HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsEmissions IndexPortsUser-agentsUDP traffic
Integrations
OverviewMCPFeedsAPI / EnrichSplunk ESMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog
Dashboard

UDP traffic

Datagrams matching port:3391 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Your plan searches up to 7d, so 30d was shortened. Plans

30

Datagrams

27

Source addresses

8

Networks

5

Countries

1

Destination ports

Traffic by type

Other services

26 datagrams from 23 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

DTLS 26

Latest DTLS datagram, to 3391/udp

·l·`·`·T·ԭ·|·o;·`·#·?E· ·9· ·3·5·/·$· · ·#·

payload bytes
00000000  16 fe ff 00 00 00 00 00  00 00 00 00 6c 01 00 00  |............l...|
00000010  60 00 00 00 00 00 00 00  60 fe ff d8 fb 54 e5 d4  |`.......`....T..|
00000020  ad a9 03 96 bc 02 95 7c  9e 06 6f 3b a7 e6 85 19  |.......|..o;....|
00000030  d0 fb 03 60 05 23 bd bb  ef 3f 45 00 00 00 12 c0  |...`.#...?E.....|
00000040  0a c0 14 00 39 c0 09 c0  13 00 33 00 35 00 2f 00  |....9.....3.5./.|
00000050  ff 01 00 00 24 00 0b 00  04 03 00 01 02 00 0a 00  |....$...........|
00000060  0c 00 0a 00 1d 00 17 00  1e 00 19 00 18 00 23 00  |..............#.|
00000070  00 00 16 00 00 00 17 00  00                       |.........|

Unrecognised

4 datagrams from 4 sources

Datagrams no decoder recognised. Their first bytes are kept.

Unrecognised 4

Latest Unrecognised datagram, to 3391/udp

·T·

payload bytes
00000000  00 00 00 00 00 00 00 ff  00 00 00 00 00 00 00 00  |................|
00000010  54 06                                             |T.|

Destination ports

Networks

Countries

Source addresses (unverified)

AddressNetworkCcSendsDatagramsLast seen (UTC)
91.230.168.223AS213412 ONYPHE SASUSDTLS22026-10-08 22:30
91.231.89.95AS213412 ONYPHE SASFRDTLS22026-10-08 22:43
80.82.77.33AS202425 IP Volume incNLDTLS22026-10-09 20:29
193.163.125.232AS211298 Driftnet LtdGBDTLS12026-10-05 19:15
91.231.89.165AS213412 ONYPHE SASFRDTLS12026-10-07 01:43
147.185.132.58AS396982 Google LLCUSDTLS12026-10-09 13:02
91.230.168.217AS213412 ONYPHE SASUSDTLS12026-10-06 04:33
66.132.186.244AS398324 Censys, Inc.USUnrecognised12026-10-07 06:12
216.25.89.134AS396982 Google LLCUSDTLS12026-10-06 17:31
193.163.125.113AS211298 Driftnet LtdGBDTLS12026-10-07 04:57
20.169.85.75AS8075 Microsoft CorporationUSDTLS12026-10-10 19:33
216.25.89.86AS396982 Google LLCUSDTLS12026-10-10 16:41
40.124.84.194AS8075 Microsoft CorporationUSDTLS12026-10-10 19:31
147.185.132.40AS396982 Google LLCUSDTLS12026-10-06 14:20
66.132.159.46AS398324 Censys, Inc.USUnrecognised12026-10-09 17:12
193.163.125.164AS211298 Driftnet LtdGBDTLS12026-10-09 09:02
165.154.129.151AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITGBDTLS12026-10-09 15:56
152.32.188.207AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITHKDTLS12026-10-10 13:55
20.65.202.151AS8075 Microsoft CorporationUSDTLS12026-10-10 19:26
216.25.89.89AS396982 Google LLCUSDTLS12026-10-09 18:02

Latest datagrams