UDP traffic

Datagrams matching asn:27699 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

115

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

Service queries

49 datagrams from 2 sources

Requests a service answers without a handshake. Scanners send them to find open DNS, NTP, SNMP or SSDP servers, which are also the servers reflection attacks abuse.

SNMP 49

Latest SNMP datagram, to 161/udp

0&·Admin·#h`·0·0 ·+·+·

payload bytes

00000000  30 26 02 01 00 04 05 41  64 6d 69 6e a1 1a 02 04  |0&.....Admin....|
00000010  23 68 60 b9 02 01 00 02  01 00 30 0c 30 0a 06 06  |#h`.......0.0...|
00000020  2b 06 01 02 01 2b 05 00                           |+....+..|

Other services

27 datagrams from 24 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

SOCKS5 27

Latest SOCKS5 datagram, to 15105/udp

·4Vx·

payload bytes

00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 07 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

Unrecognised

29 datagrams from 26 sources

Datagrams no decoder recognised. Their first bytes are kept.

Unrecognised 29

Latest Unrecognised datagram, to 5312/udp

N·Ͼ·T·L·C·y·չo/P·:·ڌ·c·ϊ·{,·<·v·`a·=·t7K·HT·0·-p&bF·!·<~k·w!·P{5xxBNz·Q·+,V)·<·S·z·d·̔·$u·

payload bytes

00000000  4e fb ad 97 cf be a1 0f  e7 54 0c 4c 03 8d 0f 43  |N........T.L...C|
00000010  a7 79 80 bb de ff d5 b9  6f 2f 50 97 13 cf 08 a8  |.y......o/P.....|
00000020  f4 d6 fd 10 3a f0 c0 06  da 8c fd 10 81 a9 63 fe  |....:.........c.|
00000030  cf 8a d7 00 cf eb 97 01  7b 2c f0 fd e5 bd 3c 1e  |........{,....<.|
00000040  1f cd 01 a2 03 83 76 1c  02 e7 99 60 61 ad b1 9b  |......v....`a...|
00000050  3d e2 74 37 4b 11 b2 9f  48 54 bc 30 9b 2d 70 26  |=.t7K...HT.0.-p&|
00000060  62 46 85 b6 b0 21 b2 b9  da 3c 7e 6b db d8 c5 cc  |bF...!...<~k....|
00000070  77 21 ef 50 7b 35 78 78  42 4e 7a e2 d6 51 9b 00  |w!.P{5xxBNz..Q..|
00000080  2b 2c 56 29 97 17 3c 90  8c 53 04 a0 bb b3 cb 7a  |+,V)..<..S.....z|
00000090  bd ff 64 e2 c9 cc 94 92  24 75 8e 10 e5 4a ff 37  |..d.....$u...J.7|
000000a0  b0 c2 a3 f2 a9 aa 65 c6  14 c0 21 a5 37 1e 44 68  |......e...!.7.Dh|
000000b0  cd e7 1e 84 05 25 c5 6f  89 69 4f c4 91 62 b2 8c  |.....%.o.iO..b..|
000000c0  45 dc e1 ff b1 23 4a b9  30 16 f6 06 95 5a 4f 19  |E....#J.0....ZO.|
000000d0  0d ae bd e8 00 4f 02 00  a6 9e f3 b6 1f e1 0b d5  |.....O..........|
000000e0  75 f0 c3 d0 22 df ab c2  7f 6f 87 e8 69 68 0e 62  |u..."....o..ih.b|
000000f0  05 7c 81 ad 58 f4 4f 31  99 99 60 e2 9c e8 3c f3  |.|..X.O1..`...<.|

Peer-to-peer

10 datagrams from 1 source

File-sharing clients trying to reach a peer that used one of these addresses before. This is not scanning, so it is left out of every other figure on this page.

BitTorrent 10

Amplification checks

Probes for services that answer a small request with a much larger reply, the property reflection attacks rely on.

Service	Port	Datagrams	Sources	Factor
SNMPv2	161/udp	49	2	6.3

The factor is how many bytes a reachable server can send back for each byte it receives, as published by CISA in alert TA14-017A.

