UDP traffic

Datagrams matching port:2152 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

Other services

53 datagrams from 47 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

GTP-U 53

Latest GTP-U datagram, to 2152/udp

2·

payload bytes

00000000  32 01 00 04 00 00 00 00  00 00 00 00              |2...........|

Unrecognised

16 datagrams from 9 sources

Datagrams no decoder recognised. Their first bytes are kept.

Unrecognised 16

Latest Unrecognised datagram, to 2152/udp

@·

payload bytes

00000000  40 01 00 04 ff 00 00 00                           |@.......|

Destination ports

2152/udp GTP-U69

Networks

AS6939 Hurricane Electric LLC from 21 sources23
AS50219 Valence Technology Co. from 4 sources12
AS213412 ONYPHE SAS from 6 sources8
AS10439 CariNet, Inc. from 2 sources7
AS21859 Zenlayer Inc from 6 sources6
AS63949 Akamai Connected Cloud from 2 sources3
AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMIT from 3 sources3
AS211680 Sistemas Informaticos, S.A. from 2 sources2
AS45102 Alibaba (US) Technology Co., Ltd. from 2 sources2
AS58466 CHINANET Guangdong province network from 1 source1

Countries

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
71.6.134.232	AS10439 CariNet, Inc.	US	Unrecognised	6	2026-10-08 20:30
216.226.77.20	AS50219 Valence Technology Co.	US	Unrecognised	3	2026-10-07 05:27
216.226.76.20	AS50219 Valence Technology Co.	US	Unrecognised	3	2026-10-05 13:04
216.226.78.30	AS50219 Valence Technology Co.	US	Unrecognised	3	2026-10-09 09:41
216.226.76.30	AS50219 Valence Technology Co.	US	Unrecognised	3	2026-10-10 14:15
64.62.197.111	AS6939 Hurricane Electric LLC	US	GTP-U	2	2026-10-10 04:20
45.79.190.10	AS63949 Akamai Connected Cloud	US	GTP-U	2	2026-10-06 09:07
91.230.168.219	AS213412 ONYPHE SAS	US	GTP-U	2	2026-10-08 08:36
91.231.89.91	AS213412 ONYPHE SAS	FR	GTP-U	2	2026-10-08 08:47
64.62.156.73	AS6939 Hurricane Electric LLC	US	GTP-U	2	2026-10-09 06:47
45.156.129.86	AS211680 Sistemas Informaticos, S.A.	PT	GTP-U	1	2026-10-08 02:48
65.49.1.118	AS6939 Hurricane Electric LLC	US	GTP-U	1	2026-10-06 07:41
64.62.156.31	AS6939 Hurricane Electric LLC	US	GTP-U	1	2026-10-11 00:11
65.49.20.113	AS6939 Hurricane Electric LLC	US	GTP-U	1	2026-10-07 01:55
109.105.210.62	AS21859 Zenlayer Inc	PT	GTP-U	1	2026-10-09 08:16
71.6.233.2	AS10439 CariNet, Inc.	US	GTP-U	1	2026-10-06 07:53
109.105.210.65	AS21859 Zenlayer Inc	PT	Unrecognised	1	2026-10-09 08:16
43.98.165.95	AS45102 Alibaba (US) Technology Co., Ltd.	SG	GTP-U	1	2026-10-06 07:18
64.62.156.28	AS6939 Hurricane Electric LLC	US	GTP-U	1	2026-10-09 01:20
93.174.95.106	AS202425 IP Volume inc	NL	GTP-U	1	2026-10-07 08:10

Latest datagrams

2026-10-11 03:04:0164.62.156.53to 2152/udpGTP-UUS

2·

payload bytes

00000000  32 01 00 04 00 00 00 00  00 00 00 00              |2...........|

2026-10-11 02:36:5664.62.156.56to 2152/udpGTP-UUS

2·

payload bytes

00000000  32 01 00 04 00 00 00 00  00 00 00 00              |2...........|

2026-10-11 00:11:4964.62.156.31to 2152/udpGTP-UUS

2·

payload bytes

00000000  32 01 00 04 00 00 00 00  00 00 00 00              |2...........|

2026-10-10 14:15:50216.226.76.30to 2152/udpUnrecognisedUS
@·
payload bytes
```
00000000  40 01 00 04 ff 00 00 00                           |@.......|
```

2026-10-10 13:51:57216.226.76.30to 2152/udpGTP-UUS

2·=·

payload bytes

00000000  32 01 00 04 00 00 00 00  0c 3d 00 00              |2........=..|

2026-10-10 13:29:17216.226.76.30to 2152/udpUnrecognisedUS

·3133·

payload bytes

00000000  10 01 00 00 00 00 00 00  00 ff ff ff 33 31 33 33  |............3133|
00000010  00 00 00 00                                       |....|

2026-10-10 08:01:4964.62.156.22to 2152/udpGTP-UUS

2·

payload bytes

00000000  32 01 00 04 00 00 00 00  00 00 00 00              |2...........|

2026-10-10 07:21:3565.49.1.48to 2152/udpGTP-UUS

2·

payload bytes

00000000  32 01 00 04 00 00 00 00  00 00 00 00              |2...........|

2026-10-10 04:20:3064.62.197.111to 2152/udpGTP-UUS

2·

payload bytes

00000000  32 01 00 04 00 00 00 00  00 00 00 00              |2...........|

2026-10-10 03:50:0964.62.197.111to 2152/udpGTP-UUS

2·

payload bytes

00000000  32 01 00 04 00 00 00 00  00 00 00 00              |2...........|

2026-10-10 02:45:05185.226.197.30to 2152/udpUnrecognisedPT
@· ·
payload bytes
```
00000000  40 01 00 09 00 ab cd 00  03 00 01 00 00           |@............|
```

2026-10-10 02:44:53185.226.197.27to 2152/udpGTP-UPT

2·

payload bytes

00000000  32 01 00 04 00 00 00 00  ab cd 00 00              |2...........|

2026-10-09 09:41:28216.226.78.30to 2152/udpUnrecognisedUS
@·
payload bytes
```
00000000  40 01 00 04 ff 00 00 00                           |@.......|
```

2026-10-09 09:19:20216.226.78.30to 2152/udpGTP-UUS

2·=·

payload bytes

00000000  32 01 00 04 00 00 00 00  0c 3d 00 00              |2........=..|

2026-10-09 08:57:14216.226.78.30to 2152/udpUnrecognisedUS

·3133·

payload bytes

00000000  10 01 00 00 00 00 00 00  00 ff ff ff 33 31 33 33  |............3133|
00000010  00 00 00 00                                       |....|