HoneyLabs

UDP traffic

Datagrams matching asn:12322 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Your plan searches up to 7d, so 30d was shortened. Plans

32

Datagrams

15

Source addresses

1

Networks

1

Countries

29

Destination ports

Traffic by type

Other services

12 datagrams from 7 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

Latest SOCKS5 datagram, to 47341/udp

·4Vx·

payload bytes
00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 06 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

Unrecognised

20 datagrams from 12 sources

Datagrams no decoder recognised. Their first bytes are kept.

Latest Unrecognised datagram, to 52651/udp

·]·Xo·Dx·;·~·7·K{·-·] ·k·t٤4E·2v·҂·P·H?H·1·\·˕q ·u.·Ї·Θ·3· h·ɨ·B·Gzq+|·^·}·{C·o>C·P ·8r·?[b̊?·[Z·!R·JK] 7_b·ށ·

payload bytes
00000000  1b 5d 96 7f 58 6f 94 04  ca c4 44 78 cc 3b cd c2  |.]..Xo....Dx.;..|
00000010  0b d8 7e 0f 13 98 37 a8  4b 7b 0b f6 1d 2d b3 5d  |..~...7.K{...-.]|
00000020  20 18 f4 a4 ad fb 17 b0  c7 1f 6b 1d b2 02 74 d9  | .........k...t.|
00000030  a4 34 45 dd 32 76 80 d2  82 de 50 97 48 3f 48 ee  |.4E.2v....P.H?H.|
00000040  31 d6 5c 1a ae 02 bc cb  95 71 09 da e3 a7 14 75  |1.\......q.....u|
00000050  2e 1a 05 89 d2 d0 87 a2  ce 98 93 33 e0 0a 68 e3  |...........3..h.|
00000060  c9 a8 1d 42 18 e1 80 de  ee 47 7a 71 2b 7c e6 d2  |...B.....Gzq+|..|
00000070  5e dd 12 7d c5 7b 43 a4  94 1d a5 07 6f 3e 43 e6  |^..}.{C.....o>C.|
00000080  d4 f7 50 0d e8 38 72 b2  8f da 14 9d 04 3f 5b 62  |..P..8r......?[b|
00000090  cc 8a 3f e8 5b 5a a9 cb  03 21 52 f0 12 83 4a 4b  |..?.[Z...!R...JK|
000000a0  5d 09 37 5f 62 fb cd de  81 83 f6 bf 7e d5 bb a0  |].7_b.......~...|
000000b0  d5 5d 21 47 b8 a8 86 f6  62 d7 67 fd 95 fd 09 83  |.]!G....b.g.....|
000000c0  d4 d7 8b ce d5 65 8b 0d  c1 7f 94 ce d3 d6 bd 02  |.....e..........|
000000d0  27 94 18 92 7c ee eb c4  57 eb ec a9 f7 bb 0b 45  |'...|...W......E|
000000e0  dd a6 e4 13 d3 32 e7 88  cb c6 9f 46 ec 19 53 5e  |.....2.....F..S^|
000000f0  b5 8e b7 68 da 58 77 d9  a1 74 66 61 18 9d 3c a7  |...h.Xw..tfa..<.|

Destination ports

Networks

Countries

Source addresses (unverified)

AddressNetworkCcSendsDatagramsLast seen (UTC)
88.171.16.122AS12322 Free SASFRSOCKS552026-10-11 06:14
88.190.132.168AS12322 Free SASFRUnrecognised42026-10-11 08:32
82.224.248.104AS12322 Free SASFRSOCKS542026-10-09 18:00
88.172.68.123AS12322 Free SASFRSOCKS532026-10-08 05:20
82.235.240.140AS12322 Free SASFRUnrecognised22026-10-05 22:34
88.188.66.136AS12322 Free SASFRUnrecognised22026-10-08 04:00
88.184.123.141AS12322 Free SASFRSOCKS522026-10-08 21:25
88.190.126.226AS12322 Free SASFRUnrecognised22026-10-08 00:20
88.169.163.76AS12322 Free SASFRUnrecognised22026-10-09 15:58
88.187.33.213AS12322 Free SASFRSOCKS512026-10-05 11:34
82.233.61.125AS12322 Free SASFRUnrecognised12026-10-06 05:51
88.164.62.121AS12322 Free SASFRUnrecognised12026-10-07 04:50
88.176.138.250AS12322 Free SASFRUnrecognised12026-10-08 15:29
88.160.165.227AS12322 Free SASFRSOCKS512026-10-09 19:41
82.225.133.3AS12322 Free SASFRSOCKS512026-10-05 11:10

Latest datagrams