UDP traffic

Datagrams matching asn:328471 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Your plan searches up to 7d, so 30d was shortened. Plans

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

Other services

2 datagrams from 2 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

SOCKS5 2

Latest SOCKS5 datagram, to 55124/udp

·4Vx·

payload bytes

00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 07 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

Unrecognised

3 datagrams from 2 sources

Datagrams no decoder recognised. Their first bytes are kept.

Unrecognised 3

Latest Unrecognised datagram, to 55251/udp

·\·ao·4Ee·4Vx3~·gD·j·

payload bytes

00000000  01 5c 91 61 6f c1 34 45  65 00 ff ff 00 fe fe fe  |.\.ao.4Ee.......|
00000010  fe fd fd fd fd 12 34 56  78 33 7e 12 67 44 88 6a  |......4Vx3~.gD.j|
00000020  ed                                                |.|

Destination ports

Networks

AS328471 HERO TELECOMS (PTY) LTD from 3 sources5

Countries

ZA South Africa5

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
102.66.147.247	AS328471 HERO TELECOMS (PTY) LTD	ZA	Unrecognised	3	2026-10-09 08:57
102.66.145.113	AS328471 HERO TELECOMS (PTY) LTD	ZA	SOCKS5	1	2026-10-05 16:39
102.66.132.160	AS328471 HERO TELECOMS (PTY) LTD	ZA	Unrecognised	1	2026-10-06 10:36

Latest datagrams

2026-10-09 08:57:12102.66.147.247to 55124/udpSOCKS5ZA

·4Vx·

payload bytes

00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 07 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
... 512 bytes shown in part

2026-10-09 01:16:13102.66.147.247to 55251/udpUnrecognisedZA

·\·ao·4Ee·4Vx3~·gD·j·

payload bytes

00000000  01 5c 91 61 6f c1 34 45  65 00 ff ff 00 fe fe fe  |.\.ao.4Ee.......|
00000010  fe fd fd fd fd 12 34 56  78 33 7e 12 67 44 88 6a  |......4Vx3~.gD.j|
00000020  ed                                                |.|

2026-10-07 22:53:34102.66.147.247to 26985/udpUnrecognisedZA

·<·e2·4Vxt·3x·T

payload bytes

00000000  01 d2 df 3c dc eb 65 32  94 00 ff ff 00 fe fe fe  |...<..e2........|
00000010  fe fd fd fd fd 12 34 56  78 74 0f 33 78 e0 a9 54  |......4Vxt.3x..T|
00000020  0a                                                |.|

2026-10-06 10:36:41102.66.132.160to 47175/udpUnrecognisedZA

hJ·`·`·7·5￩·n֯·X·(·.·/v·8y·? ·;· ·r)· ·V·%Fׯ*产; dHt·Ƌ·w·ޅȶ·$Fx·𨕠

payload bytes

00000000  68 4a 17 84 a3 a1 17 60  12 60 f1 05 37 f7 d3 35  |hJ.....`.`..7..5|
00000010  ef bf a9 0b 80 1d 6e d6  af 06 11 58 d5 28 d1 f2  |......n....X.(..|
00000020  a7 a7 c1 b4 a2 2e e5 12  2f 76 11 c2 38 79 fd b9  |......../v..8y..|
00000030  3f 0d b8 00 b4 a3 13 3b  f7 0a fa 72 29 89 9c 20  |?......;...r).. |
00000040  f0 a9 8d e0 56 b8 25 46  d7 af 2a e4 ba a7 3b 20  |....V.%F..*...; |
00000050  64 48 74 ad 94 b2 f8 c6  8b e9 1d 77 a5 96 e6 8a  |dHt........w....|
00000060  f5 d8 de 85 c8 b6 b1 86  24 46 78 1e f0 a8 95 a0  |........$Fx.....|
00000070  67 d5 ff d3 26 3e f3 d8  7a 0a 66 04 2e f0 b9 09  |g...&>..z.f.....|
00000080  93 48 c0 24 23 40 83 65  33 a3 82 51 ad 11 7c 97  |.H.$#@.e3..Q..|.|
00000090  01 57 de b1 41 9b 23 ce  8d 22 fc 8a 06 bb 7a fd  |.W..A.#.."....z.|
000000a0  f7 9d 5f be ee e0 74 6c  a7 4f f7 07 d4 66 7d 2f  |.._...tl.O...f}/|
000000b0  e9 f6 8f 6d 26 18 37 a6  30 f1 00 1b 42 7f 8f df  |...m&.7.0...B...|
000000c0  e4 e2 a5 cd 5e 25 4d d3  76 c7 d8 cf a0 c4 09 6b  |....^%M.v......k|
000000d0  e7 b9 59 89 47 1a 84 33  36 88 6e 3a 1f 67 67 1f  |..Y.G..36.n:.gg.|
000000e0  95 73 b5 5b 86 0c f0 48  96 12 91 06 c4 d2 ea 22  |.s.[...H......."|
000000f0  d7 24 33 d2 2b 96 6f 1a  52 32 e4 94 f8 ae ec e0  |.$3.+.o.R2......|
... 512 bytes shown in part

2026-10-05 16:39:04102.66.145.113to 34740/udpSOCKS5ZA

·4Vx·

payload bytes

00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 08 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
... 512 bytes shown in part