UDP traffic

Datagrams matching country:BR sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

179

Datagrams

Source addresses

Networks

Countries

Destination ports

Protocols

raw from 35 sources62
bittorrent from 5 sources41
socks5 from 26 sources26
snmp from 5 sources23
dns from 1 source22
ssdp from 1 source3
nfs from 1 source1
xdmcp from 1 source1

Destination ports

39131/udp from 4 sources36
161/udp from 5 sources23
137/udp from 1 source9
427/udp from 1 source8
502/udp from 1 source6
3389/udp from 1 source6
6881/udp from 1 source5
17185/udp from 1 source5
5355/udp from 1 source5
389/udp from 1 source4
500/udp from 1 source4
5353/udp from 1 source3

DNS questions

17 queries and 5 unsolicited answers. An answer nobody asked for means a resolver was given a forged source address.

DNS record types

Networks

AS401661 EMBNEX, LLC from 1 source53
AS52793 Kelvyn Sat Comercio e telecomunicacoes L from 1 source16
AS27699 TELEFONICA BRASIL S.A from 3 sources13
AS262365 IBI TELECOM EIRELI from 1 source10
AS269646 G4 Telecom Fibra from 1 source8
AS215925 Vpsvault.host Ltd from 1 source8
AS28573 Claro NXT Telecomunicacoes Ltda from 7 sources7
AS8167 V tal from 6 sources6
AS53077 ALOLTECH TELECOM LTDA from 1 source6
AS270577 NET TOP from 1 source4

Countries

BR Brazil179

Source addresses (unverified)

Address	Network	Cc	Datagrams	Last seen (UTC)
16.5.0.234	AS401661 EMBNEX, LLC	BR	53	2026-10-05 17:19
177.200.149.189	AS52793 Kelvyn Sat Comercio e telecomunicacoes L	BR	16	2026-10-05 15:24
177.128.83.192	AS262365 IBI TELECOM EIRELI	BR	10	2026-10-05 13:03
45.190.252.207	AS269646 G4 Telecom Fibra	BR	8	2026-10-05 17:23
45.205.1.231	AS215925 Vpsvault.host Ltd	BR	8	2026-10-05 17:24
187.75.226.144	AS27699 TELEFONICA BRASIL S.A	BR	6	2026-10-05 12:24
187.94.73.111	AS53077 ALOLTECH TELECOM LTDA	BR	6	2026-10-05 12:22
200.206.172.239	AS27699 TELEFONICA BRASIL S.A	BR	6	2026-10-05 14:04
187.94.15.237	AS270577 NET TOP	BR	4	2026-10-05 15:47
186.249.147.91	AS28649 Desktop Sigmanet Comunicacao Multimidia	BR	2	2026-10-05 16:37
45.224.111.22	AS266911 VicNet Telecom	BR	2	2026-10-05 13:54
45.181.100.248	AS269182 PLUGAR TELECOM	BR	2	2026-10-05 16:46
45.183.119.134	AS264223 MULTIPLIC COMUNICACAO E TECNOLOGIA LTDA	BR	1	2026-10-05 14:30
138.118.41.125	AS264259 INTERATIVA TECNOLOGIA, INFORMACAO E COMU	BR	1	2026-10-05 16:55
189.90.26.196	AS265141 RBT Internet	BR	1	2026-10-05 17:02
177.0.175.158	AS8167 V tal	BR	1	2026-10-05 15:35
186.193.229.82	AS262731 CTINET SOLUCOES EM CONECTIVIDADE E INFOR	BR	1	2026-10-05 17:13
177.192.23.94	AS28573 Claro NXT Telecomunicacoes Ltda	BR	1	2026-10-05 11:59
179.180.165.129	AS18881 TELEFONICA BRASIL S.A	BR	1	2026-10-05 16:18
45.160.231.44	AS270724 CLIENT.CO SERVICOS E TELECOMUNICACOES LT	BR	1	2026-10-05 14:16

Latest datagrams

2026-10-05 17:24:0745.205.1.231to 3702/udprawBR

<tds:GetDeviceInformation />

payload bytes

00000000  3c 74 64 73 3a 47 65 74  44 65 76 69 63 65 49 6e  |<tds:GetDeviceIn|
00000010  66 6f 72 6d 61 74 69 6f  6e 20 2f 3e              |formation />|

