UDP traffic

Datagrams matching asn:28598 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Your plan searches up to 7d, so 30d was shortened. Plans

168

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

Other services

1 datagrams from 1 source

First packets of sessions with VPN, voice, tunnelling, database and management services.

SOCKS5 1

Latest SOCKS5 datagram, to 4120/udp

·4Vx ·

payload bytes

00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 09 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

Peer-to-peer

167 datagrams from 1 source

File-sharing clients trying to reach a peer that used one of these addresses before. This is not scanning, so it is left out of every other figure on this page.

BitTorrent 167

Destination ports

39131/udp BitTorrent167
4120/udp SOCKS51

Networks

AS28598 DB3 SERVICOS DE TELECOMUNICACOES S.A from 2 sources168

Countries

BR Brazil168

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
201.20.127.186	AS28598 DB3 SERVICOS DE TELECOMUNICACOES S.A	BR	BitTorrent	167	2026-10-08 04:00
177.190.209.113	AS28598 DB3 SERVICOS DE TELECOMUNICACOES S.A	BR	SOCKS5	1	2026-10-07 08:01

Latest datagrams

2026-10-08 04:00:30201.20.127.186to 39131/udpBitTorrentBR

d1:ad2:id20:A·շ·"Q0m·W·p·f9:info_hash20:A·ѿze_·G[&·zS·5e1:q9:get_peers1:t2:2·1:v4:LT·1:y1:qe

payload bytes

00000000  64 31 3a 61 64 32 3a 69  64 32 30 3a 41 dd d5 b7  |d1:ad2:id20:A...|
00000010  1c 9e 05 01 a8 22 51 30  6d 1d 92 57 15 70 a9 66  |....."Q0m..W.p.f|
00000020  39 3a 69 6e 66 6f 5f 68  61 73 68 32 30 3a 41 dd  |9:info_hash20:A.|
00000030  d1 bf 7a 65 5f b2 47 5b  26 0f cd 0e 7a 53 95 8f  |..ze_.G[&...zS..|
00000040  b9 35 65 31 3a 71 39 3a  67 65 74 5f 70 65 65 72  |.5e1:q9:get_peer|
00000050  73 31 3a 74 32 3a 32 1e  31 3a 76 34 3a 4c 54 01  |s1:t2:2.1:v4:LT.|
00000060  02 31 3a 79 31 3a 71 65                           |.1:y1:qe|

2026-10-08 03:59:36201.20.127.186to 39131/udpBitTorrentBR

d1:ad2:id20:A·շ·"Q0m·W·p·f9:info_hash20:A·;·w·d·Ln·2·e1:q9:get_peers1:t2:\·1:v4:LT·1:y1:qe

payload bytes

00000000  64 31 3a 61 64 32 3a 69  64 32 30 3a 41 dd d5 b7  |d1:ad2:id20:A...|
00000010  1c 9e 05 01 a8 22 51 30  6d 1d 92 57 15 70 a9 66  |....."Q0m..W.p.f|
00000020  39 3a 69 6e 66 6f 5f 68  61 73 68 32 30 3a 41 dd  |9:info_hash20:A.|
00000030  d1 3b a4 77 83 64 00 4c  6e ab c6 32 f2 1d f1 8f  |.;.w.d.Ln..2....|
00000040  0f b7 65 31 3a 71 39 3a  67 65 74 5f 70 65 65 72  |..e1:q9:get_peer|
00000050  73 31 3a 74 32 3a 5c ae  31 3a 76 34 3a 4c 54 01  |s1:t2:\.1:v4:LT.|
00000060  02 31 3a 79 31 3a 71 65                           |.1:y1:qe|

