HoneyLabs

UDP traffic

Datagrams matching asn:32934 sent to HoneyLabs sensors over UDP in the last 24 hours. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

44

Datagrams

3

Source addresses

1

Networks

2

Countries

8

Destination ports

Traffic by type

Other services

44 datagrams from 3 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

Latest STUN datagram, to 57048/udp

·T!·BAvEnWul0p/4x· Gx77:Y6nJ·ں·%[·W·)·$·n·jC&·c·-Z·[·d·hB·(· ·

payload bytes
00000000  00 01 00 54 21 12 a4 42  41 76 45 6e 57 75 6c 30  |...T!..BAvEnWul0|
00000010  70 2f 34 78 00 06 00 09  47 78 37 37 3a 59 36 6e  |p/4x....Gx77:Y6n|
00000020  4a 00 00 00 da ba 00 04  00 01 25 5b c0 57 00 04  |J.........%[.W..|
00000030  00 08 03 84 80 29 00 08  00 00 00 00 00 00 00 00  |.....)..........|
00000040  00 24 00 04 6e 7f 1e ff  00 08 00 14 ef 8b d1 6a  |.$..n..........j|
00000050  43 26 ee 63 a1 2d 5a eb  5b ec 80 64 e7 68 42 af  |C&.c.-Z.[..d.hB.|
00000060  80 28 00 04 0a a5 13 f5                           |.(......|

Destination ports

Networks

Countries

Source addresses (unverified)

AddressNetworkCcSendsDatagramsLast seen (UTC)
57.144.145.135AS32934 Facebook, Inc.SGSTUN162026-10-10 12:44
57.144.153.135AS32934 Facebook, Inc.SGSTUN162026-10-11 00:17
57.145.19.135AS32934 Facebook, Inc.THSTUN122026-10-10 12:52

Latest datagrams