UDP traffic
Datagrams matching port:5683 sent to HoneyLabs sensors over UDP in the last 24 hours. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.
A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.
27
Datagrams
13
Source addresses
9
Networks
6
Countries
1
Destination ports
Traffic by type
Service queries
27 datagrams from 13 sourcesRequests a service answers without a handshake. Scanners send them to find open DNS, NTP, SNMP or SSDP servers, which are also the servers reflection attacks abuse.
Latest CoAP datagram, to 5683/udp
payload bytes
00000000 40 01 7d 70 bb 2e 77 65 6c 6c 2d 6b 6e 6f 77 6e |@.}p..well-known| 00000010 04 63 6f 72 65 |.core|
Destination ports
- 5683/udp CoAP27
Networks
- AS215925 Vpsvault.host Ltd from 2 sources10
- AS209630 LLC Vash Kredit Bank from 1 source4
- AS29484 Ruhr-Universitaet Bochum from 1 source3
- AS20052 Arbor Networks, Inc. from 2 sources3
- AS396982 Google LLC from 2 sources2
- AS6939 Hurricane Electric LLC from 2 sources2
- AS398324 Censys, Inc. from 1 source1
- AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMIT from 1 source1
- AS48090 Techoff Srv Limited from 1 source1
Countries
Source addresses (unverified)
| Address | Network | Cc | Sends | Datagrams | Last seen (UTC) |
|---|---|---|---|---|---|
| 45.198.224.251 | AS215925 Vpsvault.host Ltd | US | CoAP | 6 | 2026-10-10 14:13 |
| 45.205.1.231 | AS215925 Vpsvault.host Ltd | BR | CoAP | 4 | 2026-10-10 17:32 |
| 151.243.11.230 | AS209630 LLC Vash Kredit Bank | AE | CoAP | 4 | 2026-10-10 11:52 |
| 185.73.23.133 | AS29484 Ruhr-Universitaet Bochum | DE | CoAP | 3 | 2026-10-11 05:05 |
| 146.88.241.150 | AS20052 Arbor Networks, Inc. | US | CoAP | 2 | 2026-10-11 04:02 |
| 165.154.43.179 | AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMIT | HK | CoAP | 1 | 2026-10-11 04:59 |
| 147.185.132.249 | AS396982 Google LLC | US | CoAP | 1 | 2026-10-10 11:59 |
| 66.132.224.27 | AS398324 Censys, Inc. | US | CoAP | 1 | 2026-10-10 13:06 |
| 65.49.1.103 | AS6939 Hurricane Electric LLC | US | CoAP | 1 | 2026-10-10 05:44 |
| 198.235.24.241 | AS396982 Google LLC | US | CoAP | 1 | 2026-10-10 16:50 |
| 65.49.20.70 | AS6939 Hurricane Electric LLC | US | CoAP | 1 | 2026-10-11 03:30 |
| 93.123.109.214 | AS48090 Techoff Srv Limited | BG | CoAP | 1 | 2026-10-10 18:23 |
| 146.88.241.40 | AS20052 Arbor Networks, Inc. | US | CoAP | 1 | 2026-10-11 03:14 |
Latest datagrams
payload bytes
00000000 40 01 7d 70 bb 2e 77 65 6c 6c 2d 6b 6e 6f 77 6e |@.}p..well-known| 00000010 04 63 6f 72 65 |.core|
payload bytes
00000000 40 01 01 ce bb 2e 77 65 6c 6c 2d 6b 6e 6f 77 6e |@.....well-known| 00000010 04 63 6f 72 65 |.core|
payload bytes
00000000 40 01 7d 70 bb 2e 77 65 6c 6c 2d 6b 6e 6f 77 6e |@.}p..well-known| 00000010 04 63 6f 72 65 |.core|
payload bytes
00000000 40 01 7d 70 bb 2e 77 65 6c 6c 2d 6b 6e 6f 77 6e |@.}p..well-known| 00000010 04 63 6f 72 65 |.core|
payload bytes
00000000 40 01 73 6a |@.sj|
payload bytes
00000000 40 01 7d 70 bb 2e 77 65 6c 6c 2d 6b 6e 6f 77 6e |@.}p..well-known| 00000010 04 63 6f 72 65 |.core|
payload bytes
00000000 40 01 7d 70 bb 2e 77 65 6c 6c 2d 6b 6e 6f 77 6e |@.}p..well-known| 00000010 04 63 6f 72 65 |.core|
payload bytes
00000000 44 02 b2 26 63 c0 e1 1d b4 65 78 65 63 11 00 3d |D..&c....exec..=| 00000010 15 43 61 6d 65 6c 45 78 65 63 43 6f 6d 6d 61 6e |.CamelExecComman| 00000020 64 45 78 65 63 75 74 61 62 6c 65 3d 2f 62 69 6e |dExecutable=/bin| 00000030 2f 73 68 0d 26 43 61 6d 65 6c 45 78 65 63 43 6f |/sh.&CamelExecCo| 00000040 6d 6d 61 6e 64 41 72 67 73 3d 2d 63 20 27 65 63 |mmandArgs=-c 'ec| 00000050 68 6f 20 43 56 45 32 30 32 36 33 33 34 35 33 61 |ho CVE202633453a| 00000060 6c 62 69 69 73 72 74 27 ff 70 72 6f 62 65 |lbiisrt'.probe|
payload bytes
00000000 40 01 01 01 bb 2e 77 65 6c 6c 2d 6b 6e 6f 77 6e |@.....well-known| 00000010 04 63 6f 72 65 |.core|
payload bytes
00000000 40 01 01 01 bb 2e 77 65 6c 6c 2d 6b 6e 6f 77 6e |@.....well-known| 00000010 04 63 6f 72 65 |.core|
payload bytes
00000000 40 01 01 01 bb 2e 77 65 6c 6c 2d 6b 6e 6f 77 6e |@.....well-known| 00000010 04 63 6f 72 65 |.core|
payload bytes
00000000 40 01 01 01 bb 2e 77 65 6c 6c 2d 6b 6e 6f 77 6e |@.....well-known| 00000010 04 63 6f 72 65 |.core|
payload bytes
00000000 40 01 01 ce bb 2e 77 65 6c 6c 2d 6b 6e 6f 77 6e |@.....well-known| 00000010 04 63 6f 72 65 |.core|
payload bytes
00000000 40 01 01 01 bb 2e 77 65 6c 6c 2d 6b 6e 6f 77 6e |@.....well-known| 00000010 04 63 6f 72 65 |.core|
payload bytes
00000000 40 01 01 01 bb 2e 77 65 6c 6c 2d 6b 6e 6f 77 6e |@.....well-known| 00000010 04 63 6f 72 65 |.core|