2026-10-08 03:58:24201.20.127.186to 39131/udpBitTorrentBR

d1:ad2:id20:A·շ·"Q0m·W·p·f9:info_hash20:A·Ѹ·h·-·M·ʵh·)e1:q9:get_peers1:t2:H&1:v4:LT·1:y1:qe

payload bytes

00000000  64 31 3a 61 64 32 3a 69  64 32 30 3a 41 dd d5 b7  |d1:ad2:id20:A...|
00000010  1c 9e 05 01 a8 22 51 30  6d 1d 92 57 15 70 a9 66  |....."Q0m..W.p.f|
00000020  39 3a 69 6e 66 6f 5f 68  61 73 68 32 30 3a 41 dd  |9:info_hash20:A.|
00000030  d1 b8 08 90 e1 68 e0 98  2d f5 4d cf 03 ca b5 68  |.....h..-.M....h|
00000040  db 29 65 31 3a 71 39 3a  67 65 74 5f 70 65 65 72  |.)e1:q9:get_peer|
00000050  73 31 3a 74 32 3a 48 26  31 3a 76 34 3a 4c 54 01  |s1:t2:H&1:v4:LT.|
00000060  02 31 3a 79 31 3a 71 65                           |.1:y1:qe|

2026-10-08 03:57:29201.20.127.186to 39131/udpBitTorrentBR

d1:ad2:id20:A·շ·"Q0m·W·p·f9:info_hash20:A·ݥ· 6O·~ · /E4·e1:q9:get_peers1:t2:·O1:v4:LT·1:y1:qe

payload bytes

00000000  64 31 3a 61 64 32 3a 69  64 32 30 3a 41 dd d5 b7  |d1:ad2:id20:A...|
00000010  1c 9e 05 01 a8 22 51 30  6d 1d 92 57 15 70 a9 66  |....."Q0m..W.p.f|
00000020  39 3a 69 6e 66 6f 5f 68  61 73 68 32 30 3a 41 dd  |9:info_hash20:A.|
00000030  dd a5 fb 20 36 4f 1f 81  7e 09 b6 ae 0a 2f 45 34  |... 6O..~..../E4|
00000040  12 e8 65 31 3a 71 39 3a  67 65 74 5f 70 65 65 72  |..e1:q9:get_peer|
00000050  73 31 3a 74 32 3a 10 4f  31 3a 76 34 3a 4c 54 01  |s1:t2:.O1:v4:LT.|
00000060  02 31 3a 79 31 3a 71 65                           |.1:y1:qe|

2026-10-08 03:57:02201.20.127.186to 39131/udpBitTorrentBR

d1:ad2:id20:A·շ·"Q0m·W·p·f9:info_hash20:A·A·e·\·v·be1:q9:get_peers1:t2:k·1:v4:LT·1:y1:qe

payload bytes

00000000  64 31 3a 61 64 32 3a 69  64 32 30 3a 41 dd d5 b7  |d1:ad2:id20:A...|
00000010  1c 9e 05 01 a8 22 51 30  6d 1d 92 57 15 70 a9 66  |....."Q0m..W.p.f|
00000020  39 3a 69 6e 66 6f 5f 68  61 73 68 32 30 3a 41 dd  |9:info_hash20:A.|
00000030  d4 d4 f3 41 ab 00 17 07  65 1b 5c ed 11 76 9c 9d  |...A....e.\..v..|
00000040  d1 62 65 31 3a 71 39 3a  67 65 74 5f 70 65 65 72  |.be1:q9:get_peer|
00000050  73 31 3a 74 32 3a 6b 10  31 3a 76 34 3a 4c 54 01  |s1:t2:k.1:v4:LT.|
00000060  02 31 3a 79 31 3a 71 65                           |.1:y1:qe|

