UDP traffic

Datagrams matching proto:stun sent to HoneyLabs sensors over UDP in the last 24 hours. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

154

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

Other services

154 datagrams from 17 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

STUN 154

Latest STUN datagram, to 3478/udp

·!·Bӧ_·B·W·4

payload bytes

00000000  00 01 00 00 21 12 a4 42  d3 a7 5f 1c 8b 06 42 9e  |....!..B.._...B.|
00000010  57 10 ce 34                                       |W..4|

Destination ports

55407/udp STUN26
57048/udp STUN26
50072/udp STUN22
61104/udp STUN22
3478/udp STUN15
59487/udp STUN12
50637/udp STUN6
50690/udp STUN6
58599/udp STUN6
62980/udp STUN6
58715/udp STUN3
64682/udp STUN3

Networks

AS32934 Facebook, Inc. from 3 sources44
AS7552 Viettel Group from 1 source40
AS45899 VNPT Corp from 1 source36
AS18403 FPT Telecom Company from 1 source18
AS398324 Censys, Inc. from 5 sources6
AS215925 Vpsvault.host Ltd from 1 source4
AS6939 Hurricane Electric LLC from 4 sources4
AS14061 DigitalOcean, LLC from 1 source2

Countries

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
116.110.224.176	AS7552 Viettel Group	VN	STUN	40	2026-10-10 12:44
113.185.109.99	AS45899 VNPT Corp	VN	STUN	36	2026-10-11 00:17
1.55.37.160	AS18403 FPT Telecom Company	VN	STUN	18	2026-10-10 12:52
57.144.145.135	AS32934 Facebook, Inc.	SG	STUN	16	2026-10-10 12:44
57.144.153.135	AS32934 Facebook, Inc.	SG	STUN	16	2026-10-11 00:17
57.145.19.135	AS32934 Facebook, Inc.	TH	STUN	12	2026-10-10 12:52
45.198.224.251	AS215925 Vpsvault.host Ltd	US	STUN	4	2026-10-10 15:42
159.223.223.14	AS14061 DigitalOcean, LLC	NL	STUN	2	2026-10-11 08:47
66.132.159.44	AS398324 Censys, Inc.	US	STUN	2	2026-10-11 02:50
65.49.1.70	AS6939 Hurricane Electric LLC	US	STUN	1	2026-10-11 04:24
65.49.1.78	AS6939 Hurricane Electric LLC	US	STUN	1	2026-10-11 04:22
66.132.195.72	AS398324 Censys, Inc.	US	STUN	1	2026-10-10 09:40
64.62.156.111	AS6939 Hurricane Electric LLC	US	STUN	1	2026-10-11 04:38
66.132.186.220	AS398324 Censys, Inc.	US	STUN	1	2026-10-10 20:02
64.62.156.98	AS6939 Hurricane Electric LLC	US	STUN	1	2026-10-11 07:48
66.132.172.227	AS398324 Censys, Inc.	US	STUN	1	2026-10-11 01:03
66.132.186.242	AS398324 Censys, Inc.	US	STUN	1	2026-10-11 08:42

Latest datagrams

2026-10-11 08:47:53159.223.223.14to 3478/udpSTUNNL

·!·Bӧ_·B·W·4

payload bytes

00000000  00 01 00 00 21 12 a4 42  d3 a7 5f 1c 8b 06 42 9e  |....!..B.._...B.|
00000010  57 10 ce 34                                       |W..4|

2026-10-11 08:47:51159.223.223.14to 3478/udpSTUNNL

·!·B000000000000

payload bytes

00000000  00 01 00 00 21 12 a4 42  30 30 30 30 30 30 30 30  |....!..B00000000|
00000010  30 30 30 30                                       |0000|

2026-10-11 08:42:0466.132.186.242to 3478/udpSTUNUS

·!·B"d?9·(·

payload bytes

00000000  00 01 00 00 21 12 a4 42  22 64 3f 39 ba 85 0f b5  |....!..B"d?9....|
00000010  f4 28 d7 fa                                       |.(..|

