HoneyLabs

UDP traffic

Datagrams matching asn:12322 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

34

Datagrams

14

Source addresses

1

Networks

1

Countries

29

Destination ports

Traffic by type

Other services

12 datagrams from 7 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

Latest SOCKS5 datagram, to 23778/udp

·4Vx·

payload bytes
00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 06 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

Unrecognised

22 datagrams from 12 sources

Datagrams no decoder recognised. Their first bytes are kept.

Latest Unrecognised datagram, to 27015/udp

·TSource Engine Query·

payload bytes
00000000  ff ff ff ff 54 53 6f 75  72 63 65 20 45 6e 67 69  |....TSource Engi|
00000010  6e 65 20 51 75 65 72 79  00                       |ne Query.|

Destination ports

Networks

Countries

Source addresses (unverified)

AddressNetworkCcSendsDatagramsLast seen (UTC)
88.190.132.168AS12322 Free SASFRUnrecognised62026-10-12 08:44
88.171.16.122AS12322 Free SASFRSOCKS552026-10-11 06:14
82.224.248.104AS12322 Free SASFRSOCKS542026-10-09 18:00
88.172.68.123AS12322 Free SASFRSOCKS532026-10-08 05:20
88.169.163.76AS12322 Free SASFRUnrecognised32026-10-12 02:52
82.235.240.140AS12322 Free SASFRUnrecognised22026-10-05 22:34
88.188.66.136AS12322 Free SASFRUnrecognised22026-10-08 04:00
88.184.123.141AS12322 Free SASFRUnrecognised22026-10-08 21:25
88.190.126.226AS12322 Free SASFRUnrecognised22026-10-08 00:20
88.187.33.213AS12322 Free SASFRSOCKS512026-10-05 11:34
82.233.61.125AS12322 Free SASFRUnrecognised12026-10-06 05:51
88.164.62.121AS12322 Free SASFRUnrecognised12026-10-07 04:50
88.176.138.250AS12322 Free SASFRUnrecognised12026-10-08 15:29
88.160.165.227AS12322 Free SASFRSOCKS512026-10-09 19:41

Latest datagrams