UDP traffic

Datagrams matching asn:28573 sent to HoneyLabs sensors over UDP in the last 24 hours. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

183

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

Other services

12 datagrams from 11 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

SOCKS5 12

Latest SOCKS5 datagram, to 33658/udp

·4Vx ·

payload bytes

00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 09 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

Unrecognised

6 datagrams from 6 sources

Datagrams no decoder recognised. Their first bytes are kept.

Unrecognised 6

Latest Unrecognised datagram, to 50480/udp

·,·y·4Vx·I·

payload bytes

00000000  01 10 2c aa 97 d1 cf 79  89 00 ff ff 00 fe fe fe  |..,....y........|
00000010  fe fd fd fd fd 12 34 56  78 de 08 aa 81 08 49 bc  |......4Vx.....I.|
00000020  86                                                |.|

Peer-to-peer

165 datagrams from 4 sources

File-sharing clients trying to reach a peer that used one of these addresses before. This is not scanning, so it is left out of every other figure on this page.

BitTorrent 165

Destination ports

39131/udp BitTorrent165
443/udp SOCKS51
3033/udp SOCKS51
3968/udp SOCKS51
4045/udp SOCKS51
16238/udp SOCKS51
19880/udp1
23911/udp SOCKS51
29306/udp SOCKS51
33658/udp SOCKS51
34039/udp SOCKS51
34114/udp SOCKS51

Networks

AS28573 Claro NXT Telecomunicacoes Ltda from 19 sources183

Countries

BR Brazil183

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
191.177.175.168	AS28573 Claro NXT Telecomunicacoes Ltda	BR	BitTorrent	115	2026-10-11 00:55
187.39.118.69	AS28573 Claro NXT Telecomunicacoes Ltda	BR	BitTorrent	37	2026-10-11 05:06
179.223.203.112	AS28573 Claro NXT Telecomunicacoes Ltda	BR	BitTorrent	12	2026-10-10 09:06
189.6.238.21	AS28573 Claro NXT Telecomunicacoes Ltda	BR	SOCKS5	3	2026-10-10 17:44
179.223.202.170	AS28573 Claro NXT Telecomunicacoes Ltda	BR	Unrecognised	2	2026-10-11 06:19
191.177.146.70	AS28573 Claro NXT Telecomunicacoes Ltda	BR	SOCKS5	1	2026-10-10 10:39
189.62.148.231	AS28573 Claro NXT Telecomunicacoes Ltda	BR	Unrecognised	1	2026-10-10 11:48
189.63.160.224	AS28573 Claro NXT Telecomunicacoes Ltda	BR	Unrecognised	1	2026-10-10 20:27
186.205.80.31	AS28573 Claro NXT Telecomunicacoes Ltda	BR	SOCKS5	1	2026-10-10 13:12
191.176.85.134	AS28573 Claro NXT Telecomunicacoes Ltda	BR	SOCKS5	1	2026-10-11 03:30
181.222.80.253	AS28573 Claro NXT Telecomunicacoes Ltda	BR	SOCKS5	1	2026-10-11 03:12
187.183.61.206	AS28573 Claro NXT Telecomunicacoes Ltda	BR	SOCKS5	1	2026-10-10 09:54
191.177.197.126	AS28573 Claro NXT Telecomunicacoes Ltda	BR	SOCKS5	1	2026-10-10 22:36
187.181.96.138	AS28573 Claro NXT Telecomunicacoes Ltda	BR	SOCKS5	1	2026-10-10 18:24
186.207.253.154	AS28573 Claro NXT Telecomunicacoes Ltda	BR	BitTorrent	1	2026-10-10 13:41
179.222.232.43	AS28573 Claro NXT Telecomunicacoes Ltda	BR	Unrecognised	1	2026-10-10 09:41
191.177.192.199	AS28573 Claro NXT Telecomunicacoes Ltda	BR	SOCKS5	1	2026-10-10 08:08
189.34.0.222	AS28573 Claro NXT Telecomunicacoes Ltda	BR	SOCKS5	1	2026-10-10 12:51
189.4.104.3	AS28573 Claro NXT Telecomunicacoes Ltda	BR	Unrecognised	1	2026-10-11 06:13

Latest datagrams

2026-10-11 06:19:23179.223.202.170to 33658/udpSOCKS5BR

·4Vx ·

payload bytes

00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 09 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
... 512 bytes shown in part

