HoneyLabs

UDP traffic

Datagrams matching asn:15704 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

161

Datagrams

13

Source addresses

1

Networks

1

Countries

7

Destination ports

Traffic by type

Other services

3 datagrams from 3 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

Latest SOCKS5 datagram, to 25768/udp

·4Vx·

payload bytes
00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 0b 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

Unrecognised

3 datagrams from 3 sources

Datagrams no decoder recognised. Their first bytes are kept.

Latest Unrecognised datagram, to 11703/udp

--G·)f*·q·QIܙ·3#·enX·㪡ϧ·D·UJg<· ·u·u·E·R·k· ·<·!·2·Z·Y·x{$·|·|·o·b·i_·k·)g[·v·'·aD·\·m·|=·/·v·qB·3·+· K·R·i·nh

payload bytes
00000000  2d 2d 47 f2 29 66 2a 1e  71 a2 51 49 dc 99 d6 e8  |--G.)f*.q.QI....|
00000010  ae ef 33 23 cf de 65 6e  58 bb e3 aa a1 cf a7 f6  |..3#..enX.......|
00000020  44 00 55 4a 67 3c 86 0a  14 7f 08 bd d3 75 1a 75  |D.UJg<.......u.u|
00000030  14 0c af 97 82 7f f1 ac  d7 45 ff 52 b6 16 ed f4  |.........E.R....|
00000040  93 6b cd 1b 07 0a e7 3c  b1 21 9e 94 32 cd 5a 08  |.k.....<.!..2.Z.|
00000050  59 ae bb 78 7b 24 08 7c  e2 11 fe 19 b2 7c 13 c7  |Y..x{$.|.....|..|
00000060  6f cb 7f 62 a7 10 69 5f  a9 6b f1 b6 29 67 5b ea  |o..b..i_.k..)g[.|
00000070  be ed e3 76 ed 27 18 61  44 a4 89 5c d3 e2 da 6d  |...v.'.aD..\...m|
00000080  cb 7c 3d 04 ee 14 ba a4  b9 2f 00 b5 b0 8f 76 0f  |.|=....../....v.|
00000090  b1 71 42 e0 33 14 2b 94  e8 9c e2 20 4b 9c 52 9b  |.qB.3.+.... K.R.|
000000a0  69 b9 6e 68 db b2 28 a4  6a 7f 19 90 e6 19 a6 9f  |i.nh..(.j.......|
000000b0  8a 5e 1e 82 78 9a 41 63  55 5b f8 38 85 1c 3e 97  |.^..x.AcU[.8..>.|
000000c0  e6 ea a4 e7 30 3e 59 88  9d fe 81 72 7c 1e 3c 15  |....0>Y....r|.<.|
000000d0  e7 35 0f d5 c8 39 e6 94  df 48 ee e9 60 64 d4 1c  |.5...9...H..`d..|
000000e0  10 ca d8 b0 ba 8d 55 15  7f 97 66 8e b7 15 2e 31  |......U...f....1|
000000f0  c8 d1 d0 47 d5 bc 51 fe  0f 11 36 44 93 37 f4 05  |...G..Q...6D.7..|

Peer-to-peer

155 datagrams from 8 sources

File-sharing clients trying to reach a peer that used one of these addresses before. This is not scanning, so it is left out of every other figure on this page.

Destination ports

Networks

Countries

Source addresses (unverified)

AddressNetworkCcSendsDatagramsLast seen (UTC)
93.176.159.110AS15704 Xtra Telecom S.A.ESBitTorrent1132026-10-10 08:57
213.194.151.28AS15704 Xtra Telecom S.A.ESBitTorrent122026-10-10 21:31
66.81.186.100AS15704 Xtra Telecom S.A.ESBitTorrent92026-10-05 22:12
178.237.237.30AS15704 Xtra Telecom S.A.ESBitTorrent92026-10-07 18:28
139.47.33.48AS15704 Xtra Telecom S.A.ESBitTorrent72026-10-09 09:09
78.30.6.12AS15704 Xtra Telecom S.A.ESBitTorrent32026-10-07 12:26
93.156.194.66AS15704 Xtra Telecom S.A.ESUnrecognised22026-10-06 21:35
213.194.151.47AS15704 Xtra Telecom S.A.ESSOCKS512026-10-07 14:54
139.47.42.101AS15704 Xtra Telecom S.A.ESBitTorrent12026-10-09 21:01
46.6.116.110AS15704 Xtra Telecom S.A.ESBitTorrent12026-10-09 16:18
93.156.198.42AS15704 Xtra Telecom S.A.ESSOCKS512026-10-08 16:49
207.188.144.140AS15704 Xtra Telecom S.A.ESUnrecognised12026-10-05 14:30
93.156.195.170AS15704 Xtra Telecom S.A.ESUnrecognised12026-10-10 10:00

Latest datagrams