Destination ports

161/udp SNMP49
39131/udp BitTorrent10
31789/udp SOCKS51
49042/udp SOCKS51
2888/udp SOCKS51
5312/udp1
5632/udp pcAnywhere1
7111/udp1
8869/udp SOCKS51
11324/udp1
14022/udp SOCKS51
15105/udp SOCKS51

Networks

AS27699 TELEFONICA BRASIL S.A from 48 sources115

Countries

BR Brazil115

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
187.75.226.144	AS27699 TELEFONICA BRASIL S.A	BR	SNMP	30	2026-10-09 21:23
200.206.172.239	AS27699 TELEFONICA BRASIL S.A	BR	SNMP	19	2026-10-08 12:37
189.79.0.124	AS27699 TELEFONICA BRASIL S.A	BR	BitTorrent	10	2026-10-09 02:55
177.118.147.46	AS27699 TELEFONICA BRASIL S.A	BR	SOCKS5	4	2026-10-09 00:26
187.74.77.61	AS27699 TELEFONICA BRASIL S.A	BR	Unrecognised	3	2026-10-09 13:09
189.79.18.96	AS27699 TELEFONICA BRASIL S.A	BR	Unrecognised	2	2026-10-07 19:41
187.116.121.165	AS27699 TELEFONICA BRASIL S.A	BR	SOCKS5	2	2026-10-08 13:45
177.188.79.253	AS27699 TELEFONICA BRASIL S.A	BR	SOCKS5	2	2026-10-07 19:03
177.68.163.123	AS27699 TELEFONICA BRASIL S.A	BR	SOCKS5	2	2026-10-07 23:41
152.250.221.15	AS27699 TELEFONICA BRASIL S.A	BR	SOCKS5	2	2026-10-07 05:26
189.69.196.29	AS27699 TELEFONICA BRASIL S.A	BR	Unrecognised	2	2026-10-08 20:58
177.118.174.204	AS27699 TELEFONICA BRASIL S.A	BR	SOCKS5	1	2026-10-10 14:16
189.110.233.14	AS27699 TELEFONICA BRASIL S.A	BR	Unrecognised	1	2026-10-09 21:45
201.92.249.254	AS27699 TELEFONICA BRASIL S.A	BR	SOCKS5	1	2026-10-07 10:58
179.111.16.21	AS27699 TELEFONICA BRASIL S.A	BR	Unrecognised	1	2026-10-07 16:08
177.138.170.125	AS27699 TELEFONICA BRASIL S.A	BR	Unrecognised	1	2026-10-09 22:57
177.197.64.243	AS27699 TELEFONICA BRASIL S.A	BR	Unrecognised	1	2026-10-07 12:15
201.27.160.17	AS27699 TELEFONICA BRASIL S.A	BR	Unrecognised	1	2026-10-07 11:43
177.139.20.135	AS27699 TELEFONICA BRASIL S.A	BR	SOCKS5	1	2026-10-08 18:15
189.68.93.33	AS27699 TELEFONICA BRASIL S.A	BR	Unrecognised	1	2026-10-08 03:42

Latest datagrams

2026-10-11 01:20:46187.56.221.213to 15105/udpSOCKS5BR

·4Vx·

payload bytes

00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 07 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
... 512 bytes shown in part

2026-10-10 15:05:49189.47.77.33to 2888/udpSOCKS5BR

·4Vx·

payload bytes

00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 07 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
... 512 bytes shown in part

2026-10-10 14:16:33177.118.174.204to 48577/udpSOCKS5BR

·4Vx·

payload bytes

00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 08 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
... 512 bytes shown in part

