HoneyLabs

UDP traffic

Datagrams matching port:12946 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

9

Datagrams

9

Source addresses

3

Networks

1

Countries

1

Destination ports

Traffic by type

Other services

9 datagrams from 9 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

Latest DTLS datagram, to 12946/udp

·6·*·*·|w@·"·ʬ d/·"d·0·/·

payload bytes
00000000  16 fe ff 00 00 00 00 00  00 00 00 00 36 01 00 00  |............6...|
00000010  2a 00 00 00 00 00 00 00  2a fe fd 00 00 00 00 7c  |*.......*......||
00000020  77 40 1e 8a c8 22 a0 a0  18 ff 93 08 ca ac 0a 64  |w@...".........d|
00000030  2f c9 22 64 bc 08 a8 16  89 19 30 00 00 00 02 00  |/."d......0.....|
00000040  2f 01 00                                          |/..|

Destination ports

Networks

Countries

Source addresses (unverified)

AddressNetworkCcSendsDatagramsLast seen (UTC)
216.218.206.124AS6939 Hurricane Electric LLCUSDTLS12026-10-06 03:44
198.235.24.79AS396982 Google LLCUSDTLS12026-10-06 07:15
65.49.1.141AS6939 Hurricane Electric LLCUSDTLS12026-10-06 07:39
205.210.31.252AS396982 Google LLCUSDTLS12026-10-06 10:12
199.165.159.47AS22168 The Shadowserver Foundation, Inc.USDTLS12026-10-06 08:28
147.185.132.63AS396982 Google LLCUSDTLS12026-10-06 23:20
205.210.31.216AS396982 Google LLCUSDTLS12026-10-06 11:11
65.49.1.42AS6939 Hurricane Electric LLCUSDTLS12026-10-06 05:10
147.185.132.66AS396982 Google LLCUSDTLS12026-10-06 04:15

Latest datagrams