UDP traffic
Datagrams matching country:CO sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.
A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.
4.5K
Datagrams
127
Source addresses
32
Networks
1
Countries
55
Destination ports
Traffic by type
Service queries
2 datagrams from 2 sourcesRequests a service answers without a handshake. Scanners send them to find open DNS, NTP, SNMP or SSDP servers, which are also the servers reflection attacks abuse.
Latest NetBIOS datagram, to 137/udp
payload bytes
00000000 f5 d6 00 00 00 01 00 00 00 00 00 00 20 43 4b 41 |............ CKA| 00000010 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 |AAAAAAAAAAAAAAAA| 00000020 41 41 41 41 41 41 41 41 41 41 41 41 41 00 00 21 |AAAAAAAAAAAAA..!| 00000030 00 01 |..|
Other services
19 datagrams from 15 sourcesFirst packets of sessions with VPN, voice, tunnelling, database and management services.
Latest SOCKS5 datagram, to 31285/udp
payload bytes
00000000 05 00 ff ff 00 fe fe fe fe fd fd fd fd 12 34 56 |..............4V| 00000010 78 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |x...............| 00000020 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000050 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000060 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000070 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000080 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000090 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 000000a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 000000b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 000000c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 000000d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 000000e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 000000f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
Unrecognised
35 datagrams from 31 sourcesDatagrams no decoder recognised. Their first bytes are kept.
Latest Unrecognised datagram, to 30942/udp
payload bytes
00000000 b8 91 84 ae d0 ab cf 55 82 80 4f 7b 2d 5f 31 08 |.......U..O{-_1.|
00000010 c2 06 b2 82 6f ac 0b aa 3c 62 47 ad 8e 88 0d 2f |....o...<bG..../|
00000020 bb 1f 9b 3d b3 a4 04 ca 4d 69 c4 5c a3 d3 ce 1f |...=....Mi.\....|
00000030 26 71 4d fa e0 73 83 15 1c fe 72 6a 3a 6b 48 03 |&qM..s....rj:kH.|
00000040 34 ee 1d 92 e4 93 0f 9c 67 1c 70 61 c8 ba 21 21 |4.......g.pa..!!|
00000050 96 9c 30 5c 47 b4 40 bc 8c 14 32 5d 18 12 e9 71 |..0\G.@...2]...q|
00000060 9f e4 e5 a9 68 9f be 10 87 7f e5 dd f1 cf a5 e4 |....h...........|
00000070 e6 0e e2 62 0d 98 43 86 05 d6 ac 70 a6 45 bc ba |...b..C....p.E..|
00000080 29 f9 5b c8 df 93 42 52 6c 7b 48 44 36 97 81 1c |).[...BRl{HD6...|
00000090 3e b7 04 0b ea 01 9e 4d 2e 80 0a 4a 7e 96 22 5a |>......M...J~."Z|
000000a0 43 67 b1 74 6e a9 9d c9 83 4b 88 d7 6a a6 57 99 |Cg.tn....K..j.W.|
000000b0 7c 41 23 66 0f 42 d1 42 85 cd 90 d7 eb 45 d0 f3 ||A#f.B.B.....E..|
000000c0 4c d2 84 8f 89 38 8d 47 18 29 20 16 2a c9 ae 67 |L....8.G.) .*..g|
000000d0 21 61 11 ce 1a 41 76 e0 e5 dc 09 f7 b7 bc ff e6 |!a...Av.........|
000000e0 20 d1 a2 a3 df 2a 8e f1 ff 2e d9 48 57 39 d8 53 | ....*.....HW9.S|
000000f0 dd c9 46 e6 18 df 1e 66 f2 ab 31 e7 c2 24 b1 75 |..F....f..1..$.u|Peer-to-peer
4,437 datagrams from 85 sourcesFile-sharing clients trying to reach a peer that used one of these addresses before. This is not scanning, so it is left out of every other figure on this page.
