HoneyLabs

UDP traffic

Datagrams matching proto:rtp sent to HoneyLabs sensors over UDP in the last 24 hours. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

4

Datagrams

4

Source addresses

2

Networks

2

Countries

2

Destination ports

Traffic by type

Other services

4 datagrams from 4 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

Latest RTP datagram, to 9600/udp

·c·

payload bytes
00000000  80 00 02 00 00 00 00 63  00 ef 05 01 00           |.......c.....|

Destination ports

Networks

Countries

Source addresses (unverified)

AddressNetworkCcSendsDatagramsLast seen (UTC)
165.154.41.182AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITHKRTP12026-10-10 13:51
65.49.1.77AS6939 Hurricane Electric LLCUSRTP12026-10-11 00:23
64.62.156.93AS6939 Hurricane Electric LLCUSRTP12026-10-10 08:26
64.62.156.86AS6939 Hurricane Electric LLCUSRTP12026-10-10 08:28

Latest datagrams