HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsEmissions IndexPortsUser-agentsUDP traffic
Integrations
OverviewMCPFeedsAPI / EnrichSplunk ESMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog
Dashboard

UDP traffic

Datagrams matching port:177 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

52

Datagrams

47

Source addresses

11

Networks

8

Countries

1

Destination ports

Traffic by type

Other services

49 datagrams from 47 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

XDMCP 49

Latest XDMCP datagram, to 177/udp

·

payload bytes
00000000  00 01 00 02 00 01 00                              |.......|

Unrecognised

3 datagrams from 3 sources

Datagrams no decoder recognised. Their first bytes are kept.

Unrecognised 3

Latest Unrecognised datagram, to 177/udp

0·0·0·0

payload bytes
00000000  30 01 30 02 30 01 30                              |0.0.0.0|

Destination ports

Networks

Countries

Source addresses (unverified)

AddressNetworkCcSendsDatagramsLast seen (UTC)
91.230.168.221AS213412 ONYPHE SASUSXDMCP22026-10-10 13:06
91.231.89.93AS213412 ONYPHE SASFRXDMCP22026-10-10 13:21
206.189.14.75AS14061 DigitalOcean, LLCNLXDMCP22026-10-07 00:19
137.184.210.250AS14061 DigitalOcean, LLCUSXDMCP22026-10-05 13:50
157.230.83.56AS14061 DigitalOcean, LLCUSXDMCP22026-10-09 17:23
205.210.31.206AS396982 Google LLCUSXDMCP12026-10-10 15:32
64.62.156.66AS6939 Hurricane Electric LLCUSXDMCP12026-10-06 04:39
216.218.206.109AS6939 Hurricane Electric LLCUSXDMCP12026-10-10 00:07
64.62.197.190AS6939 Hurricane Electric LLCUSXDMCP12026-10-09 03:28
91.230.168.119AS213412 ONYPHE SASUSXDMCP12026-10-10 10:16
184.105.247.238AS6939 Hurricane Electric LLCUSXDMCP12026-10-08 00:41
64.62.197.112AS6939 Hurricane Electric LLCUSXDMCP12026-10-10 07:11
64.62.156.78AS6939 Hurricane Electric LLCUSXDMCP12026-10-06 04:52
106.75.174.117AS58466 CHINANET Guangdong province networkCNXDMCP12026-10-06 20:38
64.62.156.115AS6939 Hurricane Electric LLCUSXDMCP12026-10-08 05:38
184.105.247.252AS6939 Hurricane Electric LLCUSXDMCP12026-10-07 04:56
64.62.156.111AS6939 Hurricane Electric LLCUSXDMCP12026-10-11 01:01
47.245.143.5AS45102 Alibaba (US) Technology Co., Ltd.DEXDMCP12026-10-09 13:36
193.163.125.146AS211298 Driftnet LtdGBXDMCP12026-10-09 07:12
65.49.1.83AS6939 Hurricane Electric LLCUSXDMCP12026-10-08 03:53

Latest datagrams