UDP traffic

Datagrams matching port:500 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

331

Datagrams

198

Source addresses

Networks

Countries

Destination ports

Traffic by type

Service queries

9 datagrams from 8 sources

Requests a service answers without a handshake. Scanners send them to find open DNS, NTP, SNMP or SSDP servers, which are also the servers reflection attacks abuse.

Sun RPC 9

Latest Sun RPC datagram, to 500/udp

er 7·

payload bytes

00000000  65 72 0a 37 00 00 00 00  00 00 00 02 00 01 86 a0  |er.7............|
00000010  00 00 00 02 00 00 00 04  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00        |..............|

Other services

4 datagrams from 1 source

First packets of sessions with VPN, voice, tunnelling, database and management services.

HTTP 4

Latest HTTP datagram, to 500/udp

payload bytes

00000000  47 45 54 20 2f 20 48 54  54 50 2f 31 2e 31 0d 0a  |GET / HTTP/1.1..|
00000010  48 6f 73 74 3a 20 77 77  77 0d 0a 0d 0a           |Host: www....|

Unrecognised

318 datagrams from 189 sources

Datagrams no decoder recognised. Their first bytes are kept.

Unrecognised 318

Latest Unrecognised datagram, to 500/udp

U·)·sI·! "·("·l·h·(·ޠ·B|㥏·@bE·V·|ٶ·R·`c·f·n0·@}·2·x·3·rc9M9·c·ǆ·Ԩ·J

payload bytes

00000000  55 14 d8 29 aa 73 49 c0  00 00 00 00 00 00 00 00  |U..).sI.........|
00000010  21 20 22 08 00 00 00 00  00 00 01 28 22 00 00 6c  |! "........("..l|
00000020  00 00 00 68 01 01 00 0b  03 00 00 0c 01 00 00 0c  |...h............|
00000030  80 0e 01 00 03 00 00 0c  01 00 00 0c 80 0e 00 80  |................|
00000040  03 00 00 08 01 00 00 03  03 00 00 08 01 00 00 02  |................|
00000050  03 00 00 08 02 00 00 02  03 00 00 08 02 00 00 01  |................|
00000060  03 00 00 08 03 00 00 02  03 00 00 08 03 00 00 01  |................|
00000070  03 00 00 08 04 00 00 02  03 00 00 08 04 00 00 05  |................|
00000080  00 00 00 08 04 00 00 0e  28 00 00 88 00 02 00 00  |........(.......|
00000090  f1 de a0 01 e3 a1 14 42  7c e3 a5 8f 8e fb b4 e8  |.......B|.......|
000000a0  40 62 45 f6 0e b5 e7 56  98 14 a4 7c d9 b6 8c c0  |@bE....V...|....|
000000b0  d3 52 a5 a9 60 63 ad 07  66 00 6e 30 b2 40 7d f1  |.R..`c..f.n0.@}.|
000000c0  32 14 78 ab a8 85 33 84  8e 17 72 63 39 4d 39 f8  |2.x...3...rc9M9.|
000000d0  bd 18 63 ec c7 86 e8 d4  a8 df c2 12 cb 4a 12 1d  |..c..........J..|
000000e0  77 fb a1 8b e0 0c e9 89  7f e3 97 93 4d 28 fb e9  |w...........M(..|
000000f0  a3 84 49 78 1b 64 84 75  4f 31 b5 63 fd f7 24 20  |..Ix.d.uO1.c..$ |

Destination ports

500/udp IKE331

Networks

AS63949 Akamai Connected Cloud from 2 sources55
AS6939 Hurricane Electric LLC from 51 sources54
AS396982 Google LLC from 41 sources43
AS136180 Beijing Tiantexin Tech. Co., Ltd. from 3 sources27
AS8075 Microsoft Corporation from 24 sources24
AS398324 Censys, Inc. from 18 sources18
AS14061 DigitalOcean, LLC from 7 sources16
AS211298 Driftnet Ltd from 8 sources14
AS7922 Comcast Cable Communications, LLC from 1 source14
AS20052 Arbor Networks, Inc. from 8 sources9

