HoneyLabs

UDP traffic

Datagrams matching port:50072 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Your plan searches up to 7d, so 30d was shortened. Plans

22

Datagrams

2

Source addresses

2

Networks

2

Countries

1

Destination ports

Traffic by type

Other services

22 datagrams from 2 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

Latest STUN datagram, to 50072/udp

·T!·BSvvB8vm+9Uil· lNGk:AFR0·ں·L·W· ·)·$·n~·H~o·j·}~Ӽ(·p·(·a

payload bytes
00000000  00 01 00 54 21 12 a4 42  53 76 76 42 38 76 6d 2b  |...T!..BSvvB8vm+|
00000010  39 55 69 6c 00 06 00 09  6c 4e 47 6b 3a 41 46 52  |9Uil....lNGk:AFR|
00000020  30 00 00 00 da ba 00 04  00 01 4c 85 c0 57 00 04  |0.........L..W..|
00000030  00 0a 03 84 80 29 00 08  00 00 00 00 00 00 00 00  |.....)..........|
00000040  00 24 00 04 6e 7e 1e ff  00 08 00 14 48 7e 6f 17  |.$..n~......H~o.|
00000050  a3 df 6a f4 ed 7d 7e d3  bc 28 e0 f5 eb 97 16 70  |..j..}~..(.....p|
00000060  80 28 00 04 11 9c f6 61                           |.(.....a|

Destination ports

Networks

Countries

Source addresses (unverified)

AddressNetworkCcSendsDatagramsLast seen (UTC)
116.110.224.176AS7552 Viettel GroupVNSTUN142026-10-10 12:44
57.144.145.135AS32934 Facebook, Inc.SGSTUN82026-10-10 12:44

Latest datagrams