2026-10-11 06:13:52189.4.104.3to 50480/udpUnrecognisedBR

·,·y·4Vx·I·

payload bytes

00000000  01 10 2c aa 97 d1 cf 79  89 00 ff ff 00 fe fe fe  |..,....y........|
00000010  fe fd fd fd fd 12 34 56  78 de 08 aa 81 08 49 bc  |......4Vx.....I.|
00000020  86                                                |.|

2026-10-11 05:34:45179.223.202.170to 19880/udpUnrecognisedBR

·r·:k·4Vx·(·[·

payload bytes

00000000  01 f3 72 01 3a 6b a1 91  16 00 ff ff 00 fe fe fe  |..r.:k..........|
00000010  fe fd fd fd fd 12 34 56  78 10 28 ff 5b 06 1d 02  |......4Vx.(.[...|
00000020  aa                                                |.|

2026-10-11 05:06:03187.39.118.69to 39131/udpBitTorrentBR

d1:ad2:id20:·|·!S6·/·s·Y·W·9:info_hash20:·~y·=}·y·-·Ƭ+s·e1:q9:get_peers1:t2:R·1:v4:LT·/1:y1:qe

payload bytes

00000000  64 31 3a 61 64 32 3a 69  64 32 30 3a fa b8 7c cd  |d1:ad2:id20:..|.|
00000010  21 53 36 fa 86 2f e1 73  c3 59 93 57 bc 02 e3 ce  |!S6../.s.Y.W....|
00000020  39 3a 69 6e 66 6f 5f 68  61 73 68 32 30 3a fa b8  |9:info_hash20:..|
00000030  7e 79 bd 3d 7d a5 79 dc  2d b7 07 c6 ac 2b 73 0e  |~y.=}.y.-....+s.|
00000040  13 b2 65 31 3a 71 39 3a  67 65 74 5f 70 65 65 72  |..e1:q9:get_peer|
00000050  73 31 3a 74 32 3a 52 bc  31 3a 76 34 3a 4c 54 01  |s1:t2:R.1:v4:LT.|
00000060  2f 31 3a 79 31 3a 71 65                           |/1:y1:qe|

2026-10-11 04:50:01187.39.118.69to 39131/udpBitTorrentBR

d1:ad2:id20:·|·!S6·/·s·Y·W·9:info_hash20:·z·Lf·T'·f·ųd·he1:q9:get_peers1:t2:"·1:v4:LT·/1:y1:qe

payload bytes

00000000  64 31 3a 61 64 32 3a 69  64 32 30 3a fa b8 7c cd  |d1:ad2:id20:..|.|
00000010  21 53 36 fa 86 2f e1 73  c3 59 93 57 bc 02 e3 ce  |!S6../.s.Y.W....|
00000020  39 3a 69 6e 66 6f 5f 68  61 73 68 32 30 3a fa b8  |9:info_hash20:..|
00000030  7a 14 b8 4c 66 d4 1b 54  27 1f 66 af c5 b3 64 b4  |z..Lf..T'.f...d.|
00000040  b3 68 65 31 3a 71 39 3a  67 65 74 5f 70 65 65 72  |.he1:q9:get_peer|
00000050  73 31 3a 74 32 3a 22 85  31 3a 76 34 3a 4c 54 01  |s1:t2:".1:v4:LT.|
00000060  2f 31 3a 79 31 3a 71 65                           |/1:y1:qe|

2026-10-11 04:30:58187.39.118.69to 39131/udpBitTorrentBR

d1:ad2:id20:·|·!S6·/·s·Y·W·9:info_hash20:·zC·4I·J·b)·e1:q9:get_peers1:t2:·<1:v4:LT·/1:y1:qe

payload bytes

00000000  64 31 3a 61 64 32 3a 69  64 32 30 3a fa b8 7c cd  |d1:ad2:id20:..|.|
00000010  21 53 36 fa 86 2f e1 73  c3 59 93 57 bc 02 e3 ce  |!S6../.s.Y.W....|
00000020  39 3a 69 6e 66 6f 5f 68  61 73 68 32 30 3a fa b8  |9:info_hash20:..|
00000030  7a 43 0f a8 b5 34 49 e8  9e f4 ec 4a 86 f4 62 29  |zC...4I....J..b)|
00000040  8d a1 65 31 3a 71 39 3a  67 65 74 5f 70 65 65 72  |..e1:q9:get_peer|
00000050  73 31 3a 74 32 3a d0 3c  31 3a 76 34 3a 4c 54 01  |s1:t2:.<1:v4:LT.|
00000060  2f 31 3a 79 31 3a 71 65                           |/1:y1:qe|

