HoneyLabs

UDP traffic

Datagrams matching asn:53236 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

4

Datagrams

1

Source addresses

1

Networks

1

Countries

3

Destination ports

Traffic by type

Other services

1 datagrams from 1 source

First packets of sessions with VPN, voice, tunnelling, database and management services.

Latest SOCKS5 datagram, to 443/udp

·4Vx·

payload bytes
00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 08 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

Unrecognised

3 datagrams from 1 source

Datagrams no decoder recognised. Their first bytes are kept.

Latest Unrecognised datagram, to 58616/udp

·9· ·'·YxYO·#·ٶ2B·Y=r·TCe·Lѓڹ=Im.·i\·< ·adf[·@·[· ·J·&·lrʧ?TZ ·W·n·|}68R·9·:.ۍl·`·*·J·W;·g·Y_·nQ'·M·LTk5·F'#·O·;·I·g·]·;~·{`

payload bytes
00000000  10 39 a5 c1 b8 0a c4 27  b0 fa ef 90 e8 86 ca 59  |.9.....'.......Y|
00000010  78 59 4f b1 23 14 d9 b6  32 42 0c 59 3d 72 fc 54  |xYO.#...2B.Y=r.T|
00000020  43 65 b3 9f 9a 02 b5 e1  4c d1 93 da b9 3d 49 6d  |Ce......L....=Im|
00000030  2e d4 d4 69 5c aa 3c 20  a6 06 61 64 66 5b e1 40  |...i\.< ..adf[.@|
00000040  f0 82 5b 8f 0d b7 f0 4a  c3 dc c8 26 17 89 b8 6c  |..[....J...&...l|
00000050  72 ca a7 3f 54 5a 20 f0  57 ae 6e 90 7c 7d 36 38  |r..?TZ .W.n.|}68|
00000060  52 d4 c3 39 c4 db c3 cb  fd c8 3a 2e db 8d 6c a5  |R..9......:...l.|
00000070  60 bc 2a 82 1a 4a e2 57  3b 1d 67 af 59 5f a4 6e  |`.*..J.W;.g.Y_.n|
00000080  51 27 ba b9 e6 18 4d fc  91 4c 54 6b 35 88 46 27  |Q'....M..LTk5.F'|
00000090  23 a3 ae 4f 18 08 b0 db  3b e7 49 12 67 c2 5d 01  |#..O....;.I.g.].|
000000a0  d4 ce d0 3b 7e f1 7b 60  75 b2 56 3d 42 01 f7 d2  |...;~.{`u.V=B...|
000000b0  a6 d3 ec 6f 24 2f a3 d0  5f ea ee 58 11 0d 79 32  |...o$/.._..X..y2|
000000c0  1b 99 01 3b 50 4b 12 f2  5f fb 81 dd 7b 74 6a 27  |...;PK.._...{tj'|
000000d0  cc f8 94 10 45 79 bc 70  0e 2f 35 a2 9f 5e 88 d6  |....Ey.p./5..^..|
000000e0  1a 8e 6d 61 23 a5 88 f2  23 a9 ce f9 23 6c 26 6d  |..ma#...#...#l&m|
000000f0  c3 22 36 60 5b 32 20 d7  2d 1e 2b 5b 1f 26 32 05  |."6`[2 .-.+[.&2.|

Destination ports

Networks

Countries

Source addresses (unverified)

AddressNetworkCcSendsDatagramsLast seen (UTC)
177.10.123.26AS53236 ACESSO Internet FibraBRUnrecognised42026-10-10 07:51

Latest datagrams