HoneyLabs

UDP traffic

Datagrams matching port:523 sent to HoneyLabs sensors over UDP in the last 24 hours. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

7

Datagrams

7

Source addresses

3

Networks

2

Countries

1

Destination ports

Traffic by type

Unrecognised

7 datagrams from 7 sources

Datagrams no decoder recognised. Their first bytes are kept.

Latest Unrecognised datagram, to 523/udp

DB2GETADDR·SQL09010·

payload bytes
00000000  44 42 32 47 45 54 41 44  44 52 00 53 51 4c 30 39  |DB2GETADDR.SQL09|
00000010  30 31 30 00                                       |010.|

Destination ports

Networks

Countries

Source addresses (unverified)

AddressNetworkCcSendsDatagramsLast seen (UTC)
91.230.168.119AS213412 ONYPHE SASUSUnrecognised12026-10-10 12:52
216.25.89.65AS396982 Google LLCUSUnrecognised12026-10-10 15:18
91.231.89.167AS213412 ONYPHE SASFRUnrecognised12026-10-10 13:08
64.62.156.53AS6939 Hurricane Electric LLCUSUnrecognised12026-10-11 06:58
65.49.20.73AS6939 Hurricane Electric LLCUSUnrecognised12026-10-11 05:21
65.49.20.121AS6939 Hurricane Electric LLCUSUnrecognised12026-10-11 05:14
64.62.156.117AS6939 Hurricane Electric LLCUSUnrecognised12026-10-11 03:15

Latest datagrams