Countries

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
139.162.116.160	AS63949 Akamai Connected Cloud	JP	Unrecognised	51	2026-10-11 06:19
73.184.92.137	AS7922 Comcast Cable Communications, LLC	US	Unrecognised	14	2026-10-09 03:48
103.203.57.10	AS136180 Beijing Tiantexin Tech. Co., Ltd.	CN	Unrecognised	11	2026-10-10 17:42
103.203.57.27	AS136180 Beijing Tiantexin Tech. Co., Ltd.	CN	Unrecognised	10	2026-10-11 03:42
103.203.57.24	AS136180 Beijing Tiantexin Tech. Co., Ltd.	CN	Unrecognised	6	2026-10-10 18:33
164.52.24.182	AS63199 CDS Global Cloud Co., Ltd	JP	Unrecognised	6	2026-10-08 13:44
201.79.2.46	AS14061 DigitalOcean, LLC	DE	Unrecognised	4	2026-10-05 16:48
47.74.5.117	AS45102 Alibaba (US) Technology Co., Ltd.	JP	Unrecognised	4	2026-10-06 00:41
143.198.117.96	AS14061 DigitalOcean, LLC	US	Unrecognised	4	2026-10-06 20:36
16.5.0.234	AS401661 EMBNEX, LLC	BR	Unrecognised	4	2026-10-05 16:19
45.33.46.249	AS63949 Akamai Connected Cloud	US	HTTP	4	2026-10-09 16:58
138.197.18.147	AS14061 DigitalOcean, LLC	US	Unrecognised	4	2026-10-08 01:20
54.219.32.123	AS16509 Amazon.com, Inc.	US	Unrecognised	3	2026-10-08 02:11
8.211.44.115	AS45102 Alibaba (US) Technology Co., Ltd.	DE	Unrecognised	3	2026-10-06 23:41
54.183.233.95	AS16509 Amazon.com, Inc.	US	Unrecognised	3	2026-10-07 19:08
193.163.125.249	AS211298 Driftnet Ltd	GB	Unrecognised	2	2026-10-07 03:36
64.62.197.37	AS6939 Hurricane Electric LLC	US	Unrecognised	2	2026-10-10 02:16
205.210.31.227	AS396982 Google LLC	US	Unrecognised	2	2026-10-06 07:47
205.210.31.96	AS396982 Google LLC	US	Unrecognised	2	2026-10-08 19:31
146.88.241.60	AS20052 Arbor Networks, Inc.	US	Sun RPC	2	2026-10-09 11:39

Latest datagrams

2026-10-11 07:06:30147.185.132.109to 500/udpUnrecognisedUS

U·)·sI·! "·("·l·h·(·ޠ·B|㥏·@bE·

payload bytes

00000000  55 14 d8 29 aa 73 49 c0  00 00 00 00 00 00 00 00  |U..).sI.........|
00000010  21 20 22 08 00 00 00 00  00 00 01 28 22 00 00 6c  |! "........("..l|
00000020  00 00 00 68 01 01 00 0b  03 00 00 0c 01 00 00 0c  |...h............|
00000030  80 0e 01 00 03 00 00 0c  01 00 00 0c 80 0e 00 80  |................|
00000040  03 00 00 08 01 00 00 03  03 00 00 08 01 00 00 02  |................|
00000050  03 00 00 08 02 00 00 02  03 00 00 08 02 00 00 01  |................|
00000060  03 00 00 08 03 00 00 02  03 00 00 08 03 00 00 01  |................|
00000070  03 00 00 08 04 00 00 02  03 00 00 08 04 00 00 05  |................|
00000080  00 00 00 08 04 00 00 0e  28 00 00 88 00 02 00 00  |........(.......|
00000090  f1 de a0 01 e3 a1 14 42  7c e3 a5 8f 8e fb b4 e8  |.......B|.......|
000000a0  40 62 45 f6 0e b5 e7 56  98 14 a4 7c d9 b6 8c c0  |@bE....V...|....|
000000b0  d3 52 a5 a9 60 63 ad 07  66 00 6e 30 b2 40 7d f1  |.R..`c..f.n0.@}.|
000000c0  32 14 78 ab a8 85 33 84  8e 17 72 63 39 4d 39 f8  |2.x...3...rc9M9.|
000000d0  bd 18 63 ec c7 86 e8 d4  a8 df c2 12 cb 4a 12 1d  |..c..........J..|
000000e0  77 fb a1 8b e0 0c e9 89  7f e3 97 93 4d 28 fb e9  |w...........M(..|
000000f0  a3 84 49 78 1b 64 84 75  4f 31 b5 63 fd f7 24 20  |..Ix.d.uO1.c..$ |
... 296 bytes shown in part

