UDP traffic
Datagrams matching port:987 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.
A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.
3
Datagrams
3
Source addresses
3
Networks
3
Countries
1
Destination ports
Traffic by type
Unrecognised
3 datagrams from 3 sourcesDatagrams no decoder recognised. Their first bytes are kept.
Latest Unrecognised datagram, to 987/udp
payload bytes
00000000 53 52 43 48 20 2a 20 48 54 54 50 2f 31 2e 31 0a |SRCH * HTTP/1.1.| 00000010 64 65 76 69 63 65 2d 64 69 73 63 6f 76 65 72 79 |device-discovery| 00000020 2d 70 72 6f 74 6f 63 6f 6c 2d 76 65 72 73 69 6f |-protocol-versio| 00000030 6e 3a 30 30 30 33 30 30 31 30 0a |n:00030010.|
Destination ports
Networks
- AS12989 Black HOST Ltd from 1 source1
- AS10439 CariNet, Inc. from 1 source1
- AS202425 IP Volume inc from 1 source1
Countries
Source addresses (unverified)
| Address | Network | Cc | Sends | Datagrams | Last seen (UTC) |
|---|---|---|---|---|---|
| 80.82.77.33 | AS202425 IP Volume inc | NL | Unrecognised | 1 | 2026-10-11 02:49 |
| 86.54.31.38 | AS12989 Black HOST Ltd | CA | Unrecognised | 1 | 2026-10-06 06:35 |
| 71.6.199.23 | AS10439 CariNet, Inc. | US | Unrecognised | 1 | 2026-10-07 08:41 |
Latest datagrams
payload bytes
00000000 53 52 43 48 20 2a 20 48 54 54 50 2f 31 2e 31 0a |SRCH * HTTP/1.1.| 00000010 64 65 76 69 63 65 2d 64 69 73 63 6f 76 65 72 79 |device-discovery| 00000020 2d 70 72 6f 74 6f 63 6f 6c 2d 76 65 72 73 69 6f |-protocol-versio| 00000030 6e 3a 30 30 30 33 30 30 31 30 0a |n:00030010.|
payload bytes
00000000 53 52 43 48 20 2a 20 48 54 54 50 2f 31 2e 31 0a |SRCH * HTTP/1.1.| 00000010 64 65 76 69 63 65 2d 64 69 73 63 6f 76 65 72 79 |device-discovery| 00000020 2d 70 72 6f 74 6f 63 6f 6c 2d 76 65 72 73 69 6f |-protocol-versio| 00000030 6e 3a 30 30 30 33 30 30 31 30 0a |n:00030010.|
payload bytes
00000000 53 52 43 48 20 2a 20 48 54 54 50 2f 31 2e 31 0a |SRCH * HTTP/1.1.| 00000010 64 65 76 69 63 65 2d 64 69 73 63 6f 76 65 72 79 |device-discovery| 00000020 2d 70 72 6f 74 6f 63 6f 6c 2d 76 65 72 73 69 6f |-protocol-versio| 00000030 6e 3a 30 30 30 33 30 30 31 30 0a |n:00030010.|