2026-10-08 03:54:01201.20.127.186to 39131/udpBitTorrentBR

d1:ad2:id20:A·շ·"Q0m·W·p·f9:info_hash20:A·ҝ_·JMq·ae1:q9:get_peers1:t2:·1:v4:LT·1:y1:qe

payload bytes

00000000  64 31 3a 61 64 32 3a 69  64 32 30 3a 41 dd d5 b7  |d1:ad2:id20:A...|
00000010  1c 9e 05 01 a8 22 51 30  6d 1d 92 57 15 70 a9 66  |....."Q0m..W.p.f|
00000020  39 3a 69 6e 66 6f 5f 68  61 73 68 32 30 3a 41 dd  |9:info_hash20:A.|
00000030  d3 ee 1b ce ec d2 9d 5f  97 86 17 e7 4a 4d 71 83  |......._....JMq.|
00000040  d4 61 65 31 3a 71 39 3a  67 65 74 5f 70 65 65 72  |.ae1:q9:get_peer|
00000050  73 31 3a 74 32 3a 04 93  31 3a 76 34 3a 4c 54 01  |s1:t2:..1:v4:LT.|
00000060  02 31 3a 79 31 3a 71 65                           |.1:y1:qe|

2026-10-08 03:51:30201.20.127.186to 39131/udpBitTorrentBR

d1:ad2:id20:A·շ·"Q0m·W·p·f9:info_hash20:A·'·vv·V·Fq·h\·qe1:q9:get_peers1:t2:ow1:v4:LT·1:y1:qe

payload bytes

00000000  64 31 3a 61 64 32 3a 69  64 32 30 3a 41 dd d5 b7  |d1:ad2:id20:A...|
00000010  1c 9e 05 01 a8 22 51 30  6d 1d 92 57 15 70 a9 66  |....."Q0m..W.p.f|
00000020  39 3a 69 6e 66 6f 5f 68  61 73 68 32 30 3a 41 dd  |9:info_hash20:A.|
00000030  d6 c2 27 b0 af 76 76 fe  56 02 17 46 71 d1 68 5c  |..'..vv.V..Fq.h\|
00000040  9d 71 65 31 3a 71 39 3a  67 65 74 5f 70 65 65 72  |.qe1:q9:get_peer|
00000050  73 31 3a 74 32 3a 6f 77  31 3a 76 34 3a 4c 54 01  |s1:t2:ow1:v4:LT.|
00000060  02 31 3a 79 31 3a 71 65                           |.1:y1:qe|

2026-10-08 03:50:27201.20.127.186to 39131/udpBitTorrentBR

d1:ad2:id20:A·շ·"Q0m·W·p·f9:info_hash20:A·$·W·(·~·*·e1:q9:get_peers1:t2:I·1:v4:LT·1:y1:qe

payload bytes

00000000  64 31 3a 61 64 32 3a 69  64 32 30 3a 41 dd d5 b7  |d1:ad2:id20:A...|
00000010  1c 9e 05 01 a8 22 51 30  6d 1d 92 57 15 70 a9 66  |....."Q0m..W.p.f|
00000020  39 3a 69 6e 66 6f 5f 68  61 73 68 32 30 3a 41 dd  |9:info_hash20:A.|
00000030  d9 24 87 e5 57 e5 ab 28  f3 7e 13 2a 0b b8 cf c2  |.$..W..(.~.*....|
00000040  ce d9 65 31 3a 71 39 3a  67 65 74 5f 70 65 65 72  |..e1:q9:get_peer|
00000050  73 31 3a 74 32 3a 49 a3  31 3a 76 34 3a 4c 54 01  |s1:t2:I.1:v4:LT.|
00000060  02 31 3a 79 31 3a 71 65                           |.1:y1:qe|

2026-10-08 03:49:26201.20.127.186to 39131/udpBitTorrentBR

d1:ad2:id20:A·շ·"Q0m·W·p·f9:info_hash20:A·i-·\l·)·aё·(+·0e1:q9:get_peers1:t2:·i1:v4:LT·1:y1:qe

payload bytes

00000000  64 31 3a 61 64 32 3a 69  64 32 30 3a 41 dd d5 b7  |d1:ad2:id20:A...|
00000010  1c 9e 05 01 a8 22 51 30  6d 1d 92 57 15 70 a9 66  |....."Q0m..W.p.f|
00000020  39 3a 69 6e 66 6f 5f 68  61 73 68 32 30 3a 41 dd  |9:info_hash20:A.|
00000030  d4 69 2d eb 5c 6c 18 dd  29 f6 61 d1 91 c4 28 2b  |.i-.\l..).a...(+|
00000040  90 30 65 31 3a 71 39 3a  67 65 74 5f 70 65 65 72  |.0e1:q9:get_peer|
00000050  73 31 3a 74 32 3a 1d 69  31 3a 76 34 3a 4c 54 01  |s1:t2:.i1:v4:LT.|
00000060  02 31 3a 79 31 3a 71 65                           |.1:y1:qe|