2026-10-09 22:57:12177.138.170.125to 5312/udpUnrecognisedBR

N·Ͼ·T·L·C·y·չo/P·:·ڌ·c·ϊ·{,·<·v·`a·=·t7K·HT·0·-p&bF·!·

payload bytes

00000000  4e fb ad 97 cf be a1 0f  e7 54 0c 4c 03 8d 0f 43  |N........T.L...C|
00000010  a7 79 80 bb de ff d5 b9  6f 2f 50 97 13 cf 08 a8  |.y......o/P.....|
00000020  f4 d6 fd 10 3a f0 c0 06  da 8c fd 10 81 a9 63 fe  |....:.........c.|
00000030  cf 8a d7 00 cf eb 97 01  7b 2c f0 fd e5 bd 3c 1e  |........{,....<.|
00000040  1f cd 01 a2 03 83 76 1c  02 e7 99 60 61 ad b1 9b  |......v....`a...|
00000050  3d e2 74 37 4b 11 b2 9f  48 54 bc 30 9b 2d 70 26  |=.t7K...HT.0.-p&|
00000060  62 46 85 b6 b0 21 b2 b9  da 3c 7e 6b db d8 c5 cc  |bF...!...<~k....|
00000070  77 21 ef 50 7b 35 78 78  42 4e 7a e2 d6 51 9b 00  |w!.P{5xxBNz..Q..|
00000080  2b 2c 56 29 97 17 3c 90  8c 53 04 a0 bb b3 cb 7a  |+,V)..<..S.....z|
00000090  bd ff 64 e2 c9 cc 94 92  24 75 8e 10 e5 4a ff 37  |..d.....$u...J.7|
000000a0  b0 c2 a3 f2 a9 aa 65 c6  14 c0 21 a5 37 1e 44 68  |......e...!.7.Dh|
000000b0  cd e7 1e 84 05 25 c5 6f  89 69 4f c4 91 62 b2 8c  |.....%.o.iO..b..|
000000c0  45 dc e1 ff b1 23 4a b9  30 16 f6 06 95 5a 4f 19  |E....#J.0....ZO.|
000000d0  0d ae bd e8 00 4f 02 00  a6 9e f3 b6 1f e1 0b d5  |.....O..........|
000000e0  75 f0 c3 d0 22 df ab c2  7f 6f 87 e8 69 68 0e 62  |u..."....o..ih.b|
000000f0  05 7c 81 ad 58 f4 4f 31  99 99 60 e2 9c e8 3c f3  |.|..X.O1..`...<.|
... 512 bytes shown in part

2026-10-09 21:45:11189.110.233.14to 22212/udpUnrecognisedBR

·Y·K٬C0·4Vx·c}·

payload bytes

00000000  01 9e 59 f3 4b d9 ac 43  30 00 ff ff 00 fe fe fe  |..Y.K..C0.......|
00000010  fe fd fd fd fd 12 34 56  78 01 63 7d f3 12 ae 10  |......4Vx.c}....|
00000020  d6                                                |.|

2026-10-09 21:23:23187.75.226.144to 161/udpSNMPBR

0&·Admin·#h`·0·0 ·+·+·

payload bytes

00000000  30 26 02 01 00 04 05 41  64 6d 69 6e a1 1a 02 04  |0&.....Admin....|
00000010  23 68 60 b9 02 01 00 02  01 00 30 0c 30 0a 06 06  |#h`.......0.0...|
00000020  2b 06 01 02 01 2b 05 00                           |+....+..|

2026-10-09 21:23:20187.75.226.144to 161/udpSNMPBR

0&·Admin·#h`·0·0 ·+·+·

payload bytes

00000000  30 26 02 01 00 04 05 41  64 6d 69 6e a1 1a 02 04  |0&.....Admin....|
00000010  23 68 60 b9 02 01 00 02  01 00 30 0c 30 0a 06 06  |#h`.......0.0...|
00000020  2b 06 01 02 01 2b 05 00                           |+....+..|

2026-10-09 21:23:17187.75.226.144to 161/udpSNMPBR

0&·Admin·#h`·0·0 ·+·+·

payload bytes

00000000  30 26 02 01 00 04 05 41  64 6d 69 6e a1 1a 02 04  |0&.....Admin....|
00000010  23 68 60 b9 02 01 00 02  01 00 30 0c 30 0a 06 06  |#h`.......0.0...|
00000020  2b 06 01 02 01 2b 05 00                           |+....+..|

2026-10-09 21:23:14187.75.226.144to 161/udpSNMPBR

0'·public·#h^l·0·0 ·+·+·

payload bytes

00000000  30 27 02 01 00 04 06 70  75 62 6c 69 63 a1 1a 02  |0'.....public...|
00000010  04 23 68 5e 6c 02 01 00  02 01 00 30 0c 30 0a 06  |.#h^l......0.0..|
00000020  06 2b 06 01 02 01 2b 05  00                       |.+....+..|

2026-10-09 21:23:11187.75.226.144to 161/udpSNMPBR

0'·public·#h^l·0·0 ·+·+·

payload bytes

00000000  30 27 02 01 00 04 06 70  75 62 6c 69 63 a1 1a 02  |0'.....public...|
00000010  04 23 68 5e 6c 02 01 00  02 01 00 30 0c 30 0a 06  |.#h^l......0.0..|
00000020  06 2b 06 01 02 01 2b 05  00                       |.+....+..|

