UDP traffic

Datagrams matching port:2049 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

Service queries

9 datagrams from 8 sources

Requests a service answers without a handshake. Scanners send them to find open DNS, NTP, SNMP or SSDP servers, which are also the servers reflection attacks abuse.

Sun RPC 9

Latest Sun RPC datagram, to 2049/udp

C·qn·

payload bytes

00000000  43 ec 71 6e 00 00 00 00  00 00 00 02 00 01 86 a0  |C.qn............|
00000010  00 00 00 04 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00                           |........|

Unrecognised

3 datagrams from 2 sources

Datagrams no decoder recognised. Their first bytes are kept.

Unrecognised 3

Latest Unrecognised datagram, to 2049/udp

00000000000·0·000·00000000000000000000

payload bytes

00000000  30 30 30 30 30 30 30 30  30 30 30 02 30 01 86 a3  |00000000000.0...|
00000010  30 30 30 02 30 30 30 30  30 30 30 30 30 30 30 30  |000.000000000000|
00000020  30 30 30 30 30 30 30 30                           |00000000|

Destination ports

2049/udp Sun RPC12

Networks

AS211298 Driftnet Ltd from 7 sources8
AS14061 DigitalOcean, LLC from 1 source2
AS45102 Alibaba (US) Technology Co., Ltd. from 2 sources2

Countries

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
193.163.125.168	AS211298 Driftnet Ltd	GB	Sun RPC	2	2026-10-10 19:06
167.99.224.157	AS14061 DigitalOcean, LLC	US	Unrecognised	2	2026-10-11 04:32
193.163.125.179	AS211298 Driftnet Ltd	GB	Sun RPC	1	2026-10-06 23:04
193.163.125.243	AS211298 Driftnet Ltd	GB	Sun RPC	1	2026-10-08 21:54
193.163.125.123	AS211298 Driftnet Ltd	GB	Sun RPC	1	2026-10-09 08:04
193.163.125.122	AS211298 Driftnet Ltd	GB	Sun RPC	1	2026-10-06 07:37
193.163.125.177	AS211298 Driftnet Ltd	GB	Sun RPC	1	2026-10-07 18:44
43.98.186.223	AS45102 Alibaba (US) Technology Co., Ltd.	SG	Unrecognised	1	2026-10-06 07:14
193.163.125.236	AS211298 Driftnet Ltd	GB	Sun RPC	1	2026-10-05 21:27
8.208.86.254	AS45102 Alibaba (US) Technology Co., Ltd.	GB	Sun RPC	1	2026-10-08 17:24

Latest datagrams

2026-10-11 04:32:20167.99.224.157to 2049/udpUnrecognisedUS

00000000000·0·000·00000000000000000000

payload bytes

00000000  30 30 30 30 30 30 30 30  30 30 30 02 30 01 86 a3  |00000000000.0...|
00000010  30 30 30 02 30 30 30 30  30 30 30 30 30 30 30 30  |000.000000000000|
00000020  30 30 30 30 30 30 30 30                           |00000000|

2026-10-11 04:32:17167.99.224.157to 2049/udpUnrecognisedUS

>·0000000·0·aN000000000000000000000000

payload bytes

00000000  3e ec e3 ca 30 30 30 30  30 30 30 02 30 bc 61 4e  |>...0000000.0.aN|
00000010  30 30 30 30 30 30 30 30  30 30 30 30 30 30 30 30  |0000000000000000|
00000020  30 30 30 30 30 30 30 30                           |00000000|

2026-10-10 19:06:33193.163.125.168to 2049/udpSun RPCGB

C·qn·

payload bytes

00000000  43 ec 71 6e 00 00 00 00  00 00 00 02 00 01 86 a0  |C.qn............|
00000010  00 00 00 04 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00                           |........|

2026-10-09 23:31:40193.163.125.168to 2049/udpSun RPCGB

&·m·

payload bytes

00000000  26 98 05 6d 00 00 00 00  00 00 00 02 00 01 86 a0  |&..m............|
00000010  00 00 00 04 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00                           |........|

2026-10-09 08:04:08193.163.125.123to 2049/udpSun RPCGB

·?·

payload bytes

00000000  b0 3f 06 1d 00 00 00 00  00 00 00 02 00 01 86 a0  |.?..............|
00000010  00 00 00 04 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00                           |........|

2026-10-08 21:54:13193.163.125.243to 2049/udpSun RPCGB

·F·

payload bytes

00000000  d3 dd 46 89 00 00 00 00  00 00 00 02 00 01 86 a0  |..F.............|
00000010  00 00 00 04 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00                           |........|

2026-10-08 17:24:208.208.86.254to 2049/udpSun RPCGB

payload bytes

00000000  00 00 00 00 00 00 00 00  00 00 00 02 00 01 86 a3  |................|
00000010  00 00 00 02 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00                           |........|

2026-10-07 18:44:40193.163.125.177to 2049/udpSun RPCGB

·s·

payload bytes

00000000  da f8 90 73 00 00 00 00  00 00 00 02 00 01 86 a0  |...s............|
00000010  00 00 00 04 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00                           |........|

2026-10-06 23:04:20193.163.125.179to 2049/udpSun RPCGB

·N·

payload bytes

00000000  aa 4e b8 b1 00 00 00 00  00 00 00 02 00 01 86 a0  |.N..............|
00000010  00 00 00 04 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00                           |........|

2026-10-06 07:37:22193.163.125.122to 2049/udpSun RPCGB

·O·

payload bytes

00000000  9c 4f e6 84 00 00 00 00  00 00 00 02 00 01 86 a0  |.O..............|
00000010  00 00 00 04 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00                           |........|

2026-10-06 07:14:3243.98.186.223to 2049/udpUnrecognisedSG

r·|·

payload bytes

00000000  72 fe 1d 13 00 00 00 00  00 00 00 02 00 01 86 a0  |r...............|
00000010  00 01 97 7c 00 00 00 00  00 00 00 00 00 00 00 00  |...|............|
00000020  00 00 00 00 00 00 00 00                           |........|

2026-10-05 21:27:43193.163.125.236to 2049/udpSun RPCGB

·m·

payload bytes

00000000  da 6d 8e ee 00 00 00 00  00 00 00 02 00 01 86 a0  |.m..............|
00000010  00 00 00 04 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00                           |........|