HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsEmissions IndexPortsUser-agentsUDP traffic
Integrations
OverviewMCPFeedsAPI / EnrichSplunk ESMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog
Dashboard

UDP traffic

Datagrams matching port:9600 sent to HoneyLabs sensors over UDP in the last 24 hours. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

7

Datagrams

7

Source addresses

4

Networks

3

Countries

1

Destination ports

Traffic by type

Other services

5 datagrams from 5 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

RTP 5

Latest RTP datagram, to 9600/udp

·

payload bytes
00000000  80 00 02 00 00 00 00 00  00 00 05 01 00           |.............|

Unrecognised

2 datagrams from 2 sources

Datagrams no decoder recognised. Their first bytes are kept.

Unrecognised 2

Latest Unrecognised datagram, to 9600/udp

FINS·

payload bytes
00000000  46 49 4e 53 00 00 00 0c  00 00 00 00 00 00 00 00  |FINS............|
00000010  00 00 00 00                                       |....|

Destination ports

Networks

Countries

Source addresses (unverified)

AddressNetworkCcSendsDatagramsLast seen (UTC)
85.217.140.11AS209334 Modat B.V.FRUnrecognised12026-10-10 11:38
74.82.47.9AS6939 Hurricane Electric LLCUSRTP12026-10-11 07:03
65.49.1.77AS6939 Hurricane Electric LLCUSRTP12026-10-11 00:23
147.185.132.96AS396982 Google LLCUSUnrecognised12026-10-10 16:35
74.82.47.21AS6939 Hurricane Electric LLCUSRTP12026-10-11 08:04
159.223.223.14AS14061 DigitalOcean, LLCNLRTP12026-10-11 08:47
64.62.197.17AS6939 Hurricane Electric LLCUSRTP12026-10-11 08:10

Latest datagrams