UDP traffic

Datagrams matching asn:27947 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

1.2K

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

Other services

5 datagrams from 4 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

SOCKS5 5

Latest SOCKS5 datagram, to 56514/udp

·4Vx·

payload bytes

00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 06 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

Unrecognised

5 datagrams from 5 sources

Datagrams no decoder recognised. Their first bytes are kept.

Unrecognised 5

Latest Unrecognised datagram, to 31975/udp

·Tp·}1V·4Vx·"·Q·

payload bytes

00000000  01 c7 d6 54 70 f4 7d 31  56 00 ff ff 00 fe fe fe  |...Tp.}1V.......|
00000010  fe fd fd fd fd 12 34 56  78 9b 97 22 b6 cb c1 51  |......4Vx.."...Q|
00000020  e4                                                |.|

Peer-to-peer

1,207 datagrams from 29 sources

File-sharing clients trying to reach a peer that used one of these addresses before. This is not scanning, so it is left out of every other figure on this page.

BitTorrent 1,207

Destination ports

39131/udp BitTorrent1,207
17228/udp1
25658/udp1
26093/udp SOCKS51
31975/udp1
35163/udp1
36918/udp1
39984/udp SOCKS51
44125/udp SOCKS51
47164/udp SOCKS51
56514/udp SOCKS51

Networks

AS27947 Telconet S.A from 37 sources1,217

Countries

EC Ecuador1,217

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
157.100.127.169	AS27947 Telconet S.A	EC	BitTorrent	256	2026-10-05 22:09
157.100.190.46	AS27947 Telconet S.A	EC	BitTorrent	138	2026-10-10 08:56
157.100.41.54	AS27947 Telconet S.A	EC	BitTorrent	115	2026-10-10 22:46
157.100.190.245	AS27947 Telconet S.A	EC	BitTorrent	91	2026-10-07 05:59
157.100.188.238	AS27947 Telconet S.A	EC	BitTorrent	84	2026-10-09 05:16
157.100.188.12	AS27947 Telconet S.A	EC	BitTorrent	82	2026-10-09 19:50
157.100.190.207	AS27947 Telconet S.A	EC	BitTorrent	80	2026-10-06 10:49
157.100.189.89	AS27947 Telconet S.A	EC	BitTorrent	65	2026-10-07 05:09
181.199.63.106	AS27947 Telconet S.A	EC	BitTorrent	47	2026-10-10 19:57
157.100.190.12	AS27947 Telconet S.A	EC	BitTorrent	40	2026-10-08 21:00
157.100.199.77	AS27947 Telconet S.A	EC	BitTorrent	31	2026-10-10 00:00
157.100.190.146	AS27947 Telconet S.A	EC	BitTorrent	28	2026-10-08 03:58
157.100.198.43	AS27947 Telconet S.A	EC	BitTorrent	21	2026-10-08 19:43
157.100.127.219	AS27947 Telconet S.A	EC	BitTorrent	19	2026-10-09 19:22
157.100.202.191	AS27947 Telconet S.A	EC	BitTorrent	17	2026-10-09 15:46
157.100.40.128	AS27947 Telconet S.A	EC	BitTorrent	16	2026-10-07 21:54
157.100.137.116	AS27947 Telconet S.A	EC	BitTorrent	12	2026-10-09 05:04
181.199.42.24	AS27947 Telconet S.A	EC	BitTorrent	11	2026-10-11 02:59
157.100.202.190	AS27947 Telconet S.A	EC	BitTorrent	10	2026-10-06 01:47
181.198.191.69	AS27947 Telconet S.A	EC	BitTorrent	7	2026-10-10 02:44

Latest datagrams

2026-10-11 02:59:36181.199.42.24to 39131/udpBitTorrentEC

A·(·U·

payload bytes

00000000  41 00 96 8a 9a 28 97 b6  00 00 00 00 00 10 00 00  |A....(..........|
00000010  55 e1 00 00                                       |U...|

2026-10-11 02:59:30181.199.42.24to 39131/udpBitTorrentEC

A·ʌ·U·

payload bytes

00000000  41 00 96 8a 99 ca 8c f3  00 00 00 00 00 10 00 00  |A...............|
00000010  55 e1 00 00                                       |U...|

2026-10-11 02:59:27181.199.42.24to 39131/udpBitTorrentEC

A·C·U·

payload bytes

00000000  41 00 96 8a 99 9a 88 43  00 00 00 00 00 10 00 00  |A......C........|
00000010  55 e1 00 00                                       |U...|

2026-10-11 02:54:43181.199.42.24to 39131/udpBitTorrentEC

A·R·.·¼·

payload bytes

00000000  41 00 94 52 88 a5 2e a7  00 00 00 00 00 10 00 00  |A..R............|
00000010  c2 bc 00 00                                       |....|

2026-10-11 02:54:36181.199.42.24to 39131/udpBitTorrentEC

A·R·F· ·¼·

payload bytes

00000000  41 00 94 52 88 46 cf 09  00 00 00 00 00 10 00 00  |A..R.F..........|
00000010  c2 bc 00 00                                       |....|

2026-10-11 02:54:33181.199.42.24to 39131/udpBitTorrentEC

A·R·y·¼·

payload bytes

00000000  41 00 94 52 88 14 79 ce  00 00 00 00 00 10 00 00  |A..R..y.........|
00000010  c2 bc 00 00                                       |....|

