UDP traffic
Datagrams matching asn:22047 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.
A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.
943
Datagrams
16
Source addresses
1
Networks
1
Countries
13
Destination ports
Traffic by type
Other services
5 datagrams from 4 sourcesFirst packets of sessions with VPN, voice, tunnelling, database and management services.
Latest SOCKS5 datagram, to 40001/udp
payload bytes
00000000 05 00 ff ff 00 fe fe fe fe fd fd fd fd 12 34 56 |..............4V| 00000010 78 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |x...............| 00000020 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000050 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000060 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000070 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000080 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000090 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 000000a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 000000b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 000000c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 000000d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 000000e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 000000f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
Unrecognised
7 datagrams from 5 sourcesDatagrams no decoder recognised. Their first bytes are kept.
Latest Unrecognised datagram, to 30864/udp
payload bytes
00000000 4d 1a 9f 1a dc ef c6 5b 19 9c a3 7f 54 ef 60 7f |M......[....T.`.|
00000010 87 df cf 9d ed 7b 1b f1 83 72 3b 92 df 35 59 ea |.....{...r;..5Y.|
00000020 f4 fc 89 09 3b 2a 67 23 be eb 81 6a fc dc 55 49 |....;*g#...j..UI|
00000030 7e e7 7d 0f 58 22 51 15 57 e7 e8 70 8a 67 bd 97 |~.}.X"Q.W..p.g..|
00000040 14 24 1b 77 4d 8b c4 eb 3d 1b 21 dc 04 b6 dc a0 |.$.wM...=.!.....|
00000050 8f 1d 49 0e e8 61 18 c1 05 72 34 15 31 8a 1d 50 |..I..a...r4.1..P|
00000060 d8 40 fe 16 ce 74 eb 14 0c 88 f9 a2 60 d2 09 1e |.@...t......`...|
00000070 f9 a9 15 fa 71 ff 17 b5 37 b8 c0 db fd eb 0a 8b |....q...7.......|
00000080 04 c1 07 dc 82 41 e1 d6 69 5a 3e 08 90 0d b7 d4 |.....A..iZ>.....|
00000090 e3 f9 5a 36 fb 43 6b ea cd a1 7c 10 df f5 cb 7c |..Z6.Ck...|....||
000000a0 44 8e bf 9d 93 72 7b 2d 38 cc fc d8 f5 bf ba fb |D....r{-8.......|
000000b0 68 c3 16 9a 53 d5 0f 6c e6 49 ac 52 51 11 c7 7c |h...S..l.I.RQ..||
000000c0 22 90 e6 50 20 72 51 42 f5 e0 82 72 6d 3a 8b 36 |"..P rQB...rm:.6|
000000d0 1e db 88 52 1d 63 81 9b d0 bd 61 fe 23 a8 56 91 |...R.c....a.#.V.|
000000e0 3c c1 12 85 08 c3 1b 15 46 73 67 e6 19 c8 54 c2 |<.......Fsg...T.|
000000f0 4e ea 5c d1 ee 70 94 1a b9 cd b4 c7 56 c1 c4 a3 |N.\..p......V...|Peer-to-peer
931 datagrams from 8 sourcesFile-sharing clients trying to reach a peer that used one of these addresses before. This is not scanning, so it is left out of every other figure on this page.
Source addresses (unverified)
| Address | Network | Cc | Sends | Datagrams | Last seen (UTC) |
|---|---|---|---|---|---|
| 186.156.218.77 | AS22047 VTR BANDA ANCHA S.A. | CL | BitTorrent | 694 | 2026-10-11 05:06 |
| 186.156.166.12 | AS22047 VTR BANDA ANCHA S.A. | CL | BitTorrent | 88 | 2026-10-09 22:56 |
| 190.100.86.203 | AS22047 VTR BANDA ANCHA S.A. | CL | BitTorrent | 64 | 2026-10-11 04:58 |
| 201.239.0.110 | AS22047 VTR BANDA ANCHA S.A. | CL | BitTorrent | 25 | 2026-10-10 00:40 |
| 186.156.246.123 | AS22047 VTR BANDA ANCHA S.A. | CL | BitTorrent | 22 | 2026-10-06 01:55 |
| 200.104.128.229 | AS22047 VTR BANDA ANCHA S.A. | CL | BitTorrent | 20 | 2026-10-05 21:12 |