2026-10-05 17:23:2745.190.252.207to 39131/udpbittorrentBR

d1:ad2:id20:r·L·g·4ND·9:info_hash20:r·a·p·; ·T·-·e1:q9:get_peers1:t2:·O1:v4:LT·1:y1:qe

payload bytes

00000000  64 31 3a 61 64 32 3a 69  64 32 30 3a 72 8c 80 85  |d1:ad2:id20:r...|
00000010  9c ef 80 4c a5 67 7f ee  88 14 f7 34 4e 44 a8 c8  |...L.g.....4ND..|
00000020  39 3a 69 6e 66 6f 5f 68  61 73 68 32 30 3a 72 8c  |9:info_hash20:r.|
00000030  61 8d 70 bc 3b 20 92 54  ac 81 ba 14 85 14 2d 0c  |a.p.; .T......-.|
00000040  b3 fa 65 31 3a 71 39 3a  67 65 74 5f 70 65 65 72  |..e1:q9:get_peer|
00000050  73 31 3a 74 32 3a 03 4f  31 3a 76 34 3a 4c 54 01  |s1:t2:.O1:v4:LT.|
00000060  02 31 3a 79 31 3a 71 65                           |.1:y1:qe|

2026-10-05 17:19:2016.5.0.234to 17185/udpdnsBR

DNS response 15

payload bytes

00000000  1a 09 fa ba 00 00 00 00  00 00 00 02 55 55 55 55  |............UUUU|
00000010  00 00 00 01 00 00 00 01  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00  ff ff 55 12 00 00 00 3c  |..........U....<|
00000030  00 00 00 01 00 00 00 02  00 00 00 00 00 00 00 00  |................|

2026-10-05 17:18:3645.185.145.66to 34086/udprawBR

·肿>·f·G·h=ѝ·;&·

payload bytes

00000000  cb e8 82 bf 3e 84 fc cd  66 ab 47 ac 07 ee 68 3d  |....>...f.G...h=|
00000010  d1 9d 04 95 3b 26 f0 bc                           |....;&..|

2026-10-05 17:17:5116.5.0.234to 17185/udpdnsBR

DNS response 15

payload bytes

00000000  1a 09 fa ba 00 00 00 00  00 00 00 02 55 55 55 55  |............UUUU|
00000010  00 00 00 01 00 00 00 01  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00  ff ff 55 12 00 00 00 3c  |..........U....<|
00000030  00 00 00 01 00 00 00 02  00 00 00 00 00 00 00 00  |................|

2026-10-05 17:16:5716.5.0.234to 17185/udpdnsBR

DNS response 15

payload bytes

00000000  1a 09 fa ba 00 00 00 00  00 00 00 02 55 55 55 55  |............UUUU|
00000010  00 00 00 01 00 00 00 01  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00  ff ff 55 12 00 00 00 3c  |..........U....<|
00000030  00 00 00 01 00 00 00 02  00 00 00 00 00 00 00 00  |................|

2026-10-05 17:16:5345.190.252.207to 39131/udpbittorrentBR

d1:ad2:id20:r·L·g·4ND·9:info_hash20:r·Jh·B·G,"· %~·e1:q9:get_peers1:t2:>·1:v4:LT·1:y1:qe

payload bytes

00000000  64 31 3a 61 64 32 3a 69  64 32 30 3a 72 8c 80 85  |d1:ad2:id20:r...|
00000010  9c ef 80 4c a5 67 7f ee  88 14 f7 34 4e 44 a8 c8  |...L.g.....4ND..|
00000020  39 3a 69 6e 66 6f 5f 68  61 73 68 32 30 3a 72 8c  |9:info_hash20:r.|
00000030  4a 68 1b ba f4 f9 f1 42  1f 47 2c 22 8d ea 0d 25  |Jh.....B.G,"...%|
00000040  7e 92 65 31 3a 71 39 3a  67 65 74 5f 70 65 65 72  |~.e1:q9:get_peer|
00000050  73 31 3a 74 32 3a 3e 07  31 3a 76 34 3a 4c 54 01  |s1:t2:>.1:v4:LT.|
00000060  02 31 3a 79 31 3a 71 65                           |.1:y1:qe|

2026-10-05 17:13:5645.190.252.207to 39131/udpbittorrentBR

d1:ad2:id20:r·L·g·4ND·9:info_hash20:r·>ہ·Y·K·|·m·+e1:q9:get_peers1:t2:c·1:v4:LT·1:y1:qe

payload bytes

00000000  64 31 3a 61 64 32 3a 69  64 32 30 3a 72 8c 80 85  |d1:ad2:id20:r...|
00000010  9c ef 80 4c a5 67 7f ee  88 14 f7 34 4e 44 a8 c8  |...L.g.....4ND..|
00000020  39 3a 69 6e 66 6f 5f 68  61 73 68 32 30 3a 72 8c  |9:info_hash20:r.|
00000030  3e db 81 c8 59 c6 11 4b  08 03 f3 7c e7 f6 6d d7  |>...Y..K...|..m.|
00000040  fd 2b 65 31 3a 71 39 3a  67 65 74 5f 70 65 65 72  |.+e1:q9:get_peer|
00000050  73 31 3a 74 32 3a 63 ed  31 3a 76 34 3a 4c 54 01  |s1:t2:c.1:v4:LT.|
00000060  02 31 3a 79 31 3a 71 65                           |.1:y1:qe|