2026-10-11 07:48:1864.62.156.98to 3478/udpSTUNUS

·!·B·

payload bytes

00000000  00 01 00 00 21 12 a4 42  00 00 00 00 00 00 00 00  |....!..B........|
00000010  00 00 00 00                                       |....|

2026-10-11 04:38:0664.62.156.111to 3478/udpSTUNUS

·!·B·

payload bytes

00000000  00 01 00 00 21 12 a4 42  00 00 00 00 00 00 00 00  |....!..B........|
00000010  00 00 00 00                                       |....|

2026-10-11 04:24:4465.49.1.70to 3478/udpSTUNUS

·!·B·

payload bytes

00000000  00 01 00 00 21 12 a4 42  00 00 00 00 00 00 00 00  |....!..B........|
00000010  00 00 00 00                                       |....|

2026-10-11 04:22:2265.49.1.78to 3478/udpSTUNUS

·!·B·

payload bytes

00000000  00 01 00 00 21 12 a4 42  00 00 00 00 00 00 00 00  |....!..B........|
00000010  00 00 00 00                                       |....|

2026-10-11 02:50:1366.132.159.44to 3478/udpSTUNUS

·!·B"d?9·(·

payload bytes

00000000  00 01 00 00 21 12 a4 42  22 64 3f 39 ba 85 0f b5  |....!..B"d?9....|
00000010  f4 28 d7 fa                                       |.(..|

2026-10-11 01:03:4966.132.172.227to 3478/udpSTUNUS

·!·B"d?9·(·

payload bytes

00000000  00 01 00 00 21 12 a4 42  22 64 3f 39 ba 85 0f b5  |....!..B"d?9....|
00000010  f4 28 d7 fa                                       |.(..|

2026-10-11 00:17:58113.185.109.99to 57048/udpSTUNVN

·T!·BeuvtxSboKwvq· Gx77:Y6nJ·ں·Yj·W·)·$·n~·8·B·O·U·(·~·V

payload bytes

00000000  00 01 00 54 21 12 a4 42  65 75 76 74 78 53 62 6f  |...T!..BeuvtxSbo|
00000010  4b 77 76 71 00 06 00 09  47 78 37 37 3a 59 36 6e  |Kwvq....Gx77:Y6n|
00000020  4a 00 00 00 da ba 00 04  00 01 59 6a c0 57 00 04  |J.........Yj.W..|
00000030  00 07 03 84 80 29 00 08  00 00 00 00 00 00 00 00  |.....)..........|
00000040  00 24 00 04 6e 7e 1e ff  00 08 00 14 9d 97 b2 bf  |.$..n~..........|
00000050  b3 fb 02 8c 38 8c d4 42  f6 f6 c3 cb 16 4f ef 55  |....8..B.....O.U|
00000060  80 28 00 04 7e 87 ca 56                           |.(..~..V|

2026-10-11 00:17:57113.185.109.99to 57048/udpSTUNVN

·T!·B+KkJ/ywbLuN7· Gx77:Y6nJ·ں·T·W·)·$·n~·_J·8·6·S·>·4·(·î 4

payload bytes

00000000  00 01 00 54 21 12 a4 42  2b 4b 6b 4a 2f 79 77 62  |...T!..B+KkJ/ywb|
00000010  4c 75 4e 37 00 06 00 09  47 78 37 37 3a 59 36 6e  |LuN7....Gx77:Y6n|
00000020  4a 00 00 00 da ba 00 04  00 01 54 b3 c0 57 00 04  |J.........T..W..|
00000030  00 07 03 84 80 29 00 08  00 00 00 00 00 00 00 00  |.....)..........|
00000040  00 24 00 04 6e 7e 1e ff  00 08 00 14 d9 f8 5f 4a  |.$..n~........_J|
00000050  1d 1b 38 c3 fc 36 ef 53  11 ff 3e a5 a1 a8 aa 34  |..8..6.S..>....4|
00000060  80 28 00 04 c3 ae 0a 34                           |.(.....4|

