UDP traffic

Datagrams matching proto:http sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

Other services

31 datagrams from 11 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

HTTP 31

Latest HTTP datagram, to 30718/udp

payload bytes

00000000  47 45 54 20 2f 20 48 54  54 50 2f 31 2e 31 0d 0a  |GET / HTTP/1.1..|
00000010  48 6f 73 74 3a 20 77 77  77 0d 0a 0d 0a           |Host: www....|

Amplification checks

Probes for services that answer a small request with a much larger reply, the property reflection attacks rely on.

Service	Port	Datagrams	Sources	Factor
CharGEN	19/udp	7	2	358.8

The factor is how many bytes a reachable server can send back for each byte it receives, as published by CISA in alert TA14-017A.

Destination ports

19/udp HTTP7
593/udp HTTP5
500/udp HTTP4
4070/udp HTTP4
4500/udp HTTP3
53/udp HTTP1
121/udp HTTP1
1701/udp HTTP1
30310/udp HTTP1
30311/udp HTTP1
30312/udp HTTP1
30313/udp HTTP1

Networks

AS202425 IP Volume inc from 4 sources15
AS63949 Akamai Connected Cloud from 2 sources8
AS45102 Alibaba (US) Technology Co., Ltd. from 3 sources4
AS14618 Amazon.com, Inc. from 1 source3
AS211619 MAXKO d.o.o. from 1 source1

Countries

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
185.242.226.66	AS202425 IP Volume inc	US	HTTP	5	2026-10-08 05:56
185.242.226.65	AS202425 IP Volume inc	US	HTTP	5	2026-10-11 00:23
45.33.46.249	AS63949 Akamai Connected Cloud	US	HTTP	5	2026-10-10 15:41
185.242.226.63	AS202425 IP Volume inc	US	HTTP	4	2026-10-07 15:08
52.73.169.169	AS14618 Amazon.com, Inc.	US	HTTP	3	2026-10-05 21:29
45.79.67.140	AS63949 Akamai Connected Cloud	US	HTTP	3	2026-10-10 08:04
43.98.165.95	AS45102 Alibaba (US) Technology Co., Ltd.	SG	HTTP	2	2026-10-06 07:13
185.242.226.62	AS202425 IP Volume inc	US	HTTP	1	2026-10-11 03:14
43.98.186.223	AS45102 Alibaba (US) Technology Co., Ltd.	SG	HTTP	1	2026-10-06 07:10
45.9.156.183	AS211619 MAXKO d.o.o.	BG	HTTP	1	2026-10-09 16:24
47.84.101.219	AS45102 Alibaba (US) Technology Co., Ltd.	SG	HTTP	1	2026-10-06 07:36

Latest datagrams

2026-10-11 03:14:47185.242.226.62to 30718/udpHTTPUS

payload bytes

00000000  47 45 54 20 2f 20 48 54  54 50 2f 31 2e 31 0d 0a  |GET / HTTP/1.1..|
00000010  48 6f 73 74 3a 20 77 77  77 0d 0a 0d 0a           |Host: www....|

2026-10-11 00:23:41185.242.226.65to 121/udpHTTPUS

payload bytes

00000000  47 45 54 20 2f 20 48 54  54 50 2f 31 2e 31 0d 0a  |GET / HTTP/1.1..|
00000010  48 6f 73 74 3a 20 77 77  77 0d 0a 0d 0a           |Host: www....|

2026-10-10 15:41:5145.33.46.249to 1701/udpHTTPUS

payload bytes

00000000  47 45 54 20 2f 20 48 54  54 50 2f 31 2e 31 0d 0a  |GET / HTTP/1.1..|
00000010  48 6f 73 74 3a 20 77 77  77 0d 0a 0d 0a           |Host: www....|

2026-10-10 08:04:1945.79.67.140to 4500/udpHTTPUS

payload bytes

00000000  47 45 54 20 2f 20 48 54  54 50 2f 31 2e 31 0d 0a  |GET / HTTP/1.1..|
00000010  48 6f 73 74 3a 20 77 77  77 0d 0a 0d 0a           |Host: www....|

