UDP traffic

Datagrams matching asn:23969 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Your plan searches up to 7d, so 30d was shortened. Plans

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

Other services

2 datagrams from 2 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

SOCKS5 2

Latest SOCKS5 datagram, to 34999/udp

·4Vx ·

payload bytes

00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 0a 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

Unrecognised

3 datagrams from 3 sources

Datagrams no decoder recognised. Their first bytes are kept.

Unrecognised 3

Latest Unrecognised datagram, to 56582/udp

·QN·Y·4Vx·[

payload bytes

00000000  01 83 c8 51 4e b0 fd 59  ce 00 ff ff 00 fe fe fe  |...QN..Y........|
00000010  fe fd fd fd fd 12 34 56  78 11 cd 1b 12 c9 fd 93  |......4Vx.......|
00000020  5b                                                |[|

Destination ports

Networks

AS23969 TOT Public Company Limited from 5 sources5

Countries

TH Thailand5

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
1.1.241.219	AS23969 TOT Public Company Limited	TH	SOCKS5	1	2026-10-10 11:36
1.20.175.54	AS23969 TOT Public Company Limited	TH	Unrecognised	1	2026-10-10 17:28
125.24.129.171	AS23969 TOT Public Company Limited	TH	Unrecognised	1	2026-10-07 11:57
1.20.104.73	AS23969 TOT Public Company Limited	TH	SOCKS5	1	2026-10-09 03:24
1.20.218.10	AS23969 TOT Public Company Limited	TH	Unrecognised	1	2026-10-07 23:48

Latest datagrams

2026-10-10 17:28:441.20.175.54to 56582/udpUnrecognisedTH

·QN·Y·4Vx·[

payload bytes

00000000  01 83 c8 51 4e b0 fd 59  ce 00 ff ff 00 fe fe fe  |...QN..Y........|
00000010  fe fd fd fd fd 12 34 56  78 11 cd 1b 12 c9 fd 93  |......4Vx.......|
00000020  5b                                                |[|

2026-10-10 11:36:031.1.241.219to 34999/udpSOCKS5TH

·4Vx ·

payload bytes

00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 0a 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
... 512 bytes shown in part

2026-10-09 03:24:451.20.104.73to 55657/udpSOCKS5TH

·4Vx ·

payload bytes

00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 09 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
... 512 bytes shown in part

2026-10-07 23:48:491.20.218.10to 39527/udpUnrecognisedTH

·D·w·4VxN·(·

payload bytes

00000000  01 44 01 88 df 77 aa ed  91 00 ff ff 00 fe fe fe  |.D...w..........|
00000010  fe fd fd fd fd 12 34 56  78 4e fe 14 99 14 dc 28  |......4VxN.....(|
00000020  e3                                                |.|

2026-10-07 11:57:59125.24.129.171to 64188/udpUnrecognisedTH

·S·f4C*·w·{·1·-·ɠc·l·f(·b"/·-s·l·zB·8A·k·5·[·C·u>·u·s·y·v·i~·&·|'·brBy·\·

payload bytes

00000000  81 53 86 b9 de 66 34 43  2a b8 d7 0f ef e9 77 ba  |.S...f4C*.....w.|
00000010  7b bf e6 31 0f 2d 04 d1  ed c9 a0 63 e7 6c 9d 66  |{..1.-.....c.l.f|
00000020  28 1a 84 62 22 2f 18 92  2d 73 92 f7 6c c3 e5 7a  |(..b"/..-s..l..z|
00000030  42 c3 f2 38 41 9a c0 6b  0f 87 af 0f 35 db 05 5b  |B..8A..k....5..[|
00000040  c4 eb 43 f5 bf 75 3e 9a  08 0e da e9 75 bc 73 9c  |..C..u>.....u.s.|
00000050  f4 79 84 76 16 69 7e 1f  bf 8e ed 26 03 0e 7c 27  |.y.v.i~....&..|'|
00000060  c1 98 62 72 42 79 b8 9e  5c 84 6a d4 c4 84 a1 13  |..brBy..\.j.....|
00000070  e1 b2 63 75 66 a7 4c 28  57 8e 84 a8 27 b8 1c b7  |..cuf.L(W...'...|
00000080  9f e0 80 df 9e 1b ba 92  a8 c9 c0 1e d7 97 4f 4c  |..............OL|
00000090  d9 02 13 94 2e 9d 37 d6  c9 83 a2 ce e5 44 63 fe  |......7......Dc.|
000000a0  3a 94 6a f2 b4 b9 de 98  ad dd b8 42 73 fd 18 a6  |:.j........Bs...|
000000b0  ce 66 75 00 6d 6c 0b 6d  d4 81 da e9 f9 0a 48 88  |.fu.ml.m......H.|
000000c0  28 4e a0 23 35 26 fe 15  7f d1 17 28 46 09 c0 e0  |(N.#5&.....(F...|
000000d0  78 ca 30 c1 e5 93 1b 25  10 22 11 b3 0d 87 7b 53  |x.0....%."....{S|
000000e0  10 e4 5f 14 c5 d9 22 ed  d3 67 19 d7 d2 d1 d5 58  |.._..."..g.....X|
000000f0  bc c1 41 b3 e0 ca 56 48  c6 1b 6d 54 d8 0b c0 a2  |..A...VH..mT....|
... 512 bytes shown in part