UDP traffic

Datagrams matching port:5684 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

Other services

18 datagrams from 15 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

DTLS 18

Latest DTLS datagram, to 5684/udp

·~·r·r·_·BnS·r·3~_·Y·I·-N·> ·?·W·+·/· ·<· · · 127.0.0.1

payload bytes

00000000  16 fe fd 00 00 00 00 00  00 00 00 00 7e 01 00 00  |............~...|
00000010  72 00 00 00 00 00 00 00  72 fe fd 5f 06 07 42 6e  |r.......r.._..Bn|
00000020  53 de 72 d8 ef 33 7e 5f  ee 59 10 19 49 8b 2d 4e  |S.r..3~_.Y..I.-N|
00000030  7f de 3e 09 f4 a8 3f 03  f9 57 06 00 00 00 0c c0  |..>...?..W......|
00000040  ac c0 ae c0 2b c0 2f c0  0a c0 14 01 00 00 3c 00  |....+./.......<.|
00000050  0d 00 10 00 0e 04 03 05  03 06 03 04 01 05 01 06  |................|
00000060  01 08 07 00 0a 00 08 00  06 00 1d 00 17 00 18 00  |................|
00000070  0b 00 02 01 00 00 17 00  00 00 00 00 0e 00 0c 00  |................|
00000080  00 09 31 32 37 2e 30 2e  30 2e 31                 |..127.0.0.1|

Unrecognised

21 datagrams from 2 sources

Datagrams no decoder recognised. Their first bytes are kept.

Unrecognised 21

Latest Unrecognised datagram, to 5684/udp

@·}p·.well-known·core

payload bytes

00000000  40 01 7d 70 bb 2e 77 65  6c 6c 2d 6b 6e 6f 77 6e  |@.}p..well-known|
00000010  04 63 6f 72 65                                    |.core|

Destination ports

5684/udp39

Networks

AS29484 Ruhr-Universitaet Bochum from 1 source20
AS398324 Censys, Inc. from 9 sources11
AS398722 Censys, Inc. from 3 sources3
AS12989 Black HOST Ltd from 1 source2
AS10439 CariNet, Inc. from 1 source1
AS45102 Alibaba (US) Technology Co., Ltd. from 1 source1
AS202425 IP Volume inc from 1 source1

Countries

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
185.73.23.133	AS29484 Ruhr-Universitaet Bochum	DE	Unrecognised	20	2026-10-10 05:44
66.132.172.230	AS398324 Censys, Inc.	US	DTLS	2	2026-10-08 15:06
66.132.186.216	AS398324 Censys, Inc.	US	DTLS	2	2026-10-10 03:40
86.54.31.32	AS12989 Black HOST Ltd	CA	DTLS	2	2026-10-08 00:05
89.248.167.131	AS202425 IP Volume inc	NL	DTLS	1	2026-10-09 09:05
66.132.224.21	AS398324 Censys, Inc.	US	DTLS	1	2026-10-08 00:22
43.98.165.95	AS45102 Alibaba (US) Technology Co., Ltd.	SG	Unrecognised	1	2026-10-06 07:10
66.132.159.41	AS398324 Censys, Inc.	US	DTLS	1	2026-10-09 17:27
199.45.154.181	AS398722 Censys, Inc.	US	DTLS	1	2026-10-07 17:51
66.132.172.239	AS398324 Censys, Inc.	US	DTLS	1	2026-10-08 06:23
199.45.154.185	AS398722 Censys, Inc.	US	DTLS	1	2026-10-06 07:55
71.6.135.131	AS10439 CariNet, Inc.	US	DTLS	1	2026-10-07 06:46
66.132.186.244	AS398324 Censys, Inc.	US	DTLS	1	2026-10-07 23:11
66.132.172.238	AS398324 Censys, Inc.	US	DTLS	1	2026-10-10 01:31
66.132.186.240	AS398324 Censys, Inc.	US	DTLS	1	2026-10-09 03:55
199.45.154.180	AS398722 Censys, Inc.	US	DTLS	1	2026-10-07 08:41
66.132.186.242	AS398324 Censys, Inc.	US	DTLS	1	2026-10-06 19:41

Latest datagrams

2026-10-10 05:44:54185.73.23.133to 5684/udpUnrecognisedDE

@·}p·.well-known·core

payload bytes

00000000  40 01 7d 70 bb 2e 77 65  6c 6c 2d 6b 6e 6f 77 6e  |@.}p..well-known|
00000010  04 63 6f 72 65                                    |.core|

2026-10-10 05:43:29185.73.23.133to 5684/udpUnrecognisedDE

@·}p·.well-known·core

payload bytes

00000000  40 01 7d 70 bb 2e 77 65  6c 6c 2d 6b 6e 6f 77 6e  |@.}p..well-known|
00000010  04 63 6f 72 65                                    |.core|

2026-10-10 05:42:43185.73.23.133to 5684/udpUnrecognisedDE

@·}p·.well-known·core

payload bytes

00000000  40 01 7d 70 bb 2e 77 65  6c 6c 2d 6b 6e 6f 77 6e  |@.}p..well-known|
00000010  04 63 6f 72 65                                    |.core|

