HoneyLabs

UDP traffic

Datagrams matching asn:329126 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Your plan searches up to 7d, so 30d was shortened. Plans

4

Datagrams

4

Source addresses

1

Networks

1

Countries

4

Destination ports

Traffic by type

Other services

1 datagrams from 1 source

First packets of sessions with VPN, voice, tunnelling, database and management services.

Latest SOCKS5 datagram, to 20829/udp

·4Vx·

payload bytes
00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 08 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

Unrecognised

3 datagrams from 3 sources

Datagrams no decoder recognised. Their first bytes are kept.

Latest Unrecognised datagram, to 47097/udp

·k㖜n·`·Y·,·#1·ʰSX·6·}·y·K·H·T·^·$x·]4a8v·#·#VQ)·V76·҂h}k_!·ƿ·G·8·`-$r·)·X·t·r·o·r·1·E·ML·1·.·\· 5u·[·-·j"·%·|·p ·

payload bytes
00000000  91 c3 c6 1f f5 6b e3 96  9c 6e 07 c9 60 c8 f3 05  |.....k...n..`...|
00000010  04 59 00 2c b2 23 31 a1  86 ca b0 53 58 b8 9b c8  |.Y.,.#1....SX...|
00000020  36 10 7d e6 f8 93 79 ce  4b 94 48 1b 02 b6 04 0e  |6.}...y.K.H.....|
00000030  54 eb f6 00 e1 5e 12 02  24 78 a7 5d 34 61 38 76  |T....^..$x.]4a8v|
00000040  ec 88 23 c1 7f 23 56 51  29 17 56 37 36 e1 d2 82  |..#..#VQ).V76...|
00000050  68 7d 6b 5f 21 e0 c6 bf  af 47 ae 38 dd ca 60 2d  |h}k_!....G.8..`-|
00000060  24 72 e4 29 d1 58 ab a1  74 e0 72 eb e5 e9 6f c0  |$r.).X..t.r...o.|
00000070  9e d6 10 ca dd 72 86 31  d9 45 8b 4d 4c ad 14 f2  |.....r.1.E.ML...|
00000080  b6 31 fc be 2e ac ee bc  e7 93 5c ab 0d 35 75 fc  |.1........\..5u.|
00000090  b4 da 5b a3 2d 9d 1d 6a  22 f8 91 25 c0 7c 19 70  |..[.-..j"..%.|.p|
000000a0  0d 86 ea 0d 68 86 98 8b  d1 2f 62 21 41 a8 26 9a  |....h..../b!A.&.|
000000b0  e6 8f a5 c3 3c fa 41 8c  c2 50 6d bc ae 83 a6 13  |....<.A..Pm.....|
000000c0  83 e4 93 fc 37 71 80 7f  45 d5 bd a9 2f 88 21 8e  |....7q..E.../.!.|
000000d0  94 d2 f5 ed d4 0f 80 91  5c f7 d0 d6 59 7d 32 54  |........\...Y}2T|
000000e0  39 64 10 17 a0 37 7f 86  24 5a 44 d7 20 2d 5b 10  |9d...7..$ZD. -[.|
000000f0  be b2 fe 84 b6 57 43 fb  80 a7 23 0e 49 b9 d8 c7  |.....WC...#.I...|

Destination ports

Networks

Countries

Source addresses (unverified)

AddressNetworkCcSendsDatagramsLast seen (UTC)
102.206.93.88AS329126 IIP1 Pty LtdZASOCKS512026-10-06 09:55
102.206.95.136AS329126 IIP1 Pty LtdZAUnrecognised12026-10-10 01:17
102.206.93.226AS329126 IIP1 Pty LtdZAUnrecognised12026-10-07 10:51
102.206.95.152AS329126 IIP1 Pty LtdZAUnrecognised12026-10-10 08:07

Latest datagrams