UDP traffic

Datagrams matching asn:28509 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Your plan searches up to 7d, so 30d was shortened. Plans

179

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

Other services

1 datagrams from 1 source

First packets of sessions with VPN, voice, tunnelling, database and management services.

SOCKS5 1

Latest SOCKS5 datagram, to 35239/udp

·4Vx·

payload bytes

00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 08 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

Unrecognised

1 datagrams from 1 source

Datagrams no decoder recognised. Their first bytes are kept.

Unrecognised 1

Latest Unrecognised datagram, to 12980/udp

·W·\·Z·4Vx·BWH·

payload bytes

00000000  01 ee 57 8c e6 14 5c ce  5a 00 ff ff 00 fe fe fe  |..W...\.Z.......|
00000010  fe fd fd fd fd 12 34 56  78 16 e2 42 57 48 cb ed  |......4Vx..BWH..|
00000020  01                                                |.|

Peer-to-peer

177 datagrams from 1 source

File-sharing clients trying to reach a peer that used one of these addresses before. This is not scanning, so it is left out of every other figure on this page.

BitTorrent 177

Destination ports

39131/udp BitTorrent177
12980/udp1
35239/udp SOCKS51

Networks

AS28509 Cablemas Telecomunicaciones SA de CV from 3 sources179

Countries

MX Mexico179

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
189.214.156.224	AS28509 Cablemas Telecomunicaciones SA de CV	MX	BitTorrent	177	2026-10-07 05:03
189.215.123.49	AS28509 Cablemas Telecomunicaciones SA de CV	MX	Unrecognised	1	2026-10-09 04:51
177.238.227.76	AS28509 Cablemas Telecomunicaciones SA de CV	MX	SOCKS5	1	2026-10-08 20:53

Latest datagrams

2026-10-09 04:51:02189.215.123.49to 12980/udpUnrecognisedMX

·W·\·Z·4Vx·BWH·

payload bytes

00000000  01 ee 57 8c e6 14 5c ce  5a 00 ff ff 00 fe fe fe  |..W...\.Z.......|
00000010  fe fd fd fd fd 12 34 56  78 16 e2 42 57 48 cb ed  |......4Vx..BWH..|
00000020  01                                                |.|

2026-10-08 20:53:26177.238.227.76to 35239/udpSOCKS5MX

·4Vx·

payload bytes

00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 08 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
... 512 bytes shown in part

2026-10-07 05:03:41189.214.156.224to 39131/udpBitTorrentMX

A·Y ·?"·

payload bytes

00000000  41 00 59 20 cd 00 3f 22  00 00 00 00 00 10 00 00  |A.Y ..?"........|
00000010  ed 92 00 00                                       |....|

2026-10-07 05:03:35189.214.156.224to 39131/udpBitTorrentMX

A·Y ̤"·

payload bytes

00000000  41 00 59 20 cc a4 22 d1  00 00 00 00 00 10 00 00  |A.Y ..".........|
00000010  ed 92 00 00                                       |....|

2026-10-07 05:03:32189.214.156.224to 39131/udpBitTorrentMX

A·Y ·r͚·

payload bytes

00000000  41 00 59 20 cc 72 cd 9a  00 00 00 00 00 10 00 00  |A.Y .r..........|
00000010  ed 92 00 00                                       |....|

2026-10-07 04:59:00189.214.156.224to 39131/udpBitTorrentMX

A·qf·BN1·

payload bytes

00000000  41 00 71 66 bc 42 4e 31  00 00 00 00 00 10 00 00  |A.qf.BN1........|
00000010  ee 8d 00 00                                       |....|

2026-10-07 04:58:54189.214.156.224to 39131/udpBitTorrentMX

A·qf·

payload bytes

00000000  41 00 71 66 bb e6 8b dd  00 00 00 00 00 10 00 00  |A.qf............|
00000010  ee 8d 00 00                                       |....|

2026-10-07 04:58:51189.214.156.224to 39131/udpBitTorrentMX

A·qf·

payload bytes

00000000  41 00 71 66 bb b2 dd c9  00 00 00 00 00 10 00 00  |A.qf............|
00000010  ee 8d 00 00                                       |....|

2026-10-07 04:57:15189.214.156.224to 39131/udpBitTorrentMX

A·L·F=·

payload bytes

00000000  41 00 00 12 b6 00 f2 4c  00 00 00 00 00 10 00 00  |A......L........|
00000010  46 3d 00 00                                       |F=..|

2026-10-07 04:57:09189.214.156.224to 39131/udpBitTorrentMX

A·aX·F=·

payload bytes

00000000  41 00 00 12 b5 a4 61 58  00 00 00 00 00 10 00 00  |A.....aX........|
00000010  46 3d 00 00                                       |F=..|

2026-10-07 04:57:06189.214.156.224to 39131/udpBitTorrentMX

A·q·e·F=·

payload bytes

00000000  41 00 00 12 b5 71 1b 65  00 00 00 00 00 10 00 00  |A....q.e........|
00000010  46 3d 00 00                                       |F=..|

2026-10-07 04:55:16189.214.156.224to 39131/udpBitTorrentMX

A·]v·

payload bytes

00000000  41 00 8e a1 ae e3 5d 76  00 00 00 00 00 10 00 00  |A.....]v........|
00000010  e7 ea 00 00                                       |....|

2026-10-07 04:55:10189.214.156.224to 39131/udpBitTorrentMX

A·

payload bytes

00000000  41 00 8e a1 ae 87 b9 1a  00 00 00 00 00 10 00 00  |A...............|
00000010  e7 ea 00 00                                       |....|

2026-10-07 04:55:07189.214.156.224to 39131/udpBitTorrentMX

A·Y ·

payload bytes

00000000  41 00 8e a1 ae 59 0d 84  00 00 00 00 00 10 00 00  |A....Y..........|
00000010  e7 ea 00 00                                       |....|

2026-10-07 04:53:31189.214.156.224to 39131/udpBitTorrentMX

A·zϨ·W·

payload bytes

00000000  41 00 7a cf a8 a0 ff d9  00 00 00 00 00 10 00 00  |A.z.............|
00000010  57 90 00 00                                       |W...|