HoneyLabs

UDP traffic

Datagrams matching port:57048 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

26

Datagrams

2

Source addresses

2

Networks

2

Countries

1

Destination ports

Traffic by type

Other services

26 datagrams from 2 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

Latest STUN datagram, to 57048/udp

·T!·BeuvtxSboKwvq· Gx77:Y6nJ·ں·Yj·W·)·$·n~·8·B·O·U·(·~·V

payload bytes
00000000  00 01 00 54 21 12 a4 42  65 75 76 74 78 53 62 6f  |...T!..BeuvtxSbo|
00000010  4b 77 76 71 00 06 00 09  47 78 37 37 3a 59 36 6e  |Kwvq....Gx77:Y6n|
00000020  4a 00 00 00 da ba 00 04  00 01 59 6a c0 57 00 04  |J.........Yj.W..|
00000030  00 07 03 84 80 29 00 08  00 00 00 00 00 00 00 00  |.....)..........|
00000040  00 24 00 04 6e 7e 1e ff  00 08 00 14 9d 97 b2 bf  |.$..n~..........|
00000050  b3 fb 02 8c 38 8c d4 42  f6 f6 c3 cb 16 4f ef 55  |....8..B.....O.U|
00000060  80 28 00 04 7e 87 ca 56                           |.(..~..V|

Destination ports

Networks

Countries

Source addresses (unverified)

AddressNetworkCcSendsDatagramsLast seen (UTC)
113.185.109.99AS45899 VNPT CorpVNSTUN182026-10-11 00:17
57.144.153.135AS32934 Facebook, Inc.SGSTUN82026-10-11 00:17

Latest datagrams