HoneyLabs

UDP traffic

Datagrams matching country:AZ sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

3

Datagrams

3

Source addresses

3

Networks

1

Countries

3

Destination ports

Traffic by type

Other services

1 datagrams from 1 source

First packets of sessions with VPN, voice, tunnelling, database and management services.

Latest SOCKS5 datagram, to 36767/udp

·4Vx·

payload bytes
00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 06 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

Unrecognised

2 datagrams from 2 sources

Datagrams no decoder recognised. Their first bytes are kept.

Latest Unrecognised datagram, to 65413/udp

·@·p4· h·ӱH·>·V u·}·>·J·O·m·;· L+x·1·2x·"[·^w·jq·÷:PĖͣ·<·^>·t·/_>·m·I·*u·6·՟f|·={H·'Q· H·R· ·?7 W·

payload bytes
00000000  eb cd 40 1d 70 34 90 0d  68 c5 e7 d3 b1 48 84 bb  |..@.p4..h....H..|
00000010  e3 aa ec ac 3e 90 f8 56  20 0a 75 14 17 d9 7d 84  |....>..V .u...}.|
00000020  3e e0 4a e3 1f 9a d0 4f  de c0 b8 02 6d aa 8b c7  |>.J....O....m...|
00000030  3b bc 1d c1 89 20 4c 2b  78 d6 cf 1d 31 f6 13 32  |;.... L+x...1..2|
00000040  78 05 a4 ce 16 22 5b 07  f9 5e 77 d2 e4 6a 71 c7  |x...."[..^w..jq.|
00000050  ea c3 b7 3a 50 c4 96 cd  a3 bc 11 3c f0 5e 3e ff  |...:P......<.^>.|
00000060  74 9d f1 97 d1 2f 5f 3e  06 ae 6d 14 a6 ae d6 49  |t..../_>..m....I|
00000070  dd 2a 75 d3 ea 36 d6 d5  9f 66 7c 00 3d 7b 48 ac  |.*u..6...f|.={H.|
00000080  27 51 9c 0a 48 9e ce d4  fa 52 91 20 e7 82 cf 19  |'Q..H....R. ....|
00000090  19 ea 3f 37 0d 57 a3 b5  81 82 f5 fd 87 d8 49 65  |..?7.W........Ie|
000000a0  3e d2 cd                                          |>..|

Destination ports

Networks

Countries

Source addresses (unverified)

AddressNetworkCcSendsDatagramsLast seen (UTC)
185.43.189.131AS201167 Caspian Telecom LLCAZSOCKS512026-10-09 05:13
212.47.148.3AS8814 Aztelekom LLCAZUnrecognised12026-10-05 15:18
31.171.66.1AS50959 Beeonline OjscAZUnrecognised12026-10-08 18:45

Latest datagrams