HoneyLabs

UDP traffic

Datagrams matching port:1027 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

55

Datagrams

41

Source addresses

29

Networks

20

Countries

1

Destination ports

Traffic by type

Other services

5 datagrams from 2 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

Latest SIP datagram, to 1027/udp

OPTIONS sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5062;branch=z9hG4bK804bc0e3 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=46e30fa2 Call-ID: 841709d49d138a37 CSeq: 1 OPTIONS Contact: <sip:a@127.0.0.1:5062> Content-Length: 0

Payload bytes withheld: they contain the sensor's address.

Unrecognised

50 datagrams from 39 sources

Datagrams no decoder recognised. Their first bytes are kept.

Latest Unrecognised datagram, to 1027/udp

s.G·-ncl_·:88p'N·'GH·+_(2 4·

payload bytes
00000000  73 2e 47 10 2d 6e 63 6c  5f 10 3a 38 38 70 27 4e  |s.G.-ncl_.:88p'N|
00000010  0e 27 47 48 08 17 06 2b  5f 28 32 0d 34 f9        |.'GH...+_(2.4.|

Destination ports

Networks

Countries

Source addresses (unverified)

AddressNetworkCcSendsDatagramsLast seen (UTC)
185.242.226.166AS202425 IP Volume incUSUnrecognised42026-10-09 04:36
51.158.202.97AS12876 Scaleway SASNLSIP42026-10-10 22:19
217.71.127.125AS198545 Flex Network SarlFRUnrecognised42026-10-10 11:28
62.210.89.150AS12876 Scaleway SASFRUnrecognised22026-10-07 02:30
195.33.200.58AS34984 Superonline Iletisim Hizmetleri A.S.TRUnrecognised22026-10-09 10:27
172.245.90.204AS36352 HostPapaUSUnrecognised22026-10-10 02:11
212.103.118.144AS57044 JSC ER-Telecom HoldingRUUnrecognised22026-10-10 05:29
209.38.93.248AS14061 DigitalOcean, LLCAUUnrecognised22026-10-09 12:45
174.138.21.30AS14061 DigitalOcean, LLCSGUnrecognised12026-10-09 12:35
134.199.209.2AS14061 DigitalOcean, LLCUSUnrecognised12026-10-10 13:05
62.201.210.86AS41032 IQ Networks for Data and Internet ServicIQUnrecognised12026-10-08 19:43
82.115.30.245AS60024 Hk Cedoc LimitedAUUnrecognised12026-10-08 15:12
165.227.238.235AS14061 DigitalOcean, LLCGBUnrecognised12026-10-11 02:59
174.138.216.234AS11814 Distributel Communications LimitedCAUnrecognised12026-10-07 18:45
45.160.231.44AS270724 CLIENT.CO SERVICOS E TELECOMUNICACOES LTBRUnrecognised12026-10-08 14:16
89.163.212.86AS24961 WIIT AGDERedis12026-10-05 16:28
161.35.181.152AS14061 DigitalOcean, LLCUSUnrecognised12026-10-06 21:46
14.225.217.73AS135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROVNUnrecognised12026-10-06 11:30
157.22.184.216AS29182 JSC IOTRUUnrecognised12026-10-07 04:35
209.141.51.29AS53667 FranTech SolutionsUSUnrecognised12026-10-06 01:58

Latest datagrams