HoneyLabs

UDP traffic

Datagrams matching port:1027 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Your plan searches up to 7d, so 30d was shortened. Plans

58

Datagrams

44

Source addresses

32

Networks

21

Countries

1

Destination ports

Traffic by type

Other services

5 datagrams from 2 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

Latest SIP datagram, to 1027/udp

OPTIONS sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5062;branch=z9hG4bK804bc0e3 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=46e30fa2 Call-ID: 841709d49d138a37 CSeq: 1 OPTIONS Contact: <sip:a@127.0.0.1:5062> Content-Length: 0

Payload bytes withheld: they contain the sensor's address.

Unrecognised

53 datagrams from 42 sources

Datagrams no decoder recognised. Their first bytes are kept.

Latest Unrecognised datagram, to 1027/udp

^.·I·z ·@$·%=o·0L_·5%mh·;gY

payload bytes
00000000  5e 2e 0f 49 13 7a 09 00  40 24 08 25 3d 6f 0f 30  |^..I.z..@$.%=o.0|
00000010  4c 5f 15 04 35 25 6d 68  1b 3b 67 59              |L_..5%mh.;gY|

Destination ports

Networks

Countries

Source addresses (unverified)

AddressNetworkCcSendsDatagramsLast seen (UTC)
217.71.127.125AS198545 Flex Network SarlFRUnrecognised42026-10-10 11:28
185.242.226.166AS202425 IP Volume incUSUnrecognised42026-10-09 04:36
51.158.202.97AS12876 Scaleway SASNLSIP42026-10-10 22:19
172.245.90.204AS36352 HostPapaUSUnrecognised22026-10-10 02:11
62.210.89.150AS12876 Scaleway SASFRUnrecognised22026-10-07 02:30
195.33.200.58AS34984 Superonline Iletisim Hizmetleri A.S.TRUnrecognised22026-10-09 10:27
212.103.118.144AS57044 JSC ER-Telecom HoldingRUUnrecognised22026-10-10 05:29
209.38.93.248AS14061 DigitalOcean, LLCAUUnrecognised22026-10-09 12:45
45.160.231.44AS270724 CLIENT.CO SERVICOS E TELECOMUNICACOES LTBRUnrecognised12026-10-08 14:16
104.236.229.227AS14061 DigitalOcean, LLCUSUnrecognised12026-10-10 23:39
62.201.210.86AS41032 IQ Networks for Data and Internet ServicIQUnrecognised12026-10-08 19:43
134.199.209.2AS14061 DigitalOcean, LLCUSUnrecognised12026-10-10 13:05
165.227.238.235AS14061 DigitalOcean, LLCGBUnrecognised12026-10-11 02:59
174.138.216.234AS11814 Distributel Communications LimitedCAUnrecognised12026-10-07 18:45
169.58.136.173AS51167 Contabo GmbHFRUnrecognised12026-10-07 00:41
89.163.212.86AS24961 WIIT AGDERedis12026-10-05 16:28
161.35.181.152AS14061 DigitalOcean, LLCUSUnrecognised12026-10-06 21:46
37.112.63.117AS57044 JSC ER-Telecom HoldingRUUnrecognised12026-10-06 09:40
157.22.184.216AS29182 JSC IOTRUUnrecognised12026-10-07 04:35
146.190.66.18AS14061 DigitalOcean, LLCUSUnrecognised12026-10-06 03:11

Latest datagrams