HoneyLabs

UDP traffic

Datagrams matching asn:34977 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Your plan searches up to 7d, so 30d was shortened. Plans

2

Datagrams

1

Source addresses

1

Networks

1

Countries

2

Destination ports

Traffic by type

Other services

1 datagrams from 1 source

First packets of sessions with VPN, voice, tunnelling, database and management services.

Latest Redis datagram, to 8192/udp

*ӡ·u·C·v·O·8·D·N·BV·l·­a·I!· C·_u·OE·o·=.·N!·ʲ·!ڀ·'`·A·O ·zֿ.·I·b·6·L{[·=·0v>PV·[3·h·o·Zm·x·J^·(<·$1nX^·

payload bytes
00000000  2a d3 a1 8d 7f 7f 93 75  01 bd c8 cd cf 43 ad f5  |*......u.....C..|
00000010  d3 e6 16 76 e9 07 90 98  4f 81 38 10 bc 0b 14 8f  |...v....O.8.....|
00000020  f3 44 f5 4e 8b ad 42 56  f5 6c a4 82 f6 de c2 ad  |.D.N..BV.l......|
00000030  61 c5 f4 49 21 17 99 0a  43 11 fb ab a4 5f 75 10  |a..I!...C...._u.|
00000040  06 4f 45 ff d0 6f a7 3d  2e 10 a5 4e 21 ee 97 f4  |.OE..o.=...N!...|
00000050  ca b2 7f 21 da 80 a0 27  60 c0 e2 41 9b c8 4f 0a  |...!...'`..A..O.|
00000060  fa c2 7a d6 bf 2e ff f5  a0 11 49 a2 62 1e 36 d6  |..z.......I.b.6.|
00000070  4c 7b 5b d6 ee 3d dd da  04 f3 f3 30 76 3e 50 56  |L{[..=.....0v>PV|
00000080  eb ae dc 5b 33 da dd 68  ff 6f 19 c7 e4 5a 6d 10  |...[3..h.o...Zm.|
00000090  f4 05 78 ae 4a 5e f2 28  3c aa 98 24 31 6e 58 5e  |..x.J^.(<..$1nX^|
000000a0  ab 97 61 30 e3 9f db 8a  ce 0d f3 6b 67 cf 47 f6  |..a0.......kg.G.|
000000b0  cb c2 a7 ca fb 78 d5 9c  d2 8b bb 6f b5 4d 4f a7  |.....x.....o.MO.|
000000c0  0d 72 0a 53 37 ca 2f 64  7b 38 79 d7 c4 e5 86 0a  |.r.S7./d{8y.....|
000000d0  83 64 1c 0a 85 69 78 10  11 31 dc 0e cb 5d 49 33  |.d...ix..1...]I3|
000000e0  5d 1f 98 da ca 71 7f 09  4d 9d c4 e6 5b 23 1a 9f  |]....q..M...[#..|
000000f0  12 a5 62 85 55 65 61 77  01 b0 8d b5 10 5d c3 fb  |..b.Ueaw.....]..|

Unrecognised

1 datagrams from 1 source

Datagrams no decoder recognised. Their first bytes are kept.

Latest Unrecognised datagram, to 33041/udp

·.·}·@.·)C·Ȟg·{"&·MUh·3>·Vf·B0m·zAXYĹz.ۿB·d·ڧɔ·oRN·^·F·+·_·t/%E·I·Z·c·Z·<·Q/·X·8·^ϒ·I·u|·}'· ·xf·$"·E?·9

payload bytes
00000000  96 ae 2e b4 7d 93 ab 40  2e f4 83 29 43 98 05 a6  |....}..@...)C...|
00000010  0b c8 9e 67 fe 8f b2 7b  22 26 a6 4d 55 68 eb c7  |...g...{"&.MUh..|
00000020  33 3e a4 56 66 86 86 b9  42 30 6d c5 7a 41 58 59  |3>.Vf...B0m.zAXY|
00000030  c4 b9 7a 2e db bf 42 a3  d1 64 01 0f da a7 c9 94  |..z...B..d......|
00000040  1e 98 86 6f 52 4e 8c d9  5e 9e af dd 46 05 81 04  |...oRN..^...F...|
00000050  a0 2b 9c 5f df 00 d9 e4  74 2f 25 45 a3 b9 82 49  |.+._....t/%E...I|
00000060  18 5a fd f7 c0 63 0e db  5a a9 3c b7 bf 51 2f eb  |.Z...c..Z.<..Q/.|
00000070  58 fb 1f f6 38 96 a7 5e  cf 92 83 0c 49 98 b0 9d  |X...8..^....I...|
00000080  9c 75 7c 94 7d 27 08 f6  99 c6 0d e6 c1 78 66 ff  |.u|.}'.......xf.|
00000090  24 22 c1 88 8e cf 45 3f  f1 ff f4 b7 be 39 98 7b  |$"....E?.....9.{|
000000a0  eb e4 c9 fa 83 7d e1 eb  79 1c fa fb 71 9f 15 41  |.....}..y...q..A|
000000b0  04 c5 4e f4 6b b3 a3 14  52 7c 91 3f c6 82 92 d2  |..N.k...R|.?....|
000000c0  75 1b 76 50 fb c2 47 59  6d 56 80 ed a9 7d 42 ab  |u.vP..GYmV...}B.|
000000d0  07 76 0f 4b 87 35 38 2c  53 3d e4 c3 b3 bf f3 7b  |.v.K.58,S=.....{|
000000e0  84 41 7c 4b 61 d1 05 a6  57 6e e9 44 5e 4f 01 a2  |.A|Ka...Wn.D^O..|
000000f0  fb 4a d8 0b 38 1c de 83  c2 41 4a 8c aa 94 99 24  |.J..8....AJ....$|

Destination ports

Networks

Countries

Source addresses (unverified)

AddressNetworkCcSendsDatagramsLast seen (UTC)
89.36.6.226AS34977 Procono S.A.ESUnrecognised22026-10-08 12:00

Latest datagrams