HoneyLabs

UDP traffic

Datagrams matching port:500 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

323

Datagrams

195

Source addresses

27

Networks

11

Countries

1

Destination ports

Traffic by type

Service queries

9 datagrams from 8 sources

Requests a service answers without a handshake. Scanners send them to find open DNS, NTP, SNMP or SSDP servers, which are also the servers reflection attacks abuse.

Latest Sun RPC datagram, to 500/udp

er 7·

payload bytes
00000000  65 72 0a 37 00 00 00 00  00 00 00 02 00 01 86 a0  |er.7............|
00000010  00 00 00 02 00 00 00 04  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00        |..............|

Other services

4 datagrams from 1 source

First packets of sessions with VPN, voice, tunnelling, database and management services.

Latest HTTP datagram, to 500/udp

payload bytes
00000000  47 45 54 20 2f 20 48 54  54 50 2f 31 2e 31 0d 0a  |GET / HTTP/1.1..|
00000010  48 6f 73 74 3a 20 77 77  77 0d 0a 0d 0a           |Host: www....|

Unrecognised

310 datagrams from 186 sources

Datagrams no decoder recognised. Their first bytes are kept.

Latest Unrecognised datagram, to 500/udp

f·mI· ·! "·$"·0·,·(·

payload bytes
00000000  66 a1 e3 6d 49 ec ea 20  00 00 00 00 00 00 00 00  |f..mI.. ........|
00000010  21 20 22 08 00 00 00 00  00 00 02 24 22 00 00 30  |! "........$"..0|
00000020  00 00 00 2c 01 01 00 04  03 00 00 0c 01 00 00 0c  |...,............|
00000030  80 0e 01 00 03 00 00 08  02 00 00 05 03 00 00 08  |................|
00000040  03 00 00 0c 00 00 00 08  04 00 00 0e 28 00 01 08  |............(...|
00000050  00 0e 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

Destination ports

Networks

Countries

Source addresses (unverified)

AddressNetworkCcSendsDatagramsLast seen (UTC)
139.162.116.160AS63949 Akamai Connected CloudJPUnrecognised482026-10-11 01:55
73.184.92.137AS7922 Comcast Cable Communications, LLCUSUnrecognised142026-10-09 03:48
103.203.57.10AS136180 Beijing Tiantexin Tech. Co., Ltd.CNUnrecognised112026-10-10 17:42
103.203.57.27AS136180 Beijing Tiantexin Tech. Co., Ltd.CNUnrecognised92026-10-10 08:13
103.203.57.24AS136180 Beijing Tiantexin Tech. Co., Ltd.CNUnrecognised62026-10-10 18:33
164.52.24.182AS63199 CDS Global Cloud Co., LtdJPUnrecognised62026-10-08 13:44
138.197.18.147AS14061 DigitalOcean, LLCUSUnrecognised42026-10-08 01:20
143.198.117.96AS14061 DigitalOcean, LLCUSUnrecognised42026-10-06 20:36
47.74.5.117AS45102 Alibaba (US) Technology Co., Ltd.JPUnrecognised42026-10-06 00:41
16.5.0.234AS401661 EMBNEX, LLCBRUnrecognised42026-10-05 16:19
45.33.46.249AS63949 Akamai Connected CloudUSHTTP42026-10-09 16:58
201.79.2.46AS14061 DigitalOcean, LLCDEUnrecognised42026-10-05 16:48
54.219.32.123AS16509 Amazon.com, Inc.USUnrecognised32026-10-08 02:11
8.211.44.115AS45102 Alibaba (US) Technology Co., Ltd.DEUnrecognised32026-10-06 23:41
54.183.233.95AS16509 Amazon.com, Inc.USUnrecognised32026-10-07 19:08
193.163.125.249AS211298 Driftnet LtdGBUnrecognised22026-10-07 03:36
64.62.197.37AS6939 Hurricane Electric LLCUSUnrecognised22026-10-10 02:16
93.123.109.214AS48090 Techoff Srv LimitedBGUnrecognised22026-10-10 17:48
148.153.188.246AS63199 CDS Global Cloud Co., LtdUSUnrecognised22026-10-10 23:44
146.88.241.60AS20052 Arbor Networks, Inc.USSun RPC22026-10-09 11:39

Latest datagrams