UDP traffic

Datagrams matching port:2049 sent to HoneyLabs sensors over UDP in the last 24 hours. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

Service queries

1 datagrams from 1 source

Requests a service answers without a handshake. Scanners send them to find open DNS, NTP, SNMP or SSDP servers, which are also the servers reflection attacks abuse.

Sun RPC 1

Latest Sun RPC datagram, to 2049/udp

C·qn·

payload bytes

00000000  43 ec 71 6e 00 00 00 00  00 00 00 02 00 01 86 a0  |C.qn............|
00000010  00 00 00 04 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00                           |........|

Unrecognised

2 datagrams from 1 source

Datagrams no decoder recognised. Their first bytes are kept.

Unrecognised 2

Latest Unrecognised datagram, to 2049/udp

00000000000·0·000·00000000000000000000

payload bytes

00000000  30 30 30 30 30 30 30 30  30 30 30 02 30 01 86 a3  |00000000000.0...|
00000010  30 30 30 02 30 30 30 30  30 30 30 30 30 30 30 30  |000.000000000000|
00000020  30 30 30 30 30 30 30 30                           |00000000|

Destination ports

2049/udp3

Networks

AS14061 DigitalOcean, LLC from 1 source2
AS211298 Driftnet Ltd from 1 source1

Countries

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
167.99.224.157	AS14061 DigitalOcean, LLC	US	Unrecognised	2	2026-10-11 04:32
193.163.125.168	AS211298 Driftnet Ltd	GB	Sun RPC	1	2026-10-10 19:06

Latest datagrams

2026-10-11 04:32:20167.99.224.157to 2049/udpUnrecognisedUS

00000000000·0·000·00000000000000000000

payload bytes

00000000  30 30 30 30 30 30 30 30  30 30 30 02 30 01 86 a3  |00000000000.0...|
00000010  30 30 30 02 30 30 30 30  30 30 30 30 30 30 30 30  |000.000000000000|
00000020  30 30 30 30 30 30 30 30                           |00000000|

2026-10-11 04:32:17167.99.224.157to 2049/udpUnrecognisedUS

>·0000000·0·aN000000000000000000000000

payload bytes

00000000  3e ec e3 ca 30 30 30 30  30 30 30 02 30 bc 61 4e  |>...0000000.0.aN|
00000010  30 30 30 30 30 30 30 30  30 30 30 30 30 30 30 30  |0000000000000000|
00000020  30 30 30 30 30 30 30 30                           |00000000|

2026-10-10 19:06:33193.163.125.168to 2049/udpSun RPCGB

C·qn·

payload bytes

00000000  43 ec 71 6e 00 00 00 00  00 00 00 02 00 01 86 a0  |C.qn............|
00000010  00 00 00 04 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00                           |........|