HoneyLabs

UDP traffic

Datagrams matching asn:265561 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Your plan searches up to 7d, so 30d was shortened. Plans

77

Datagrams

3

Source addresses

1

Networks

1

Countries

6

Destination ports

Traffic by type

Other services

1 datagrams from 1 source

First packets of sessions with VPN, voice, tunnelling, database and management services.

Latest SOCKS5 datagram, to 31448/udp

·4Vx·

payload bytes
00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 0b 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

Unrecognised

4 datagrams from 1 source

Datagrams no decoder recognised. Their first bytes are kept.

Latest Unrecognised datagram, to 14718/udp

7k·S·M·ٜcC·+·T· M·'· V(· ·I·L·X·D·A·ך·g· ·Q·'· ·6;J·k·4·+;(·#·9·vlLsd) ·=·J·G· |zw·z·V·X·5·:s·;·|4*·^j%·ցw*·פ·

payload bytes
00000000  37 6b 0c 53 b5 c2 4d cb  c5 d8 d9 9c 63 43 98 2b  |7k.S..M.....cC.+|
00000010  f4 c0 fd 1b 54 f1 00 be  a1 09 4d ec 10 cc 27 05  |....T.....M...'.|
00000020  20 56 28 f0 20 93 1b 49  a3 9b 9f cd 4c 89 e3 f6  | V(. ..I....L...|
00000030  e6 58 c8 44 cc 41 df d1  d7 9a ac e0 67 c6 ef 0a  |.X.D.A......g...|
00000040  b4 a0 e6 0c c5 51 1c 27  d3 0d e2 a3 36 3b 4a d7  |.....Q.'....6;J.|
00000050  6b c2 90 ee 05 34 c7 2b  3b 28 f8 98 99 23 ed 1e  |k....4.+;(...#..|
00000060  b5 39 06 76 6c 4c 73 64  29 09 93 3d e9 14 15 4a  |.9.vlLsd)..=...J|
00000070  8f 47 99 0d 7c 7a 77 f3  7a ff 08 56 0e 1b 58 b4  |.G..|zw.z..V..X.|
00000080  35 97 3a 73 b4 a7 d6 3b  9b 7c 34 2a b8 92 c0 5e  |5.:s...;.|4*...^|
00000090  6a 25 e4 f9 e5 d6 81 77  2a ac d8 fe 1b b4 d7 a4  |j%.....w*.......|
000000a0  9e 1a c0 7c 1d dd 8f 05  7a 98 0d 3e cc 84 63 27  |...|....z..>..c'|
000000b0  54 7e 0b 5b 1d 27 17 20  2d a5 8b 72 54 0a f5 49  |T~.[.'. -..rT..I|
000000c0  e0 24 0c 49 13 cd ba d0  e4 b8 37 ff fc aa 71 1e  |.$.I......7...q.|
000000d0  f6 a6 72 36 7e 27 a6 30  16 49 14 72 e2 2b a1 e1  |..r6~'.0.I.r.+..|
000000e0  36 64 47 42 d7 26 db 43  43 8b 57 93 f0 5c 41 7b  |6dGB.&.CC.W..\A{|
000000f0  7a e1 5e 02 78 92 29 98  ad 1f 0b b7 60 73 dc c6  |z.^.x.).....`s..|

Peer-to-peer

72 datagrams from 2 sources

File-sharing clients trying to reach a peer that used one of these addresses before. This is not scanning, so it is left out of every other figure on this page.

Destination ports

Networks

Countries

Source addresses (unverified)

AddressNetworkCcSendsDatagramsLast seen (UTC)
204.157.161.159AS265561 LANTOINTERNET SA DE CVMXBitTorrent412026-10-09 20:47
209.178.130.70AS265561 LANTOINTERNET SA DE CVMXBitTorrent312026-10-09 19:51
209.178.135.70AS265561 LANTOINTERNET SA DE CVMXUnrecognised52026-10-07 21:04

Latest datagrams