71 4a 78 4b 55  |d~pdf s_Pu0qJxKU|
00000050  1c 38 1f 00 15 27 56 4d  1d 6d 4b 82              |.8...'VM.mK.|

2026-10-11 03:16:44134.33.97.154to 1434/udpUnrecognisedUS
MGLNDD_<HONEYPOT>_1434
Payload bytes withheld: they contain the sensor's address.
2026-10-11 03:13:1945.205.1.231to 1434/udpUnrecognisedBR
·
payload bytes
```
00000000  02                                                |.|
```
2026-10-11 03:11:4620.150.212.188to 1434/udpUnrecognisedUS
MGLNDD_<HONEYPOT>_1434
Payload bytes withheld: they contain the sensor's address.
2026-10-11 03:10:4140.76.250.59to 1434/udpUnrecognisedUS
MGLNDD_<HONEYPOT>_1434
Payload bytes withheld: they contain the sensor's address.
2026-10-11 03:06:19146.88.241.120to 1434/udpUnrecognisedUS
·
payload bytes
```
00000000  02                                                |.|
```
2026-10-11 02:57:2945.205.1.231to 1434/udpUnrecognisedBR
·
payload bytes
```
00000000  02                                                |.|
```

2026-10-11 02:54:39107.189.1.154to 1434/udpUnrecognisedLU

j.Vn·.7·V6uei';*j,hx·P

payload bytes

00000000  6a 2e 56 6e 00 2e 37 06  56 36 75 65 69 27 3b 2a  |j.Vn..7.V6uei';*|
00000010  6a 2c 68 78 14 dc 50                              |j,hx..P|

2026-10-11 02:37:2945.205.1.231to 1434/udpUnrecognisedBR
·
payload bytes
```
00000000  02                                                |.|
```
2026-10-11 02:29:4645.205.1.231to 1434/udpUnrecognisedBR
·
payload bytes
```
00000000  02                                                |.|
```
2026-10-11 02:21:13146.88.241.170to 1434/udpUnrecognisedUS
·
payload bytes
```
00000000  02                                                |.|
```
2026-10-11 02:19:09198.235.24.64to 1434/udpUnrecognisedUS
·
payload bytes
```
00000000  02                                                |.|
```
2026-10-11 01:08:04146.88.241.120to 1434/udpUnrecognisedUS
·
payload bytes
```
00000000  02                                                |.|
```