HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsEmissions IndexPortsUser-agentsUDP traffic
Integrations
OverviewMCPFeedsAPI / EnrichSplunk ESMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog
Dashboard

UDP traffic

Datagrams matching port:5349 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

29

Datagrams

26

Source addresses

3

Networks

2

Countries

1

Destination ports

Traffic by type

Other services

25 datagrams from 22 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

DTLS 25

Latest DTLS datagram, to 5349/udp

·m·a·a·i·S·1 ·I/,w·n·F·mC·i· ·+·/· ·,·0·+· · · ·

payload bytes
00000000  16 fe fd 00 00 00 00 00  00 00 00 00 6d 01 00 00  |............m...|
00000010  61 00 00 00 00 00 00 00  61 fe fd 69 9f 53 c2 31  |a.......a..i.S.1|
00000020  0a ac c1 49 2f 2c 77 f9  aa 6e 8a d3 d5 46 04 6d  |...I/,w..n...F.m|
00000030  43 98 ea 69 81 09 f2 bb  9c 7f ce 00 00 00 0c c0  |C..i............|
00000040  2b c0 2f c0 0a c0 14 c0  2c c0 30 01 00 00 2b 00  |+./.....,.0...+.|
00000050  0d 00 0c 00 0a 04 01 04  03 04 01 05 01 06 01 ff  |................|
00000060  01 00 01 00 00 0a 00 08  00 06 00 1d 00 17 00 18  |................|
00000070  00 0b 00 02 01 00 00 17  00 00                    |..........|

Unrecognised

4 datagrams from 4 sources

Datagrams no decoder recognised. Their first bytes are kept.

Unrecognised 4

Latest Unrecognised datagram, to 5349/udp

·

payload bytes
00000000  00 00 00 00                                       |....|

Destination ports

Networks

Countries

Source addresses (unverified)

AddressNetworkCcSendsDatagramsLast seen (UTC)
66.132.224.24AS398324 Censys, Inc.USDTLS22026-10-11 07:16
66.132.186.247AS398324 Censys, Inc.USDTLS22026-10-10 09:02
199.45.154.183AS398722 Censys, Inc.USDTLS22026-10-07 11:05
66.132.172.234AS398324 Censys, Inc.USDTLS12026-10-08 21:37
35.203.210.194AS396982 Google LLCGBUnrecognised12026-10-09 04:57
66.132.159.40AS398324 Censys, Inc.USDTLS12026-10-10 14:58
66.132.172.228AS398324 Censys, Inc.USDTLS12026-10-07 19:12
66.132.172.230AS398324 Censys, Inc.USDTLS12026-10-06 17:10
199.45.154.190AS398722 Censys, Inc.USDTLS12026-10-07 08:39
66.132.186.254AS398324 Censys, Inc.USDTLS12026-10-07 21:19
66.132.172.237AS398324 Censys, Inc.USDTLS12026-10-05 18:43
147.185.132.158AS396982 Google LLCUSUnrecognised12026-10-08 06:29
66.132.159.37AS398324 Censys, Inc.USDTLS12026-10-10 03:21
66.132.186.209AS398324 Censys, Inc.USDTLS12026-10-07 20:46
66.132.186.239AS398324 Censys, Inc.USDTLS12026-10-09 02:22
66.132.224.16AS398324 Censys, Inc.USDTLS12026-10-10 13:55
66.132.186.222AS398324 Censys, Inc.USDTLS12026-10-08 18:37
66.132.172.239AS398324 Censys, Inc.USDTLS12026-10-05 22:00
66.132.186.245AS398324 Censys, Inc.USDTLS12026-10-10 00:39
66.132.172.224AS398324 Censys, Inc.USDTLS12026-10-07 21:53

Latest datagrams