2026-10-11 02:51:22181.199.42.24to 39131/udpBitTorrentEC

A·ȡ|· [·2·

payload bytes

00000000  41 00 c8 a1 7c b8 0d 5b  00 00 00 00 00 10 00 00  |A...|..[........|
00000010  af 32 00 00                                       |.2..|

2026-10-11 02:51:16181.199.42.24to 39131/udpBitTorrentEC

A·ȡ|[·2·

payload bytes

00000000  41 00 c8 a1 7c 5b 84 df  00 00 00 00 00 10 00 00  |A...|[..........|
00000010  af 32 00 00                                       |.2..|

2026-10-11 02:51:13181.199.42.24to 39131/udpBitTorrentEC

A·ȡ|)·2·

payload bytes

00000000  41 00 c8 a1 7c 29 13 a5  00 00 00 00 00 10 00 00  |A...|)..........|
00000010  af 32 00 00                                       |.2..|

2026-10-11 01:16:32181.199.42.24to 39131/udpBitTorrentEC

d1:ad2:id20:G·/·9·+·:Q·0·6:target20:G·/·9·+·:Q·0·e1:q9:find_node1:t4:·^·1:v4:UT·1:y1:qe

payload bytes

00000000  64 31 3a 61 64 32 3a 69  64 32 30 3a 47 89 9c 2f  |d1:ad2:id20:G../|
00000010  93 e3 eb 97 39 95 2b 16  3a 51 f4 01 ea 30 d0 fe  |....9.+.:Q...0..|
00000020  36 3a 74 61 72 67 65 74  32 30 3a 47 89 9c 2f 93  |6:target20:G../.|
00000030  e3 eb 97 39 95 2b 16 3a  51 f4 01 ea 30 d0 fe 65  |...9.+.:Q...0..e|
00000040  31 3a 71 39 3a 66 69 6e  64 5f 6e 6f 64 65 31 3a  |1:q9:find_node1:|
00000050  74 34 3a a6 5e 00 00 31  3a 76 34 3a 55 54 b9 1e  |t4:.^..1:v4:UT..|
00000060  31 3a 79 31 3a 71 65                              |1:y1:qe|

2026-10-11 01:07:29181.199.61.140to 39131/udpBitTorrentEC

A·"·[>·

payload bytes

00000000  41 00 a8 22 be 5b 3e f1  00 00 00 00 00 00 00 00  |A..".[>.........|
00000010  ff 1e 00 00                                       |....|

2026-10-11 00:58:15181.199.42.24to 39131/udpBitTorrentEC

d1:ad2:id20:G·/·9·+·:Q·0·6:target20:G·/·9·+·:Q·0·e1:q9:find_node1:t4:·s·1:v4:UT·1:y1:qe

payload bytes

00000000  64 31 3a 61 64 32 3a 69  64 32 30 3a 47 89 9c 2f  |d1:ad2:id20:G../|
00000010  93 e3 eb 97 39 95 2b 16  3a 51 f4 01 ea 30 d0 fe  |....9.+.:Q...0..|
00000020  36 3a 74 61 72 67 65 74  32 30 3a 47 89 9c 2f 93  |6:target20:G../.|
00000030  e3 eb 97 39 95 2b 16 3a  51 f4 01 ea 30 d0 fe 65  |...9.+.:Q...0..e|
00000040  31 3a 71 39 3a 66 69 6e  64 5f 6e 6f 64 65 31 3a  |1:q9:find_node1:|
00000050  74 34 3a 96 73 00 00 31  3a 76 34 3a 55 54 b9 1e  |t4:.s..1:v4:UT..|
00000060  31 3a 79 31 3a 71 65                              |1:y1:qe|

2026-10-10 22:46:45157.100.41.54to 39131/udpBitTorrentEC

A·¥·!·

payload bytes

00000000  41 00 c2 a5 c1 f8 21 cd  00 00 00 00 00 00 00 00  |A.....!.........|
00000010  15 95 00 00                                       |....|

2026-10-10 19:57:31181.199.63.106to 39131/udpBitTorrentEC

A·a·3·x·

payload bytes

00000000  41 00 c2 61 03 33 b4 78  00 00 00 00 00 00 00 00  |A..a.3.x........|
00000010  ed f2 00 00                                       |....|

2026-10-10 19:38:39157.100.41.54to 39131/udpBitTorrentEC

d1:ad2:id20:·R·%·B·:·޲v·C9:info_hash20:·W·7?(·e1:q9:get_peers1:t2:3·1:v4:LT·1:y1:qe

payload bytes

00000000  64 31 3a 61 64 32 3a 69  64 32 30 3a 90 00 1c 52  |d1:ad2:id20:...R|
00000010  ce 25 ba fc 42 bb e7 3a  d0 de b2 76 d5 c2 e4 43  |.%..B..:...v...C|
00000020  39 3a 69 6e 66 6f 5f 68  61 73 68 32 30 3a 90 00  |9:info_hash20:..|
00000030  15 9e 57 7f 03 ab 83 c1  fb 93 ce 37 3f 28 1b 8e  |..W........7?(..|
00000040  af ab 65 31 3a 71 39 3a  67 65 74 5f 70 65 65 72  |..e1:q9:get_peer|
00000050  73 31 3a 74 32 3a 33 00  31 3a 76 34 3a 4c 54 01  |s1:t2:3.1:v4:LT.|
00000060  02 31 3a 79 31 3a 71 65                           |.1:y1:qe|