UDP traffic

Datagrams matching asn:401661 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Datagrams

Source addresses

Networks

Countries

Destination ports

Protocols

raw from 1 source45
dns from 1 source22
bittorrent from 1 source5
nfs from 1 source1
xdmcp from 1 source1

Destination ports

137/udp from 1 source9
427/udp from 1 source8
502/udp from 1 source6
3389/udp from 1 source6
5355/udp from 1 source5
6881/udp from 1 source5
17185/udp from 1 source5
27960/udp from 1 source5
500/udp from 1 source4
27015/udp from 1 source4
19/udp from 1 source3
520/udp from 1 source3

DNS questions

17 queries and 5 unsolicited answers. An answer nobody asked for means a resolver was given a forged source address.

DNS record types

Networks

AS401661 EMBNEX, LLC from 1 source74

Countries

BR Brazil74

Source addresses (unverified)

Address	Network	Cc	Datagrams	Last seen (UTC)
16.5.0.234	AS401661 EMBNEX, LLC	BR	74	2026-10-05 18:05

Latest datagrams

2026-10-05 18:05:2416.5.0.234to 30120/udprawBR

·getinfo

payload bytes

00000000  ff ff ff ff 67 65 74 69  6e 66 6f                 |....getinfo|

2026-10-05 18:05:1716.5.0.234to 30120/udprawBR

·getinfo

payload bytes

00000000  ff ff ff ff 67 65 74 69  6e 66 6f                 |....getinfo|

2026-10-05 18:04:1116.5.0.234to 30120/udprawBR

·getinfo

payload bytes

00000000  ff ff ff ff 67 65 74 69  6e 66 6f                 |....getinfo|

2026-10-05 18:02:3016.5.0.234to 27960/udprawBR

·getinfo

payload bytes

00000000  ff ff ff ff 67 65 74 69  6e 66 6f                 |....getinfo|

2026-10-05 18:01:2916.5.0.234to 27960/udprawBR

·getinfo

payload bytes

00000000  ff ff ff ff 67 65 74 69  6e 66 6f                 |....getinfo|

2026-10-05 17:58:5516.5.0.234to 27960/udprawBR

·getinfo

payload bytes

00000000  ff ff ff ff 67 65 74 69  6e 66 6f                 |....getinfo|

2026-10-05 17:57:4416.5.0.234to 27960/udprawBR

·getinfo

payload bytes

00000000  ff ff ff ff 67 65 74 69  6e 66 6f                 |....getinfo|

2026-10-05 17:57:2416.5.0.234to 27960/udprawBR

·getinfo

payload bytes

00000000  ff ff ff ff 67 65 74 69  6e 66 6f                 |....getinfo|

2026-10-05 17:56:2316.5.0.234to 27015/udprawBR

·TSource Engine Query·

payload bytes

00000000  ff ff ff ff 54 53 6f 75  72 63 65 20 45 6e 67 69  |....TSource Engi|
00000010  6e 65 20 51 75 65 72 79  00                       |ne Query.|

2026-10-05 17:55:1416.5.0.234to 27015/udprawBR

·TSource Engine Query·

payload bytes

00000000  ff ff ff ff 54 53 6f 75  72 63 65 20 45 6e 67 69  |....TSource Engi|
00000010  6e 65 20 51 75 65 72 79  00                       |ne Query.|

2026-10-05 17:53:3316.5.0.234to 27015/udprawBR

·TSource Engine Query·

payload bytes

00000000  ff ff ff ff 54 53 6f 75  72 63 65 20 45 6e 67 69  |....TSource Engi|
00000010  6e 65 20 51 75 65 72 79  00                       |ne Query.|

2026-10-05 17:51:2416.5.0.234to 27015/udprawBR

·TSource Engine Query·

payload bytes

00000000  ff ff ff ff 54 53 6f 75  72 63 65 20 45 6e 67 69  |....TSource Engi|
00000010  6e 65 20 51 75 65 72 79  00                       |ne Query.|

2026-10-05 17:41:0816.5.0.234to 19/udprawBR

payload bytes

00000000  00                                                |.|

2026-10-05 17:38:5816.5.0.234to 19/udprawBR

payload bytes

00000000  00                                                |.|

2026-10-05 17:38:4416.5.0.234to 19/udprawBR

payload bytes

00000000  00                                                |.|

2026-10-05 17:37:4716.5.0.234to 520/udprawBR

payload bytes

00000000  01 01 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000010  00 00 00 00 00 00 00 00                           |........|

2026-10-05 17:34:5916.5.0.234to 520/udprawBR

payload bytes

00000000  01 01 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000010  00 00 00 00 00 00 00 00                           |........|

2026-10-05 17:34:0216.5.0.234to 520/udprawBR

payload bytes

00000000  01 01 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000010  00 00 00 00 00 00 00 00                           |........|

2026-10-05 17:30:0816.5.0.234to 2362/udprawBR

DIGI·

payload bytes

00000000  44 49 47 49 00 01 00 06  ff ff ff ff ff ff        |DIGI..........|

2026-10-05 17:28:1316.5.0.234to 2362/udprawBR

DIGI·

payload bytes

00000000  44 49 47 49 00 01 00 06  ff ff ff ff ff ff        |DIGI..........|

2026-10-05 17:27:3416.5.0.234to 2362/udprawBR

DIGI·

payload bytes

00000000  44 49 47 49 00 01 00 06  ff ff ff ff ff ff        |DIGI..........|

2026-10-05 17:19:2016.5.0.234to 17185/udpdnsBR

DNS response 15

payload bytes

00000000  1a 09 fa ba 00 00 00 00  00 00 00 02 55 55 55 55  |............UUUU|
00000010  00 00 00 01 00 00 00 01  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00  ff ff 55 12 00 00 00 3c  |..........U....<|
00000030  00 00 00 01 00 00 00 02  00 00 00 00 00 00 00 00  |................|

2026-10-05 17:17:5116.5.0.234to 17185/udpdnsBR

DNS response 15

payload bytes

00000000  1a 09 fa ba 00 00 00 00  00 00 00 02 55 55 55 55  |............UUUU|
00000010  00 00 00 01 00 00 00 01  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00  ff ff 55 12 00 00 00 3c  |..........U....<|
00000030  00 00 00 01 00 00 00 02  00 00 00 00 00 00 00 00  |................|

2026-10-05 17:16:5716.5.0.234to 17185/udpdnsBR

DNS response 15

payload bytes

00000000  1a 09 fa ba 00 00 00 00  00 00 00 02 55 55 55 55  |............UUUU|
00000010  00 00 00 01 00 00 00 01  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00  ff ff 55 12 00 00 00 3c  |..........U....<|
00000030  00 00 00 01 00 00 00 02  00 00 00 00 00 00 00 00  |................|

2026-10-05 17:11:4116.5.0.234to 17185/udpdnsBR

DNS response 15

payload bytes

00000000  1a 09 fa ba 00 00 00 00  00 00 00 02 55 55 55 55  |............UUUU|
00000010  00 00 00 01 00 00 00 01  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00  ff ff 55 12 00 00 00 3c  |..........U....<|
00000030  00 00 00 01 00 00 00 02  00 00 00 00 00 00 00 00  |................|