UDP traffic

Datagrams matching port:1701 sent to HoneyLabs sensors over UDP in the last 24 hours. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

Other services

1 datagrams from 1 source

First packets of sessions with VPN, voice, tunnelling, database and management services.

HTTP 1

Latest HTTP datagram, to 1701/udp

payload bytes

00000000  47 45 54 20 2f 20 48 54  54 50 2f 31 2e 31 0d 0a  |GET / HTTP/1.1..|
00000010  48 6f 73 74 3a 20 77 77  77 0d 0a 0d 0a           |Host: www....|

Unrecognised

14 datagrams from 14 sources

Datagrams no decoder recognised. Their first bytes are kept.

Unrecognised 14

Latest Unrecognised datagram, to 1701/udp

·:· ·Xpanse· ·

payload bytes

00000000  c8 02 00 3a 00 00 00 00  00 00 00 00 80 08 00 00  |...:............|
00000010  00 00 00 01 00 08 00 00  00 02 01 00 80 0a 00 00  |................|
00000020  00 03 00 00 00 03 80 0c  00 00 00 07 58 70 61 6e  |............Xpan|
00000030  73 65 80 08 00 00 00 09  00 01                    |se........|

Destination ports

1701/udp L2TP15

Networks

AS396982 Google LLC from 4 sources4
AS136180 Beijing Tiantexin Tech. Co., Ltd. from 2 sources2
AS211298 Driftnet Ltd from 2 sources2
AS14618 Amazon.com, Inc. from 2 sources2
AS50219 Valence Technology Co. from 1 source1
AS398324 Censys, Inc. from 1 source1
AS14061 DigitalOcean, LLC from 1 source1
AS63949 Akamai Connected Cloud from 1 source1
AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMIT from 1 source1

Countries

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
45.194.70.248	AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMIT	SC	Unrecognised	1	2026-10-11 04:22
216.25.89.125	AS396982 Google LLC	US	Unrecognised	1	2026-10-11 03:32
216.226.77.30	AS50219 Valence Technology Co.	US	Unrecognised	1	2026-10-11 04:16
103.203.57.10	AS136180 Beijing Tiantexin Tech. Co., Ltd.	CN	Unrecognised	1	2026-10-10 23:42
100.29.192.5	AS14618 Amazon.com, Inc.	US	Unrecognised	1	2026-10-10 16:10
193.163.125.118	AS211298 Driftnet Ltd	GB	Unrecognised	1	2026-10-10 09:43
103.203.57.27	AS136180 Beijing Tiantexin Tech. Co., Ltd.	CN	Unrecognised	1	2026-10-11 04:47
66.132.186.249	AS398324 Censys, Inc.	US	Unrecognised	1	2026-10-10 21:30
205.210.31.105	AS396982 Google LLC	US	Unrecognised	1	2026-10-11 05:24
100.29.192.88	AS14618 Amazon.com, Inc.	US	Unrecognised	1	2026-10-10 16:10
167.71.131.131	AS14061 DigitalOcean, LLC	GB	Unrecognised	1	2026-10-10 16:18
193.163.125.151	AS211298 Driftnet Ltd	GB	Unrecognised	1	2026-10-11 01:12
205.210.31.193	AS396982 Google LLC	US	Unrecognised	1	2026-10-10 21:48
198.235.24.45	AS396982 Google LLC	US	Unrecognised	1	2026-10-10 23:10
45.33.46.249	AS63949 Akamai Connected Cloud	US	HTTP	1	2026-10-10 15:41

Latest datagrams

2026-10-11 05:24:53205.210.31.105to 1701/udpUnrecognisedUS

·:· ·Xpanse· ·

payload bytes

00000000  c8 02 00 3a 00 00 00 00  00 00 00 00 80 08 00 00  |...:............|
00000010  00 00 00 01 00 08 00 00  00 02 01 00 80 0a 00 00  |................|
00000020  00 03 00 00 00 03 80 0c  00 00 00 07 58 70 61 6e  |............Xpan|
00000030  73 65 80 08 00 00 00 09  00 01                    |se........|

2026-10-11 04:47:12103.203.57.27to 1701/udpUnrecognisedCN

·<·masscan1· · ·

payload bytes

00000000  c8 02 00 3c 00 00 00 00  00 00 00 00 80 08 00 00  |...<............|
00000010  00 00 00 01 80 08 00 00  00 02 01 00 80 0e 00 00  |................|
00000020  00 07 6d 61 73 73 63 61  6e 31 80 0a 00 00 00 03  |..masscan1......|
00000030  00 00 00 03 80 08 00 00  00 09 00 00              |............|

2026-10-11 04:22:1645.194.70.248to 1701/udpUnrecognisedSC

·<·nxn-spxn· · ·

payload bytes

00000000  c8 02 00 3c 00 00 00 00  00 00 00 00 80 08 00 00  |...<............|
00000010  00 00 00 01 80 08 00 00  00 02 01 00 80 0e 00 00  |................|
00000020  00 07 6e 78 6e 2d 73 70  78 6e 80 0a 00 00 00 03  |..nxn-spxn......|
00000030  00 00 00 03 80 08 00 00  00 09 00 00              |............|

