HoneyLabs

UDP traffic

Datagrams matching asn:12322 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

30

Datagrams

15

Source addresses

1

Networks

1

Countries

27

Destination ports

Traffic by type

Other services

11 datagrams from 7 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

Latest SOCKS5 datagram, to 30594/udp

·4Vx·

payload bytes
00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 08 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

Unrecognised

19 datagrams from 12 sources

Datagrams no decoder recognised. Their first bytes are kept.

Latest Unrecognised datagram, to 29768/udp

ƴ@·y·p4·X·Z?·.·׃·[·1:x·y[·[·D·n·B·◴·kU_·]·O·z·:·M·UhJJ·8·)·*·N· Ɋ·^·6·`·r·I·WkG·v·#·D2·ڑ·K·]"7·0uX&$s·R·3-p·

payload bytes
00000000  c6 b4 40 1a 79 d9 70 34  eb 58 e2 5a 3f 90 2e 9c  |..@.y.p4.X.Z?...|
00000010  f8 e1 d7 83 ea 5b de 31  3a 78 b3 79 5b b0 f4 91  |.....[.1:x.y[...|
00000020  bc 5b 10 ad ff 44 d2 6e  b7 93 42 8c 0c 9c 00 b8  |.[...D.n..B.....|
00000030  0b fd e2 97 b4 a6 eb 6b  55 5f ac f3 d0 5d f0 4f  |.......kU_...].O|
00000040  80 fb 7a cf dd 3a 92 f9  4d 84 55 68 4a 4a 86 a5  |..z..:..M.UhJJ..|
00000050  81 03 38 bd 29 82 14 d5  2a 03 a7 11 4e cf e4 86  |..8.)...*...N...|
00000060  18 f0 bd fb 8c 20 c9 8a  ac dc 5e a3 36 e9 60 03  |..... ....^.6.`.|
00000070  72 e4 49 17 57 6b 47 d4  cf 76 a9 81 95 16 84 85  |r.I.WkG..v......|
00000080  23 18 b6 dd 11 cd 44 32  98 da 91 f8 a1 4b 04 5d  |#.....D2.....K.]|
00000090  22 37 1e 30 75 58 26 24  73 03 15 52 d3 13 33 2d  |"7.0uX&$s..R..3-|
000000a0  70 96 55 ec 7f 9e a6 fa  c3 14 52 00 91 32 4a b5  |p.U.......R..2J.|
000000b0  5e d4 ec f5 fa f9 77 3b  5b 06 13 ab 12 77 29 4f  |^.....w;[....w)O|
000000c0  8d 14 f4 dc c0 9e c8 58  5c 6a da 6b d2 11 4f 6f  |.......X\j.k..Oo|
000000d0  ca 30 63 13 f8 92 41 0f  c6 91 71 b7 7b c7 a7 a0  |.0c...A...q.{...|
000000e0  c5 56 48 aa 26 c7 9d a9  72 8c 59 92 5d 1d 5b 0c  |.VH.&...r.Y.].[.|
000000f0  6d 9c 4d e4 35 d3 ae a3  2e e1 ca fd 3f ba af 29  |m.M.5.......?..)|

Destination ports

Networks

Countries

Source addresses (unverified)

AddressNetworkCcSendsDatagramsLast seen (UTC)
82.224.248.104AS12322 Free SASFRSOCKS542026-10-09 18:00
88.171.16.122AS12322 Free SASFRUnrecognised42026-10-10 21:13
88.172.68.123AS12322 Free SASFRSOCKS532026-10-08 05:20
88.190.132.168AS12322 Free SASFRUnrecognised32026-10-06 09:12
82.235.240.140AS12322 Free SASFRUnrecognised22026-10-05 22:34
88.188.66.136AS12322 Free SASFRUnrecognised22026-10-08 04:00
88.184.123.141AS12322 Free SASFRSOCKS522026-10-08 21:25
88.190.126.226AS12322 Free SASFRUnrecognised22026-10-08 00:20
88.169.163.76AS12322 Free SASFRUnrecognised22026-10-09 15:58
88.187.33.213AS12322 Free SASFRSOCKS512026-10-05 11:34
82.233.61.125AS12322 Free SASFRUnrecognised12026-10-06 05:51
88.164.62.121AS12322 Free SASFRUnrecognised12026-10-07 04:50
88.176.138.250AS12322 Free SASFRUnrecognised12026-10-08 15:29
88.160.165.227AS12322 Free SASFRSOCKS512026-10-09 19:41
82.225.133.3AS12322 Free SASFRSOCKS512026-10-05 11:10

Latest datagrams