HoneyLabs

UDP traffic

Datagrams matching asn:133481 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

4

Datagrams

3

Source addresses

1

Networks

1

Countries

4

Destination ports

Traffic by type

Other services

1 datagrams from 1 source

First packets of sessions with VPN, voice, tunnelling, database and management services.

Latest SOCKS5 datagram, to 3142/udp

·4Vx·

payload bytes
00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 07 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

Unrecognised

3 datagrams from 2 sources

Datagrams no decoder recognised. Their first bytes are kept.

Latest Unrecognised datagram, to 30449/udp

·5g·L·B·v·p·8·E_-V·G·I(+·p·L·W·zA·4·]Kk·up·ib·癔·Ԛ ·?v·zk·q·$·t·v·]]·ʋ鵍·o·㧀"·pT·:·v·d·y·Rn·u·

payload bytes
00000000  f7 8e b0 35 67 f2 4c cc  06 9c 9f 42 82 76 9c 89  |...5g.L....B.v..|
00000010  70 96 ea 38 c0 84 9e 93  19 45 5f 2d 56 0e 1d 47  |p..8.....E_-V..G|
00000020  d3 49 28 2b f2 70 f7 4c  f8 83 57 9b 7a 41 97 34  |.I(+.p.L..W.zA.4|
00000030  ea f0 98 5d 4b 6b 1f aa  b3 75 70 8d f6 69 62 03  |...]Kk...up..ib.|
00000040  d0 d6 e7 99 94 b3 f3 c8  d4 9a 20 c6 3f 76 1d d6  |.......... .?v..|
00000050  7a 6b eb 71 c0 19 d1 24  b4 d1 e5 e6 d9 ef 74 db  |zk.q...$......t.|
00000060  76 ff ee f1 92 e7 5d 5d  fc f5 fd 95 bd ca 8b e9  |v.....]]........|
00000070  b5 8d 18 6f b3 96 cb dd  e3 ca e3 a7 80 22 8a 10  |...o........."..|
00000080  01 70 54 bb d6 17 ab 3a  b2 76 a6 83 64 da 79 c2  |.pT....:.v..d.y.|
00000090  52 6e b5 da 75 c7 c2 b8  39 25 61 08 ab 74 c7 04  |Rn..u...9%a..t..|
000000a0  9f 4d 71 75 2b d5 26 db  9b 6b 6f da 51 3e 32 e5  |.Mqu+.&..ko.Q>2.|
000000b0  dd 8a d0 1a 21 8b b2 f7  ff 15 20 56 dc 69 94 22  |....!..... V.i."|
000000c0  31 89 8c bc 02 f6 04 df  f0 8f dd 89 9e cd 86 08  |1...............|
000000d0  be 08 9b d0 49 40 d7 28  ac e8 10 4d ad 36 c4 73  |....I@.(...M.6.s|
000000e0  93 1e 12 7b b0 cc 55 e9  be 0c ca 23 34 27 e9 71  |...{..U....#4'.q|
000000f0  1c 49 e4 9a bc 26 93 dd  4c 6e 4f ae 36 2c a7 96  |.I...&..LnO.6,..|

Destination ports

Networks

Countries

Source addresses (unverified)

AddressNetworkCcSendsDatagramsLast seen (UTC)
27.130.60.239AS133481 AIS FibreTHUnrecognised22026-10-09 12:07
27.130.210.103AS133481 AIS FibreTHUnrecognised12026-10-05 18:45
27.130.149.186AS133481 AIS FibreTHSOCKS512026-10-07 10:41

Latest datagrams