UDP traffic
Datagrams matching asn:22168 sent to HoneyLabs sensors over UDP in the last 24 hours. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.
A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.
5
Datagrams
5
Source addresses
1
Networks
1
Countries
5
Destination ports
Traffic by type
Other services
2 datagrams from 2 sourcesFirst packets of sessions with VPN, voice, tunnelling, database and management services.
Latest DTLS datagram, to 12446/udp
payload bytes
00000000 16 fe ff 00 00 00 00 00 00 00 00 00 36 01 00 00 |............6...| 00000010 2a 00 00 00 00 00 00 00 2a fe fd 00 00 00 00 7c |*.......*......|| 00000020 77 40 1e 8a c8 22 a0 a0 18 ff 93 08 ca ac 0a 64 |w@...".........d| 00000030 2f c9 22 64 bc 08 a8 16 89 19 30 00 00 00 02 00 |/."d......0.....| 00000040 2f 01 00 |/..|
Unrecognised
3 datagrams from 3 sourcesDatagrams no decoder recognised. Their first bytes are kept.
Latest Unrecognised datagram, to 3672/udp
payload bytes
00000000 06 10 02 01 00 0e 08 01 c7 a5 9f 11 84 c9 |..............|
Source addresses (unverified)
| Address | Network | Cc | Sends | Datagrams | Last seen (UTC) |
|---|---|---|---|---|---|
| 199.165.159.33 | AS22168 The Shadowserver Foundation, Inc. | US | DTLS | 1 | 2026-10-10 07:56 |
| 199.165.159.18 | AS22168 The Shadowserver Foundation, Inc. | US | Unrecognised | 1 | 2026-10-11 02:13 |
| 199.165.159.62 | AS22168 The Shadowserver Foundation, Inc. | US | Unrecognised | 1 | 2026-10-10 12:55 |
| 199.165.159.68 | AS22168 The Shadowserver Foundation, Inc. | US | Unrecognised | 1 | 2026-10-11 01:29 |
| 199.165.159.42 | AS22168 The Shadowserver Foundation, Inc. | US | DTLS | 1 | 2026-10-10 07:44 |
Latest datagrams
payload bytes
00000000 06 10 02 01 00 0e 08 01 c7 a5 9f 11 84 c9 |..............|
payload bytes
00000000 06 10 02 01 00 0e 08 01 c7 a5 9f 48 84 c9 |...........H..|
payload bytes
00000000 81 0a 00 11 01 04 00 05 6d 0c 0c 02 3f ff ff 19 |........m...?...| 00000010 4b |K|
payload bytes
00000000 16 fe ff 00 00 00 00 00 00 00 00 00 36 01 00 00 |............6...| 00000010 2a 00 00 00 00 00 00 00 2a fe fd 00 00 00 00 7c |*.......*......|| 00000020 77 40 1e 8a c8 22 a0 a0 18 ff 93 08 ca ac 0a 64 |w@...".........d| 00000030 2f c9 22 64 bc 08 a8 16 89 19 30 00 00 00 02 00 |/."d......0.....| 00000040 2f 01 00 |/..|
payload bytes
00000000 16 fe ff 00 00 00 00 00 00 00 00 00 36 01 00 00 |............6...| 00000010 2a 00 00 00 00 00 00 00 2a fe fd 00 00 00 00 7c |*.......*......|| 00000020 77 40 1e 8a c8 22 a0 a0 18 ff 93 08 ca ac 0a 64 |w@...".........d| 00000030 2f c9 22 64 bc 08 a8 16 89 19 30 00 00 00 02 00 |/."d......0.....| 00000040 2f 01 00 |/..|