HoneyLabs

UDP traffic

Datagrams matching asn:210278 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

2

Datagrams

2

Source addresses

1

Networks

1

Countries

2

Destination ports

Traffic by type

Other services

1 datagrams from 1 source

First packets of sessions with VPN, voice, tunnelling, database and management services.

Latest SOCKS5 datagram, to 51138/udp

·4Vx·

payload bytes
00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 0b 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

Unrecognised

1 datagrams from 1 source

Datagrams no decoder recognised. Their first bytes are kept.

Latest Unrecognised datagram, to 443/udp

·/K·w· g9·]·B·p·$·Pt·,·u[R·{·edL.·g闞y@·p·ѹ·L!4·#·1·_·\|j·ju·Pк~O*·'_·@·Z+8·)&Ӛ·P·%Y·MS>·P+/S·[o·g·Xz·20·hO

payload bytes
00000000  0b ca 2f 4b 85 77 db fc  20 67 39 ed 5d 14 08 9e  |../K.w.. g9.]...|
00000010  05 ea 42 ab b7 c7 02 8c  70 b1 24 aa 95 f2 50 74  |..B.....p.$...Pt|
00000020  d8 2c fe c8 0f 75 5b 52  05 e1 7b dd 65 64 4c 2e  |.,...u[R..{.edL.|
00000030  98 15 ed 17 67 e9 97 9e  79 40 e6 9c cc 70 c4 d1  |....g...y@...p..|
00000040  b9 fe fa ae d0 e6 07 8f  c1 9a 4c 21 34 cc fc d3  |..........L!4...|
00000050  c4 ef 8a aa 23 ad 0b 1a  31 a6 d4 5f 93 5c 7c 6a  |....#...1.._.\|j|
00000060  d7 6a 75 97 af af 50 d0  ba 7e 4f 2a a4 27 5f a2  |.ju...P..~O*.'_.|
00000070  ea c2 40 9e 5a 2b 38 cb  29 26 d3 9a d0 50 ea c1  |..@.Z+8.)&...P..|
00000080  95 8d 25 59 10 1f 4d 53  3e 99 ac 50 2b 2f 53 c3  |..%Y..MS>..P+/S.|
00000090  f1 5b 6f b6 b3 67 e1 8d  58 7a b0 b9 32 30 c0 e3  |.[o..g..Xz..20..|
000000a0  68 4f bc 2f d3 69 e6 a9  0d a4 be 93 e8 57 1d 71  |hO./.i.......W.q|
000000b0  ac 91 17 bc 0c df 25 26  09 89 dd 40 ed 34 e4 db  |......%&...@.4..|
000000c0  cc 44 7e db 10 3d ab d3  ad 73 92 7f ee 63 2b 85  |.D~..=...s...c+.|
000000d0  a3 0f 5a ac 85 e4 93 26  e1 f4 70 ca 52 ca 9a 14  |..Z....&..p.R...|
000000e0  75 f8 c1 68 24 8e cf d1  00 bf 55 9c 82 3e 5f 5e  |u..h$.....U..>_^|
000000f0  6c 67 3a 39 c1 70 29 94  fb 70 b5 a5 e1 e1 b9 02  |lg:9.p)..p......|

Destination ports

Networks

Countries

Source addresses (unverified)

AddressNetworkCcSendsDatagramsLast seen (UTC)
101.57.194.113AS210278 Sky Italia srlITUnrecognised12026-10-07 00:40
101.56.167.66AS210278 Sky Italia srlITSOCKS512026-10-07 08:55

Latest datagrams