HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsEmissions IndexPortsUser-agentsUDP traffic
Integrations
OverviewMCPFeedsAPI / EnrichSplunk ESMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog
Dashboard

UDP traffic

Datagrams matching asn:10620 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

1.1K

Datagrams

30

Source addresses

1

Networks

1

Countries

18

Destination ports

Traffic by type

Other services

5 datagrams from 4 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

SOCKS5 5

Latest SOCKS5 datagram, to 47384/udp

·4Vx ·

payload bytes
00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 09 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

Unrecognised

13 datagrams from 11 sources

Datagrams no decoder recognised. Their first bytes are kept.

Unrecognised 13

Latest Unrecognised datagram, to 30942/udp

·Ы·U·O{-_1·o·<bG· /·=·Mi·\·&qM·s·rj:kH·4·g·paȺ!!·0\G·@·2]·q·h·ϥ·b ·C·֬p·E·)·[·ߓBRl{HD6·>·M.· J~·"ZCg·tn·

payload bytes
00000000  b8 91 84 ae d0 ab cf 55  82 80 4f 7b 2d 5f 31 08  |.......U..O{-_1.|
00000010  c2 06 b2 82 6f ac 0b aa  3c 62 47 ad 8e 88 0d 2f  |....o...<bG..../|
00000020  bb 1f 9b 3d b3 a4 04 ca  4d 69 c4 5c a3 d3 ce 1f  |...=....Mi.\....|
00000030  26 71 4d fa e0 73 83 15  1c fe 72 6a 3a 6b 48 03  |&qM..s....rj:kH.|
00000040  34 ee 1d 92 e4 93 0f 9c  67 1c 70 61 c8 ba 21 21  |4.......g.pa..!!|
00000050  96 9c 30 5c 47 b4 40 bc  8c 14 32 5d 18 12 e9 71  |..0\G.@...2]...q|
00000060  9f e4 e5 a9 68 9f be 10  87 7f e5 dd f1 cf a5 e4  |....h...........|
00000070  e6 0e e2 62 0d 98 43 86  05 d6 ac 70 a6 45 bc ba  |...b..C....p.E..|
00000080  29 f9 5b c8 df 93 42 52  6c 7b 48 44 36 97 81 1c  |).[...BRl{HD6...|
00000090  3e b7 04 0b ea 01 9e 4d  2e 80 0a 4a 7e 96 22 5a  |>......M...J~."Z|
000000a0  43 67 b1 74 6e a9 9d c9  83 4b 88 d7 6a a6 57 99  |Cg.tn....K..j.W.|
000000b0  7c 41 23 66 0f 42 d1 42  85 cd 90 d7 eb 45 d0 f3  ||A#f.B.B.....E..|
000000c0  4c d2 84 8f 89 38 8d 47  18 29 20 16 2a c9 ae 67  |L....8.G.) .*..g|
000000d0  21 61 11 ce 1a 41 76 e0  e5 dc 09 f7 b7 bc ff e6  |!a...Av.........|
000000e0  20 d1 a2 a3 df 2a 8e f1  ff 2e d9 48 57 39 d8 53  | ....*.....HW9.S|
000000f0  dd c9 46 e6 18 df 1e 66  f2 ab 31 e7 c2 24 b1 75  |..F....f..1..$.u|

Peer-to-peer

1,082 datagrams from 18 sources

File-sharing clients trying to reach a peer that used one of these addresses before. This is not scanning, so it is left out of every other figure on this page.

BitTorrent 1,082

Destination ports

Networks

Countries

Source addresses (unverified)

AddressNetworkCcSendsDatagramsLast seen (UTC)
186.81.124.167AS10620 Telmex Colombia S.A.COBitTorrent4582026-10-10 23:07
181.59.2.79AS10620 Telmex Colombia S.A.COBitTorrent2392026-10-09 05:17
181.59.3.34AS10620 Telmex Colombia S.A.COBitTorrent1722026-10-10 20:47
181.59.3.4AS10620 Telmex Colombia S.A.COBitTorrent1032026-10-08 02:14
181.59.2.181AS10620 Telmex Colombia S.A.COBitTorrent352026-10-06 02:44
186.84.20.163AS10620 Telmex Colombia S.A.COBitTorrent202026-10-05 17:29
181.53.13.124AS10620 Telmex Colombia S.A.COBitTorrent102026-10-06 16:29
181.57.87.88AS10620 Telmex Colombia S.A.COBitTorrent102026-10-05 21:08
181.62.52.68AS10620 Telmex Colombia S.A.COBitTorrent102026-10-08 18:07
186.82.87.163AS10620 Telmex Colombia S.A.COBitTorrent72026-10-09 02:09
190.84.116.214AS10620 Telmex Colombia S.A.COBitTorrent52026-10-05 17:31
181.59.3.149AS10620 Telmex Colombia S.A.COBitTorrent42026-10-10 19:17
186.80.28.46AS10620 Telmex Colombia S.A.COBitTorrent42026-10-09 04:17
181.54.0.79AS10620 Telmex Colombia S.A.COSOCKS532026-10-07 10:54
181.52.218.25AS10620 Telmex Colombia S.A.COUnrecognised32026-10-07 17:38
200.118.63.65AS10620 Telmex Colombia S.A.COUnrecognised22026-10-11 03:53
181.58.141.90AS10620 Telmex Colombia S.A.COUnrecognised22026-10-05 20:44
181.50.102.220AS10620 Telmex Colombia S.A.COBitTorrent12026-10-10 03:35
181.63.150.154AS10620 Telmex Colombia S.A.COBitTorrent12026-10-05 13:35
181.59.3.195AS10620 Telmex Colombia S.A.COBitTorrent12026-10-09 19:29

Latest datagrams