2026-10-10 07:09:3945.79.67.140to 4500/udpHTTPUS

payload bytes

00000000  47 45 54 20 2f 20 48 54  54 50 2f 31 2e 31 0d 0a  |GET / HTTP/1.1..|
00000010  48 6f 73 74 3a 20 77 77  77 0d 0a 0d 0a           |Host: www....|

2026-10-09 22:08:4945.79.67.140to 4500/udpHTTPUS

payload bytes

00000000  47 45 54 20 2f 20 48 54  54 50 2f 31 2e 31 0d 0a  |GET / HTTP/1.1..|
00000010  48 6f 73 74 3a 20 77 77  77 0d 0a 0d 0a           |Host: www....|

2026-10-09 16:58:5045.33.46.249to 500/udpHTTPUS

payload bytes

00000000  47 45 54 20 2f 20 48 54  54 50 2f 31 2e 31 0d 0a  |GET / HTTP/1.1..|
00000010  48 6f 73 74 3a 20 77 77  77 0d 0a 0d 0a           |Host: www....|

2026-10-09 16:24:1045.9.156.183to 53/udpHTTPBG

payload bytes

00000000  47 45 54 20 2f 20 48 54  54 50 2f 31 2e 31 0d 0a  |GET / HTTP/1.1..|
00000010  48 6f 73 74 3a 20 77 77  77 0d 0a 0d 0a           |Host: www....|

2026-10-09 13:19:5645.33.46.249to 500/udpHTTPUS

payload bytes

00000000  47 45 54 20 2f 20 48 54  54 50 2f 31 2e 31 0d 0a  |GET / HTTP/1.1..|
00000010  48 6f 73 74 3a 20 77 77  77 0d 0a 0d 0a           |Host: www....|

2026-10-08 20:45:5145.33.46.249to 500/udpHTTPUS

payload bytes

00000000  47 45 54 20 2f 20 48 54  54 50 2f 31 2e 31 0d 0a  |GET / HTTP/1.1..|
00000010  48 6f 73 74 3a 20 77 77  77 0d 0a 0d 0a           |Host: www....|

2026-10-08 13:53:3545.33.46.249to 500/udpHTTPUS

payload bytes

00000000  47 45 54 20 2f 20 48 54  54 50 2f 31 2e 31 0d 0a  |GET / HTTP/1.1..|
00000010  48 6f 73 74 3a 20 77 77  77 0d 0a 0d 0a           |Host: www....|

2026-10-08 05:56:16185.242.226.66to 593/udpHTTPUS

payload bytes

00000000  47 45 54 20 2f 20 48 54  54 50 2f 31 2e 31 0d 0a  |GET / HTTP/1.1..|
00000010  48 6f 73 74 3a 20 77 77  77 0d 0a 0d 0a           |Host: www....|

2026-10-07 15:08:52185.242.226.63to 4070/udpHTTPUS

payload bytes

00000000  47 45 54 20 2f 20 48 54  54 50 2f 31 2e 31 0d 0a  |GET / HTTP/1.1..|
00000010  48 6f 73 74 3a 20 77 77  77 0d 0a 0d 0a           |Host: www....|

2026-10-07 13:10:52185.242.226.66to 593/udpHTTPUS

payload bytes

00000000  47 45 54 20 2f 20 48 54  54 50 2f 31 2e 31 0d 0a  |GET / HTTP/1.1..|
00000010  48 6f 73 74 3a 20 77 77  77 0d 0a 0d 0a           |Host: www....|

2026-10-07 10:54:30185.242.226.65to 19/udpHTTPUS

payload bytes

00000000  47 45 54 20 2f 20 48 54  54 50 2f 31 2e 31 0d 0a  |GET / HTTP/1.1..|
00000010  48 6f 73 74 3a 20 77 77  77 0d 0a 0d 0a           |Host: www....|