UDP traffic

Datagrams matching port:427 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

115

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

Unrecognised

115 datagrams from 70 sources

Datagrams no decoder recognised. Their first bytes are kept.

Unrecognised 115

Latest Unrecognised datagram, to 427/udp

·7·^·en·<· B://l:87/· B://l:87/x·default·

payload bytes

00000000  02 03 00 00 37 00 00 00  00 00 5e 15 00 02 65 6e  |....7.....^...en|
00000010  00 00 3c 00 09 42 3a 2f  2f 6c 3a 38 37 2f 00 00  |..<..B://l:87/..|
00000020  0a 42 3a 2f 2f 6c 3a 38  37 2f 78 00 07 64 65 66  |.B://l:87/x..def|
00000030  61 75 6c 74 00 00 00                              |ault...|

Destination ports

427/udp SLP115

Networks

AS209588 Flyservers S.A. from 1 source28
AS396982 Google LLC from 22 sources22
AS6939 Hurricane Electric LLC from 17 sources17
AS398324 Censys, Inc. from 7 sources8
AS51115 HLL LLC from 1 source8
AS401661 EMBNEX, LLC from 1 source8
AS213412 ONYPHE SAS from 6 sources6
AS63949 Akamai Connected Cloud from 1 source4
AS14061 DigitalOcean, LLC from 3 sources3
AS211298 Driftnet Ltd from 3 sources3

Countries

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
141.98.83.48	AS209588 Flyservers S.A.	PA	Unrecognised	28	2026-10-11 05:11
185.94.111.1	AS51115 HLL LLC	RU	Unrecognised	8	2026-10-09 19:43
16.5.0.234	AS401661 EMBNEX, LLC	BR	Unrecognised	8	2026-10-05 16:51
172.104.215.95	AS63949 Akamai Connected Cloud	US	Unrecognised	4	2026-10-07 00:07
66.132.186.219	AS398324 Censys, Inc.	US	Unrecognised	2	2026-10-10 10:47
65.49.1.191	AS6939 Hurricane Electric LLC	US	Unrecognised	1	2026-10-06 08:10
198.235.24.80	AS396982 Google LLC	US	Unrecognised	1	2026-10-09 19:04
66.132.186.251	AS398324 Censys, Inc.	US	Unrecognised	1	2026-10-09 16:05
193.163.125.165	AS211298 Driftnet Ltd	GB	Unrecognised	1	2026-10-11 02:40
66.132.172.232	AS398324 Censys, Inc.	US	Unrecognised	1	2026-10-10 11:26
205.210.31.200	AS396982 Google LLC	US	Unrecognised	1	2026-10-07 02:17
64.62.156.136	AS6939 Hurricane Electric LLC	US	Unrecognised	1	2026-10-09 03:45
199.165.159.29	AS22168 The Shadowserver Foundation, Inc.	US	Unrecognised	1	2026-10-07 02:56
199.165.159.48	AS22168 The Shadowserver Foundation, Inc.	US	Unrecognised	1	2026-10-09 07:50
205.210.31.45	AS396982 Google LLC	US	Unrecognised	1	2026-10-06 23:41
91.230.168.223	AS213412 ONYPHE SAS	US	Unrecognised	1	2026-10-06 14:55
91.230.168.217	AS213412 ONYPHE SAS	US	Unrecognised	1	2026-10-10 17:14
65.49.1.157	AS6939 Hurricane Electric LLC	US	Unrecognised	1	2026-10-07 07:49
91.231.89.95	AS213412 ONYPHE SAS	FR	Unrecognised	1	2026-10-06 15:00
91.231.89.89	AS213412 ONYPHE SAS	FR	Unrecognised	1	2026-10-10 17:30

Latest datagrams

2026-10-11 05:11:54141.98.83.48to 427/udpUnrecognisedPA

·7·^·en·<· B://l:87/· B://l:87/x·default·

payload bytes

00000000  02 03 00 00 37 00 00 00  00 00 5e 15 00 02 65 6e  |....7.....^...en|
00000010  00 00 3c 00 09 42 3a 2f  2f 6c 3a 38 37 2f 00 00  |..<..B://l:87/..|
00000020  0a 42 3a 2f 2f 6c 3a 38  37 2f 78 00 07 64 65 66  |.B://l:87/x..def|
00000030  61 75 6c 74 00 00 00                              |ault...|

2026-10-11 04:58:31216.25.89.116to 427/udpUnrecognisedUS

· ·en·DEFAULT

payload bytes

00000000  02 09 00 00 1d 00 00 00  00 00 9d f6 00 02 65 6e  |..............en|
00000010  00 00 ff ff 00 07 44 45  46 41 55 4c 54           |......DEFAULT|

2026-10-11 04:49:07141.98.83.48to 427/udpUnrecognisedPA

·7·^·en·<· B://l:87/· B://l:87/x·default·

payload bytes

00000000  02 03 00 00 37 00 00 00  00 00 5e 15 00 02 65 6e  |....7.....^...en|
00000010  00 00 3c 00 09 42 3a 2f  2f 6c 3a 38 37 2f 00 00  |..<..B://l:87/..|
00000020  0a 42 3a 2f 2f 6c 3a 38  37 2f 78 00 07 64 65 66  |.B://l:87/x..def|
00000030  61 75 6c 74 00 00 00                              |ault...|