2026-10-10 05:23:21185.73.23.133to 5684/udpUnrecognisedDE

@·}p·.well-known·core

payload bytes

00000000  40 01 7d 70 bb 2e 77 65  6c 6c 2d 6b 6e 6f 77 6e  |@.}p..well-known|
00000010  04 63 6f 72 65                                    |.core|

2026-10-10 03:40:1366.132.186.216to 5684/udpDTLSUS

·~·r·r·_·BnS·r·3~_·Y·I·-N·> ·?·W·+·/· ·<· · · 127.0.0.1

payload bytes

00000000  16 fe fd 00 00 00 00 00  00 00 00 00 7e 01 00 00  |............~...|
00000010  72 00 00 00 00 00 00 00  72 fe fd 5f 06 07 42 6e  |r.......r.._..Bn|
00000020  53 de 72 d8 ef 33 7e 5f  ee 59 10 19 49 8b 2d 4e  |S.r..3~_.Y..I.-N|
00000030  7f de 3e 09 f4 a8 3f 03  f9 57 06 00 00 00 0c c0  |..>...?..W......|
00000040  ac c0 ae c0 2b c0 2f c0  0a c0 14 01 00 00 3c 00  |....+./.......<.|
00000050  0d 00 10 00 0e 04 03 05  03 06 03 04 01 05 01 06  |................|
00000060  01 08 07 00 0a 00 08 00  06 00 1d 00 17 00 18 00  |................|
00000070  0b 00 02 01 00 00 17 00  00 00 00 00 0e 00 0c 00  |................|
00000080  00 09 31 32 37 2e 30 2e  30 2e 31                 |..127.0.0.1|

2026-10-10 01:31:1066.132.172.238to 5684/udpDTLSUS

·~·r·r·_·BnS·r·3~_·Y·I·-N·> ·?·W·+·/· ·<· · · 127.0.0.1

payload bytes

00000000  16 fe fd 00 00 00 00 00  00 00 00 00 7e 01 00 00  |............~...|
00000010  72 00 00 00 00 00 00 00  72 fe fd 5f 06 07 42 6e  |r.......r.._..Bn|
00000020  53 de 72 d8 ef 33 7e 5f  ee 59 10 19 49 8b 2d 4e  |S.r..3~_.Y..I.-N|
00000030  7f de 3e 09 f4 a8 3f 03  f9 57 06 00 00 00 0c c0  |..>...?..W......|
00000040  ac c0 ae c0 2b c0 2f c0  0a c0 14 01 00 00 3c 00  |....+./.......<.|
00000050  0d 00 10 00 0e 04 03 05  03 06 03 04 01 05 01 06  |................|
00000060  01 08 07 00 0a 00 08 00  06 00 1d 00 17 00 18 00  |................|
00000070  0b 00 02 01 00 00 17 00  00 00 00 00 0e 00 0c 00  |................|
00000080  00 09 31 32 37 2e 30 2e  30 2e 31                 |..127.0.0.1|

2026-10-09 17:27:4066.132.159.41to 5684/udpDTLSUS

·~·r·r·_·BnS·r·3~_·Y·I·-N·> ·?·W·+·/· ·<· · · 127.0.0.1

payload bytes

00000000  16 fe fd 00 00 00 00 00  00 00 00 00 7e 01 00 00  |............~...|
00000010  72 00 00 00 00 00 00 00  72 fe fd 5f 06 07 42 6e  |r.......r.._..Bn|
00000020  53 de 72 d8 ef 33 7e 5f  ee 59 10 19 49 8b 2d 4e  |S.r..3~_.Y..I.-N|
00000030  7f de 3e 09 f4 a8 3f 03  f9 57 06 00 00 00 0c c0  |..>...?..W......|
00000040  ac c0 ae c0 2b c0 2f c0  0a c0 14 01 00 00 3c 00  |....+./.......<.|
00000050  0d 00 10 00 0e 04 03 05  03 06 03 04 01 05 01 06  |................|
00000060  01 08 07 00 0a 00 08 00  06 00 1d 00 17 00 18 00  |................|
00000070  0b 00 02 01 00 00 17 00  00 00 00 00 0e 00 0c 00  |................|
00000080  00 09 31 32 37 2e 30 2e  30 2e 31                 |..127.0.0.1|

2026-10-09 09:05:2689.248.167.131to 5684/udpDTLSNL

·6·*·*·|w@·"·ʬ d/·"d·0·/·

payload bytes

00000000  16 fe ff 00 00 00 00 00  00 00 00 00 36 01 00 00  |............6...|
00000010  2a 00 00 00 00 00 00 00  2a fe fd 00 00 00 00 7c  |*.......*......||
00000020  77 40 1e 8a c8 22 a0 a0  18 ff 93 08 ca ac 0a 64  |w@...".........d|
00000030  2f c9 22 64 bc 08 a8 16  89 19 30 00 00 00 02 00  |/."d......0.....|
00000040  2f 01 00                                          |/..|