2026-10-11 04:16:39216.226.77.30to 1701/udpUnrecognisedUS

·X·Vigor· · 陀 · ·Draytek

payload bytes

00000000  c8 02 00 58 00 00 00 00  00 00 00 01 80 08 00 00  |...X............|
00000010  00 00 00 01 80 08 00 00  00 02 01 00 80 0b 00 00  |................|
00000020  00 07 56 69 67 6f 72 80  0a 00 00 00 03 00 00 00  |..Vigor.........|
00000030  03 80 08 00 00 00 09 e9  99 80 0a 00 00 00 04 00  |................|
00000040  00 00 03 00 08 00 00 00  06 00 01 00 0d 00 00 00  |................|
00000050  08 44 72 61 79 74 65 6b                           |.Draytek|

2026-10-11 03:32:25216.25.89.125to 1701/udpUnrecognisedUS

·:· ·Xpanse· ·

payload bytes

00000000  c8 02 00 3a 00 00 00 00  00 00 00 00 80 08 00 00  |...:............|
00000010  00 00 00 01 00 08 00 00  00 02 01 00 80 0a 00 00  |................|
00000020  00 03 00 00 00 03 80 0c  00 00 00 07 58 70 61 6e  |............Xpan|
00000030  73 65 80 08 00 00 00 09  00 01                    |se........|

2026-10-11 01:12:42193.163.125.151to 1701/udpUnrecognisedGB

·d· · ·#·l2tpscan·driftnet· ·z· ·

payload bytes

00000000  c8 02 00 64 00 00 00 00  00 00 00 00 80 08 00 00  |...d............|
00000010  00 00 00 01 80 08 00 00  00 02 01 00 80 0a 00 00  |................|
00000020  00 03 00 00 00 03 80 0a  00 00 00 04 00 00 00 03  |................|
00000030  80 08 00 00 00 06 01 23  80 0e 00 00 00 07 6c 32  |.......#......l2|
00000040  74 70 73 63 61 6e 80 0e  00 00 00 08 64 72 69 66  |tpscan......drif|
00000050  74 6e 65 74 80 08 00 00  00 09 b3 7a 80 08 00 00  |tnet.......z....|
00000060  00 0a 00 01                                       |....|

2026-10-10 23:42:18103.203.57.10to 1701/udpUnrecognisedCN

·<·masscan1· · ·

payload bytes

00000000  c8 02 00 3c 00 00 00 00  00 00 00 00 80 08 00 00  |...<............|
00000010  00 00 00 01 80 08 00 00  00 02 01 00 80 0e 00 00  |................|
00000020  00 07 6d 61 73 73 63 61  6e 31 80 0a 00 00 00 03  |..masscan1......|
00000030  00 00 00 03 80 08 00 00  00 09 00 00              |............|

2026-10-10 23:10:50198.235.24.45to 1701/udpUnrecognisedUS

·:· ·Xpanse· ·

payload bytes

00000000  c8 02 00 3a 00 00 00 00  00 00 00 00 80 08 00 00  |...:............|
00000010  00 00 00 01 00 08 00 00  00 02 01 00 80 0a 00 00  |................|
00000020  00 03 00 00 00 03 80 0c  00 00 00 07 58 70 61 6e  |............Xpan|
00000030  73 65 80 08 00 00 00 09  00 01                    |se........|

2026-10-10 21:48:06205.210.31.193to 1701/udpUnrecognisedUS

·:· ·Xpanse· ·

payload bytes

00000000  c8 02 00 3a 00 00 00 00  00 00 00 00 80 08 00 00  |...:............|
00000010  00 00 00 01 00 08 00 00  00 02 01 00 80 0a 00 00  |................|
00000020  00 03 00 00 00 03 80 0c  00 00 00 07 58 70 61 6e  |............Xpan|
00000030  73 65 80 08 00 00 00 09  00 01                    |se........|

2026-10-10 21:30:5666.132.186.249to 1701/udpUnrecognisedUS

·f· · ·censys.io·censys.io· hi· ·

payload bytes

00000000  c8 02 00 66 00 00 00 00  00 00 00 00 80 08 00 00  |...f............|
00000010  00 00 00 01 80 08 00 00  00 02 01 00 80 0a 00 00  |................|
00000020  00 03 00 00 00 03 80 0a  00 00 00 04 00 00 00 00  |................|
00000030  00 08 00 00 00 06 06 90  80 0f 00 00 00 07 63 65  |..............ce|
00000040  6e 73 79 73 2e 69 6f 00  0f 00 00 00 08 63 65 6e  |nsys.io......cen|
00000050  73 79 73 2e 69 6f 80 08  00 00 00 09 68 69 80 08  |sys.io......hi..|
00000060  00 00 00 0a 00 08                                 |......|

