UDP traffic
Datagrams matching port:1027 sent to HoneyLabs sensors over UDP in the last 24 hours. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.
A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.
14
Datagrams
11
Source addresses
9
Networks
8
Countries
1
Destination ports
Traffic by type
Other services
4 datagrams from 1 sourceFirst packets of sessions with VPN, voice, tunnelling, database and management services.
Latest SIP datagram, to 1027/udp
Payload bytes withheld: they contain the sensor's address.
Unrecognised
10 datagrams from 10 sourcesDatagrams no decoder recognised. Their first bytes are kept.
Latest Unrecognised datagram, to 1027/udp
payload bytes
00000000 5e 2e 0f 49 13 7a 09 00 40 24 08 25 3d 6f 0f 30 |^..I.z..@$.%=o.0| 00000010 4c 5f 15 04 35 25 6d 68 1b 3b 67 59 |L_..5%mh.;gY|
Destination ports
- 1027/udp14
Networks
- AS12876 Scaleway SAS from 1 source4
- AS14061 DigitalOcean, LLC from 3 sources3
- AS24875 NovoServe B.V. from 1 source1
- AS8402 PVimpelCom from 1 source1
- AS210546 Chsl One Ltd from 1 source1
- AS7488 CNServer LLC from 1 source1
- AS206216 Advin Services LLC from 1 source1
- AS272786 X99 INTERNET from 1 source1
- AS198545 Flex Network Sarl from 1 source1
Countries
Source addresses (unverified)
| Address | Network | Cc | Sends | Datagrams | Last seen (UTC) |
|---|---|---|---|---|---|
| 51.158.202.97 | AS12876 Scaleway SAS | NL | SIP | 4 | 2026-10-10 22:19 |
| 134.199.209.2 | AS14061 DigitalOcean, LLC | US | Unrecognised | 1 | 2026-10-10 13:05 |
| 165.227.238.235 | AS14061 DigitalOcean, LLC | GB | Unrecognised | 1 | 2026-10-11 02:59 |
| 217.71.127.125 | AS198545 Flex Network Sarl | FR | Unrecognised | 1 | 2026-10-10 11:28 |
| 144.31.132.58 | AS210546 Chsl One Ltd | FI | Unrecognised | 1 | 2026-10-11 05:32 |
| 78.107.31.154 | AS8402 PVimpelCom | RU | Unrecognised | 1 | 2026-10-11 00:02 |
| 209.14.88.121 | AS272786 X99 INTERNET | BR | Unrecognised | 1 | 2026-10-10 15:12 |
| 207.241.172.146 | AS206216 Advin Services LLC | DE | Unrecognised | 1 | 2026-10-11 02:43 |
| 89.105.218.83 | AS24875 NovoServe B.V. | NL | Unrecognised | 1 | 2026-10-11 08:00 |
| 104.236.229.227 | AS14061 DigitalOcean, LLC | US | Unrecognised | 1 | 2026-10-10 23:39 |
| 144.225.8.33 | AS7488 CNServer LLC | US | Unrecognised | 1 | 2026-10-11 08:54 |
Latest datagrams
payload bytes
00000000 5e 2e 0f 49 13 7a 09 00 40 24 08 25 3d 6f 0f 30 |^..I.z..@$.%=o.0| 00000010 4c 5f 15 04 35 25 6d 68 1b 3b 67 59 |L_..5%mh.;gY|
payload bytes
00000000 18 2e 03 2a 0e 4d 0a 63 47 7d 7f 2a 37 24 54 35 |...*.M.cG}.*7$T5| 00000010 6e 47 79 3a 5c 31 07 76 67 0d 35 60 56 6e 44 6e |nGy:\1.vg.5`VnDn| 00000020 72 48 19 00 15 23 63 5c 20 63 06 57 07 5a 0c 75 |rH...#c\ c.W.Z.u| 00000030 3e 75 |>u|
payload bytes
