UDP traffic

Datagrams matching port:80 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

Other services

1 datagrams from 1 source

First packets of sessions with VPN, voice, tunnelling, database and management services.

SOCKS5 1

Latest SOCKS5 datagram, to 80/udp

·4Vx·

payload bytes

00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 08 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

Unrecognised

64 datagrams from 48 sources

Datagrams no decoder recognised. Their first bytes are kept.

Unrecognised 64

Latest Unrecognised datagram, to 80/udp

MGLNDD_<HONEYPOT>_80

Payload bytes withheld: they contain the sensor's address.

Destination ports

80/udp65

Networks

AS8075 Microsoft Corporation from 19 sources19
AS14061 DigitalOcean, LLC from 9 sources13
AS54290 Hostwinds LLC. from 1 source8
AS45102 Alibaba (US) Technology Co., Ltd. from 5 sources5
AS10439 CariNet, Inc. from 2 sources4
AS202425 IP Volume inc from 1 source3
AS12989 Black HOST Ltd from 2 sources2
AS4134 Chinanet from 2 sources2
AS19429 Colombia from 2 sources2
AS1221 Telstra Limited from 1 source2

Countries

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
104.168.132.113	AS54290 Hostwinds LLC.	US	Unrecognised	8	2026-10-07 20:41
71.6.199.23	AS10439 CariNet, Inc.	US	Unrecognised	3	2026-10-06 22:26
185.242.226.166	AS202425 IP Volume inc	US	Unrecognised	3	2026-10-07 20:25
167.71.102.181	AS14061 DigitalOcean, LLC	US	Unrecognised	3	2026-10-07 13:57
68.183.209.92	AS14061 DigitalOcean, LLC	DE	Unrecognised	2	2026-10-11 15:39
144.130.164.158	AS1221 Telstra Limited	AU	Unrecognised	2	2026-10-09 17:03
146.190.72.24	AS14061 DigitalOcean, LLC	US	Unrecognised	2	2026-10-06 17:05
59.49.230.168	AS4134 Chinanet	CN	Unrecognised	1	2026-10-10 11:17
167.71.143.137	AS14061 DigitalOcean, LLC	GB	Unrecognised	1	2026-10-07 14:05
27.17.76.93	AS137266 CHINATELECOM Hubei province Wuhan 5G net	CN	Unrecognised	1	2026-10-08 00:03
165.22.171.137	AS14061 DigitalOcean, LLC	US	Unrecognised	1	2026-10-07 14:04
20.150.195.3	AS8075 Microsoft Corporation	US	Unrecognised	1	2026-10-11 01:05
163.53.179.50	AS45916 Gujarat Telelink Pvt Ltd	IN	Unrecognised	1	2026-10-07 01:24
186.30.136.232	AS19429 Colombia	CO	Unrecognised	1	2026-10-08 21:46
4.249.18.138	AS8075 Microsoft Corporation	US	Unrecognised	1	2026-10-05 19:10
20.51.195.80	AS8075 Microsoft Corporation	US	Unrecognised	1	2026-10-05 19:06
51.8.82.35	AS8075 Microsoft Corporation	US	Unrecognised	1	2026-10-09 06:47
40.76.250.59	AS8075 Microsoft Corporation	US	Unrecognised	1	2026-10-07 13:13
47.253.100.60	AS45102 Alibaba (US) Technology Co., Ltd.	US	Unrecognised	1	2026-10-08 14:25
20.171.10.210	AS8075 Microsoft Corporation	US	Unrecognised	1	2026-10-11 22:01

Latest datagrams

2026-10-11 22:01:4120.171.10.210to 80/udpUnrecognisedUS
MGLNDD_<HONEYPOT>_80
Payload bytes withheld: they contain the sensor's address.
2026-10-11 22:01:2820.106.172.169to 80/udpUnrecognisedUS
MGLNDD_<HONEYPOT>_80
Payload bytes withheld: they contain the sensor's address.

2026-10-11 17:18:4186.54.31.34to 80/udpUnrecognisedCA

·'·I%

payload bytes

00000000  00 00 04 17 27 10 19 80  00 00 00 00 00 03 49 25  |....'.........I%|

2026-10-11 15:39:1568.183.209.92to 80/udpUnrecognisedDE
r·*·Q999·
payload bytes
```
00000000  72 89 c1 9c 1c 2a ff fc  f1 51 39 39 39 00        |r....*...Q999.|
```
2026-10-11 15:39:0268.183.209.92to 80/udpUnrecognisedDE
12345678Q999·
payload bytes
```
00000000  0d 31 32 33 34 35 36 37  38 51 39 39 39 00        |.12345678Q999.|
```
2026-10-11 01:07:54164.90.135.205to 80/udpUnrecognisedUS
8·c·+O·N·
payload bytes
```
00000000  38 aa 63 c9 1d 2b 4f 1f  4e 00 00 00 00 00        |8.c..+O.N.....|
```
2026-10-11 01:05:0720.150.195.3to 80/udpUnrecognisedUS
MGLNDD_<HONEYPOT>_80
Payload bytes withheld: they contain the sensor's address.
2026-10-11 01:04:0357.154.208.126to 80/udpUnrecognisedUS
MGLNDD_<HONEYPOT>_80
Payload bytes withheld: they contain the sensor's address.
2026-10-11 00:56:08178.128.184.235to 80/udpUnrecognisedUS
8·O·@·N·
payload bytes
```
00000000  38 ce 7f 4f 85 18 40 b5  4e 00 00 00 00 00        |8..O..@.N.....|
```
2026-10-10 22:18:222604:a880:cad:d0:0:1:ba2b:9001to 80/udpUnrecognisedCA
·*·Q999·
payload bytes
```
00000000  0d 89 c1 9c 1c 2a ff fc  f1 51 39 39 39 00        |.....*...Q999.|
```
2026-10-10 11:17:5359.49.230.168to 80/udpUnrecognisedCN
·*·Q999·
payload bytes
```
00000000  0d 89 c1 9c 1c 2a ff fc  f1 51 39 39 39 00        |.....*...Q999.|
```

2026-10-10 05:59:2566.240.192.138to 80/udpUnrecognisedUS

·'·I%

payload bytes

00000000  00 00 04 17 27 10 19 80  00 00 00 00 00 03 49 25  |....'.........I%|

2026-10-10 03:50:0220.51.209.165to 80/udpUnrecognisedUS
MGLNDD_<HONEYPOT>_80
Payload bytes withheld: they contain the sensor's address.
2026-10-10 03:45:344.249.18.29to 80/udpUnrecognisedUS
MGLNDD_<HONEYPOT>_80
Payload bytes withheld: they contain the sensor's address.
2026-10-10 03:45:084.249.17.189to 80/udpUnrecognisedUS
MGLNDD_<HONEYPOT>_80
Payload bytes withheld: they contain the sensor's address.