UDP traffic

Datagrams matching country:BR sent to HoneyLabs sensors over UDP in the last 24 hours. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

221

Datagrams

Source addresses

Networks

Countries

Destination ports

Protocols

raw from 38 sources89
bittorrent from 6 sources53
socks5 from 29 sources29
snmp from 5 sources23
dns from 1 source22
ssdp from 1 source3
nfs from 1 source1
xdmcp from 1 source1

Destination ports

39131/udp from 5 sources48
161/udp from 5 sources23
137/udp from 1 source9
427/udp from 1 source8
3389/udp from 1 source6
502/udp from 1 source6
27960/udp from 1 source5
5355/udp from 1 source5
17185/udp from 1 source5
6881/udp from 1 source5
30120/udp from 1 source4
389/udp from 1 source4

DNS questions

17 queries and 5 unsolicited answers. An answer nobody asked for means a resolver was given a forged source address.

DNS record types

Networks

AS401661 EMBNEX, LLC from 1 source75
AS269646 G4 Telecom Fibra from 1 source19
AS52793 Kelvyn Sat Comercio e telecomunicacoes L from 1 source16
AS27699 TELEFONICA BRASIL S.A from 3 sources13
AS215925 Vpsvault.host Ltd from 1 source10
AS262365 IBI TELECOM EIRELI from 1 source10
AS28573 Claro NXT Telecomunicacoes Ltda from 8 sources8
AS53077 ALOLTECH TELECOM LTDA from 1 source6
AS8167 V tal from 6 sources6
AS270577 NET TOP from 1 source4

Countries

BR Brazil221

Source addresses (unverified)

Address	Network	Cc	Datagrams	Last seen (UTC)
16.5.0.234	AS401661 EMBNEX, LLC	BR	75	2026-10-05 18:06
45.190.252.207	AS269646 G4 Telecom Fibra	BR	19	2026-10-05 17:49
177.200.149.189	AS52793 Kelvyn Sat Comercio e telecomunicacoes L	BR	16	2026-10-05 15:24
177.128.83.192	AS262365 IBI TELECOM EIRELI	BR	10	2026-10-05 13:03
45.205.1.231	AS215925 Vpsvault.host Ltd	BR	10	2026-10-05 17:53
187.75.226.144	AS27699 TELEFONICA BRASIL S.A	BR	6	2026-10-05 12:24
187.94.73.111	AS53077 ALOLTECH TELECOM LTDA	BR	6	2026-10-05 12:22
200.206.172.239	AS27699 TELEFONICA BRASIL S.A	BR	6	2026-10-05 14:04
187.94.15.237	AS270577 NET TOP	BR	4	2026-10-05 15:47
45.224.111.22	AS266911 VicNet Telecom	BR	2	2026-10-05 13:54
45.181.100.248	AS269182 PLUGAR TELECOM	BR	2	2026-10-05 16:46
186.249.147.91	AS28649 Desktop Sigmanet Comunicacao Multimidia	BR	2	2026-10-05 16:37
45.171.78.107	AS263527 SERRA GERAL SOLUCOES PARA INTERNET LTDA	BR	1	2026-10-05 14:28
187.23.124.142	AS28573 Claro NXT Telecomunicacoes Ltda	BR	1	2026-10-05 14:46
179.180.165.129	AS18881 TELEFONICA BRASIL S.A	BR	1	2026-10-05 16:18
177.44.78.197	AS28202 MASTER S/A	BR	1	2026-10-05 11:16
189.90.26.196	AS265141 RBT Internet	BR	1	2026-10-05 17:02
177.0.175.158	AS8167 V tal	BR	1	2026-10-05 15:35
186.193.229.82	AS262731 CTINET SOLUCOES EM CONECTIVIDADE E INFOR	BR	1	2026-10-05 17:13
177.192.23.94	AS28573 Claro NXT Telecomunicacoes Ltda	BR	1	2026-10-05 11:59