00000000 07 2e 37 24 73 05 2a 22 0b 10 37 52 5d 02 1f 48 |..7$s.*"..7R]..H| 00000010 61 0f 09 19 4a 5a 32 20 6b 20 4c 01 51 29 2c 58 |a...JZ2 k L.Q),X| 00000020 70 64 7c 63 69 26 05 75 36 3c 47 13 3e 66 5b 1f |pd|ci&.u6<G.>f[.| 00000030 1f 3c |.<|
payload bytes
00000000 73 2e 47 10 2d 6e 63 6c 5f 10 3a 38 38 70 27 4e |s.G.-ncl_.:88p'N| 00000010 0e 27 47 48 08 17 06 2b 5f 28 32 0d 34 f9 |.'GH...+_(2.4.|
payload bytes
00000000 7b 2e 2b 0f 05 4b 55 76 4e 1b 70 33 0f 2f 41 60 |{.+..KUvN.p3./A`| 00000010 76 68 2f 76 03 3f 44 50 46 59 1d 59 26 0d 09 21 |vh/v.?DPFY.Y&..!| 00000020 67 34 31 6d 00 06 63 4e 21 53 01 31 02 42 11 78 |g41m..cN!S.1.B.x| 00000030 2a 40 6e 2e 7f 32 7e 45 0c 1b 1f 32 28 28 54 0f |*@n..2~E...2((T.| 00000040 5d 05 7c 5d 0b 60 2b 2c 33 2c 5d 36 6e 6e 2e 18 |].|].`+,3,]6nn..| 00000050 2e 1d 46 2e 4f 44 73 5b 5f 12 0e 07 3b 62 17 18 |..F.ODs[_...;b..| 00000060 67 24 82 |g$.|payload bytes
00000000 2d 2e 4a 39 26 49 57 6c 34 3b 29 45 7b 72 09 70 |-.J9&IWl4;)E{r.p| 00000010 03 7a 2d 2c 17 4b 1b 71 5e 5e 46 21 5e 6e 37 0b |.z-,.K.q^^F!^n7.| 00000020 22 01 45 48 4a 1c 34 7f 57 5d 44 52 4f 4d 43 53 |".EHJ.4.W]DROMCS| 00000030 47 70 7f 5e 3c 1a 50 1a 79 16 3c 57 05 73 63 27 |Gp.^<.P.y.<W.sc'| 00000040 75 28 6f 3f 44 23 3e 1b 00 02 6d 8c b7 |u(o?D#>...m..|payload bytes
00000000 20 2e 56 7c 64 69 3e 49 22 29 31 00 52 3f 0d 18 | .V|di>I")1.R?..| 00000010 1f 3c 78 51 01 79 17 23 78 54 05 34 6b 61 6c 0c |.<xQ.y.#xT.4kal.| 00000020 2d 42 08 11 2c 46 5a 4e 6f 0b 4e 41 4a 5b 59 6a |-B..,FZNo.NAJ[Yj| 00000030 17 52 3b 18 4b 52 3b 43 27 40 77 51 b9 |.R;.KR;C'@wQ.|
Payload bytes withheld: they contain the sensor's address.
Payload bytes withheld: they contain the sensor's address.
Payload bytes withheld: they contain the sensor's address.
Payload bytes withheld: they contain the sensor's address.
payload bytes
00000000 7d 2e 67 61 6a 56 17 5f 49 4c 63 7d 19 28 57 08 |}.gajV._ILc}.(W.| 00000010 0f 4b 3b 57 76 7d 4f 0d 5f 6d 32 61 0a 35 5e 07 |.K;Wv}O._m2a.5^.| 00000020 2a 45 69 14 1b 00 73 64 d7 b3 |*Ei...sd..|
payload bytes
00000000 5a 2e 50 2f 1a 27 2d 29 38 77 53 1a 19 63 3e 0c |Z.P/.'-)8wS..c>.| 00000010 16 73 56 23 37 1f 21 29 00 1a 75 4f 57 1d 54 31 |.sV#7.!)..uOW.T1| 00000020 78 24 60 12 4b 0d 3b 03 05 0f 1e 1e 72 5c 2a 09 |x$`.K.;.....r\*.| 00000030 4f 00 2c 06 1f 4d 2f 20 68 24 6f 3f 41 43 70 39 |O.,..M/ h$o?ACp9| 00000040 67 50 4c 32 5d 07 35 62 16 53 00 09 30 2a 12 7f |gPL2].5b.S..0*..| 00000050 2a 3e 06 4a 0c 35 6a 74 5a 59 33 1b 1c 23 1a f8 |*>.J.5jtZY3..#..|
payload bytes
00000000 67 2e 0b 09 08 2f 06 5e 52 04 15 02 3f 68 7f 50 |g..../.^R...?h.P| 00000010 37 5c 09 58 2c 08 68 41 07 6a 30 72 37 7e 79 1e |7\.X,.hA.j0r7~y.| 00000020 7f 04 27 08 33 2d 66 06 31 7c 08 71 64 08 41 1b |..'.3-f.1|.qd.A.| 00000030 64 4a 73 10 53 5b 51 5a 46 01 4c 7d 00 45 1b 7f |dJs.S[QZF.L}.E..| 00000040 49 42 07 7d 70 6e 03 21 6a 0b 12 4e 13 54 69 77 |IB.}pn.!j..N.Tiw| 00000050 1e 5c 08 2f 6b |.\./k|