HoneyLabs

UDP traffic

Datagrams matching asn:22047 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

943

Datagrams

16

Source addresses

1

Networks

1

Countries

13

Destination ports

Traffic by type

Other services

5 datagrams from 4 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

Latest SOCKS5 datagram, to 40001/udp

·4Vx ·

payload bytes
00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 09 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

Unrecognised

7 datagrams from 5 sources

Datagrams no decoder recognised. Their first bytes are kept.

Latest Unrecognised datagram, to 30864/udp

M·[·T·`·ϝ·{·r;·5Y· ;*g#·j·UI~·}·X"Q·W·p·g·$·wM·=·!·ܠ·I·a·r4·1·P·@·t·`· ·q·7· ·܂A·iZ>· ·Z6·Ck·͡|·|

payload bytes
00000000  4d 1a 9f 1a dc ef c6 5b  19 9c a3 7f 54 ef 60 7f  |M......[....T.`.|
00000010  87 df cf 9d ed 7b 1b f1  83 72 3b 92 df 35 59 ea  |.....{...r;..5Y.|
00000020  f4 fc 89 09 3b 2a 67 23  be eb 81 6a fc dc 55 49  |....;*g#...j..UI|
00000030  7e e7 7d 0f 58 22 51 15  57 e7 e8 70 8a 67 bd 97  |~.}.X"Q.W..p.g..|
00000040  14 24 1b 77 4d 8b c4 eb  3d 1b 21 dc 04 b6 dc a0  |.$.wM...=.!.....|
00000050  8f 1d 49 0e e8 61 18 c1  05 72 34 15 31 8a 1d 50  |..I..a...r4.1..P|
00000060  d8 40 fe 16 ce 74 eb 14  0c 88 f9 a2 60 d2 09 1e  |.@...t......`...|
00000070  f9 a9 15 fa 71 ff 17 b5  37 b8 c0 db fd eb 0a 8b  |....q...7.......|
00000080  04 c1 07 dc 82 41 e1 d6  69 5a 3e 08 90 0d b7 d4  |.....A..iZ>.....|
00000090  e3 f9 5a 36 fb 43 6b ea  cd a1 7c 10 df f5 cb 7c  |..Z6.Ck...|....||
000000a0  44 8e bf 9d 93 72 7b 2d  38 cc fc d8 f5 bf ba fb  |D....r{-8.......|
000000b0  68 c3 16 9a 53 d5 0f 6c  e6 49 ac 52 51 11 c7 7c  |h...S..l.I.RQ..||
000000c0  22 90 e6 50 20 72 51 42  f5 e0 82 72 6d 3a 8b 36  |"..P rQB...rm:.6|
000000d0  1e db 88 52 1d 63 81 9b  d0 bd 61 fe 23 a8 56 91  |...R.c....a.#.V.|
000000e0  3c c1 12 85 08 c3 1b 15  46 73 67 e6 19 c8 54 c2  |<.......Fsg...T.|
000000f0  4e ea 5c d1 ee 70 94 1a  b9 cd b4 c7 56 c1 c4 a3  |N.\..p......V...|

Peer-to-peer

931 datagrams from 8 sources

File-sharing clients trying to reach a peer that used one of these addresses before. This is not scanning, so it is left out of every other figure on this page.

Destination ports

Networks

Countries

Source addresses (unverified)

AddressNetworkCcSendsDatagramsLast seen (UTC)
186.156.218.77AS22047 VTR BANDA ANCHA S.A.CLBitTorrent6942026-10-11 05:06
186.156.166.12AS22047 VTR BANDA ANCHA S.A.CLBitTorrent882026-10-09 22:56
190.100.86.203AS22047 VTR BANDA ANCHA S.A.CLBitTorrent642026-10-11 04:58
201.239.0.110AS22047 VTR BANDA ANCHA S.A.CLBitTorrent252026-10-10 00:40
186.156.246.123AS22047 VTR BANDA ANCHA S.A.CLBitTorrent222026-10-06 01:55
200.104.128.229AS22047 VTR BANDA ANCHA S.A.CLBitTorrent202026-10-05 21:12
201.239.127.10AS22047 VTR BANDA ANCHA S.A.CLBitTorrent142026-10-10 23:23
190.100.16.184AS22047 VTR BANDA ANCHA S.A.CLBitTorrent42026-10-09 15:08
190.161.10.229AS22047 VTR BANDA ANCHA S.A.CLSOCKS542026-10-10 01:42
190.160.216.59AS22047 VTR BANDA ANCHA S.A.CLUnrecognised22026-10-07 06:50
200.86.173.74AS22047 VTR BANDA ANCHA S.A.CLSOCKS512026-10-09 17:59
190.44.172.221AS22047 VTR BANDA ANCHA S.A.CLUnrecognised12026-10-07 06:32
201.214.15.162AS22047 VTR BANDA ANCHA S.A.CLSOCKS512026-10-08 06:50
200.120.91.112AS22047 VTR BANDA ANCHA S.A.CLUnrecognised12026-10-06 00:39
201.241.149.15AS22047 VTR BANDA ANCHA S.A.CLSOCKS512026-10-08 13:12
190.100.92.84AS22047 VTR BANDA ANCHA S.A.CLUnrecognised12026-10-06 23:49

Latest datagrams