2026-10-11 04:14:56187.39.118.69to 39131/udpBitTorrentBR

d1:ad2:id20:·|·!S6·/·s·Y·W·9:info_hash20:·zE*·_ν·޿·>·_Ze1:q9:get_peers1:t2:·1:v4:LT·/1:y1:qe

payload bytes

00000000  64 31 3a 61 64 32 3a 69  64 32 30 3a fa b8 7c cd  |d1:ad2:id20:..|.|
00000010  21 53 36 fa 86 2f e1 73  c3 59 93 57 bc 02 e3 ce  |!S6../.s.Y.W....|
00000020  39 3a 69 6e 66 6f 5f 68  61 73 68 32 30 3a fa b8  |9:info_hash20:..|
00000030  7a 45 2a a8 5f ce bd eb  de bf b1 3e a2 f8 be af  |zE*._......>....|
00000040  5f 5a 65 31 3a 71 39 3a  67 65 74 5f 70 65 65 72  |_Ze1:q9:get_peer|
00000050  73 31 3a 74 32 3a 8d dd  31 3a 76 34 3a 4c 54 01  |s1:t2:..1:v4:LT.|
00000060  2f 31 3a 79 31 3a 71 65                           |/1:y1:qe|

2026-10-11 03:55:54187.39.118.69to 39131/udpBitTorrentBR

d1:ad2:id20:·|·!S6·/·s·Y·W·9:info_hash20:·x·\'·I·8·"·e1:q9:get_peers1:t2:·1:v4:LT·/1:y1:qe

payload bytes

00000000  64 31 3a 61 64 32 3a 69  64 32 30 3a fa b8 7c cd  |d1:ad2:id20:..|.|
00000010  21 53 36 fa 86 2f e1 73  c3 59 93 57 bc 02 e3 ce  |!S6../.s.Y.W....|
00000020  39 3a 69 6e 66 6f 5f 68  61 73 68 32 30 3a fa b8  |9:info_hash20:..|
00000030  78 bc a2 8f 5c 27 87 e8  ae 49 89 d4 38 9b 22 82  |x...\'...I..8.".|
00000040  94 c4 65 31 3a 71 39 3a  67 65 74 5f 70 65 65 72  |..e1:q9:get_peer|
00000050  73 31 3a 74 32 3a ba d1  31 3a 76 34 3a 4c 54 01  |s1:t2:..1:v4:LT.|
00000060  2f 31 3a 79 31 3a 71 65                           |/1:y1:qe|

2026-10-11 03:30:21191.176.85.134to 48384/udpSOCKS5BR

·4Vx·

payload bytes

00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 08 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
... 512 bytes shown in part

2026-10-11 03:26:36187.39.118.69to 39131/udpBitTorrentBR

d1:ad2:id20:·|·!S6·/·s·Y·W·9:info_hash20:·z·t·k·҂·7·1·#·e1:q9:get_peers1:t2:i·1:v4:LT·/1:y1:qe

payload bytes

00000000  64 31 3a 61 64 32 3a 69  64 32 30 3a fa b8 7c cd  |d1:ad2:id20:..|.|
00000010  21 53 36 fa 86 2f e1 73  c3 59 93 57 bc 02 e3 ce  |!S6../.s.Y.W....|
00000020  39 3a 69 6e 66 6f 5f 68  61 73 68 32 30 3a fa b8  |9:info_hash20:..|
00000030  7a a0 74 93 6b a8 d7 d2  82 8c 37 b5 31 1a bf 23  |z.t.k.....7.1..#|
00000040  fb fd 65 31 3a 71 39 3a  67 65 74 5f 70 65 65 72  |..e1:q9:get_peer|
00000050  73 31 3a 74 32 3a 69 98  31 3a 76 34 3a 4c 54 01  |s1:t2:i.1:v4:LT.|
00000060  2f 31 3a 79 31 3a 71 65                           |/1:y1:qe|

