UDP traffic

Datagrams matching port:2427 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Your plan searches up to 7d, so 30d was shortened. Plans

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

Other services

3 datagrams from 3 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

MGCP 3

Latest MGCP datagram, to 2427/udp

RQNT 1 *@gateway44.myplace.com MGCP 0.1 R: l/hd(n) X: 2

payload bytes

00000000  52 51 4e 54 20 31 20 2a  40 67 61 74 65 77 61 79  |RQNT 1 *@gateway|
00000010  34 34 2e 6d 79 70 6c 61  63 65 2e 63 6f 6d 20 4d  |44.myplace.com M|
00000020  47 43 50 20 30 2e 31 0d  0a 52 3a 20 6c 2f 68 64  |GCP 0.1..R: l/hd|
00000030  28 6e 29 0d 0a 58 3a 20  32 0d 0a 0d 0a           |(n)..X: 2....|

Unrecognised

4 datagrams from 4 sources

Datagrams no decoder recognised. Their first bytes are kept.

Unrecognised 4

Latest Unrecognised datagram, to 2427/udp

r·|·

payload bytes

00000000  72 fe 1d 13 00 00 00 00  00 00 00 02 00 01 86 a0  |r...............|
00000010  00 01 97 7c 00 00 00 00  00 00 00 00 00 00 00 00  |...|............|
00000020  00 00 00 00 00 00 00 00                           |........|

Destination ports

2427/udp7

Networks

AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMIT from 2 sources4
AS45102 Alibaba (US) Technology Co., Ltd. from 2 sources2
AS63199 CDS Global Cloud Co., Ltd from 1 source1

Countries

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
165.154.40.205	AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMIT	HK	MGCP	2	2026-10-09 07:53
165.154.135.161	AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMIT	US	MGCP	2	2026-10-06 01:49
47.88.30.187	AS45102 Alibaba (US) Technology Co., Ltd.	US	MGCP	1	2026-10-06 18:23
43.98.165.95	AS45102 Alibaba (US) Technology Co., Ltd.	SG	Unrecognised	1	2026-10-06 07:16
148.153.188.254	AS63199 CDS Global Cloud Co., Ltd	US	Unrecognised	1	2026-10-09 02:01

Latest datagrams

2026-10-09 07:53:56165.154.40.205to 2427/udpUnrecognisedHK

r·|·

payload bytes

00000000  72 fe 1d 13 00 00 00 00  00 00 00 02 00 01 86 a0  |r...............|
00000010  00 01 97 7c 00 00 00 00  00 00 00 00 00 00 00 00  |...|............|
00000020  00 00 00 00 00 00 00 00                           |........|

2026-10-09 07:51:10165.154.40.205to 2427/udpMGCPHK

RQNT 1 *@gateway44.myplace.com MGCP 0.1 R: l/hd(n) X: 2

payload bytes

00000000  52 51 4e 54 20 31 20 2a  40 67 61 74 65 77 61 79  |RQNT 1 *@gateway|
00000010  34 34 2e 6d 79 70 6c 61  63 65 2e 63 6f 6d 20 4d  |44.myplace.com M|
00000020  47 43 50 20 30 2e 31 0d  0a 52 3a 20 6c 2f 68 64  |GCP 0.1..R: l/hd|
00000030  28 6e 29 0d 0a 58 3a 20  32 0d 0a 0d 0a           |(n)..X: 2....|

2026-10-09 02:01:01148.153.188.254to 2427/udpUnrecognisedUS

r·|·

payload bytes

00000000  72 fe 1d 13 00 00 00 00  00 00 00 02 00 01 86 a0  |r...............|
00000010  00 01 97 7c 00 00 00 00  00 00 00 00 00 00 00 00  |...|............|
00000020  00 00 00 00 00 00 00 00                           |........|

2026-10-06 18:23:0947.88.30.187to 2427/udpMGCPUS

RSIP 31656860 *@gateway44.myplace.com MGCP 1.0 RM: restart

payload bytes

00000000  52 53 49 50 20 33 31 36  35 36 38 36 30 20 2a 40  |RSIP 31656860 *@|
00000010  67 61 74 65 77 61 79 34  34 2e 6d 79 70 6c 61 63  |gateway44.myplac|
00000020  65 2e 63 6f 6d 20 4d 47  43 50 20 31 2e 30 0a 52  |e.com MGCP 1.0.R|
00000030  4d 3a 20 72 65 73 74 61  72 74 0a                 |M: restart.|

2026-10-06 07:16:0043.98.165.95to 2427/udpUnrecognisedSG

RQNT 67184230 aaln/1@example.net MGCP 1.0 X: 13 2F3005001FF R: L/hu(N),L/hf(N)

payload bytes

00000000  52 51 4e 54 20 36 37 31  38 34 32 33 30 20 61 61  |RQNT 67184230 aa|
00000010  6c 6e 2f 31 40 65 78 61  6d 70 6c 65 2e 6e 65 74  |ln/1@example.net|
00000020  20 4d 47 43 50 20 31 2e  30 0a 58 3a 20 31 33 20  | MGCP 1.0.X: 13 |
00000030  32 46 33 30 30 35 30 30  31 46 46 0a 52 3a 20 4c  |2F3005001FF.R: L|
00000040  2f 68 75 28 4e 29 2c 4c  2f 68 66 28 4e 29        |/hu(N),L/hf(N)|

2026-10-06 01:49:46165.154.135.161to 2427/udpUnrecognisedUS

r·|·

payload bytes

00000000  72 fe 1d 13 00 00 00 00  00 00 00 02 00 01 86 a0  |r...............|
00000010  00 01 97 7c 00 00 00 00  00 00 00 00 00 00 00 00  |...|............|
00000020  00 00 00 00 00 00 00 00                           |........|

2026-10-06 01:46:33165.154.135.161to 2427/udpMGCPUS

RQNT 1 *@gateway44.myplace.com MGCP 0.1 R: l/hd(n) X: 2

payload bytes

00000000  52 51 4e 54 20 31 20 2a  40 67 61 74 65 77 61 79  |RQNT 1 *@gateway|
00000010  34 34 2e 6d 79 70 6c 61  63 65 2e 63 6f 6d 20 4d  |44.myplace.com M|
00000020  47 43 50 20 30 2e 31 0d  0a 52 3a 20 6c 2f 68 64  |GCP 0.1..R: l/hd|
00000030  28 6e 29 0d 0a 58 3a 20  32 0d 0a 0d 0a           |(n)..X: 2....|