UDP traffic

Datagrams matching port:17 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

Unrecognised

55 datagrams from 44 sources

Datagrams no decoder recognised. Their first bytes are kept.

Unrecognised 55

Latest Unrecognised datagram, to 17/udp

payload bytes

00000000  0a                                                |.|

Amplification checks

Probes for services that answer a small request with a much larger reply, the property reflection attacks rely on.

Service	Port	Datagrams	Sources	Factor
QOTD	17/udp	55	44	140.3

The factor is how many bytes a reachable server can send back for each byte it receives, as published by CISA in alert TA14-017A.

Destination ports

17/udp QOTD55

Networks

AS6939 Hurricane Electric LLC from 23 sources23
AS20052 Arbor Networks, Inc. from 5 sources8
AS398324 Censys, Inc. from 5 sources6
AS396982 Google LLC from 6 sources6
AS63949 Akamai Connected Cloud from 1 source4
AS401661 EMBNEX, LLC from 1 source3
AS401626 Netiface America, Inc. from 1 source2
AS14061 DigitalOcean, LLC from 1 source2
AS398722 Censys, Inc. from 1 source1

Countries

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
139.177.198.244	AS63949 Akamai Connected Cloud	CA	Unrecognised	4	2026-10-06 22:08
16.5.0.234	AS401661 EMBNEX, LLC	BR	Unrecognised	3	2026-10-05 18:41
217.60.76.179	AS401626 Netiface America, Inc.	AE	Unrecognised	2	2026-10-08 07:17
146.88.241.20	AS20052 Arbor Networks, Inc.	US	Unrecognised	2	2026-10-10 03:49
66.132.172.230	AS398324 Censys, Inc.	US	Unrecognised	2	2026-10-10 03:02
146.88.241.80	AS20052 Arbor Networks, Inc.	US	Unrecognised	2	2026-10-10 13:28
146.88.241.170	AS20052 Arbor Networks, Inc.	US	Unrecognised	2	2026-10-08 10:38
146.190.72.24	AS14061 DigitalOcean, LLC	US	Unrecognised	2	2026-10-06 17:04
65.49.1.53	AS6939 Hurricane Electric LLC	US	Unrecognised	1	2026-10-06 03:21
65.49.1.48	AS6939 Hurricane Electric LLC	US	Unrecognised	1	2026-10-09 00:56
65.49.1.107	AS6939 Hurricane Electric LLC	US	Unrecognised	1	2026-10-10 06:08
147.185.132.81	AS396982 Google LLC	US	Unrecognised	1	2026-10-07 11:59
65.49.1.15	AS6939 Hurricane Electric LLC	US	Unrecognised	1	2026-10-06 03:28
65.49.1.114	AS6939 Hurricane Electric LLC	US	Unrecognised	1	2026-10-08 00:48
216.25.89.65	AS396982 Google LLC	US	Unrecognised	1	2026-10-07 16:04
65.49.1.119	AS6939 Hurricane Electric LLC	US	Unrecognised	1	2026-10-08 01:26
216.218.206.77	AS6939 Hurricane Electric LLC	US	Unrecognised	1	2026-10-11 01:58
65.49.20.116	AS6939 Hurricane Electric LLC	US	Unrecognised	1	2026-10-10 06:36
64.62.197.131	AS6939 Hurricane Electric LLC	US	Unrecognised	1	2026-10-09 06:45
64.62.156.17	AS6939 Hurricane Electric LLC	US	Unrecognised	1	2026-10-09 08:09

Latest datagrams

2026-10-11 06:57:1664.62.156.28to 17/udpUnrecognisedUS
payload bytes
```
00000000  0a                                                |.|
```
2026-10-11 04:12:0364.62.156.63to 17/udpUnrecognisedUS
payload bytes
```
00000000  0a                                                |.|
```
2026-10-11 01:58:40216.218.206.77to 17/udpUnrecognisedUS
payload bytes
```
00000000  0a                                                |.|
```
2026-10-10 13:28:33146.88.241.80to 17/udpUnrecognisedUS
·
payload bytes
```
00000000  00                                                |.|
```
2026-10-10 12:59:10146.88.241.80to 17/udpUnrecognisedUS
·
payload bytes
```
00000000  00                                                |.|
```
2026-10-10 06:36:0065.49.20.116to 17/udpUnrecognisedUS
payload bytes
```
00000000  0a                                                |.|
```
2026-10-10 06:15:4365.49.20.96to 17/udpUnrecognisedUS
payload bytes
```
00000000  0a                                                |.|
```
2026-10-10 06:08:3465.49.1.107to 17/udpUnrecognisedUS
payload bytes
```
00000000  0a                                                |.|
```
2026-10-10 03:49:05146.88.241.20to 17/udpUnrecognisedUS
·
payload bytes
```
00000000  00                                                |.|
```
2026-10-10 03:26:17146.88.241.60to 17/udpUnrecognisedUS
·
payload bytes
```
00000000  00                                                |.|
```
2026-10-10 03:08:5465.49.1.63to 17/udpUnrecognisedUS
payload bytes
```
00000000  0a                                                |.|
```
2026-10-10 03:02:1666.132.172.230to 17/udpUnrecognisedUS
payload bytes
```
00000000  0d 0a                                             |..|
```

2026-10-09 18:05:25147.185.132.88to 17/udpUnrecognisedUS

r·|·

payload bytes

00000000  72 fe 1d 13 00 00 00 00  00 00 00 02 00 01 86 a0  |r...............|
00000010  00 01 97 7c 00 00 00 00  00 00 00 00 00 00 00 00  |...|............|
00000020  00 00 00 00 00 00 00 00                           |........|

2026-10-09 08:09:1864.62.156.17to 17/udpUnrecognisedUS
payload bytes
```
00000000  0a                                                |.|
```
2026-10-09 06:45:3964.62.197.131to 17/udpUnrecognisedUS
payload bytes
```
00000000  0a                                                |.|
```