UDP traffic

Datagrams matching port:20793 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Your plan searches up to 7d, so 30d was shortened. Plans

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

Other services

1 datagrams from 1 source

First packets of sessions with VPN, voice, tunnelling, database and management services.

SOCKS5 1

Latest SOCKS5 datagram, to 20793/udp

·4Vx ·

payload bytes

00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 0a 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

Unrecognised

2 datagrams from 2 sources

Datagrams no decoder recognised. Their first bytes are kept.

Unrecognised 2

Latest Unrecognised datagram, to 20793/udp

DB2GETADDR·SQL09010·

payload bytes

00000000  44 42 32 47 45 54 41 44  44 52 00 53 51 4c 30 39  |DB2GETADDR.SQL09|
00000010  30 31 30 00                                       |010.|

Destination ports

20793/udp3

Networks

AS263656 BRSULNET TELECOM LTDA from 1 source1
AS398324 Censys, Inc. from 1 source1
AS38684 CMB Daejeon Broadcasting Co,.Ltd from 1 source1

Countries

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
177.52.145.49	AS263656 BRSULNET TELECOM LTDA	BR	SOCKS5	1	2026-10-06 07:16
110.35.12.15	AS38684 CMB Daejeon Broadcasting Co,.Ltd	KR	Unrecognised	1	2026-10-08 01:08
66.132.172.247	AS398324 Censys, Inc.	US	Unrecognised	1	2026-10-08 12:33

Latest datagrams

2026-10-08 12:33:4166.132.172.247to 20793/udpUnrecognisedUS

DB2GETADDR·SQL09010·

payload bytes

00000000  44 42 32 47 45 54 41 44  44 52 00 53 51 4c 30 39  |DB2GETADDR.SQL09|
00000010  30 31 30 00                                       |010.|

2026-10-08 01:08:36110.35.12.15to 20793/udpUnrecognisedKR

·U·_·,·h·P·q·h8ǧtv·GU·\·q·e{y#·Ku·m·q·=V·A·0=^·>8W·GO·y.·@·}·bR·

payload bytes

00000000  f4 b8 d9 55 81 b5 1a e5  c4 5f ac 2c b1 93 68 90  |...U....._.,..h.|
00000010  50 87 ee 08 71 8d 68 38  c7 a7 74 76 a3 47 55 a2  |P...q.h8..tv.GU.|
00000020  be 80 fd de 15 9d 82 a2  1d 5c 1b 71 c2 65 7b 79  |.........\.q.e{y|
00000030  23 e2 b1 4b 75 b4 6d fd  71 e4 3d 56 01 ce ca f4  |#..Ku.m.q.=V....|
00000040  41 8a ae 30 3d 5e f0 a0  3e 38 57 19 d3 47 4f bb  |A..0=^..>8W..GO.|
00000050  79 2e f7 ff 0c 86 d4 dd  40 c3 e2 7d f0 62 52 bc  |y.......@..}.bR.|
00000060  e5 17 90 fa 5d 0a 0d 83  bf 21 9e e8 be 9b f4 c7  |....]....!......|
00000070  9a 93 a1 bd 91 39 15 56  35 79 9f 4f 13 32 d5 2c  |.....9.V5y.O.2.,|
00000080  50 49 59 9d db 32 7f 62  70 b9 9d d6 1a 4c 5d 53  |PIY..2.bp....L]S|
00000090  e8 9c 19 04 5a 9f 6b 9f  fe e3 06 a4 f8 56 82 1d  |....Z.k......V..|
000000a0  7c 77 b4 d5 df b3 e6 16  ee bb 6c 85 2d 08 56 8a  ||w........l.-.V.|
000000b0  8c 81 2f fc 9d ad 74 df  56 ce 27 3f ff be 0a 05  |../...t.V.'?....|
000000c0  33 7c a9 85 5e 31 cb ff  8f 05 9f fe e5 a1 32 ae  |3|..^1........2.|
000000d0  f4 18 b4 60 7d 94 53 c6  45 42 e6 c0 35 ee e0 fb  |...`}.S.EB..5...|
000000e0  05 3a 53 3b 6e b1 f9 61  7e 23 ff 93 72 e6 92 6f  |.:S;n..a~#..r..o|
000000f0  97 7a b3 cd 8e d0 6d 61  0e eb e3 0b 76 3d ba f3  |.z....ma....v=..|
... 512 bytes shown in part

2026-10-06 07:16:14177.52.145.49to 20793/udpSOCKS5BR

·4Vx ·

payload bytes

00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 0a 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
... 512 bytes shown in part