HoneyLabs

UDP traffic

Datagrams matching proto:gtp_c sent to HoneyLabs sensors over UDP in the last 24 hours. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

7

Datagrams

6

Source addresses

2

Networks

1

Countries

1

Destination ports

Traffic by type

Other services

7 datagrams from 6 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

Latest GTP-C datagram, to 2123/udp

2·

payload bytes
00000000  32 01 00 04 00 00 00 00  00 00 00 00              |2...........|

Destination ports

Networks

Countries

Source addresses (unverified)

AddressNetworkCcSendsDatagramsLast seen (UTC)
203.55.131.5AS32475 Internap Holding LLCUSGTP-C22026-10-10 10:30
65.49.1.56AS6939 Hurricane Electric LLCUSGTP-C12026-10-10 05:53
65.49.1.26AS6939 Hurricane Electric LLCUSGTP-C12026-10-11 00:46
65.49.1.36AS6939 Hurricane Electric LLCUSGTP-C12026-10-11 00:10
64.62.156.32AS6939 Hurricane Electric LLCUSGTP-C12026-10-10 06:45
65.49.20.85AS6939 Hurricane Electric LLCUSGTP-C12026-10-11 03:25

Latest datagrams