UDP traffic

Datagrams matching asn:8167 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Your plan searches up to 7d, so 30d was shortened. Plans

306

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

Other services

16 datagrams from 10 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

SOCKS5 16

Latest SOCKS5 datagram, to 15813/udp

·4Vx ·

payload bytes

00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 09 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

Unrecognised

19 datagrams from 17 sources

Datagrams no decoder recognised. Their first bytes are kept.

Unrecognised 19

Latest Unrecognised datagram, to 52384/udp

·x·4Vx·r·51

payload bytes

00000000  01 d9 06 78 01 1f 1d 04  c4 00 ff ff 00 fe fe fe  |...x............|
00000010  fe fd fd fd fd 12 34 56  78 ea 81 72 9b af e0 35  |......4Vx..r...5|
00000020  31                                                |1|

Peer-to-peer

271 datagrams from 1 source

File-sharing clients trying to reach a peer that used one of these addresses before. This is not scanning, so it is left out of every other figure on this page.

BitTorrent 271

Destination ports

39131/udp BitTorrent271
44930/udp SOCKS53
1243/udp1
57837/udp SOCKS51
10257/udp SOCKS51
10954/udp1
12350/udp1
13783/udp SOCKS51
15067/udp SOCKS51
4205/udp1
8529/udp1
25195/udp1

Networks

AS8167 V tal from 25 sources306

Countries

BR Brazil306

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
200.96.50.24	AS8167 V tal	BR	BitTorrent	271	2026-10-09 13:46
200.138.66.141	AS8167 V tal	BR	SOCKS5	4	2026-10-09 05:48
201.40.158.145	AS8167 V tal	BR	SOCKS5	4	2026-10-09 09:12
177.3.169.141	AS8167 V tal	BR	SOCKS5	3	2026-10-10 18:12
177.1.154.111	AS8167 V tal	BR	Unrecognised	2	2026-10-09 23:13
177.3.167.92	AS8167 V tal	BR	Unrecognised	2	2026-10-10 15:29
200.96.74.210	AS8167 V tal	BR	Unrecognised	2	2026-10-08 13:49
177.6.229.151	AS8167 V tal	BR	Unrecognised	1	2026-10-09 07:40
177.2.10.128	AS8167 V tal	BR	Unrecognised	1	2026-10-05 14:33
177.0.175.158	AS8167 V tal	BR	SOCKS5	1	2026-10-05 15:35
177.6.233.170	AS8167 V tal	BR	SOCKS5	1	2026-10-07 05:40
201.10.30.48	AS8167 V tal	BR	SOCKS5	1	2026-10-07 06:40
187.4.81.175	AS8167 V tal	BR	Unrecognised	1	2026-10-10 23:18
201.25.10.155	AS8167 V tal	BR	Unrecognised	1	2026-10-05 14:54
201.40.228.42	AS8167 V tal	BR	Unrecognised	1	2026-10-05 19:27
201.35.220.125	AS8167 V tal	BR	Unrecognised	1	2026-10-08 00:31
201.35.31.21	AS8167 V tal	BR	Unrecognised	1	2026-10-07 07:18
201.3.82.126	AS8167 V tal	BR	SOCKS5	1	2026-10-09 22:27
177.0.57.130	AS8167 V tal	BR	Unrecognised	1	2026-10-05 12:26
200.193.243.207	AS8167 V tal	BR	Unrecognised	1	2026-10-05 12:54

Latest datagrams

2026-10-10 23:18:46187.4.81.175to 52384/udpUnrecognisedBR

·x·4Vx·r·51

payload bytes

00000000  01 d9 06 78 01 1f 1d 04  c4 00 ff ff 00 fe fe fe  |...x............|
00000010  fe fd fd fd fd 12 34 56  78 ea 81 72 9b af e0 35  |......4Vx..r...5|
00000020  31                                                |1|

2026-10-10 18:12:36177.3.169.141to 15813/udpSOCKS5BR

·4Vx ·

payload bytes

00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 09 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
... 512 bytes shown in part

2026-10-10 15:29:49177.3.167.92to 24683/udpUnrecognisedBR

·'·4VxLe·kI·3·

payload bytes

00000000  01 27 c6 fa aa 8a 9d 12  db 00 ff ff 00 fe fe fe  |.'..............|
00000010  fe fd fd fd fd 12 34 56  78 4c 65 b5 6b 49 f4 33  |......4VxLe.kI.3|
00000020  a0                                                |.|

