HoneyLabs

UDP traffic

Datagrams matching port:500 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Your plan searches up to 7d, so 30d was shortened. Plans

324

Datagrams

195

Source addresses

27

Networks

11

Countries

1

Destination ports

Traffic by type

Service queries

9 datagrams from 8 sources

Requests a service answers without a handshake. Scanners send them to find open DNS, NTP, SNMP or SSDP servers, which are also the servers reflection attacks abuse.

Latest Sun RPC datagram, to 500/udp

er 7·

payload bytes
00000000  65 72 0a 37 00 00 00 00  00 00 00 02 00 01 86 a0  |er.7............|
00000010  00 00 00 02 00 00 00 04  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00        |..............|

Other services

4 datagrams from 1 source

First packets of sessions with VPN, voice, tunnelling, database and management services.

Latest HTTP datagram, to 500/udp

payload bytes
00000000  47 45 54 20 2f 20 48 54  54 50 2f 31 2e 31 0d 0a  |GET / HTTP/1.1..|
00000010  48 6f 73 74 3a 20 77 77  77 0d 0a 0d 0a           |Host: www....|

Unrecognised

311 datagrams from 186 sources

Datagrams no decoder recognised. Their first bytes are kept.

Latest Unrecognised datagram, to 500/udp

·;·`·D·8· · · · ·

payload bytes
00000000  00 00 00 00 85 e9 bd 3b  00 00 00 00 00 00 00 00  |.......;........|
00000010  01 10 02 00 00 00 00 00  00 00 01 60 00 00 01 44  |...........`...D|
00000020  00 00 00 01 00 00 00 01  00 00 01 38 01 01 00 0d  |...........8....|
00000030  03 00 00 20 00 01 00 00  80 01 00 05 80 02 00 02  |... ............|
00000040  80 03 00 01 80 04 00 02  80 0b 00 01 80 0c 00 01  |................|
00000050  03 00 00 20 00 01 00 00  80 01 00 01 80 02 00 01  |... ............|
00000060  80 03 00 01 80 04 00 02  80 0b 00 01 80 0c 00 01  |................|
00000070  03 00 00 20 00 01 00 00  80 01 00 07 80 02 00 04  |... ............|
00000080  80 03 00 01 80 04 00 0e  80 0b 00 01 80 0c 00 01  |................|
00000090  03 00 00 14 00 01 00 00  80 01 00 05 80 02 00 02  |................|
000000a0  80 03 00 02 03 00 00 14  00 01 00 00 80 01 00 05  |................|
000000b0  80 02 00 02 80 03 00 03  03 00 00 14 00 01 00 00  |................|
000000c0  80 01 00 05 80 02 00 02  80 03 00 04 03 00 00 14  |................|
000000d0  00 01 00 00 80 01 00 05  80 02 00 02 80 03 00 08  |................|
000000e0  03 00 00 14 00 01 00 00  80 01 00 05 80 02 00 02  |................|
000000f0  80 03 fa dd 03 00 00 14  00 01 00 00 80 01 00 05  |................|

Destination ports

Networks

Countries

Source addresses (unverified)

AddressNetworkCcSendsDatagramsLast seen (UTC)
139.162.116.160AS63949 Akamai Connected CloudJPUnrecognised482026-10-11 01:55
73.184.92.137AS7922 Comcast Cable Communications, LLCUSUnrecognised142026-10-09 03:48
103.203.57.10AS136180 Beijing Tiantexin Tech. Co., Ltd.CNUnrecognised112026-10-10 17:42
103.203.57.27AS136180 Beijing Tiantexin Tech. Co., Ltd.CNUnrecognised102026-10-11 03:42
103.203.57.24AS136180 Beijing Tiantexin Tech. Co., Ltd.CNUnrecognised62026-10-10 18:33
164.52.24.182AS63199 CDS Global Cloud Co., LtdJPUnrecognised62026-10-08 13:44
138.197.18.147AS14061 DigitalOcean, LLCUSUnrecognised42026-10-08 01:20
143.198.117.96AS14061 DigitalOcean, LLCUSUnrecognised42026-10-06 20:36
47.74.5.117AS45102 Alibaba (US) Technology Co., Ltd.JPUnrecognised42026-10-06 00:41
16.5.0.234AS401661 EMBNEX, LLCBRUnrecognised42026-10-05 16:19
45.33.46.249AS63949 Akamai Connected CloudUSHTTP42026-10-09 16:58
201.79.2.46AS14061 DigitalOcean, LLCDEUnrecognised42026-10-05 16:48
54.219.32.123AS16509 Amazon.com, Inc.USUnrecognised32026-10-08 02:11
8.211.44.115AS45102 Alibaba (US) Technology Co., Ltd.DEUnrecognised32026-10-06 23:41
54.183.233.95AS16509 Amazon.com, Inc.USUnrecognised32026-10-07 19:08
193.163.125.249AS211298 Driftnet LtdGBUnrecognised22026-10-07 03:36
64.62.197.37AS6939 Hurricane Electric LLCUSUnrecognised22026-10-10 02:16
93.123.109.214AS48090 Techoff Srv LimitedBGUnrecognised22026-10-10 17:48
148.153.188.246AS63199 CDS Global Cloud Co., LtdUSUnrecognised22026-10-10 23:44
146.88.241.60AS20052 Arbor Networks, Inc.USSun RPC22026-10-09 11:39

Latest datagrams