Amplification checks
Probes for services that answer a small request with a much larger reply, the property reflection attacks rely on.
The factor is how many bytes a reachable server can send back for each byte it receives, as published by CISA in alert TA14-017A.
Destination ports
DNS questions
DNS record types
- ANY1
Networks
- AS13489 UNE EPM TELECOMUNICACIONES S.A. from 18 sources1,737
- AS10620 Telmex Colombia S.A. from 30 sources1,100
- AS3816 COLOMBIA TELECOMUNICACIONES S.A. ESP BIC from 19 sources520
- AS267832 VELONET SAS from 1 source358
- AS52468 UFINET PANAMA S.A. from 6 sources251
- AS19429 Colombia from 9 sources164
- AS272851 GIGA FIBRA SAS from 1 source130
- AS271773 PARTNERS TELECOM COLOMBIA SAS from 1 source49
- AS265688 SINERGY SOLUCIONES INTEGRALES from 4 sources40
- AS270031 TELENET DIGITAL S.A.S from 2 sources28
Countries
- CO Colombia4,493
Source addresses (unverified)
| Address | Network | Cc | Sends | Datagrams | Last seen (UTC) |
|---|---|---|---|---|---|
| 191.95.130.237 | AS13489 UNE EPM TELECOMUNICACIONES S.A. | CO | BitTorrent | 716 | 2026-10-11 00:55 |
| 186.81.124.167 | AS10620 Telmex Colombia S.A. | CO | BitTorrent | 458 | 2026-10-10 23:07 |
| 181.189.17.97 | AS267832 VELONET SAS | CO | BitTorrent | 358 | 2026-10-11 00:00 |
| 181.68.24.141 | AS13489 UNE EPM TELECOMUNICACIONES S.A. | CO | BitTorrent | 357 | 2026-10-10 05:26 |
| 186.116.223.145 | AS3816 COLOMBIA TELECOMUNICACIONES S.A. ESP BIC | CO | BitTorrent | 266 | 2026-10-09 19:58 |
| 181.59.2.79 | AS10620 Telmex Colombia S.A. | CO | BitTorrent | 239 | 2026-10-09 05:17 |
| 190.128.98.78 | AS13489 UNE EPM TELECOMUNICACIONES S.A. | CO | BitTorrent | 208 | 2026-10-11 02:48 |
| 181.59.3.34 | AS10620 Telmex Colombia S.A. | CO | BitTorrent | 172 | 2026-10-10 20:47 |
| 190.60.61.155 | AS52468 UFINET PANAMA S.A. | CO | BitTorrent | 169 | 2026-10-09 02:48 |
| 191.95.161.175 | AS13489 UNE EPM TELECOMUNICACIONES S.A. | CO | BitTorrent | 157 | 2026-10-10 20:59 |
| 186.28.16.190 | AS19429 Colombia | CO | BitTorrent | 150 | 2026-10-08 16:16 |
| 152.205.11.125 | AS3816 COLOMBIA TELECOMUNICACIONES S.A. ESP BIC | CO | BitTorrent | 142 | 2026-10-08 23:10 |
| 186.194.62.170 | AS272851 GIGA FIBRA SAS | CO | BitTorrent | 130 | 2026-10-10 05:33 |
| 191.95.166.77 | AS13489 UNE EPM TELECOMUNICACIONES S.A. | CO | BitTorrent | 106 | 2026-10-06 22:05 |