2026-10-11 06:19:45139.162.116.160to 500/udpUnrecognisedJP

·! "·

payload bytes

00000000  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000010  21 20 22 08 00 00 00 00  00 00 00 1c              |! ".........|

2026-10-11 06:02:0064.62.197.43to 500/udpUnrecognisedUS

>5·)·$·$·$·

payload bytes

00000000  3e 35 c7 07 29 df ed ef  00 00 00 00 00 00 00 00  |>5..)...........|
00000010  01 10 02 00 00 00 00 00  00 00 00 c0 00 00 00 a4  |................|
00000020  00 00 00 01 00 00 00 01  00 00 00 98 01 01 00 04  |................|
00000030  03 00 00 24 01 01 00 00  80 01 00 05 80 02 00 02  |...$............|
00000040  80 03 00 01 80 04 00 02  80 0b 00 01 00 0c 00 04  |................|
00000050  00 00 00 01 03 00 00 24  02 01 00 00 80 01 00 05  |.......$........|
00000060  80 02 00 01 80 03 00 01  80 04 00 02 80 0b 00 01  |................|
00000070  00 0c 00 04 00 00 00 01  03 00 00 24 03 01 00 00  |...........$....|
00000080  80 01 00 01 80 02 00 02  80 03 00 01 80 04 00 02  |................|
00000090  80 0b 00 01 00 0c 00 04  00 00 00 01 00 00 00 24  |...............$|
000000a0  04 01 00 00 80 01 00 01  80 02 00 01 80 03 00 01  |................|
000000b0  80 04 00 02 80 0b 00 01  00 0c 00 04 00 00 00 01  |................|

2026-10-11 05:44:2664.62.197.191to 500/udpUnrecognisedUS

·zY·xɝ· ·*t·<v·Y·U>"·M·)·w·\3'9·o·/[·.

payload bytes

00000000  e4 7a 59 1f 78 c9 9d 7f  a0 0b 8e f0 ea 9f f8 83  |.zY.x...........|
00000010  08 10 20 01 e2 2a 74 c1  00 00 00 3c 76 9e 59 d6  |.. ..*t....<v.Y.|
00000020  f8 55 3e 22 99 1a 4d b1  cd 29 ca d8 77 c6 5c 33  |.U>"..M..)..w.\3|
00000030  27 39 f1 06 a2 bf 6f 1d  2f 5b f5 2e              |'9....o./[..|