Latest datagrams

2026-10-05 18:06:4816.5.0.234to 30120/udprawBR

·getinfo

payload bytes

00000000  ff ff ff ff 67 65 74 69  6e 66 6f                 |....getinfo|

2026-10-05 18:05:2416.5.0.234to 30120/udprawBR

·getinfo

payload bytes

00000000  ff ff ff ff 67 65 74 69  6e 66 6f                 |....getinfo|

2026-10-05 18:05:1716.5.0.234to 30120/udprawBR

·getinfo

payload bytes

00000000  ff ff ff ff 67 65 74 69  6e 66 6f                 |....getinfo|

2026-10-05 18:04:1116.5.0.234to 30120/udprawBR

·getinfo

payload bytes

00000000  ff ff ff ff 67 65 74 69  6e 66 6f                 |....getinfo|

2026-10-05 18:02:3016.5.0.234to 27960/udprawBR

·getinfo

payload bytes

00000000  ff ff ff ff 67 65 74 69  6e 66 6f                 |....getinfo|

2026-10-05 18:02:28189.113.8.254to 8082/udprawBR

·.· ·ehA&N·>Cd^/kkaU;3C·F·F·>Q-·`M·E5^k·s·A6k eV·F+GynR?m·\+i ·

payload bytes

00000000  10 2e 0e 20 0b 65 68 41  26 4e 15 1b 3e 43 64 5e  |... .ehA&N..>Cd^|
00000010  2f 6b 6b 61 55 3b 33 43  0b 46 7f 46 1d 3e 51 2d  |/kkaU;3C.F.F.>Q-|
00000020  12 60 4d 1d 45 35 5e 6b  03 73 06 41 36 6b 20 65  |.`M.E5^k.s.A6k e|
00000030  56 0b 46 2b 47 79 6e 52  3f 6d 18 5c 2b 69 09 e0  |V.F+GynR?m.\+i..|
00000040  e8                                                |.|

2026-10-05 18:01:2916.5.0.234to 27960/udprawBR

·getinfo

payload bytes

00000000  ff ff ff ff 67 65 74 69  6e 66 6f                 |....getinfo|

2026-10-05 17:58:5516.5.0.234to 27960/udprawBR

·getinfo

payload bytes

00000000  ff ff ff ff 67 65 74 69  6e 66 6f                 |....getinfo|

2026-10-05 17:57:4416.5.0.234to 27960/udprawBR

·getinfo

payload bytes

00000000  ff ff ff ff 67 65 74 69  6e 66 6f                 |....getinfo|

2026-10-05 17:57:2416.5.0.234to 27960/udprawBR

·getinfo

payload bytes

00000000  ff ff ff ff 67 65 74 69  6e 66 6f                 |....getinfo|

2026-10-05 17:56:2316.5.0.234to 27015/udprawBR

·TSource Engine Query·

payload bytes

00000000  ff ff ff ff 54 53 6f 75  72 63 65 20 45 6e 67 69  |....TSource Engi|
00000010  6e 65 20 51 75 65 72 79  00                       |ne Query.|

2026-10-05 17:55:1416.5.0.234to 27015/udprawBR

·TSource Engine Query·

payload bytes

00000000  ff ff ff ff 54 53 6f 75  72 63 65 20 45 6e 67 69  |....TSource Engi|
00000010  6e 65 20 51 75 65 72 79  00                       |ne Query.|

2026-10-05 17:53:4645.205.1.231to 3702/udprawBR

<tds:GetDeviceInformation />

payload bytes

00000000  3c 74 64 73 3a 47 65 74  44 65 76 69 63 65 49 6e  |<tds:GetDeviceIn|
00000010  66 6f 72 6d 61 74 69 6f  6e 20 2f 3e              |formation />|

2026-10-05 17:53:3316.5.0.234to 27015/udprawBR

·TSource Engine Query·

payload bytes

00000000  ff ff ff ff 54 53 6f 75  72 63 65 20 45 6e 67 69  |....TSource Engi|
00000010  6e 65 20 51 75 65 72 79  00                       |ne Query.|

2026-10-05 17:51:2416.5.0.234to 27015/udprawBR

·TSource Engine Query·

payload bytes

00000000  ff ff ff ff 54 53 6f 75  72 63 65 20 45 6e 67 69  |....TSource Engi|
00000010  6e 65 20 51 75 65 72 79  00                       |ne Query.|

