HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsEmissions IndexPortsUser-agentsUDP traffic
Integrations
OverviewMCPFeedsAPI / EnrichSplunk ESMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog
Dashboard

UDP traffic

Datagrams matching proto:tftp sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

153

Datagrams

79

Source addresses

17

Networks

10

Countries

25

Destination ports

Traffic by type

Service queries

153 datagrams from 79 sources

Requests a service answers without a handshake. Scanners send them to find open DNS, NTP, SNMP or SSDP servers, which are also the servers reflection attacks abuse.

TFTP 153

Latest TFTP datagram, to 69/udp

·mac.cfg·octet·

payload bytes
00000000  00 01 6d 61 63 2e 63 66  67 00 6f 63 74 65 74 00  |..mac.cfg.octet.|

Amplification checks

Probes for services that answer a small request with a much larger reply, the property reflection attacks rely on.

ServicePortDatagramsSourcesFactor
TFTP69/udp +31537960

The factor is how many bytes a reachable server can send back for each byte it receives, as published by CISA in alert TA14-017A.

Destination ports

Networks

Countries

Source addresses (unverified)

AddressNetworkCcSendsDatagramsLast seen (UTC)
122.8.156.185AS136907 HUAWEI CLOUDSTHTFTP302026-10-11 03:44
66.132.172.252AS398324 Censys, Inc.USTFTP212026-10-11 00:56
16.5.0.234AS401661 EMBNEX, LLCBRTFTP52026-10-05 19:06
45.56.113.142AS63949 Akamai Connected CloudUSTFTP42026-10-08 08:49
144.172.115.75AS14956 RouterHosting LLCUSTFTP42026-10-08 19:36
94.154.43.251AS219502 Storm Industries LLCNLTFTP42026-10-09 10:50
139.162.159.191AS63949 Akamai Connected CloudDETFTP42026-10-08 08:48
193.47.62.187AS216014 BestDC LimitedBGTFTP32026-10-08 03:45
146.88.241.110AS20052 Arbor Networks, Inc.USTFTP22026-10-09 10:43
146.88.241.170AS20052 Arbor Networks, Inc.USTFTP22026-10-07 06:43
217.60.76.58AS401626 Netiface America, Inc.AETFTP22026-10-08 10:21
45.156.129.88AS211680 Sistemas Informaticos, S.A.PTTFTP22026-10-08 02:51
47.254.154.232AS45102 Alibaba (US) Technology Co., Ltd.DETFTP22026-10-09 23:45
146.88.240.40AS20052 Arbor Networks, Inc.USTFTP22026-10-06 13:20
64.62.197.88AS6939 Hurricane Electric LLCUSTFTP22026-10-10 06:10
147.185.132.159AS396982 Google LLCUSTFTP12026-10-10 22:39
64.62.156.55AS6939 Hurricane Electric LLCUSTFTP12026-10-09 06:40
65.49.1.94AS6939 Hurricane Electric LLCUSTFTP12026-10-07 02:30
109.105.210.65AS21859 Zenlayer IncPTTFTP12026-10-09 08:19
185.180.141.9AS21859 Zenlayer IncPTTFTP12026-10-09 08:10

Latest datagrams