2026-10-11 05:37:27193.163.125.151to 500/udpUnrecognisedGB

J·#S·w·! "·D"·,· · ·

payload bytes

00000000  4a ed 23 53 c3 77 ec a6  00 00 00 00 00 00 00 00  |J.#S.w..........|
00000010  21 20 22 08 00 00 00 00  00 00 02 44 22 00 01 a8  |! "........D"...|
00000020  02 00 00 2c 01 01 00 04  03 00 00 0c 01 00 00 0c  |...,............|
00000030  80 0e 01 00 03 00 00 08  02 00 00 06 03 00 00 08  |................|
00000040  03 00 00 0d 00 00 00 08  04 00 00 14 02 00 00 f0  |................|
00000050  02 01 00 1c 03 00 00 08  01 00 00 02 03 00 00 08  |................|
00000060  01 00 00 03 03 00 00 08  01 00 00 04 03 00 00 08  |................|
00000070  01 00 00 06 03 00 00 08  01 00 00 07 03 00 00 08  |................|
00000080  01 00 00 08 03 00 00 08  01 00 00 0b 03 00 00 0c  |................|
00000090  01 00 00 0c 80 0e 00 80  03 00 00 0c 01 00 00 0c  |................|
000000a0  80 0e 01 00 03 00 00 08  01 00 00 0d 03 00 00 08  |................|
000000b0  02 00 00 01 03 00 00 08  02 00 00 02 03 00 00 08  |................|
000000c0  02 00 00 05 03 00 00 08  02 00 00 06 03 00 00 08  |................|
000000d0  02 00 00 07 03 00 00 08  03 00 00 00 03 00 00 08  |................|
000000e0  03 00 00 01 03 00 00 08  03 00 00 02 03 00 00 08  |................|
000000f0  03 00 00 0c 03 00 00 08  03 00 00 0d 03 00 00 08  |................|
... 512 bytes shown in part

2026-10-11 05:24:33139.162.116.160to 500/udpUnrecognisedJP

·! "·

payload bytes

00000000  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000010  21 20 22 08 00 00 00 00  00 00 00 1c              |! ".........|

2026-10-11 05:21:07139.162.116.160to 500/udpUnrecognisedJP

·! "·

payload bytes

00000000  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000010  21 20 22 08 00 00 00 00  00 00 00 1c              |! ".........|

2026-10-11 03:42:20103.203.57.27to 500/udpUnrecognisedCN

·;·`·D·8· · · · ·

payload bytes

00000000  00 00 00 00 85 e9 bd 3b  00 00 00 00 00 00 00 00  |.......;........|
00000010  01 10 02 00 00 00 00 00  00 00 01 60 00 00 01 44  |...........`...D|
00000020  00 00 00 01 00 00 00 01  00 00 01 38 01 01 00 0d  |...........8....|
00000030  03 00 00 20 00 01 00 00  80 01 00 05 80 02 00 02  |... ............|
00000040  80 03 00 01 80 04 00 02  80 0b 00 01 80 0c 00 01  |................|
00000050  03 00 00 20 00 01 00 00  80 01 00 01 80 02 00 01  |... ............|
00000060  80 03 00 01 80 04 00 02  80 0b 00 01 80 0c 00 01  |................|
00000070  03 00 00 20 00 01 00 00  80 01 00 07 80 02 00 04  |... ............|
00000080  80 03 00 01 80 04 00 0e  80 0b 00 01 80 0c 00 01  |................|
00000090  03 00 00 14 00 01 00 00  80 01 00 05 80 02 00 02  |................|
000000a0  80 03 00 02 03 00 00 14  00 01 00 00 80 01 00 05  |................|
000000b0  80 02 00 02 80 03 00 03  03 00 00 14 00 01 00 00  |................|
000000c0  80 01 00 05 80 02 00 02  80 03 00 04 03 00 00 14  |................|
000000d0  00 01 00 00 80 01 00 05  80 02 00 02 80 03 00 08  |................|
000000e0  03 00 00 14 00 01 00 00  80 01 00 05 80 02 00 02  |................|
000000f0  80 03 fa dd 03 00 00 14  00 01 00 00 80 01 00 05  |................|
... 352 bytes shown in part