2026-10-05 17:50:52167.249.151.101to 27026/udprawBR

· ·?·J-·4Vx ·r·R·

payload bytes

00000000  01 09 13 11 84 3f a0 4a  2d 00 ff ff 00 fe fe fe  |.....?.J-.......|
00000010  fe fd fd fd fd 12 34 56  78 20 10 db 72 9b 52 e7  |......4Vx ..r.R.|
00000020  bd                                                |.|

2026-10-05 17:50:48191.240.226.38to 39131/udpbittorrentBR

d1:ad2:id20:ָe·?Q·σW·OduUf·xq9:info_hash20:ָ`Z·3·a·~<%·e1:q9:get_peers1:t2:i·1:v4:LT·1:y1:qe

payload bytes

00000000  64 31 3a 61 64 32 3a 69  64 32 30 3a d6 b8 65 16  |d1:ad2:id20:..e.|
00000010  1a 3f 51 bf cf 83 57 ce  4f 64 75 55 66 ac 78 71  |.?Q...W.OduUf.xq|
00000020  39 3a 69 6e 66 6f 5f 68  61 73 68 32 30 3a d6 b8  |9:info_hash20:..|
00000030  60 5a 0c ab 95 33 c7 61  e3 f5 f5 04 e2 87 7e 3c  |`Z...3.a......~<|
00000040  25 e0 65 31 3a 71 39 3a  67 65 74 5f 70 65 65 72  |%.e1:q9:get_peer|
00000050  73 31 3a 74 32 3a 69 bc  31 3a 76 34 3a 4c 54 01  |s1:t2:i.1:v4:LT.|
00000060  02 31 3a 79 31 3a 71 65                           |.1:y1:qe|

2026-10-05 17:49:5945.190.252.207to 39131/udpbittorrentBR

d1:ad2:id20:r·L·g·4ND·9:info_hash20:r·#W·;·˂X·Dg|·e1:q9:get_peers1:t2: ·1:v4:LT·1:y1:qe

payload bytes

00000000  64 31 3a 61 64 32 3a 69  64 32 30 3a 72 8c 80 85  |d1:ad2:id20:r...|
00000010  9c ef 80 4c a5 67 7f ee  88 14 f7 34 4e 44 a8 c8  |...L.g.....4ND..|
00000020  39 3a 69 6e 66 6f 5f 68  61 73 68 32 30 3a 72 8c  |9:info_hash20:r.|
00000030  95 c1 e2 d2 23 57 1a 3b  9b cb 82 58 ec 44 67 7c  |....#W.;...X.Dg||
00000040  e3 a1 65 31 3a 71 39 3a  67 65 74 5f 70 65 65 72  |..e1:q9:get_peer|
00000050  73 31 3a 74 32 3a 0a ed  31 3a 76 34 3a 4c 54 01  |s1:t2:..1:v4:LT.|
00000060  02 31 3a 79 31 3a 71 65                           |.1:y1:qe|

2026-10-05 17:47:5845.190.252.207to 39131/udpbittorrentBR

d1:ad2:id20:r·L·g·4ND·9:info_hash20:r·{·S·a·h·e1:q9:get_peers1:t2:D·1:v4:LT·1:y1:qe

payload bytes

00000000  64 31 3a 61 64 32 3a 69  64 32 30 3a 72 8c 80 85  |d1:ad2:id20:r...|
00000010  9c ef 80 4c a5 67 7f ee  88 14 f7 34 4e 44 a8 c8  |...L.g.....4ND..|
00000020  39 3a 69 6e 66 6f 5f 68  61 73 68 32 30 3a 72 8c  |9:info_hash20:r.|
00000030  8e 89 d2 7b ec 53 99 e5  61 04 16 a7 81 e6 fc c6  |...{.S..a.......|
00000040  68 d6 65 31 3a 71 39 3a  67 65 74 5f 70 65 65 72  |h.e1:q9:get_peer|
00000050  73 31 3a 74 32 3a 44 a2  31 3a 76 34 3a 4c 54 01  |s1:t2:D.1:v4:LT.|
00000060  02 31 3a 79 31 3a 71 65                           |.1:y1:qe|

