UDP traffic
Datagrams matching proto:gtp_u sent to HoneyLabs sensors over UDP in the last 24 hours. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.
A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.
5
Datagrams
5
Source addresses
2
Networks
1
Countries
1
Destination ports
Traffic by type
Other services
5 datagrams from 5 sourcesFirst packets of sessions with VPN, voice, tunnelling, database and management services.
Latest GTP-U datagram, to 2152/udp
payload bytes
00000000 32 01 00 04 00 00 00 00 00 00 00 00 |2...........|
Destination ports
- 2152/udp GTP-U5
Networks
- AS6939 Hurricane Electric LLC from 4 sources4
- AS50219 Valence Technology Co. from 1 source1
Countries
Source addresses (unverified)
| Address | Network | Cc | Sends | Datagrams | Last seen (UTC) |
|---|---|---|---|---|---|
| 64.62.156.31 | AS6939 Hurricane Electric LLC | US | GTP-U | 1 | 2026-10-11 00:11 |
| 216.226.76.30 | AS50219 Valence Technology Co. | US | GTP-U | 1 | 2026-10-10 13:51 |
| 64.62.156.53 | AS6939 Hurricane Electric LLC | US | GTP-U | 1 | 2026-10-11 03:04 |
| 64.62.156.56 | AS6939 Hurricane Electric LLC | US | GTP-U | 1 | 2026-10-11 02:36 |
| 65.49.1.29 | AS6939 Hurricane Electric LLC | US | GTP-U | 1 | 2026-10-11 08:30 |
Latest datagrams
payload bytes
00000000 32 01 00 04 00 00 00 00 00 00 00 00 |2...........|
payload bytes
00000000 32 01 00 04 00 00 00 00 00 00 00 00 |2...........|
payload bytes
00000000 32 01 00 04 00 00 00 00 00 00 00 00 |2...........|
payload bytes
00000000 32 01 00 04 00 00 00 00 00 00 00 00 |2...........|
payload bytes
00000000 32 01 00 04 00 00 00 00 0c 3d 00 00 |2........=..|