2026-10-05 17:13:5045.190.252.207to 39131/udpbittorrentBR

d1:ad2:id20:r·L·g·4ND·9:info_hash20:r·W·/w·o0·}/e1:q9:get_peers1:t2:>·1:v4:LT·1:y1:qe

payload bytes

00000000  64 31 3a 61 64 32 3a 69  64 32 30 3a 72 8c 80 85  |d1:ad2:id20:r...|
00000010  9c ef 80 4c a5 67 7f ee  88 14 f7 34 4e 44 a8 c8  |...L.g.....4ND..|
00000020  39 3a 69 6e 66 6f 5f 68  61 73 68 32 30 3a 72 8c  |9:info_hash20:r.|
00000030  fa fd 9d 57 1c 9e b6 b7  9b 2f 77 dc fc 6f 30 de  |...W...../w..o0.|
00000040  7d 2f 65 31 3a 71 39 3a  67 65 74 5f 70 65 65 72  |}/e1:q9:get_peer|
00000050  73 31 3a 74 32 3a 3e a5  31 3a 76 34 3a 4c 54 01  |s1:t2:>.1:v4:LT.|
00000060  02 31 3a 79 31 3a 71 65                           |.1:y1:qe|

2026-10-05 17:13:19186.193.229.82to 161/udpsnmpBR

09·public·,·CW·t·0·0 · +·0 · +·

payload bytes

00000000  30 39 02 01 00 04 06 70  75 62 6c 69 63 a0 2c 02  |09.....public.,.|
00000010  04 43 57 0c 74 02 01 00  02 01 00 30 1e 30 0d 06  |.CW.t......0.0..|
00000020  09 2b 06 01 80 02 01 01  01 00 05 00 30 0d 06 09  |.+..........0...|
00000030  2b 06 01 80 02 01 01 05  00 05 00                 |+..........|

2026-10-05 17:11:4116.5.0.234to 17185/udpdnsBR

DNS response 15

payload bytes

00000000  1a 09 fa ba 00 00 00 00  00 00 00 02 55 55 55 55  |............UUUU|
00000010  00 00 00 01 00 00 00 01  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00  ff ff 55 12 00 00 00 3c  |..........U....<|
00000030  00 00 00 01 00 00 00 02  00 00 00 00 00 00 00 00  |................|

2026-10-05 17:11:2116.5.0.234to 17185/udpdnsBR

DNS response 15

payload bytes

00000000  1a 09 fa ba 00 00 00 00  00 00 00 02 55 55 55 55  |............UUUU|
00000010  00 00 00 01 00 00 00 01  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00  ff ff 55 12 00 00 00 3c  |..........U....<|
00000030  00 00 00 01 00 00 00 02  00 00 00 00 00 00 00 00  |................|

2026-10-05 17:10:0016.5.0.234to 502/udprawBR

GET-REPORT-SVR-INFO

payload bytes

00000000  47 45 54 2d 52 45 50 4f  52 54 2d 53 56 52 2d 49  |GET-REPORT-SVR-I|
00000010  4e 46 4f                                          |NFO|

2026-10-05 17:09:4716.5.0.234to 502/udprawBR

GET-REPORT-SVR-INFO

payload bytes

00000000  47 45 54 2d 52 45 50 4f  52 54 2d 53 56 52 2d 49  |GET-REPORT-SVR-I|
00000010  4e 46 4f                                          |NFO|

2026-10-05 17:09:2116.5.0.234to 502/udprawBR

GET-REPORT-SVR-INFO

payload bytes

00000000  47 45 54 2d 52 45 50 4f  52 54 2d 53 56 52 2d 49  |GET-REPORT-SVR-I|
00000010  4e 46 4f                                          |NFO|

2026-10-05 17:09:1216.5.0.234to 502/udprawBR

GET-REPORT-SVR-INFO

payload bytes

00000000  47 45 54 2d 52 45 50 4f  52 54 2d 53 56 52 2d 49  |GET-REPORT-SVR-I|
00000010  4e 46 4f                                          |NFO|

2026-10-05 17:08:4316.5.0.234to 502/udprawBR

GET-REPORT-SVR-INFO

payload bytes

00000000  47 45 54 2d 52 45 50 4f  52 54 2d 53 56 52 2d 49  |GET-REPORT-SVR-I|
00000010  4e 46 4f                                          |NFO|