2026-10-11 03:23:34187.39.118.69to 39131/udpBitTorrentBR

d1:ad2:id20:·|·!S6·/·s·Y·W·9:info_hash20:·|·x ·N·ҙ·"·j·e1:q9:get_peers1:t2:·1:v4:LT·/1:y1:qe

payload bytes

00000000  64 31 3a 61 64 32 3a 69  64 32 30 3a fa b8 7c cd  |d1:ad2:id20:..|.|
00000010  21 53 36 fa 86 2f e1 73  c3 59 93 57 bc 02 e3 ce  |!S6../.s.Y.W....|
00000020  39 3a 69 6e 66 6f 5f 68  61 73 68 32 30 3a fa b8  |9:info_hash20:..|
00000030  7c 07 88 f8 9d d0 78 09  bd 4e e1 d2 99 02 22 da  ||.....x..N....".|
00000040  6a bf 65 31 3a 71 39 3a  67 65 74 5f 70 65 65 72  |j.e1:q9:get_peer|
00000050  73 31 3a 74 32 3a ba cd  31 3a 76 34 3a 4c 54 01  |s1:t2:..1:v4:LT.|
00000060  2f 31 3a 79 31 3a 71 65                           |/1:y1:qe|

2026-10-11 03:15:32187.39.118.69to 39131/udpBitTorrentBR

d1:ad2:id20:·|·!S6·/·s·Y·W·9:info_hash20:·x·LKxМ·e1:q9:get_peers1:t2:·1:v4:LT·/1:y1:qe

payload bytes

00000000  64 31 3a 61 64 32 3a 69  64 32 30 3a fa b8 7c cd  |d1:ad2:id20:..|.|
00000010  21 53 36 fa 86 2f e1 73  c3 59 93 57 bc 02 e3 ce  |!S6../.s.Y.W....|
00000020  39 3a 69 6e 66 6f 5f 68  61 73 68 32 30 3a fa b8  |9:info_hash20:..|
00000030  78 13 05 d3 4c 4b 78 d0  9c 06 dc c8 1c 06 9d af  |x...LKx.........|
00000040  03 f6 65 31 3a 71 39 3a  67 65 74 5f 70 65 65 72  |..e1:q9:get_peer|
00000050  73 31 3a 74 32 3a 14 b3  31 3a 76 34 3a 4c 54 01  |s1:t2:..1:v4:LT.|
00000060  2f 31 3a 79 31 3a 71 65                           |/1:y1:qe|

2026-10-11 03:12:05181.222.80.253to 29306/udpSOCKS5BR

·4Vx·

payload bytes

00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 07 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
... 512 bytes shown in part

2026-10-11 03:07:28187.39.118.69to 39131/udpBitTorrentBR

d1:ad2:id20:·|·!S6·/·s·Y·W·9:info_hash20:·x~·a}·ѥɖ·6·c e1:q9:get_peers1:t2:·81:v4:LT·/1:y1:qe

payload bytes

00000000  64 31 3a 61 64 32 3a 69  64 32 30 3a fa b8 7c cd  |d1:ad2:id20:..|.|
00000010  21 53 36 fa 86 2f e1 73  c3 59 93 57 bc 02 e3 ce  |!S6../.s.Y.W....|
00000020  39 3a 69 6e 66 6f 5f 68  61 73 68 32 30 3a fa b8  |9:info_hash20:..|
00000030  78 7e f2 61 7d bf 84 8a  d1 a5 c9 96 f2 36 cf 1b  |x~.a}........6..|
00000040  63 0d 65 31 3a 71 39 3a  67 65 74 5f 70 65 65 72  |c.e1:q9:get_peer|
00000050  73 31 3a 74 32 3a ad 38  31 3a 76 34 3a 4c 54 01  |s1:t2:.81:v4:LT.|
00000060  2f 31 3a 79 31 3a 71 65                           |/1:y1:qe|

2026-10-11 02:56:23187.39.118.69to 39131/udpBitTorrentBR

d1:ad2:id20:·|·!S6·/·s·Y·W·9:info_hash20:·y·m7·d·u·ͽe1:q9:get_peers1:t2:·1:v4:LT·/1:y1:qe

payload bytes

00000000  64 31 3a 61 64 32 3a 69  64 32 30 3a fa b8 7c cd  |d1:ad2:id20:..|.|
00000010  21 53 36 fa 86 2f e1 73  c3 59 93 57 bc 02 e3 ce  |!S6../.s.Y.W....|
00000020  39 3a 69 6e 66 6f 5f 68  61 73 68 32 30 3a fa b8  |9:info_hash20:..|
00000030  79 c6 07 b6 b7 04 aa 6d  37 cf 64 c8 75 e4 c4 f5  |y......m7.d.u...|
00000040  cd bd 65 31 3a 71 39 3a  67 65 74 5f 70 65 65 72  |..e1:q9:get_peer|
00000050  73 31 3a 74 32 3a e5 f2  31 3a 76 34 3a 4c 54 01  |s1:t2:..1:v4:LT.|
00000060  2f 31 3a 79 31 3a 71 65                           |/1:y1:qe|