2026-10-08 03:49:00201.20.127.186to 39131/udpBitTorrentBR

d1:ad2:id20:A·շ·"Q0m·W·p·f9:info_hash20:A·X·:·rkC·lD·5We1:q9:get_peers1:t2:My1:v4:LT·1:y1:qe

payload bytes

00000000  64 31 3a 61 64 32 3a 69  64 32 30 3a 41 dd d5 b7  |d1:ad2:id20:A...|
00000010  1c 9e 05 01 a8 22 51 30  6d 1d 92 57 15 70 a9 66  |....."Q0m..W.p.f|
00000020  39 3a 69 6e 66 6f 5f 68  61 73 68 32 30 3a 41 dd  |9:info_hash20:A.|
00000030  de e6 58 f0 3a c1 72 6b  43 9b cb f8 6c 44 f3 93  |..X.:.rkC...lD..|
00000040  35 57 65 31 3a 71 39 3a  67 65 74 5f 70 65 65 72  |5We1:q9:get_peer|
00000050  73 31 3a 74 32 3a 4d 79  31 3a 76 34 3a 4c 54 01  |s1:t2:My1:v4:LT.|
00000060  02 31 3a 79 31 3a 71 65                           |.1:y1:qe|

2026-10-08 03:47:07201.20.127.186to 39131/udpBitTorrentBR

d1:ad2:id20:A·շ·"Q0m·W·p·f9:info_hash20:A·K·_·2·L^·4e1:q9:get_peers1:t2:U·1:v4:LT·1:y1:qe

payload bytes

00000000  64 31 3a 61 64 32 3a 69  64 32 30 3a 41 dd d5 b7  |d1:ad2:id20:A...|
00000010  1c 9e 05 01 a8 22 51 30  6d 1d 92 57 15 70 a9 66  |....."Q0m..W.p.f|
00000020  39 3a 69 6e 66 6f 5f 68  61 73 68 32 30 3a 41 dd  |9:info_hash20:A.|
00000030  d1 e2 08 e9 ed 4b 89 5f  a2 dc 32 95 4c 5e 82 ef  |.....K._..2.L^..|
00000040  95 34 65 31 3a 71 39 3a  67 65 74 5f 70 65 65 72  |.4e1:q9:get_peer|
00000050  73 31 3a 74 32 3a 55 b4  31 3a 76 34 3a 4c 54 01  |s1:t2:U.1:v4:LT.|
00000060  02 31 3a 79 31 3a 71 65                           |.1:y1:qe|

2026-10-08 03:45:59201.20.127.186to 39131/udpBitTorrentBR

d1:ad2:id20:A·շ·"Q0m·W·p·f9:info_hash20:A·߻·v·'·_w·uD m·e1:q9:get_peers1:t2:j·1:v4:LT·1:y1:qe

payload bytes

00000000  64 31 3a 61 64 32 3a 69  64 32 30 3a 41 dd d5 b7  |d1:ad2:id20:A...|
00000010  1c 9e 05 01 a8 22 51 30  6d 1d 92 57 15 70 a9 66  |....."Q0m..W.p.f|
00000020  39 3a 69 6e 66 6f 5f 68  61 73 68 32 30 3a 41 dd  |9:info_hash20:A.|
00000030  df bb b7 76 d7 db 27 87  5f 77 cf 19 9a 75 44 0d  |...v..'._w...uD.|
00000040  6d ba 65 31 3a 71 39 3a  67 65 74 5f 70 65 65 72  |m.e1:q9:get_peer|
00000050  73 31 3a 74 32 3a 6a b4  31 3a 76 34 3a 4c 54 01  |s1:t2:j.1:v4:LT.|
00000060  02 31 3a 79 31 3a 71 65                           |.1:y1:qe|