2026-10-10 16:18:48167.71.131.131to 1701/udpUnrecognisedGB

·;· · ·Openwrt· ·

payload bytes

00000000  c8 02 00 3b 00 00 00 00  00 00 00 00 80 08 00 00  |...;............|
00000010  00 00 00 01 80 08 00 00  00 02 01 00 00 0a 00 00  |................|
00000020  00 03 00 00 00 03 80 0d  00 00 00 07 4f 70 65 6e  |............Open|
00000030  77 72 74 80 08 00 00 00  09 00 06                 |wrt........|

2026-10-10 16:10:12100.29.192.88to 1701/udpUnrecognisedUS

·-·! "·"·`·4·-·(·Ϩ·:·(·8· P·5·5·L·8·bh·

payload bytes

00000000  0e a3 cc e7 b5 2d a8 8d  00 00 00 00 00 00 00 00  |.....-..........|
00000010  21 20 22 08 00 00 00 00  00 00 01 a8 22 00 00 60  |! "........."..`|
00000020  02 00 00 34 01 01 08 04  0e a3 cc e7 b5 2d a8 8d  |...4.........-..|
00000030  03 00 00 0c 01 00 00 17  80 0e 01 00 03 00 00 08  |................|
00000040  02 00 00 05 03 00 00 08  03 00 00 0c 00 00 00 08  |................|
00000050  04 00 00 0e 00 00 00 28  02 03 04 03 cf a8 05 3a  |.......(.......:|
00000060  03 00 00 0c 01 00 00 17  80 0e 01 00 03 00 00 08  |................|
00000070  05 00 00 01 00 00 00 08  03 00 00 0c 28 00 01 08  |............(...|
00000080  00 0e 00 00 e8 c8 1d 38  d5 09 50 a5 35 dc c2 8a  |.......8..P.5...|
00000090  88 35 eb 4c bc 38 11 62  68 9d c8 f3 47 5e 23 13  |.5.L.8.bh...G^#.|
000000a0  1e 5e 41 7f 3e 55 96 49  00 d7 4c 6c 8e ed 10 47  |.^A.>U.I..Ll...G|
000000b0  7b c7 82 87 d0 71 f7 5f  e8 a3 4f d6 f6 b7 4b 2b  |{....q._..O...K+|
000000c0  58 a1 b2 66 f1 87 34 2b  41 2d 7a 89 cd 5e b5 22  |X..f..4+A-z..^."|
000000d0  b2 6c 99 67 81 a0 96 27  d2 53 45 2b 41 36 16 70  |.l.g...'.SE+A6.p|
000000e0  d8 4f d8 65 cc 3d 07 21  51 9c 67 a4 77 f9 2d 97  |.O.e.=.!Q.g.w.-.|
000000f0  a6 8a 09 1f fe b7 8b 21  87 da b2 58 95 d9 cb f8  |.......!...X....|
... 424 bytes shown in part

2026-10-10 16:10:10100.29.192.5to 1701/udpUnrecognisedUS

·`· · · ·wfU·Microsoft· · ·

payload bytes

00000000  c8 02 00 60 00 00 00 00  00 00 00 00 80 08 00 00  |...`............|
00000010  00 00 00 01 80 08 00 00  00 02 01 00 80 0a 00 00  |................|
00000020  00 03 00 00 00 01 80 0a  00 00 00 04 00 00 00 00  |................|
00000030  00 08 00 00 00 06 05 00  80 09 00 00 00 07 77 66  |..............wf|
00000040  55 00 0f 00 00 00 08 4d  69 63 72 6f 73 6f 66 74  |U......Microsoft|
00000050  80 08 00 00 00 09 00 01  80 08 00 00 00 0a 00 08  |................|

2026-10-10 15:41:5145.33.46.249to 1701/udpHTTPUS

payload bytes

00000000  47 45 54 20 2f 20 48 54  54 50 2f 31 2e 31 0d 0a  |GET / HTTP/1.1..|
00000010  48 6f 73 74 3a 20 77 77  77 0d 0a 0d 0a           |Host: www....|

2026-10-10 09:43:38193.163.125.118to 1701/udpUnrecognisedGB

·d· · ·#·l2tpscan·driftnet· ·&· ·

payload bytes

00000000  c8 02 00 64 00 00 00 00  00 00 00 00 80 08 00 00  |...d............|
00000010  00 00 00 01 80 08 00 00  00 02 01 00 80 0a 00 00  |................|
00000020  00 03 00 00 00 03 80 0a  00 00 00 04 00 00 00 03  |................|
00000030  80 08 00 00 00 06 01 23  80 0e 00 00 00 07 6c 32  |.......#......l2|
00000040  74 70 73 63 61 6e 80 0e  00 00 00 08 64 72 69 66  |tpscan......drif|
00000050  74 6e 65 74 80 08 00 00  00 09 d9 26 80 08 00 00  |tnet.......&....|
00000060  00 0a 00 01                                       |....|