HoneyLabs

UDP traffic

Datagrams matching port:32229 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

2

Datagrams

2

Source addresses

2

Networks

2

Countries

1

Destination ports

Traffic by type

Other services

1 datagrams from 1 source

First packets of sessions with VPN, voice, tunnelling, database and management services.

Latest SOCKS5 datagram, to 32229/udp

·4Vx·

payload bytes
00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 06 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

Unrecognised

1 datagrams from 1 source

Datagrams no decoder recognised. Their first bytes are kept.

Latest Unrecognised datagram, to 32229/udp

·h2x·9\·[·u·h9˙·ʗS·?·k·f·ŹTm·9W·|·޵·;·_·d·d·PIo·|K!\·`Q&X·Vg+·j ·p·gp·]·^·_·\·P·ĕk·T·m·P1·p$·z·<·*"Ps·8·n·N

payload bytes
00000000  04 68 32 78 7f 07 88 39  5c de 5b c3 75 fc 00 68  |.h2x...9\.[.u..h|
00000010  39 cb 99 83 ca 97 53 fa  e2 1f e7 e7 3f b4 6b 88  |9.....S.....?.k.|
00000020  08 66 e6 c5 b9 54 6d a3  39 57 aa 7c df de b5 a9  |.f...Tm.9W.|....|
00000030  c7 3b 95 5f 10 64 94 96  64 fa a9 b8 88 88 ed bf  |.;._.d..d.......|
00000040  b1 d7 50 49 6f 8e d1 7c  4b 21 5c 8b 60 51 26 58  |..PIo..|K!\.`Q&X|
00000050  8a e8 04 97 f3 ae 56 67  2b 8d 6a 0d b7 70 ad 67  |......Vg+.j..p.g|
00000060  70 84 5d d7 5e 89 ae 05  15 5f f4 5c f4 b4 d0 50  |p.].^...._.\...P|
00000070  9a c4 95 6b cf 54 00 1a  6d ac f2 e4 13 d3 50 31  |...k.T..m.....P1|
00000080  b7 70 24 f4 d0 e4 9a ec  ea ac 7a 9d 1d 3c 05 2a  |.p$.......z..<.*|
00000090  22 50 73 fd 38 97 f4 c6  f0 6e a1 8e ed 4e 47 8d  |"Ps.8....n...NG.|
000000a0  27 ed d2 ea 12 ea fd 88  13 c3 ae 0d 6d d4 29 ba  |'...........m.).|
000000b0  da ad ef c7 4f 62 25 a0  03 9b e8 db af b6 96 2f  |....Ob%......../|
000000c0  fa 4f ad 95 1a 70 11 1e  58 c0 be 81 0e 3d 07 1b  |.O...p..X....=..|
000000d0  0b 73 2a e4 34 5e 2e 71  49 ec e5 06 d6 4e 28 24  |.s*.4^.qI....N($|
000000e0  73 d3 2d 93 dc e0 f1 90  2f d1 5f b9 2c 66 67 df  |s.-...../._.,fg.|
000000f0  f8 80 2c 22 61 73 c4 3d  5f 0b 55 7a 3f 54 e7 9e  |..,"as.=_.Uz?T..|

Destination ports

Networks

Countries

Source addresses (unverified)

AddressNetworkCcSendsDatagramsLast seen (UTC)
45.165.172.239AS268684 PONTO CERTO INTERNETBRUnrecognised12026-10-08 01:32
89.181.233.208AS2860 Nos Comunicacoes, S.A.PTSOCKS512026-10-06 01:12

Latest datagrams