2026-10-09 21:23:08187.75.226.144to 161/udpSNMPBR

0'·public·#h^l·0·0 ·+·+·

payload bytes

00000000  30 27 02 01 00 04 06 70  75 62 6c 69 63 a1 1a 02  |0'.....public...|
00000010  04 23 68 5e 6c 02 01 00  02 01 00 30 0c 30 0a 06  |.#h^l......0.0..|
00000020  06 2b 06 01 02 01 2b 05  00                       |.+....+..|

2026-10-09 17:31:10177.94.140.81to 57260/udpUnrecognisedBR

·49·h·0o·g·6`·X[·{z>·X+]}·F·6·&E·.·-)·r·M܊S·G·&·/·*·I·<?·v·2·dHJ%Vf·

payload bytes

00000000  1c 34 39 95 1b 1a 68 83  a6 d7 30 6f d1 67 a5 e4  |.49...h...0o.g..|
00000010  8d 36 60 b8 58 5b 1b 7b  7a 3e 7f 92 0b 58 2b 5d  |.6`.X[.{z>...X+]|
00000020  7d d9 46 e4 36 9f 26 45  06 f5 c1 2e d5 1b 2d 29  |}.F.6.&E......-)|
00000030  bc a2 72 fb cb 4d dc 8a  53 f0 94 ab 47 a5 26 ea  |..r..M..S...G.&.|
00000040  fd 9d 2f 84 a6 2a f5 ec  03 49 ef e0 c4 c4 3c 3f  |../..*...I....<?|
00000050  ab 76 04 c7 f7 d4 e1 82  f9 32 dc 18 c2 cf 1f c1  |.v.......2......|
00000060  64 48 4a 25 56 66 80 a9  65 c2 32 50 7e 76 6c 6f  |dHJ%Vf..e.2P~vlo|
00000070  9f 1a 12 18 1d 7d 0a b2  d3 a0 ed 74 b6 f7 3e 78  |.....}.....t..>x|
00000080  cc dc 70 f0 4a b5 73 11  8f 64 81 08 6e a1 8d 87  |..p.J.s..d..n...|
00000090  ef 9b 6d f1 6d b9 38 7d  59 0f 9e 7e 35 57 f2 94  |..m.m.8}Y..~5W..|
000000a0  a7 14 dd 09 20 37 96 b1  8c 02 fc 3f b9 b1 b1 39  |.... 7.....?...9|
000000b0  04 e2 28 d8 16 e1 07 d8  f8 70 30 07 de 35 b8 b3  |..(......p0..5..|
000000c0  6f d9 1f 2c ab 82 f7 cb  9d 9c c4 4f 7e 46 a0 3d  |o..,.......O~F.=|
000000d0  04 34 a6 ef 81 11 33 98  6e 56 78 f3 c9 6d d4 cc  |.4....3.nVx..m..|
000000e0  43 66 0c 12 9a c2 b3 12  84 2d 49 23 01 b6 9c 4c  |Cf.......-I#...L|
000000f0  af ff d3 3d 9d 4d f8 b1  2b 73 b7 db e2 fa 32 72  |...=.M..+s....2r|
... 512 bytes shown in part

2026-10-09 16:26:41187.75.226.144to 161/udpSNMPBR

0&·Admin·V·0·0 ·+·+·

payload bytes

00000000  30 26 02 01 00 04 05 41  64 6d 69 6e a1 1a 02 04  |0&.....Admin....|
00000010  56 12 83 ec 02 01 00 02  01 00 30 0c 30 0a 06 06  |V.........0.0...|
00000020  2b 06 01 02 01 2b 05 00                           |+....+..|

2026-10-09 16:26:38187.75.226.144to 161/udpSNMPBR

0&·Admin·V·0·0 ·+·+·

payload bytes

00000000  30 26 02 01 00 04 05 41  64 6d 69 6e a1 1a 02 04  |0&.....Admin....|
00000010  56 12 83 ec 02 01 00 02  01 00 30 0c 30 0a 06 06  |V.........0.0...|
00000020  2b 06 01 02 01 2b 05 00                           |+....+..|

2026-10-09 16:26:35187.75.226.144to 161/udpSNMPBR

0&·Admin·V·0·0 ·+·+·

payload bytes

00000000  30 26 02 01 00 04 05 41  64 6d 69 6e a1 1a 02 04  |0&.....Admin....|
00000010  56 12 83 ec 02 01 00 02  01 00 30 0c 30 0a 06 06  |V.........0.0...|
00000020  2b 06 01 02 01 2b 05 00                           |+....+..|