2026-10-09 05:46:02185.73.23.133to 5684/udpUnrecognisedDE

@·}p·.well-known·core

payload bytes

00000000  40 01 7d 70 bb 2e 77 65  6c 6c 2d 6b 6e 6f 77 6e  |@.}p..well-known|
00000010  04 63 6f 72 65                                    |.core|

2026-10-09 05:42:41185.73.23.133to 5684/udpUnrecognisedDE

@·}p·.well-known·core

payload bytes

00000000  40 01 7d 70 bb 2e 77 65  6c 6c 2d 6b 6e 6f 77 6e  |@.}p..well-known|
00000010  04 63 6f 72 65                                    |.core|

2026-10-09 05:29:48185.73.23.133to 5684/udpUnrecognisedDE

@·}p·.well-known·core

payload bytes

00000000  40 01 7d 70 bb 2e 77 65  6c 6c 2d 6b 6e 6f 77 6e  |@.}p..well-known|
00000010  04 63 6f 72 65                                    |.core|

2026-10-09 05:24:22185.73.23.133to 5684/udpUnrecognisedDE

@·}p·.well-known·core

payload bytes

00000000  40 01 7d 70 bb 2e 77 65  6c 6c 2d 6b 6e 6f 77 6e  |@.}p..well-known|
00000010  04 63 6f 72 65                                    |.core|

2026-10-09 03:55:2766.132.186.240to 5684/udpDTLSUS

·~·r·r·_·BnS·r·3~_·Y·I·-N·> ·?·W·+·/· ·<· · · 127.0.0.1

payload bytes

00000000  16 fe fd 00 00 00 00 00  00 00 00 00 7e 01 00 00  |............~...|
00000010  72 00 00 00 00 00 00 00  72 fe fd 5f 06 07 42 6e  |r.......r.._..Bn|
00000020  53 de 72 d8 ef 33 7e 5f  ee 59 10 19 49 8b 2d 4e  |S.r..3~_.Y..I.-N|
00000030  7f de 3e 09 f4 a8 3f 03  f9 57 06 00 00 00 0c c0  |..>...?..W......|
00000040  ac c0 ae c0 2b c0 2f c0  0a c0 14 01 00 00 3c 00  |....+./.......<.|
00000050  0d 00 10 00 0e 04 03 05  03 06 03 04 01 05 01 06  |................|
00000060  01 08 07 00 0a 00 08 00  06 00 1d 00 17 00 18 00  |................|
00000070  0b 00 02 01 00 00 17 00  00 00 00 00 0e 00 0c 00  |................|
00000080  00 09 31 32 37 2e 30 2e  30 2e 31                 |..127.0.0.1|

2026-10-09 01:39:0966.132.186.216to 5684/udpDTLSUS

·~·r·r·_·BnS·r·3~_·Y·I·-N·> ·?·W·+·/· ·<· · · 127.0.0.1

payload bytes

00000000  16 fe fd 00 00 00 00 00  00 00 00 00 7e 01 00 00  |............~...|
00000010  72 00 00 00 00 00 00 00  72 fe fd 5f 06 07 42 6e  |r.......r.._..Bn|
00000020  53 de 72 d8 ef 33 7e 5f  ee 59 10 19 49 8b 2d 4e  |S.r..3~_.Y..I.-N|
00000030  7f de 3e 09 f4 a8 3f 03  f9 57 06 00 00 00 0c c0  |..>...?..W......|
00000040  ac c0 ae c0 2b c0 2f c0  0a c0 14 01 00 00 3c 00  |....+./.......<.|
00000050  0d 00 10 00 0e 04 03 05  03 06 03 04 01 05 01 06  |................|
00000060  01 08 07 00 0a 00 08 00  06 00 1d 00 17 00 18 00  |................|
00000070  0b 00 02 01 00 00 17 00  00 00 00 00 0e 00 0c 00  |................|
00000080  00 09 31 32 37 2e 30 2e  30 2e 31                 |..127.0.0.1|

2026-10-08 15:06:5966.132.172.230to 5684/udpDTLSUS

·~·r·r·_·BnS·r·3~_·Y·I·-N·> ·?·W·+·/· ·<· · · 127.0.0.1

payload bytes

00000000  16 fe fd 00 00 00 00 00  00 00 00 00 7e 01 00 00  |............~...|
00000010  72 00 00 00 00 00 00 00  72 fe fd 5f 06 07 42 6e  |r.......r.._..Bn|
00000020  53 de 72 d8 ef 33 7e 5f  ee 59 10 19 49 8b 2d 4e  |S.r..3~_.Y..I.-N|
00000030  7f de 3e 09 f4 a8 3f 03  f9 57 06 00 00 00 0c c0  |..>...?..W......|
00000040  ac c0 ae c0 2b c0 2f c0  0a c0 14 01 00 00 3c 00  |....+./.......<.|
00000050  0d 00 10 00 0e 04 03 05  03 06 03 04 01 05 01 06  |................|
00000060  01 08 07 00 0a 00 08 00  06 00 1d 00 17 00 18 00  |................|
00000070  0b 00 02 01 00 00 17 00  00 00 00 00 0e 00 0c 00  |................|
00000080  00 09 31 32 37 2e 30 2e  30 2e 31                 |..127.0.0.1|