2026-10-09 23:13:29177.1.154.111to 7392/udpUnrecognisedBR

·ۏ·8·kZ7S· ·t·N·Oi>·޲KWM·J3·͙·%·ǽzg_·r·߽z·T·xoe·ӵU·:·ʵ·:4U?· @·3d%·c4·&

payload bytes

00000000  d1 cd 01 db 8f 94 38 16  6b 5a 37 53 b9 a9 00 a1  |......8.kZ7S....|
00000010  0d 97 ba 74 f9 e9 f4 a6  4e 1b f9 4f 69 3e 10 eb  |...t....N..Oi>..|
00000020  f9 de b2 4b 57 4d 08 4a  33 0c ac cd 99 80 25 a7  |...KWM.J3.....%.|
00000030  92 c7 bd 7a 67 5f d7 72  9a 08 b7 df bd 7a 1d 54  |...zg_.r.....z.T|
00000040  fb a6 08 c0 fa f5 ec 08  a5 df 78 6f 65 88 0f d0  |..........xoe...|
00000050  e1 d3 b5 55 88 bf 99 3a  89 ca b5 93 3a 34 55 3f  |...U...:....:4U?|
00000060  ea c2 84 c4 0d 40 16 33  64 25 ca 0e 63 34 a8 98  |.....@.3d%..c4..|
00000070  0e 26 d9 7a 70 17 4e fb  78 ec f0 a4 a9 df 22 7d  |.&.zp.N.x....."}|
00000080  55 6f 78 ce 7d 14 06 45  89 a3 b6 66 61 e7 02 0d  |Uox.}..E...fa...|
00000090  53 23 0d 00 d3 7a dd 75  0a 35 a4 a6 50 f7 87 bc  |S#...z.u.5..P...|
000000a0  28 4c f9 d5 a6 bf 6c 4b  a4 df e7 cc 1f 8c 59 4f  |(L....lK......YO|
000000b0  d0 11 de 50 e2 05 61 7e  75 ef 89 8c 8f b3 33 0f  |...P..a~u.....3.|
000000c0  28 73 c3 af 27 3d fb d9  2a 93 ca 1a 37 f4 f7 88  |(s..'=..*...7...|
000000d0  32 8c 19 3c 93 9c 0b 3c  fb 0b 16 72 c2 1f 77 45  |2..<...<...r..wE|
000000e0  42 73 ff b5 6a 8e 70 d5  ec 0e fb 17 de 8a 8f ea  |Bs..j.p.........|
000000f0  ae 91 a4 a4 8e 58 f6 f5  b2 a4 b5 3a 40 00 fa ac  |.....X.....:@...|
... 512 bytes shown in part

2026-10-09 22:27:43201.3.82.126to 42601/udpSOCKS5BR

·4Vx·

payload bytes

00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 0b 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
... 512 bytes shown in part

2026-10-09 13:46:29200.96.50.24to 39131/udpBitTorrentBR

A·ƾF ·

payload bytes

00000000  41 00 c6 be 46 0d 81 ff  00 00 00 00 00 10 00 00  |A...F...........|
00000010  03 d2 00 00                                       |....|

2026-10-09 13:46:23200.96.50.24to 39131/udpBitTorrentBR

A·ƾE·

payload bytes

00000000  41 00 c6 be 45 b0 da c1  00 00 00 00 00 10 00 00  |A...E...........|
00000010  03 d2 00 00                                       |....|

2026-10-09 13:46:20200.96.50.24to 39131/udpBitTorrentBR

A·ƾE·Ϊ·

payload bytes

00000000  41 00 c6 be 45 80 ce aa  00 00 00 00 00 10 00 00  |A...E...........|
00000010  03 d2 00 00                                       |....|

2026-10-09 13:41:36200.96.50.24to 39131/udpBitTorrentBR

A·-4·

payload bytes

00000000  41 00 d2 2d 34 8b fd d6  00 00 00 00 00 10 00 00  |A..-4...........|
00000010  92 05 00 00                                       |....|

2026-10-09 13:41:30200.96.50.24to 39131/udpBitTorrentBR

A·-4.·

payload bytes

00000000  41 00 d2 2d 34 2e fb d1  00 00 00 00 00 10 00 00  |A..-4...........|
00000010  92 05 00 00                                       |....|

2026-10-09 13:41:26200.96.50.24to 39131/udpBitTorrentBR

A·-3·

payload bytes

00000000  41 00 d2 2d 33 fa 85 f4  00 00 00 00 00 10 00 00  |A..-3...........|
00000010  92 05 00 00                                       |....|

2026-10-09 13:39:48200.96.50.24to 39131/udpBitTorrentBR

A·R·.&C·

payload bytes

00000000  41 00 52 9e 2e 26 43 ec  00 00 00 00 00 10 00 00  |A.R..&C.........|
00000010  f2 e4 00 00                                       |....|

2026-10-09 13:39:42200.96.50.24to 39131/udpBitTorrentBR

A·R·-·\·

payload bytes

00000000  41 00 52 9e 2d ca 04 5c  00 00 00 00 00 10 00 00  |A.R.-..\........|
00000010  f2 e4 00 00                                       |....|

2026-10-09 13:39:39200.96.50.24to 39131/udpBitTorrentBR

A·R·-·

payload bytes

00000000  41 00 52 9e 2d 9a 0c cd  00 00 00 00 00 10 00 00  |A.R.-...........|
00000010  f2 e4 00 00                                       |....|

2026-10-09 13:31:37200.96.50.24to 39131/udpBitTorrentBR

d1:ad2:id20:·h·볦·<·>·$^ ·G·6:target20:·h·볦·<·>·$^ ·G·e1:q9:find_node1:t4:·M·1:v4:UT·1:y1:qe

payload bytes

00000000  64 31 3a 61 64 32 3a 69  64 32 30 3a c9 68 bc eb  |d1:ad2:id20:.h..|
00000010  b3 a6 db 3c 87 0c 3e 99  24 5e 0d 1c 06 b7 47 bb  |...<..>.$^....G.|
00000020  36 3a 74 61 72 67 65 74  32 30 3a c9 68 bc eb b3  |6:target20:.h...|
00000030  a6 db 3c 87 0c 3e 99 24  5e 0d 1c 06 b7 47 bb 65  |..<..>.$^....G.e|
00000040  31 3a 71 39 3a 66 69 6e  64 5f 6e 6f 64 65 31 3a  |1:q9:find_node1:|
00000050  74 34 3a 8f 4d 00 00 31  3a 76 34 3a 55 54 b9 1e  |t4:.M..1:v4:UT..|
00000060  31 3a 79 31 3a 71 65                              |1:y1:qe|