| 201.239.127.10 | AS22047 VTR BANDA ANCHA S.A. | CL | BitTorrent | 14 | 2026-10-10 23:23 |
| 190.100.16.184 | AS22047 VTR BANDA ANCHA S.A. | CL | BitTorrent | 4 | 2026-10-09 15:08 |
| 190.161.10.229 | AS22047 VTR BANDA ANCHA S.A. | CL | SOCKS5 | 4 | 2026-10-10 01:42 |
| 190.160.216.59 | AS22047 VTR BANDA ANCHA S.A. | CL | Unrecognised | 2 | 2026-10-07 06:50 |
| 200.86.173.74 | AS22047 VTR BANDA ANCHA S.A. | CL | SOCKS5 | 1 | 2026-10-09 17:59 |
| 190.44.172.221 | AS22047 VTR BANDA ANCHA S.A. | CL | Unrecognised | 1 | 2026-10-07 06:32 |
| 201.214.15.162 | AS22047 VTR BANDA ANCHA S.A. | CL | SOCKS5 | 1 | 2026-10-08 06:50 |
| 200.120.91.112 | AS22047 VTR BANDA ANCHA S.A. | CL | Unrecognised | 1 | 2026-10-06 00:39 |
| 201.241.149.15 | AS22047 VTR BANDA ANCHA S.A. | CL | SOCKS5 | 1 | 2026-10-08 13:12 |
| 190.100.92.84 | AS22047 VTR BANDA ANCHA S.A. | CL | Unrecognised | 1 | 2026-10-06 23:49 |
Latest datagrams
payload bytes
00000000 41 00 a0 0e 4b e4 40 28 00 00 00 00 00 10 00 00 |A...K.@(........| 00000010 fa e7 00 00 |....|
payload bytes
00000000 41 00 a0 0e 4b 88 a5 8d 00 00 00 00 00 10 00 00 |A...K...........| 00000010 fa e7 00 00 |....|
payload bytes
00000000 41 00 a0 0e 4b 58 44 24 00 00 00 00 00 10 00 00 |A...KXD$........| 00000010 fa e7 00 00 |....|
payload bytes
00000000 41 00 09 37 33 92 5c 8e 00 00 00 00 00 10 00 00 |A..73.\.........| 00000010 26 aa 00 00 |&...|
payload bytes
00000000 41 00 09 37 33 36 d9 0d 00 00 00 00 00 10 00 00 |A..736..........| 00000010 26 aa 00 00 |&...|
payload bytes
00000000 41 00 09 37 33 06 b6 a0 00 00 00 00 00 10 00 00 |A..73...........| 00000010 26 aa 00 00 |&...|
payload bytes
00000000 64 31 3a 61 64 32 3a 69 64 32 30 3a e0 55 39 90 |d1:ad2:id20:.U9.| 00000010 11 23 70 ac ff f6 a5 23 34 0a 69 87 0f 09 f4 fd |.#p....#4.i.....| 00000020 39 3a 69 6e 66 6f 5f 68 61 73 68 32 30 3a e0 55 |9:info_hash20:.U| 00000030 2a a2 71 a6 c6 cb 2f 9d b0 f1 ad b6 e5 07 ca 74 |*.q.../........t| 00000040 57 3b 65 31 3a 71 39 3a 67 65 74 5f 70 65 65 72 |W;e1:q9:get_peer| 00000050 73 31 3a 74 32 3a 70 ac 31 3a 76 34 3a 4c 54 01 |s1:t2:p.1:v4:LT.| 00000060 2f 31 3a 79 31 3a 71 65 |/1:y1:qe|
payload bytes
00000000 41 00 79 82 1c 24 c2 16 00 00 00 00 00 10 00 00 |A.y..$..........| 00000010 e6 be 00 00 |....|
payload bytes
00000000 41 00 79 82 1b c9 2e 7f 00 00 00 00 00 10 00 00 |A.y.............| 00000010 e6 be 00 00 |....|
payload bytes
00000000 41 00 79 82 1b 99 f7 1c 00 00 00 00 00 10 00 00 |A.y.............| 00000010 e6 be 00 00 |....|
payload bytes
00000000 41 00 63 94 65 9a c9 fd 00 00 00 00 00 00 00 00 |A.c.e...........| 00000010 0d 79 00 00 |.y..|
payload bytes
00000000 41 00 2b fc 11 9c 6e 3b 00 00 00 00 00 10 00 00 |A.+...n;........| 00000010 62 bc 00 00 |b...|
payload bytes
00000000 41 00 2b fc 11 40 89 5f 00 00 00 00 00 10 00 00 |A.+..@._........| 00000010 62 bc 00 00 |b...|
payload bytes
00000000 64 31 3a 61 64 32 3a 69 64 32 30 3a e0 55 39 90 |d1:ad2:id20:.U9.| 00000010 11 23 70 ac ff f6 a5 23 34 0a 69 87 0f 09 f4 fd |.#p....#4.i.....| 00000020 39 3a 69 6e 66 6f 5f 68 61 73 68 32 30 3a e0 55 |9:info_hash20:.U| 00000030 24 27 c4 91 f3 2e 5d b0 e0 fa c9 92 1b 9f 6d 90 |$'....].......m.| 00000040 b1 61 65 31 3a 71 39 3a 67 65 74 5f 70 65 65 72 |.ae1:q9:get_peer| 00000050 73 31 3a 74 32 3a f2 37 31 3a 76 34 3a 4c 54 01 |s1:t2:.71:v4:LT.| 00000060 2f 31 3a 79 31 3a 71 65 |/1:y1:qe|
payload bytes
00000000 41 00 2b fc 11 0d c6 fa 00 00 00 00 00 10 00 00 |A.+.............| 00000010 62 bc 00 00 |b...|