HoneyLabs

UDP traffic

Datagrams matching asn:206216 sent to HoneyLabs sensors over UDP in the last 24 hours. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

3

Datagrams

1

Source addresses

1

Networks

1

Countries

2

Destination ports

Traffic by type

Other services

1 datagrams from 1 source

First packets of sessions with VPN, voice, tunnelling, database and management services.

Latest Redis datagram, to 8082/udp

$.I·X$·K·%·3}q·{QG·}=t$T·z`t~·/G·k·S·

payload bytes
00000000  24 2e 49 02 58 24 07 4b  06 25 17 0e 33 7d 71 02  |$.I.X$.K.%..3}q.|
00000010  7b 51 47 11 19 7d 3d 74  24 54 19 7a 60 74 7e 04  |{QG..}=t$T.z`t~.|
00000020  2f 47 07 08 6b 0e 53 1c  0c                       |/G..k.S..|

Unrecognised

2 datagrams from 1 source

Datagrams no decoder recognised. Their first bytes are kept.

Latest Unrecognised datagram, to 1027/udp

{.+·KUvN·p3·/A`vh/v·?DPFY·Y& !g41m·cN!S·1·B·x*@n.·2~E·2((T·]·|]·`+,3,]6nn.·.·F.ODs[_·;b·g$·

payload bytes
00000000  7b 2e 2b 0f 05 4b 55 76  4e 1b 70 33 0f 2f 41 60  |{.+..KUvN.p3./A`|
00000010  76 68 2f 76 03 3f 44 50  46 59 1d 59 26 0d 09 21  |vh/v.?DPFY.Y&..!|
00000020  67 34 31 6d 00 06 63 4e  21 53 01 31 02 42 11 78  |g41m..cN!S.1.B.x|
00000030  2a 40 6e 2e 7f 32 7e 45  0c 1b 1f 32 28 28 54 0f  |*@n..2~E...2((T.|
00000040  5d 05 7c 5d 0b 60 2b 2c  33 2c 5d 36 6e 6e 2e 18  |].|].`+,3,]6nn..|
00000050  2e 1d 46 2e 4f 44 73 5b  5f 12 0e 07 3b 62 17 18  |..F.ODs[_...;b..|
00000060  67 24 82                                          |g$.|

Destination ports

Networks

Countries

Source addresses (unverified)

AddressNetworkCcSendsDatagramsLast seen (UTC)
207.241.172.146AS206216 Advin Services LLCDEUnrecognised32026-10-11 02:43

Latest datagrams