2026-10-11 02:14:2164.62.197.121to 500/udpUnrecognisedUS

f·mI· ·! "·$"·0·,·(·

payload bytes

00000000  66 a1 e3 6d 49 ec ea 20  00 00 00 00 00 00 00 00  |f..mI.. ........|
00000010  21 20 22 08 00 00 00 00  00 00 02 24 22 00 00 30  |! "........$"..0|
00000020  00 00 00 2c 01 01 00 04  03 00 00 0c 01 00 00 0c  |...,............|
00000030  80 0e 01 00 03 00 00 08  02 00 00 05 03 00 00 08  |................|
00000040  03 00 00 0c 00 00 00 08  04 00 00 0e 28 00 01 08  |............(...|
00000050  00 0e 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
... 512 bytes shown in part

2026-10-11 02:12:4264.62.197.151to 500/udpUnrecognisedUS

>5·)·$·$·$·

payload bytes

00000000  3e 35 c7 07 29 df ed ef  00 00 00 00 00 00 00 00  |>5..)...........|
00000010  01 10 02 00 00 00 00 00  00 00 00 c0 00 00 00 a4  |................|
00000020  00 00 00 01 00 00 00 01  00 00 00 98 01 01 00 04  |................|
00000030  03 00 00 24 01 01 00 00  80 01 00 05 80 02 00 02  |...$............|
00000040  80 03 00 01 80 04 00 02  80 0b 00 01 00 0c 00 04  |................|
00000050  00 00 00 01 03 00 00 24  02 01 00 00 80 01 00 05  |.......$........|
00000060  80 02 00 01 80 03 00 01  80 04 00 02 80 0b 00 01  |................|
00000070  00 0c 00 04 00 00 00 01  03 00 00 24 03 01 00 00  |...........$....|
00000080  80 01 00 01 80 02 00 02  80 03 00 01 80 04 00 02  |................|
00000090  80 0b 00 01 00 0c 00 04  00 00 00 01 00 00 00 24  |...............$|
000000a0  04 01 00 00 80 01 00 01  80 02 00 01 80 03 00 01  |................|
000000b0  80 04 00 02 80 0b 00 01  00 0c 00 04 00 00 00 01  |................|

2026-10-11 01:55:32139.162.116.160to 500/udpUnrecognisedJP

·! "·

payload bytes

00000000  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000010  21 20 22 08 00 00 00 00  00 00 00 1c              |! ".........|

2026-10-11 01:23:2464.62.197.145to 500/udpUnrecognisedUS

>5·)·$·$·$·

payload bytes

00000000  3e 35 c7 07 29 df ed ef  00 00 00 00 00 00 00 00  |>5..)...........|
00000010  01 10 02 00 00 00 00 00  00 00 00 c0 00 00 00 a4  |................|
00000020  00 00 00 01 00 00 00 01  00 00 00 98 01 01 00 04  |................|
00000030  03 00 00 24 01 01 00 00  80 01 00 05 80 02 00 02  |...$............|
00000040  80 03 00 01 80 04 00 02  80 0b 00 01 00 0c 00 04  |................|
00000050  00 00 00 01 03 00 00 24  02 01 00 00 80 01 00 05  |.......$........|
00000060  80 02 00 01 80 03 00 01  80 04 00 02 80 0b 00 01  |................|
00000070  00 0c 00 04 00 00 00 01  03 00 00 24 03 01 00 00  |...........$....|
00000080  80 01 00 01 80 02 00 02  80 03 00 01 80 04 00 02  |................|
00000090  80 0b 00 01 00 0c 00 04  00 00 00 01 00 00 00 24  |...............$|
000000a0  04 01 00 00 80 01 00 01  80 02 00 01 80 03 00 01  |................|
000000b0  80 04 00 02 80 0b 00 01  00 0c 00 04 00 00 00 01  |................|

