UDP traffic

Datagrams matching port:2152 sent to HoneyLabs sensors over UDP in the last 24 hours. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

Other services

6 datagrams from 6 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

GTP-U 6

Latest GTP-U datagram, to 2152/udp

2·

payload bytes

00000000  32 01 00 04 00 00 00 00  00 00 00 00              |2...........|

Unrecognised

2 datagrams from 1 source

Datagrams no decoder recognised. Their first bytes are kept.

Unrecognised 2

Latest Unrecognised datagram, to 2152/udp

@·

payload bytes

00000000  40 01 00 04 ff 00 00 00                           |@.......|

Destination ports

2152/udp GTP-U8

Networks

AS6939 Hurricane Electric LLC from 5 sources5
AS50219 Valence Technology Co. from 1 source3

Countries

US United States8

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
216.226.76.30	AS50219 Valence Technology Co.	US	Unrecognised	3	2026-10-10 14:15
65.49.1.48	AS6939 Hurricane Electric LLC	US	GTP-U	1	2026-10-10 07:21
64.62.156.31	AS6939 Hurricane Electric LLC	US	GTP-U	1	2026-10-11 00:11
64.62.156.22	AS6939 Hurricane Electric LLC	US	GTP-U	1	2026-10-10 08:01
64.62.156.53	AS6939 Hurricane Electric LLC	US	GTP-U	1	2026-10-11 03:04
64.62.156.56	AS6939 Hurricane Electric LLC	US	GTP-U	1	2026-10-11 02:36

Latest datagrams

2026-10-11 03:04:0164.62.156.53to 2152/udpGTP-UUS

2·

payload bytes

00000000  32 01 00 04 00 00 00 00  00 00 00 00              |2...........|

2026-10-11 02:36:5664.62.156.56to 2152/udpGTP-UUS

2·

payload bytes

00000000  32 01 00 04 00 00 00 00  00 00 00 00              |2...........|

2026-10-11 00:11:4964.62.156.31to 2152/udpGTP-UUS

2·

payload bytes

00000000  32 01 00 04 00 00 00 00  00 00 00 00              |2...........|

2026-10-10 14:15:50216.226.76.30to 2152/udpUnrecognisedUS
@·
payload bytes
```
00000000  40 01 00 04 ff 00 00 00                           |@.......|
```

2026-10-10 13:51:57216.226.76.30to 2152/udpGTP-UUS

2·=·

payload bytes

00000000  32 01 00 04 00 00 00 00  0c 3d 00 00              |2........=..|

2026-10-10 13:29:17216.226.76.30to 2152/udpUnrecognisedUS

·3133·

payload bytes

00000000  10 01 00 00 00 00 00 00  00 ff ff ff 33 31 33 33  |............3133|
00000010  00 00 00 00                                       |....|

2026-10-10 08:01:4964.62.156.22to 2152/udpGTP-UUS

2·

payload bytes

00000000  32 01 00 04 00 00 00 00  00 00 00 00              |2...........|

2026-10-10 07:21:3565.49.1.48to 2152/udpGTP-UUS

2·

payload bytes

00000000  32 01 00 04 00 00 00 00  00 00 00 00              |2...........|