UDP traffic

Datagrams matching quicver:1 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

124

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

QUIC

124 datagrams from 97 sources

Initial packets of HTTP/3 connections, decoded on the sensor.

QUIC 124

Latest QUIC datagram, to 443/udp

QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co

Destination ports

443/udp QUIC66
8443/udp QUIC46
784/udp QUIC4
853/udp QUIC4
8853/udp QUIC4

QUIC clients (JA4)

q13i0310h3_55b375c5d22e_3db21c8b774f from 31 sources32
q13i0307h9_55b375c5d22e_2f871f65fa7d from 16 sources16
q13i0307h9_55b375c5d22e_39d5f8cd0d4d from 16 sources16
q13i0207h9_62ed6f6ca7ad_95b521733d99 from 15 sources15
q13i0308h3_55b375c5d22e_bc854dc9d3af from 15 sources15
q13i0311dq_55b375c5d22e_c183556c78e2 from 4 sources12
q13i0311h3_55b375c5d22e_c183556c78e2 from 4 sources8
q13i0310h3_55b375c5d22e_df5b9e597968 from 1 source4
q13i0213sb_62ed6f6ca7ad_03ad308c6343 from 3 sources3

QUIC transport parameters

60647680e335 from 44 sources47
1f7a23748abd from 31 sources32
4c2cac1ef1cb from 15 sources15
cde977acba33 from 4 sources12
12d07494ae7c from 4 sources8
94dccb934778 from 1 source4
5826be32c2d4 from 2 sources2
24dc672a03ab from 1 source1

QUIC versions

1124

Networks

AS211298 Driftnet Ltd from 85 sources94
AS45102 Alibaba (US) Technology Co., Ltd. from 5 sources20
AS12816 Leibniz-Rechenzentrum from 1 source4
AS14061 DigitalOcean, LLC from 3 sources3
AS29470 JSC RetnNet from 1 source1
AS3216 PVimpelCom from 1 source1
AS24955 JSC Ufanet from 1 source1

Countries

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
8.208.10.94	AS45102 Alibaba (US) Technology Co., Ltd.	GB	QUIC	5	2026-10-09 04:58
47.91.125.252	AS45102 Alibaba (US) Technology Co., Ltd.	AE	QUIC	5	2026-10-09 10:12
47.245.117.221	AS45102 Alibaba (US) Technology Co., Ltd.	SG	QUIC	5	2026-10-09 01:03
138.246.253.137	AS12816 Leibniz-Rechenzentrum	DE	QUIC	4	2026-10-08 16:13
47.251.13.59	AS45102 Alibaba (US) Technology Co., Ltd.	US	QUIC	3	2026-10-09 01:10
87.236.176.44	AS211298 Driftnet Ltd	GB	QUIC	2	2026-10-06 08:20
185.247.137.196	AS211298 Driftnet Ltd	GB	QUIC	2	2026-10-06 01:01
195.96.139.231	AS211298 Driftnet Ltd	GB	QUIC	2	2026-10-08 18:32
87.236.176.56	AS211298 Driftnet Ltd	GB	QUIC	2	2026-10-08 17:14
185.247.137.174	AS211298 Driftnet Ltd	GB	QUIC	2	2026-10-10 06:00
195.96.139.124	AS211298 Driftnet Ltd	GB	QUIC	2	2026-10-09 00:38
185.247.137.178	AS211298 Driftnet Ltd	GB	QUIC	2	2026-10-10 05:59
195.96.139.49	AS211298 Driftnet Ltd	GB	QUIC	2	2026-10-07 01:51
47.89.154.16	AS45102 Alibaba (US) Technology Co., Ltd.	US	QUIC	2	2026-10-08 06:03
195.96.139.236	AS211298 Driftnet Ltd	GB	QUIC	2	2026-10-10 11:44
195.96.139.189	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-06 01:02
185.247.137.251	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-08 04:41
195.96.139.224	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-09 05:55
195.96.139.14	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-09 06:37
195.96.139.247	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-09 05:55

Latest datagrams

2026-10-10 18:26:20185.247.137.106to 443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-10 18:25:4287.236.176.107to 443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-10 18:25:04195.96.139.96to 443/udpQUICGB
QUIC v1 Initial alpn=h3,h3-29
2026-10-10 18:24:2587.236.176.78to 443/udpQUICGB
QUIC v1 Initial alpn=h3,h3-29
2026-10-10 18:23:47195.96.139.94to 443/udpQUICGB
QUIC v1 Initial alpn=h3-29,h3
2026-10-10 18:23:0987.236.176.109to 443/udpQUICGB
QUIC v1 Initial alpn=h3,h3-29
2026-10-10 11:44:27195.96.139.236to 8443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-10 11:43:49195.96.139.242to 8443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-10 11:43:11195.96.139.223to 8443/udpQUICGB
QUIC v1 Initial alpn=h3,h3-29
2026-10-10 11:42:3387.236.176.252to 8443/udpQUICGB
QUIC v1 Initial alpn=h3,h3-29
2026-10-10 11:41:5587.236.176.249to 8443/udpQUICGB
QUIC v1 Initial alpn=h3-29,h3
2026-10-10 11:41:17185.247.137.235to 8443/udpQUICGB
QUIC v1 Initial alpn=h3,h3-29
2026-10-10 06:01:35185.247.137.167to 443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-10 06:00:57185.247.137.174to 443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-10 06:00:1987.236.176.180to 443/udpQUICGB
QUIC v1 Initial alpn=h3,h3-29