2026-10-11 00:31:4664.62.197.221to 500/udpUnrecognisedUS

>5·)·$·$·$·

payload bytes

00000000  3e 35 c7 07 29 df ed ef  00 00 00 00 00 00 00 00  |>5..)...........|
00000010  01 10 02 00 00 00 00 00  00 00 00 c0 00 00 00 a4  |................|
00000020  00 00 00 01 00 00 00 01  00 00 00 98 01 01 00 04  |................|
00000030  03 00 00 24 01 01 00 00  80 01 00 05 80 02 00 02  |...$............|
00000040  80 03 00 01 80 04 00 02  80 0b 00 01 00 0c 00 04  |................|
00000050  00 00 00 01 03 00 00 24  02 01 00 00 80 01 00 05  |.......$........|
00000060  80 02 00 01 80 03 00 01  80 04 00 02 80 0b 00 01  |................|
00000070  00 0c 00 04 00 00 00 01  03 00 00 24 03 01 00 00  |...........$....|
00000080  80 01 00 01 80 02 00 02  80 03 00 01 80 04 00 02  |................|
00000090  80 0b 00 01 00 0c 00 04  00 00 00 01 00 00 00 24  |...............$|
000000a0  04 01 00 00 80 01 00 01  80 02 00 01 80 03 00 01  |................|
000000b0  80 04 00 02 80 0b 00 01  00 0c 00 04 00 00 00 01  |................|

2026-10-11 00:28:3091.231.89.91to 500/udpUnrecognisedFR

·"3DUfw·$·$·$·$·

payload bytes

00000000  00 11 22 33 44 55 66 77  00 00 00 00 00 00 00 00  |.."3DUfw........|
00000010  01 10 02 00 00 00 00 00  00 00 00 c0 00 00 00 a4  |................|
00000020  00 00 00 01 00 00 00 01  00 00 00 98 01 01 00 04  |................|
00000030  03 00 00 24 01 01 00 00  80 01 00 05 80 02 00 02  |...$............|
00000040  80 03 00 01 80 04 00 02  80 0b 00 01 00 0c 00 04  |................|
00000050  00 00 00 01 03 00 00 24  02 01 00 00 80 01 00 05  |.......$........|
00000060  80 02 00 01 80 03 00 01  80 04 00 02 80 0b 00 01  |................|
00000070  00 0c 00 04 00 00 00 01  03 00 00 24 03 01 00 00  |...........$....|
00000080  80 01 00 01 80 02 00 02  80 03 00 01 80 04 00 02  |................|
00000090  80 0b 00 01 00 0c 00 04  00 00 00 01 00 00 00 24  |...............$|
000000a0  04 01 00 00 80 01 00 01  80 02 00 01 80 03 00 01  |................|
000000b0  80 04 00 02 80 0b 00 01  00 0c 00 04 00 00 00 01  |................|

2026-10-11 00:13:1091.230.168.219to 500/udpUnrecognisedUS

·"3DUfw·$·$·$·$·

payload bytes

00000000  00 11 22 33 44 55 66 77  00 00 00 00 00 00 00 00  |.."3DUfw........|
00000010  01 10 02 00 00 00 00 00  00 00 00 c0 00 00 00 a4  |................|
00000020  00 00 00 01 00 00 00 01  00 00 00 98 01 01 00 04  |................|
00000030  03 00 00 24 01 01 00 00  80 01 00 05 80 02 00 02  |...$............|
00000040  80 03 00 01 80 04 00 02  80 0b 00 01 00 0c 00 04  |................|
00000050  00 00 00 01 03 00 00 24  02 01 00 00 80 01 00 05  |.......$........|
00000060  80 02 00 01 80 03 00 01  80 04 00 02 80 0b 00 01  |................|
00000070  00 0c 00 04 00 00 00 01  03 00 00 24 03 01 00 00  |...........$....|
00000080  80 01 00 01 80 02 00 02  80 03 00 01 80 04 00 02  |................|
00000090  80 0b 00 01 00 0c 00 04  00 00 00 01 00 00 00 24  |...............$|
000000a0  04 01 00 00 80 01 00 01  80 02 00 01 80 03 00 01  |................|
000000b0  80 04 00 02 80 0b 00 01  00 0c 00 04 00 00 00 01  |................|