| 181.59.3.4 | AS10620 Telmex Colombia S.A. | CO | BitTorrent | 103 | 2026-10-08 02:14 |
| 181.119.202.54 | AS52468 UFINET PANAMA S.A. | CO | BitTorrent | 50 | 2026-10-10 02:54 |
| 179.12.253.200 | AS13489 UNE EPM TELECOMUNICACIONES S.A. | CO | BitTorrent | 50 | 2026-10-09 15:07 |
| 186.99.21.49 | AS3816 COLOMBIA TELECOMUNICACIONES S.A. ESP BIC | CO | BitTorrent | 49 | 2026-10-10 21:31 |
| 179.19.238.190 | AS271773 PARTNERS TELECOM COLOMBIA SAS | CO | BitTorrent | 49 | 2026-10-10 20:46 |
| 179.12.190.175 | AS13489 UNE EPM TELECOMUNICACIONES S.A. | CO | BitTorrent | 44 | 2026-10-09 03:25 |
Latest datagrams
payload bytes
00000000 64 31 3a 61 64 32 3a 69 64 32 30 3a 22 8e 93 2d |d1:ad2:id20:"..-| 00000010 bb 56 fa 59 36 bf 52 a6 aa ef 4c 86 01 02 0f db |.V.Y6.R...L.....| 00000020 39 3a 69 6e 66 6f 5f 68 61 73 68 32 30 3a 22 43 |9:info_hash20:"C| 00000030 3c a6 17 db 6b 3f d5 d3 54 fe 27 9d 41 c4 2f 1c |<...k?..T.'.A./.| 00000040 1e fd 65 31 3a 71 39 3a 67 65 74 5f 70 65 65 72 |..e1:q9:get_peer| 00000050 73 31 3a 74 32 3a e4 f5 31 3a 76 34 3a 4c 54 01 |s1:t2:..1:v4:LT.| 00000060 2f 31 3a 79 31 3a 71 65 |/1:y1:qe|
payload bytes
00000000 64 31 3a 61 64 32 3a 69 64 32 30 3a 22 8e 93 2d |d1:ad2:id20:"..-| 00000010 bb 56 fa 59 36 bf 52 a6 aa ef 4c 86 01 02 0f db |.V.Y6.R...L.....| 00000020 39 3a 69 6e 66 6f 5f 68 61 73 68 32 30 3a 22 ff |9:info_hash20:".| 00000030 1b 00 9f b3 1b 7d 3f bf 68 4b d3 c9 9d fb dd 8a |.....}?.hK......| 00000040 2b 1d 65 31 3a 71 39 3a 67 65 74 5f 70 65 65 72 |+.e1:q9:get_peer| 00000050 73 31 3a 74 32 3a f5 e1 31 3a 76 34 3a 4c 54 01 |s1:t2:..1:v4:LT.| 00000060 2f 31 3a 79 31 3a 71 65 |/1:y1:qe|
payload bytes
00000000 64 31 3a 61 64 32 3a 69 64 32 30 3a 22 8e 93 2d |d1:ad2:id20:"..-| 00000010 bb 56 fa 59 36 bf 52 a6 aa ef 4c 86 01 02 0f db |.V.Y6.R...L.....| 00000020 39 3a 69 6e 66 6f 5f 68 61 73 68 32 30 3a 22 e4 |9:info_hash20:".| 00000030 0f fc 20 97 fd a6 18 be 88 9b 34 d9 45 0d 98 b4 |.. .......4.E...| 00000040 60 53 65 31 3a 71 39 3a 67 65 74 5f 70 65 65 72 |`Se1:q9:get_peer| 00000050 73 31 3a 74 32 3a ea 37 31 3a 76 34 3a 4c 54 01 |s1:t2:.71:v4:LT.| 00000060 2f 31 3a 79 31 3a 71 65 |/1:y1:qe|
payload bytes