2026-10-08 03:43:21201.20.127.186to 39131/udpBitTorrentBR

d1:ad2:id20:A·շ·"Q0m·W·p·f9:info_hash20:A·t·7·u·1·"·-·@e1:q9:get_peers1:t2:·1:v4:LT·1:y1:qe

payload bytes

00000000  64 31 3a 61 64 32 3a 69  64 32 30 3a 41 dd d5 b7  |d1:ad2:id20:A...|
00000010  1c 9e 05 01 a8 22 51 30  6d 1d 92 57 15 70 a9 66  |....."Q0m..W.p.f|
00000020  39 3a 69 6e 66 6f 5f 68  61 73 68 32 30 3a 41 dd  |9:info_hash20:A.|
00000030  d4 74 a7 b5 37 1b 1e 8e  75 f5 fa 31 e8 22 eb 2d  |.t..7...u..1.".-|
00000040  f8 40 65 31 3a 71 39 3a  67 65 74 5f 70 65 65 72  |.@e1:q9:get_peer|
00000050  73 31 3a 74 32 3a 1c da  31 3a 76 34 3a 4c 54 01  |s1:t2:..1:v4:LT.|
00000060  02 31 3a 79 31 3a 71 65                           |.1:y1:qe|

2026-10-08 03:41:23201.20.127.186to 39131/udpBitTorrentBR

d1:ad2:id20:A·շ·"Q0m·W·p·f9:info_hash20:A·ʺ·'ZZox·|·[e1:q9:get_peers1:t2:·h1:v4:LT·1:y1:qe

payload bytes

00000000  64 31 3a 61 64 32 3a 69  64 32 30 3a 41 dd d5 b7  |d1:ad2:id20:A...|
00000010  1c 9e 05 01 a8 22 51 30  6d 1d 92 57 15 70 a9 66  |....."Q0m..W.p.f|
00000020  39 3a 69 6e 66 6f 5f 68  61 73 68 32 30 3a 41 dd  |9:info_hash20:A.|
00000030  d1 11 d6 f5 ca ba 13 27  5a 5a 6f 78 af ca f8 7c  |.......'ZZox...||
00000040  9e 5b 65 31 3a 71 39 3a  67 65 74 5f 70 65 65 72  |.[e1:q9:get_peer|
00000050  73 31 3a 74 32 3a 0c 68  31 3a 76 34 3a 4c 54 01  |s1:t2:.h1:v4:LT.|
00000060  02 31 3a 79 31 3a 71 65                           |.1:y1:qe|

2026-10-08 03:40:20201.20.127.186to 39131/udpBitTorrentBR

d1:ad2:id20:A·շ·"Q0m·W·p·f9:info_hash20:A·՞·;·@7· (· ·e1:q9:get_peers1:t2:xL1:v4:LT·1:y1:qe

payload bytes

00000000  64 31 3a 61 64 32 3a 69  64 32 30 3a 41 dd d5 b7  |d1:ad2:id20:A...|
00000010  1c 9e 05 01 a8 22 51 30  6d 1d 92 57 15 70 a9 66  |....."Q0m..W.p.f|
00000020  39 3a 69 6e 66 6f 5f 68  61 73 68 32 30 3a 41 dd  |9:info_hash20:A.|
00000030  d5 9e 9b 3b f0 18 40 37  9d 9f 8b 09 28 81 09 d5  |...;..@7....(...|
00000040  df e7 65 31 3a 71 39 3a  67 65 74 5f 70 65 65 72  |..e1:q9:get_peer|
00000050  73 31 3a 74 32 3a 78 4c  31 3a 76 34 3a 4c 54 01  |s1:t2:xL1:v4:LT.|
00000060  02 31 3a 79 31 3a 71 65                           |.1:y1:qe|