UDP traffic

Datagrams matching port:3389 sent to HoneyLabs sensors over UDP in the last 24 hours. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

Unrecognised

10 datagrams from 8 sources

Datagrams no decoder recognised. Their first bytes are kept.

Unrecognised 10

Latest Unrecognised datagram, to 3389/udp

payload bytes

00000000  00 00 00 00 00 00 00 ff  00 00 00 00 00 00 00 00  |................|

Destination ports

3389/udp10

Networks

AS6939 Hurricane Electric LLC from 5 sources6
AS20052 Arbor Networks, Inc. from 2 sources3
AS14061 DigitalOcean, LLC from 1 source1

Countries

US United States10

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
146.88.241.110	AS20052 Arbor Networks, Inc.	US	Unrecognised	2	2026-10-10 09:59
65.49.1.117	AS6939 Hurricane Electric LLC	US	Unrecognised	2	2026-10-11 01:28
146.88.241.20	AS20052 Arbor Networks, Inc.	US	Unrecognised	1	2026-10-10 11:36
65.49.20.122	AS6939 Hurricane Electric LLC	US	Unrecognised	1	2026-10-11 04:17
64.62.197.102	AS6939 Hurricane Electric LLC	US	Unrecognised	1	2026-10-10 07:05
64.62.156.22	AS6939 Hurricane Electric LLC	US	Unrecognised	1	2026-10-11 06:33
167.99.224.157	AS14061 DigitalOcean, LLC	US	Unrecognised	1	2026-10-11 04:32
64.62.197.92	AS6939 Hurricane Electric LLC	US	Unrecognised	1	2026-10-10 07:10

Latest datagrams

2026-10-11 06:33:3364.62.156.22to 3389/udpUnrecognisedUS

payload bytes

00000000  00 00 00 00 00 00 00 ff  00 00 00 00 00 00 00 00  |................|

2026-10-11 04:32:09167.99.224.157to 3389/udpUnrecognisedUS

·T·

payload bytes

00000000  00 00 00 00 00 00 00 ff  00 00 00 00 00 00 00 00  |................|
00000010  54 06                                             |T.|

2026-10-11 04:17:0065.49.20.122to 3389/udpUnrecognisedUS

payload bytes

00000000  00 00 00 00 00 00 00 ff  00 00 00 00 00 00 00 00  |................|

2026-10-11 01:28:2965.49.1.117to 3389/udpUnrecognisedUS

payload bytes

00000000  00 00 00 00 00 00 00 ff  00 00 00 00 00 00 00 00  |................|

2026-10-11 01:23:4465.49.1.117to 3389/udpUnrecognisedUS

payload bytes

00000000  00 00 00 00 00 00 00 ff  00 00 00 00 00 00 00 00  |................|

2026-10-10 11:36:33146.88.241.20to 3389/udpUnrecognisedUS

payload bytes

00000000  00 00 00 00 00 00 00 ff  00 00 00 00 00 00 00 00  |................|

2026-10-10 09:59:00146.88.241.110to 3389/udpUnrecognisedUS

payload bytes

00000000  00 00 00 00 00 00 00 ff  00 00 00 00 00 00 00 00  |................|

2026-10-10 09:22:57146.88.241.110to 3389/udpUnrecognisedUS

payload bytes

00000000  00 00 00 00 00 00 00 ff  00 00 00 00 00 00 00 00  |................|

2026-10-10 07:10:1264.62.197.92to 3389/udpUnrecognisedUS

payload bytes

00000000  00 00 00 00 00 00 00 ff  00 00 00 00 00 00 00 00  |................|

2026-10-10 07:05:5264.62.197.102to 3389/udpUnrecognisedUS

payload bytes

00000000  00 00 00 00 00 00 00 ff  00 00 00 00 00 00 00 00  |................|