UDP traffic

Datagrams matching port:17184 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

Service queries

4 datagrams from 4 sources

Requests a service answers without a handshake. Scanners send them to find open DNS, NTP, SNMP or SSDP servers, which are also the servers reflection attacks abuse.

DNS 4

Latest DNS datagram, to 17184/udp

· ·UUUU·U·<·

payload bytes

00000000  1a 09 fa ba 00 00 00 00  00 00 00 02 55 55 55 55  |............UUUU|
00000010  00 00 00 01 00 00 00 01  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00  ff ff 55 12 00 00 00 3c  |..........U....<|
00000030  00 00 00 01 00 00 00 02  00 00 00 00 00 00 00 00  |................|

Unrecognised

31 datagrams from 26 sources

Datagrams no decoder recognised. Their first bytes are kept.

Unrecognised 31

Latest Unrecognised datagram, to 17184/udp

· ·UUUU·U·<·

payload bytes

00000000  1a 09 fa ba 00 00 00 00  00 00 00 02 55 55 55 55  |............UUUU|
00000010  00 00 00 01 00 00 00 01  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00  ff ff 55 12 00 00 00 3c  |..........U....<|
00000030  00 00 00 01 00 00 00 02  00 00 00 00 00 00 00 00  |................|

Amplification checks

Probes for services that answer a small request with a much larger reply, the property reflection attacks rely on.

Service	Port	Datagrams	Sources	Factor
DNS	17184/udp	4	4	28 to 54

The factor is how many bytes a reachable server can send back for each byte it receives, as published by CISA in alert TA14-017A.

Destination ports

17184/udp35

Networks

AS398324 Censys, Inc. from 20 sources25
AS213412 ONYPHE SAS from 6 sources8
AS398722 Censys, Inc. from 2 sources2

Countries

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
91.230.168.220	AS213412 ONYPHE SAS	US	Unrecognised	2	2026-10-10 19:48
66.132.186.214	AS398324 Censys, Inc.	US	Unrecognised	2	2026-10-09 18:00
66.132.186.213	AS398324 Censys, Inc.	US	Unrecognised	2	2026-10-09 02:10
66.132.172.226	AS398324 Censys, Inc.	US	Unrecognised	2	2026-10-10 19:43
66.132.186.245	AS398324 Censys, Inc.	US	Unrecognised	2	2026-10-09 04:28
91.231.89.92	AS213412 ONYPHE SAS	FR	Unrecognised	2	2026-10-10 20:03
66.132.224.20	AS398324 Censys, Inc.	US	Unrecognised	2	2026-10-08 13:22
199.45.154.191	AS398722 Censys, Inc.	US	DNS	1	2026-10-06 06:51
66.132.186.218	AS398324 Censys, Inc.	US	Unrecognised	1	2026-10-07 16:27
66.132.186.250	AS398324 Censys, Inc.	US	Unrecognised	1	2026-10-09 15:21
66.132.186.249	AS398324 Censys, Inc.	US	Unrecognised	1	2026-10-10 03:19
66.132.172.227	AS398324 Censys, Inc.	US	Unrecognised	1	2026-10-09 20:24
91.230.168.114	AS213412 ONYPHE SAS	US	Unrecognised	1	2026-10-08 22:46
66.132.159.37	AS398324 Censys, Inc.	US	Unrecognised	1	2026-10-08 18:07
91.230.168.118	AS213412 ONYPHE SAS	US	Unrecognised	1	2026-10-08 01:41
199.45.154.177	AS398722 Censys, Inc.	US	Unrecognised	1	2026-10-07 04:18
66.132.186.239	AS398324 Censys, Inc.	US	Unrecognised	1	2026-10-08 23:12
66.132.186.220	AS398324 Censys, Inc.	US	Unrecognised	1	2026-10-07 06:07
91.231.89.166	AS213412 ONYPHE SAS	FR	Unrecognised	1	2026-10-08 01:52
66.132.172.224	AS398324 Censys, Inc.	US	Unrecognised	1	2026-10-07 04:56

Latest datagrams

2026-10-10 21:24:5966.132.172.232to 17184/udpUnrecognisedUS

· ·UUUU·U·<·

payload bytes

00000000  1a 09 fa ba 00 00 00 00  00 00 00 02 55 55 55 55  |............UUUU|
00000010  00 00 00 01 00 00 00 01  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00  ff ff 55 12 00 00 00 3c  |..........U....<|
00000030  00 00 00 01 00 00 00 02  00 00 00 00 00 00 00 00  |................|

2026-10-10 20:03:5191.231.89.92to 17184/udpUnrecognisedFR

· ·UUUU·U·<·

payload bytes

00000000  1a 20 fa ba 00 00 00 00  00 00 00 02 55 55 55 55  |. ..........UUUU|
00000010  00 00 00 01 00 00 00 01  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00  ff ff 55 12 00 00 00 3c  |..........U....<|
00000030  00 00 00 01 00 00 00 02  00 00 00 00 00 00 00 00  |................|

2026-10-10 19:48:3691.230.168.220to 17184/udpUnrecognisedUS

· ·UUUU·U·<·

payload bytes

00000000  1a 20 fa ba 00 00 00 00  00 00 00 02 55 55 55 55  |. ..........UUUU|
00000010  00 00 00 01 00 00 00 01  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00  ff ff 55 12 00 00 00 3c  |..........U....<|
00000030  00 00 00 01 00 00 00 02  00 00 00 00 00 00 00 00  |................|

