UDP traffic
Datagrams matching asn:28126 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.
A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.
948
Datagrams
6
Source addresses
1
Networks
1
Countries
3
Destination ports
Traffic by type
Service queries
2 datagrams from 1 sourceRequests a service answers without a handshake. Scanners send them to find open DNS, NTP, SNMP or SSDP servers, which are also the servers reflection attacks abuse.
Latest SNMP datagram, to 161/udp
payload bytes
00000000 30 26 02 01 00 04 05 41 64 6d 69 6e a1 1a 02 04 |0&.....Admin....| 00000010 42 be d9 3c 02 01 00 02 01 00 30 0c 30 0a 06 06 |B..<......0.0...| 00000020 2b 06 01 02 01 2b 05 00 |+....+..|
Unrecognised
1 datagrams from 1 sourceDatagrams no decoder recognised. Their first bytes are kept.
Latest Unrecognised datagram, to 16049/udp
payload bytes
00000000 01 7f 78 08 ca 4c d3 52 d4 00 ff ff 00 fe fe fe |..x..L.R........| 00000010 fe fd fd fd fd 12 34 56 78 c2 90 78 11 eb bf 3b |......4Vx..x...;| 00000020 02 |.|
Peer-to-peer
945 datagrams from 4 sourcesFile-sharing clients trying to reach a peer that used one of these addresses before. This is not scanning, so it is left out of every other figure on this page.
Amplification checks
Probes for services that answer a small request with a much larger reply, the property reflection attacks rely on.
| Service | Port | Datagrams | Sources | Factor |
|---|---|---|---|---|
| SNMPv2 | 161/udp | 2 | 1 | 6.3 |
The factor is how many bytes a reachable server can send back for each byte it receives, as published by CISA in alert TA14-017A.
Destination ports
Networks
- AS28126 BRISANET SERVICOS DE TELECOMUNICACOES S. from 6 sources948
Countries
- BR Brazil948
Source addresses (unverified)
| Address | Network | Cc | Sends | Datagrams | Last seen (UTC) |
|---|---|---|---|---|---|
| 187.19.130.242 | AS28126 BRISANET SERVICOS DE TELECOMUNICACOES S. | BR | BitTorrent | 534 | 2026-10-10 20:39 |
| 187.19.159.116 | AS28126 BRISANET SERVICOS DE TELECOMUNICACOES S. | BR | BitTorrent | 386 | 2026-10-10 23:28 |
| 187.19.255.232 | AS28126 BRISANET SERVICOS DE TELECOMUNICACOES S. | BR | BitTorrent | 22 | 2026-10-10 17:40 |
| 187.19.223.252 | AS28126 BRISANET SERVICOS DE TELECOMUNICACOES S. | BR | BitTorrent | 3 | 2026-10-05 20:20 |
| 177.37.143.238 | AS28126 BRISANET SERVICOS DE TELECOMUNICACOES S. | BR | SNMP | 2 | 2026-10-09 21:49 |
| 187.19.202.153 | AS28126 BRISANET SERVICOS DE TELECOMUNICACOES S. | BR | Unrecognised | 1 | 2026-10-07 07:11 |
Latest datagrams
payload bytes
00000000 41 00 5d 04 16 5f f1 80 00 00 00 00 00 10 00 00 |A.].._..........| 00000010 76 99 00 00 |v...|
payload bytes
00000000 41 00 5d 04 16 03 51 54 00 00 00 00 00 10 00 00 |A.]...QT........| 00000010 76 99 00 00 |v...|
payload bytes
00000000 41 00 5d 04 15 d0 fa a6 00 00 00 00 00 10 00 00 |A.].............| 00000010 76 99 00 00 |v...|
payload bytes
00000000 64 31 3a 61 64 32 3a 69 64 32 30 3a 57 d3 ad b5 |d1:ad2:id20:W...| 00000010 c7 80 bc 3e c2 0b e2 b9 ce b7 b1 11 b3 76 64 0e |...>.........vd.| 00000020 36 3a 74 61 72 67 65 74 32 30 3a 57 d3 ad b5 c7 |6:target20:W....| 00000030 80 bc 3e c2 0b e2 b9 ce b7 b1 11 b3 76 64 0e 65 |..>.........vd.e| 00000040 31 3a 71 39 3a 66 69 6e 64 5f 6e 6f 64 65 31 3a |1:q9:find_node1:| 00000050 74 34 3a c2 4f 00 00 31 3a 76 34 3a 55 54 b9 1e |t4:.O..1:v4:UT..| 00000060 31 3a 79 31 3a 71 65 |1:y1:qe|
payload bytes
00000000 41 00 a4 ad 06 19 63 9e 00 00 00 00 00 10 00 00 |A.....c.........| 00000010 1d 83 00 00 |....|
payload bytes
00000000 41 00 a4 ad 05 bc 65 63 00 00 00 00 00 10 00 00 |A.....ec........| 00000010 1d 83 00 00 |....|
payload bytes
00000000 41 00 a4 ad 05 8b 96 5b 00 00 00 00 00 10 00 00 |A......[........| 00000010 1d 83 00 00 |....|
payload bytes
00000000 41 00 29 5e 01 1a 2d 51 00 00 00 00 00 10 00 00 |A.)^..-Q........| 00000010 e0 6d 00 00 |.m..|
payload bytes
00000000 41 00 29 5e 00 bd 39 10 00 00 00 00 00 10 00 00 |A.)^..9.........| 00000010 e0 6d 00 00 |.m..|
payload bytes
00000000 41 00 29 5e 00 8a 31 a7 00 00 00 00 00 10 00 00 |A.)^..1.........| 00000010 e0 6d 00 00 |.m..|
payload bytes
00000000 41 00 fa 84 d2 d8 fe a8 00 00 00 00 00 10 00 00 |A...............| 00000010 41 78 00 00 |Ax..|
payload bytes
00000000 41 00 fa 84 d2 7c 4c 33 00 00 00 00 00 10 00 00 |A....|L3........| 00000010 41 78 00 00 |Ax..|
payload bytes
00000000 41 00 fa 84 d2 4c a3 5e 00 00 00 00 00 10 00 00 |A....L.^........| 00000010 41 78 00 00 |Ax..|
payload bytes
00000000 41 00 40 34 c1 74 ee 4e 00 00 00 00 00 10 00 00 |A.@4.t.N........| 00000010 9b 43 00 00 |.C..|
payload bytes
00000000 41 00 40 34 c1 18 21 cd 00 00 00 00 00 10 00 00 |A.@4..!.........| 00000010 9b 43 00 00 |.C..|