2026-10-05 17:08:4045.190.252.207to 39131/udpbittorrentBR

d1:ad2:id20:r·L·g·4ND·9:info_hash20:r·x·s<4·C~·Xr·,e1:q9:get_peers1:t2:=/1:v4:LT·1:y1:qe

payload bytes

00000000  64 31 3a 61 64 32 3a 69  64 32 30 3a 72 8c 80 85  |d1:ad2:id20:r...|
00000010  9c ef 80 4c a5 67 7f ee  88 14 f7 34 4e 44 a8 c8  |...L.g.....4ND..|
00000020  39 3a 69 6e 66 6f 5f 68  61 73 68 32 30 3a 72 8d  |9:info_hash20:r.|
00000030  78 86 fc 73 3c 34 d3 43  7e f7 15 58 72 d0 f3 19  |x..s<4.C~..Xr...|
00000040  db 2c 65 31 3a 71 39 3a  67 65 74 5f 70 65 65 72  |.,e1:q9:get_peer|
00000050  73 31 3a 74 32 3a 3d 2f  31 3a 76 34 3a 4c 54 01  |s1:t2:=/1:v4:LT.|
00000060  02 31 3a 79 31 3a 71 65                           |.1:y1:qe|

2026-10-05 17:07:3345.190.252.207to 39131/udpbittorrentBR

d1:ad2:id20:r·L·g·4ND·9:info_hash20:r·(·(Jt·=e1:q9:get_peers1:t2:o 1:v4:LT·1:y1:qe

payload bytes

00000000  64 31 3a 61 64 32 3a 69  64 32 30 3a 72 8c 80 85  |d1:ad2:id20:r...|
00000010  9c ef 80 4c a5 67 7f ee  88 14 f7 34 4e 44 a8 c8  |...L.g.....4ND..|
00000020  39 3a 69 6e 66 6f 5f 68  61 73 68 32 30 3a 72 8c  |9:info_hash20:r.|
00000030  86 28 ee ec e1 fc a3 28  4a 74 81 cc 06 bd 85 1f  |.(.....(Jt......|
00000040  cf 3d 65 31 3a 71 39 3a  67 65 74 5f 70 65 65 72  |.=e1:q9:get_peer|
00000050  73 31 3a 74 32 3a 6f 09  31 3a 76 34 3a 4c 54 01  |s1:t2:o.1:v4:LT.|
00000060  02 31 3a 79 31 3a 71 65                           |.1:y1:qe|

2026-10-05 17:07:08201.182.199.228to 57612/udpsocks5BR

·4Vx·

payload bytes

00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 0b 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
... 512 bytes shown in part

2026-10-05 17:05:5616.5.0.234to 502/udprawBR

GET-REPORT-SVR-INFO

payload bytes

00000000  47 45 54 2d 52 45 50 4f  52 54 2d 53 56 52 2d 49  |GET-REPORT-SVR-I|
00000010  4e 46 4f                                          |NFO|

2026-10-05 17:02:4645.190.252.207to 39131/udpbittorrentBR

d1:ad2:id20:r·L·g·4ND·9:info_hash20:r·ܘXH~G·"·ij·&·t·e1:q9:get_peers1:t2:H·1:v4:LT·1:y1:qe

payload bytes

00000000  64 31 3a 61 64 32 3a 69  64 32 30 3a 72 8c 80 85  |d1:ad2:id20:r...|
00000010  9c ef 80 4c a5 67 7f ee  88 14 f7 34 4e 44 a8 c8  |...L.g.....4ND..|
00000020  39 3a 69 6e 66 6f 5f 68  61 73 68 32 30 3a 72 8c  |9:info_hash20:r.|
00000030  dc 98 58 48 7e 47 a4 b0  22 7f f1 69 6a fc 26 a3  |..XH~G.."..ij.&.|
00000040  74 c1 65 31 3a 71 39 3a  67 65 74 5f 70 65 65 72  |t.e1:q9:get_peer|
00000050  73 31 3a 74 32 3a 48 d7  31 3a 76 34 3a 4c 54 01  |s1:t2:H.1:v4:LT.|
00000060  02 31 3a 79 31 3a 71 65                           |.1:y1:qe|

2026-10-05 17:02:4645.190.252.207to 39131/udpbittorrentBR

A·Sp·\·z·7·

payload bytes

00000000  41 00 53 70 ae 5c 9c 7a  00 00 00 00 00 00 00 00  |A.Sp.\.z........|
00000010  37 cb 00 00                                       |7...|

2026-10-05 17:02:23189.90.26.196to 52418/udpsocks5BR

·4Vx ·

payload bytes

00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 0a 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
... 512 bytes shown in part

2026-10-05 17:01:5016.5.0.234to 5353/udpdnsBR

DNS query PTR _services._dns-sd._udp.local

payload bytes

00000000  00 00 00 00 00 01 00 00  00 00 00 00 09 5f 73 65  |............._se|
00000010  72 76 69 63 65 73 07 5f  64 6e 73 2d 73 64 04 5f  |rvices._dns-sd._|
00000020  75 64 70 05 6c 6f 63 61  6c 00 00 0c 00 01        |udp.local.....|