2026-10-10 19:43:5666.132.172.226to 17184/udpUnrecognisedUS

· ·UUUU·U·<·

payload bytes

00000000  1a 09 fa ba 00 00 00 00  00 00 00 02 55 55 55 55  |............UUUU|
00000010  00 00 00 01 00 00 00 01  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00  ff ff 55 12 00 00 00 3c  |..........U....<|
00000030  00 00 00 01 00 00 00 02  00 00 00 00 00 00 00 00  |................|

2026-10-10 03:19:3666.132.186.249to 17184/udpUnrecognisedUS

· ·UUUU·U·<·

payload bytes

00000000  1a 09 fa ba 00 00 00 00  00 00 00 02 55 55 55 55  |............UUUU|
00000010  00 00 00 01 00 00 00 01  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00  ff ff 55 12 00 00 00 3c  |..........U....<|
00000030  00 00 00 01 00 00 00 02  00 00 00 00 00 00 00 00  |................|

2026-10-09 23:18:3466.132.159.38to 17184/udpUnrecognisedUS

· ·UUUU·U·<·

payload bytes

00000000  1a 09 fa ba 00 00 00 00  00 00 00 02 55 55 55 55  |............UUUU|
00000010  00 00 00 01 00 00 00 01  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00  ff ff 55 12 00 00 00 3c  |..........U....<|
00000030  00 00 00 01 00 00 00 02  00 00 00 00 00 00 00 00  |................|

2026-10-09 20:24:1166.132.172.227to 17184/udpUnrecognisedUS

· ·UUUU·U·<·

payload bytes

00000000  1a 09 fa ba 00 00 00 00  00 00 00 02 55 55 55 55  |............UUUU|
00000010  00 00 00 01 00 00 00 01  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00  ff ff 55 12 00 00 00 3c  |..........U....<|
00000030  00 00 00 01 00 00 00 02  00 00 00 00 00 00 00 00  |................|

2026-10-09 19:47:1866.132.224.22to 17184/udpUnrecognisedUS

· ·UUUU·U·<·

payload bytes

00000000  1a 09 fa ba 00 00 00 00  00 00 00 02 55 55 55 55  |............UUUU|
00000010  00 00 00 01 00 00 00 01  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00  ff ff 55 12 00 00 00 3c  |..........U....<|
00000030  00 00 00 01 00 00 00 02  00 00 00 00 00 00 00 00  |................|

2026-10-09 18:00:2066.132.186.214to 17184/udpUnrecognisedUS

· ·UUUU·U·<·

payload bytes

00000000  1a 09 fa ba 00 00 00 00  00 00 00 02 55 55 55 55  |............UUUU|
00000010  00 00 00 01 00 00 00 01  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00  ff ff 55 12 00 00 00 3c  |..........U....<|
00000030  00 00 00 01 00 00 00 02  00 00 00 00 00 00 00 00  |................|

2026-10-09 15:21:3466.132.186.250to 17184/udpUnrecognisedUS

· ·UUUU·U·<·

payload bytes

00000000  1a 09 fa ba 00 00 00 00  00 00 00 02 55 55 55 55  |............UUUU|
00000010  00 00 00 01 00 00 00 01  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00  ff ff 55 12 00 00 00 3c  |..........U....<|
00000030  00 00 00 01 00 00 00 02  00 00 00 00 00 00 00 00  |................|

2026-10-09 04:28:5566.132.186.245to 17184/udpUnrecognisedUS

· ·UUUU·U·<·

payload bytes

00000000  1a 09 fa ba 00 00 00 00  00 00 00 02 55 55 55 55  |............UUUU|
00000010  00 00 00 01 00 00 00 01  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00  ff ff 55 12 00 00 00 3c  |..........U....<|
00000030  00 00 00 01 00 00 00 02  00 00 00 00 00 00 00 00  |................|

2026-10-09 02:10:2966.132.186.213to 17184/udpUnrecognisedUS

· ·UUUU·U·<·

payload bytes

00000000  1a 09 fa ba 00 00 00 00  00 00 00 02 55 55 55 55  |............UUUU|
00000010  00 00 00 01 00 00 00 01  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00  ff ff 55 12 00 00 00 3c  |..........U....<|
00000030  00 00 00 01 00 00 00 02  00 00 00 00 00 00 00 00  |................|

2026-10-08 23:12:4866.132.186.239to 17184/udpUnrecognisedUS

· ·UUUU·U·<·

payload bytes

00000000  1a 09 fa ba 00 00 00 00  00 00 00 02 55 55 55 55  |............UUUU|
00000010  00 00 00 01 00 00 00 01  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00  ff ff 55 12 00 00 00 3c  |..........U....<|
00000030  00 00 00 01 00 00 00 02  00 00 00 00 00 00 00 00  |................|

2026-10-08 23:00:2391.231.89.162to 17184/udpUnrecognisedFR

· ·UUUU·U·<·

payload bytes

00000000  1a 20 fa ba 00 00 00 00  00 00 00 02 55 55 55 55  |. ..........UUUU|
00000010  00 00 00 01 00 00 00 01  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00  ff ff 55 12 00 00 00 3c  |..........U....<|
00000030  00 00 00 01 00 00 00 02  00 00 00 00 00 00 00 00  |................|

2026-10-08 22:46:5791.230.168.114to 17184/udpUnrecognisedUS

· ·UUUU·U·<·

payload bytes

00000000  1a 20 fa ba 00 00 00 00  00 00 00 02 55 55 55 55  |. ..........UUUU|
00000010  00 00 00 01 00 00 00 01  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00  ff ff 55 12 00 00 00 3c  |..........U....<|
00000030  00 00 00 01 00 00 00 02  00 00 00 00 00 00 00 00  |................|