2026-10-11 02:40:02193.163.125.165to 427/udpUnrecognisedGB

·/·en·service:service-agent·

payload bytes

00000000  02 01 00 00 2f 00 00 00  00 00 00 01 00 02 65 6e  |..../.........en|
00000010  00 00 00 15 73 65 72 76  69 63 65 3a 73 65 72 76  |....service:serv|
00000020  69 63 65 2d 61 67 65 6e  74 00 00 00 00 00 00     |ice-agent......|

2026-10-11 01:29:13216.218.206.116to 427/udpUnrecognisedUS

·"·en·AAAAAAAA

payload bytes

00000000  02 01 00 00 22 00 00 00  00 00 00 05 00 02 65 6e  |....".........en|
00000010  00 00 00 00 00 00 00 00  00 08 41 41 41 41 41 41  |..........AAAAAA|
00000020  41 41                                             |AA|

2026-10-11 00:07:44147.185.132.46to 427/udpUnrecognisedUS

· ·en·DEFAULT

payload bytes

00000000  02 09 00 00 1d 00 00 00  00 00 9d f6 00 02 65 6e  |..............en|
00000010  00 00 ff ff 00 07 44 45  46 41 55 4c 54           |......DEFAULT|

2026-10-11 00:01:2965.49.1.218to 427/udpUnrecognisedUS

·"·en·AAAAAAAA

payload bytes

00000000  02 01 00 00 22 00 00 00  00 00 00 05 00 02 65 6e  |....".........en|
00000010  00 00 00 00 00 00 00 00  00 08 41 41 41 41 41 41  |..........AAAAAA|
00000020  41 41                                             |AA|

2026-10-10 17:30:0491.231.89.89to 427/udpUnrecognisedFR

·=·en·service:VMwareInfrastructure·DEFAULT·

payload bytes

00000000  02 01 00 00 3d 00 00 00  00 00 12 06 00 02 65 6e  |....=.........en|
00000010  00 00 00 1c 73 65 72 76  69 63 65 3a 56 4d 77 61  |....service:VMwa|
00000020  72 65 49 6e 66 72 61 73  74 72 75 63 74 75 72 65  |reInfrastructure|
00000030  00 07 44 45 46 41 55 4c  54 00 00 00 00           |..DEFAULT....|

2026-10-10 17:14:5191.230.168.217to 427/udpUnrecognisedUS

·=·en·service:VMwareInfrastructure·DEFAULT·

payload bytes

00000000  02 01 00 00 3d 00 00 00  00 00 12 06 00 02 65 6e  |....=.........en|
00000010  00 00 00 1c 73 65 72 76  69 63 65 3a 56 4d 77 61  |....service:VMwa|
00000020  72 65 49 6e 66 72 61 73  74 72 75 63 74 75 72 65  |reInfrastructure|
00000030  00 07 44 45 46 41 55 4c  54 00 00 00 00           |..DEFAULT....|

2026-10-10 11:26:4266.132.172.232to 427/udpUnrecognisedUS

·/·D·en·service:censys·DEFAULT·

payload bytes

00000000  02 01 00 00 2f 00 00 00  00 00 44 00 00 02 65 6e  |..../.....D...en|
00000010  00 00 00 0e 73 65 72 76  69 63 65 3a 63 65 6e 73  |....service:cens|
00000020  79 73 00 07 44 45 46 41  55 4c 54 00 00 00 00     |ys..DEFAULT....|

2026-10-10 10:47:2566.132.186.219to 427/udpUnrecognisedUS

·/·D·en·service:censys·DEFAULT·

payload bytes

00000000  02 01 00 00 2f 00 00 00  00 00 44 00 00 02 65 6e  |..../.....D...en|
00000010  00 00 00 0e 73 65 72 76  69 63 65 3a 63 65 6e 73  |....service:cens|
00000020  79 73 00 07 44 45 46 41  55 4c 54 00 00 00 00     |ys..DEFAULT....|

2026-10-10 10:07:44198.235.24.204to 427/udpUnrecognisedUS

· ·en·DEFAULT

payload bytes

00000000  02 09 00 00 1d 00 00 00  00 00 9d f6 00 02 65 6e  |..............en|
00000010  00 00 ff ff 00 07 44 45  46 41 55 4c 54           |......DEFAULT|

2026-10-10 09:43:25205.210.31.110to 427/udpUnrecognisedUS

· ·en·DEFAULT

payload bytes

00000000  02 09 00 00 1d 00 00 00  00 00 9d f6 00 02 65 6e  |..............en|
00000010  00 00 ff ff 00 07 44 45  46 41 55 4c 54           |......DEFAULT|

2026-10-10 04:43:51216.25.89.80to 427/udpUnrecognisedUS

· ·en·DEFAULT

payload bytes

00000000  02 09 00 00 1d 00 00 00  00 00 9d f6 00 02 65 6e  |..............en|
00000010  00 00 ff ff 00 07 44 45  46 41 55 4c 54           |......DEFAULT|

2026-10-10 04:42:27141.98.83.48to 427/udpUnrecognisedPA

·7·^·en·<· B://l:87/· B://l:87/x·default·

payload bytes

00000000  02 03 00 00 37 00 00 00  00 00 5e 15 00 02 65 6e  |....7.....^...en|
00000010  00 00 3c 00 09 42 3a 2f  2f 6c 3a 38 37 2f 00 00  |..<..B://l:87/..|
00000020  0a 42 3a 2f 2f 6c 3a 38  37 2f 78 00 07 64 65 66  |.B://l:87/x..def|
00000030  61 75 6c 74 00 00 00                              |ault...|