HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsEmissions IndexPortsUser-agentsUDP traffic
Integrations
OverviewMCPFeedsAPI / EnrichSplunk ESMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog
Dashboard

UDP traffic

Datagrams matching port:177 sent to HoneyLabs sensors over UDP in the last 24 hours. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

9

Datagrams

9

Source addresses

3

Networks

2

Countries

1

Destination ports

Traffic by type

Other services

9 datagrams from 9 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

XDMCP 9

Latest XDMCP datagram, to 177/udp

·

payload bytes
00000000  00 01 00 02 00 01 00                              |.......|

Destination ports

Networks

Countries

Source addresses (unverified)

AddressNetworkCcSendsDatagramsLast seen (UTC)
205.210.31.206AS396982 Google LLCUSXDMCP12026-10-10 15:32
91.230.168.221AS213412 ONYPHE SASUSXDMCP12026-10-10 13:06
91.230.168.119AS213412 ONYPHE SASUSXDMCP12026-10-10 10:16
64.62.156.111AS6939 Hurricane Electric LLCUSXDMCP12026-10-11 01:01
91.231.89.167AS213412 ONYPHE SASFRXDMCP12026-10-10 10:31
64.62.197.140AS6939 Hurricane Electric LLCUSXDMCP12026-10-11 03:29
64.62.156.16AS6939 Hurricane Electric LLCUSXDMCP12026-10-11 05:32
64.62.197.146AS6939 Hurricane Electric LLCUSXDMCP12026-10-11 03:00
91.231.89.93AS213412 ONYPHE SASFRXDMCP12026-10-10 13:21

Latest datagrams