2026-10-11 00:17:56113.185.109.99to 55407/udpSTUNVN

·T!·B6X9fb0REPNvf· Gx77:Y6nJ·ں·O·W·)·$·n~·Uh·]·u·u9·BR·(·U·

payload bytes

00000000  00 01 00 54 21 12 a4 42  36 58 39 66 62 30 52 45  |...T!..B6X9fb0RE|
00000010  50 4e 76 66 00 06 00 09  47 78 37 37 3a 59 36 6e  |PNvf....Gx77:Y6n|
00000020  4a 00 00 00 da ba 00 04  00 01 4f fc c0 57 00 04  |J.........O..W..|
00000030  00 07 03 84 80 29 00 08  00 00 00 00 00 00 00 00  |.....)..........|
00000040  00 24 00 04 6e 7e 1e ff  00 08 00 14 dc f2 03 db  |.$..n~..........|
00000050  55 68 dc ee 5d 88 9c 75  15 75 39 8c 94 e6 42 52  |Uh..]..u.u9...BR|
00000060  80 28 00 04 a5 99 55 a0                           |.(....U.|

2026-10-11 00:17:55113.185.109.99to 55407/udpSTUNVN

·T!·Bs+H81/eC3d+o· Gx77:Y6nJ·ں·KF·W·)·$·n~·ȿ·"4&·(.·H·dÀ(·;

payload bytes

00000000  00 01 00 54 21 12 a4 42  73 2b 48 38 31 2f 65 43  |...T!..Bs+H81/eC|
00000010  33 64 2b 6f 00 06 00 09  47 78 37 37 3a 59 36 6e  |3d+o....Gx77:Y6n|
00000020  4a 00 00 00 da ba 00 04  00 01 4b 46 c0 57 00 04  |J.........KF.W..|
00000030  00 07 03 84 80 29 00 08  00 00 00 00 00 00 00 00  |.....)..........|
00000040  00 24 00 04 6e 7e 1e ff  00 08 00 14 c8 bf fe c4  |.$..n~..........|
00000050  ca c1 1d 22 34 26 ed 28  2e 14 89 48 a0 91 64 c3  |..."4&.(...H..d.|
00000060  80 28 00 04 04 05 e3 3b                           |.(.....;|

2026-10-11 00:17:4557.144.153.135to 57048/udpSTUNSG

·T!·BAvEnWul0p/4x· Gx77:Y6nJ·ں·%[·W·)·$·n·jC&·c·-Z·[·d·hB·(· ·

payload bytes

00000000  00 01 00 54 21 12 a4 42  41 76 45 6e 57 75 6c 30  |...T!..BAvEnWul0|
00000010  70 2f 34 78 00 06 00 09  47 78 37 37 3a 59 36 6e  |p/4x....Gx77:Y6n|
00000020  4a 00 00 00 da ba 00 04  00 01 25 5b c0 57 00 04  |J.........%[.W..|
00000030  00 08 03 84 80 29 00 08  00 00 00 00 00 00 00 00  |.....)..........|
00000040  00 24 00 04 6e 7f 1e ff  00 08 00 14 ef 8b d1 6a  |.$..n..........j|
00000050  43 26 ee 63 a1 2d 5a eb  5b ec 80 64 e7 68 42 af  |C&.c.-Z.[..d.hB.|
00000060  80 28 00 04 0a a5 13 f5                           |.(......|

2026-10-11 00:17:4457.144.153.135to 55407/udpSTUNSG

·T!·BfA7gOam0DR5a· Gx77:Y6nJ·ں· ·W·)·$·n·p>·r·Vh·P%·(·*

payload bytes

00000000  00 01 00 54 21 12 a4 42  66 41 37 67 4f 61 6d 30  |...T!..BfA7gOam0|
00000010  44 52 35 61 00 06 00 09  47 78 37 37 3a 59 36 6e  |DR5a....Gx77:Y6n|
00000020  4a 00 00 00 da ba 00 04  00 01 20 a6 c0 57 00 04  |J......... ..W..|
00000030  00 08 03 84 80 29 00 08  00 00 00 00 00 00 00 00  |.....)..........|
00000040  00 24 00 04 6e 7f 1e ff  00 08 00 14 8a 00 01 bb  |.$..n...........|
00000050  70 3e ba bb 88 72 d4 17  56 68 eb b3 ea 50 25 ec  |p>...r..Vh...P%.|
00000060  80 28 00 04 c9 1c 95 2a                           |.(.....*|