HoneyLabs

UDP traffic

Datagrams matching port:59487 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Your plan searches up to 7d, so 30d was shortened. Plans

13

Datagrams

2

Source addresses

2

Networks

2

Countries

1

Destination ports

Traffic by type

Other services

13 datagrams from 2 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

Latest STUN datagram, to 59487/udp

·T!·BbeeNQJX+iHUw· lNGk:AFR0·ں·W· ·)·$·n~·6b·*Π·@Dh·[˪·0·(·:·5

payload bytes
00000000  00 01 00 54 21 12 a4 42  62 65 65 4e 51 4a 58 2b  |...T!..BbeeNQJX+|
00000010  69 48 55 77 00 06 00 09  6c 4e 47 6b 3a 41 46 52  |iHUw....lNGk:AFR|
00000020  30 00 00 00 da ba 00 04  00 01 13 ff c0 57 00 04  |0............W..|
00000030  00 0a 03 84 80 29 00 08  00 00 00 00 00 00 00 00  |.....)..........|
00000040  00 24 00 04 6e 7e 1e ff  00 08 00 14 36 62 bb 00  |.$..n~......6b..|
00000050  8a e8 2a ce a0 ff 40 44  68 ca 5b cb aa 17 89 30  |..*...@Dh.[....0|
00000060  80 28 00 04 3a d8 d8 35                           |.(..:..5|

Destination ports

Networks

Countries

Source addresses (unverified)

AddressNetworkCcSendsDatagramsLast seen (UTC)
116.110.224.176AS7552 Viettel GroupVNSTUN122026-10-10 12:44
177.139.20.135AS27699 TELEFONICA BRASIL S.ABRSOCKS512026-10-08 18:15

Latest datagrams