2026-10-05 17:46:5945.190.252.207to 39131/udpbittorrentBR

d1:ad2:id20:r·L·g·4ND·9:info_hash20:r·Zq·l·~·n·3·%\·{e1:q9:get_peers1:t2:3·1:v4:LT·1:y1:qe

payload bytes

00000000  64 31 3a 61 64 32 3a 69  64 32 30 3a 72 8c 80 85  |d1:ad2:id20:r...|
00000010  9c ef 80 4c a5 67 7f ee  88 14 f7 34 4e 44 a8 c8  |...L.g.....4ND..|
00000020  39 3a 69 6e 66 6f 5f 68  61 73 68 32 30 3a 72 8c  |9:info_hash20:r.|
00000030  95 5a 71 9a 6c 16 7e 13  87 6e b1 a6 33 e8 25 5c  |.Zq.l.~..n..3.%\|
00000040  fd 7b 65 31 3a 71 39 3a  67 65 74 5f 70 65 65 72  |.{e1:q9:get_peer|
00000050  73 31 3a 74 32 3a 33 a8  31 3a 76 34 3a 4c 54 01  |s1:t2:3.1:v4:LT.|
00000060  02 31 3a 79 31 3a 71 65                           |.1:y1:qe|

2026-10-05 17:46:2645.190.252.207to 39131/udpbittorrentBR

d1:ad2:id20:r·L·g·4ND·9:info_hash20:r·*·wqi·d·5·R'·j·e1:q9:get_peers1:t2:·w1:v4:LT·1:y1:qe

payload bytes

00000000  64 31 3a 61 64 32 3a 69  64 32 30 3a 72 8c 80 85  |d1:ad2:id20:r...|
00000010  9c ef 80 4c a5 67 7f ee  88 14 f7 34 4e 44 a8 c8  |...L.g.....4ND..|
00000020  39 3a 69 6e 66 6f 5f 68  61 73 68 32 30 3a 72 8c  |9:info_hash20:r.|
00000030  82 2a 89 77 71 69 80 64  ec 35 94 52 27 8f 6a 9c  |.*.wqi.d.5.R'.j.|
00000040  b0 fd 65 31 3a 71 39 3a  67 65 74 5f 70 65 65 72  |..e1:q9:get_peer|
00000050  73 31 3a 74 32 3a 0e 77  31 3a 76 34 3a 4c 54 01  |s1:t2:.w1:v4:LT.|
00000060  02 31 3a 79 31 3a 71 65                           |.1:y1:qe|

2026-10-05 17:42:57187.111.161.160to 48043/udprawBR

·/·4Vx·?·V·

payload bytes

00000000  01 e9 83 c0 a9 1a 87 2f  9e 00 ff ff 00 fe fe fe  |......./........|
00000010  fe fd fd fd fd 12 34 56  78 11 3f fc 06 56 a8 11  |......4Vx.?..V..|
00000020  1e                                                |.|

2026-10-05 17:42:2245.190.252.207to 39131/udpbittorrentBR

d1:ad2:id20:r·L·g·4ND·9:info_hash20:r·~䩵/· ·޿ፎb·$e1:q9:get_peers1:t2:)j1:v4:LT·1:y1:qe

payload bytes

00000000  64 31 3a 61 64 32 3a 69  64 32 30 3a 72 8c 80 85  |d1:ad2:id20:r...|
00000010  9c ef 80 4c a5 67 7f ee  88 14 f7 34 4e 44 a8 c8  |...L.g.....4ND..|
00000020  39 3a 69 6e 66 6f 5f 68  61 73 68 32 30 3a 72 8c  |9:info_hash20:r.|
00000030  9c 7e e4 a9 b5 2f fe b3  09 d5 de bf e1 8d 8e 62  |.~.../.........b|
00000040  14 24 65 31 3a 71 39 3a  67 65 74 5f 70 65 65 72  |.$e1:q9:get_peer|
00000050  73 31 3a 74 32 3a 29 6a  31 3a 76 34 3a 4c 54 01  |s1:t2:)j1:v4:LT.|
00000060  02 31 3a 79 31 3a 71 65                           |.1:y1:qe|

2026-10-05 17:41:0816.5.0.234to 19/udprawBR

payload bytes

00000000  00                                                |.|

2026-10-05 17:38:5816.5.0.234to 19/udprawBR

payload bytes

00000000  00                                                |.|