HoneyLabs

UDP traffic

Datagrams matching asn:53022 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

5

Datagrams

5

Source addresses

1

Networks

1

Countries

5

Destination ports

Traffic by type

Other services

2 datagrams from 2 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

Latest SOCKS5 datagram, to 2137/udp

·4Vx·

payload bytes
00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 06 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

Unrecognised

3 datagrams from 3 sources

Datagrams no decoder recognised. Their first bytes are kept.

Latest Unrecognised datagram, to 38436/udp

,,·d·p"·)N·[·+~·-·>·q·$·?·$·n·#·#J·@·6·yĠ!·N·X·W·!i[·ۮLq4J·B·U·h·G·}·a·3·wsβT·Zt·U;·aӚMb·v·Z·(· ·L·0·_₷_ ·

payload bytes
00000000  2c 2c 7f 64 9a 1a 70 22  95 ad 8e 29 4e ed a8 e3  |,,.d..p"...)N...|
00000010  5b a3 2b 7e ce c2 2d dc  db 3e 93 80 1a 71 f5 24  |[.+~..-..>...q.$|
00000020  a4 3f e7 07 24 b6 6e b5  b4 23 12 ac 8d ea e0 23  |.?..$.n..#.....#|
00000030  4a eb c4 1d 40 a1 db dd  cc 36 e9 e0 de 1c 79 c4  |J...@....6....y.|
00000040  a0 21 dd fe 9a 4e 0c fe  c1 58 fa 57 0c 21 69 5b  |.!...N...X.W.!i[|
00000050  e0 db ae 4c 71 34 4a d0  e9 42 f3 55 1a 68 80 47  |...Lq4J..B.U.h.G|
00000060  d1 ca cb 7d a5 90 a3 fc  d2 61 88 33 01 1f 0c 77  |...}.....a.3...w|
00000070  73 ce b2 54 f8 5a 74 b4  55 3b 82 c4 d3 c0 61 d3  |s..T.Zt.U;....a.|
00000080  9a 4d 62 11 d4 76 d7 07  e8 bd 5a d2 28 98 e0 0f  |.Mb..v....Z.(...|
00000090  d3 0a ed 0c 4c bc 30 b0  5f e2 82 b7 5f 0d a8 bc  |....L.0._..._...|
000000a0  8b 33 77 d8 15 26 90 ed  e2 b1 a0 4d fc 8f 9e b1  |.3w..&.....M....|
000000b0  2f 19 14 d0 b6 2d d8 bc  6e b4 bf f4 6a 24 1b b1  |/....-..n...j$..|
000000c0  07 8e b6 c1 1a be 7e bc  3f 71 6b b5 8c 2b 3b dd  |......~.?qk..+;.|
000000d0  9a 40 88 a8 ff b5 4f e1  60 c2 43 0f 4f ef 20 0b  |.@....O.`.C.O. .|
000000e0  21 f2 46 e1 bb 43 3a 7d  be de 7b 6c e9 1e 2d 60  |!.F..C:}..{l..-`|
000000f0  37 3f 2c b6 d2 95 a4 19  76 36 98 ab ba af 4a a3  |7?,.....v6....J.|

Destination ports

Networks

Countries

Source addresses (unverified)

AddressNetworkCcSendsDatagramsLast seen (UTC)
177.71.43.72AS53022 BROSEGHINI LTDA EPPBRUnrecognised12026-10-10 13:36
170.231.86.92AS53022 BROSEGHINI LTDA EPPBRUnrecognised12026-10-06 07:15
170.231.85.228AS53022 BROSEGHINI LTDA EPPBRSOCKS512026-10-07 05:12
177.221.230.252AS53022 BROSEGHINI LTDA EPPBRSOCKS512026-10-08 04:39
170.231.86.96AS53022 BROSEGHINI LTDA EPPBRUnrecognised12026-10-07 05:22

Latest datagrams