00000000 64 31 3a 61 64 32 3a 69 64 32 30 3a 22 8e 93 2d |d1:ad2:id20:"..-| 00000010 bb 56 fa 59 36 bf 52 a6 aa ef 4c 86 01 02 0f db |.V.Y6.R...L.....| 00000020 39 3a 69 6e 66 6f 5f 68 61 73 68 32 30 3a 22 2a |9:info_hash20:"*| 00000030 0f 8a 7c 83 24 3f 48 a1 23 9d e0 2b 3b 33 42 7e |..|.$?H.#..+;3B~| 00000040 b9 05 65 31 3a 71 39 3a 67 65 74 5f 70 65 65 72 |..e1:q9:get_peer| 00000050 73 31 3a 74 32 3a 29 10 31 3a 76 34 3a 4c 54 01 |s1:t2:).1:v4:LT.| 00000060 2f 31 3a 79 31 3a 71 65 |/1:y1:qe|
payload bytes
00000000 64 31 3a 61 64 32 3a 69 64 32 30 3a 78 ac 39 5d |d1:ad2:id20:x.9]| 00000010 a4 b0 33 37 74 2d 6a fe ad f4 f5 e3 76 89 3b 58 |..37t-j.....v.;X| 00000020 39 3a 69 6e 66 6f 5f 68 61 73 68 32 30 3a 78 ac |9:info_hash20:x.| 00000030 29 44 ec 68 95 a9 95 f6 98 8f 20 e2 f3 86 37 56 |)D.h...... ...7V| 00000040 d0 47 65 31 3a 71 39 3a 67 65 74 5f 70 65 65 72 |.Ge1:q9:get_peer| 00000050 73 31 3a 74 32 3a 00 b3 31 3a 76 34 3a 4c 54 01 |s1:t2:..1:v4:LT.| 00000060 2f 31 3a 79 31 3a 71 65 |/1:y1:qe|
payload bytes
00000000 64 31 3a 61 64 32 3a 69 64 32 30 3a 78 ac 39 5d |d1:ad2:id20:x.9]| 00000010 a4 b0 33 37 74 2d 6a fe ad f4 f5 e3 76 89 3b 58 |..37t-j.....v.;X| 00000020 39 3a 69 6e 66 6f 5f 68 61 73 68 32 30 3a 78 ac |9:info_hash20:x.| 00000030 30 16 93 09 32 af 31 10 0e 86 ff fb 56 2c 4f b8 |0...2.1.....V,O.| 00000040 db a6 65 31 3a 71 39 3a 67 65 74 5f 70 65 65 72 |..e1:q9:get_peer| 00000050 73 31 3a 74 32 3a 64 4b 31 3a 76 34 3a 4c 54 01 |s1:t2:dK1:v4:LT.| 00000060 2f 31 3a 79 31 3a 71 65 |/1:y1:qe|
payload bytes
00000000 64 31 3a 61 64 32 3a 69 64 32 30 3a 78 ac 39 5d |d1:ad2:id20:x.9]| 00000010 a4 b0 33 37 74 2d 6a fe ad f4 f5 e3 76 89 3b 58 |..37t-j.....v.;X| 00000020 39 3a 69 6e 66 6f 5f 68 61 73 68 32 30 3a 78 ac |9:info_hash20:x.| 00000030 26 d9 19 7f a3 aa 58 b8 3e 60 43 dd e8 11 f6 17 |&.....X.>`C.....| 00000040 21 8d 65 31 3a 71 39 3a 67 65 74 5f 70 65 65 72 |!.e1:q9:get_peer| 00000050 73 31 3a 74 32 3a 93 4c 31 3a 76 34 3a 4c 54 01 |s1:t2:.L1:v4:LT.| 00000060 2f 31 3a 79 31 3a 71 65 |/1:y1:qe|
payload bytes
00000000 64 31 3a 61 64 32 3a 69 64 32 30 3a 78 ac 39 5d |d1:ad2:id20:x.9]| 00000010 a4 b0 33 37 74 2d 6a fe ad f4 f5 e3 76 89 3b 58 |..37t-j.....v.;X| 00000020 39 3a 69 6e 66 6f 5f 68 61 73 68 32 30 3a 78 ac |9:info_hash20:x.| 00000030 38 e1 e1 bb 5a c1 b6 bd 37 34 b6 18 ce 1d 2d 55 |8...Z...74....-U| 00000040 48 c1 65 31 3a 71 39 3a 67 65 74 5f 70 65 65 72 |H.e1:q9:get_peer| 00000050 73 31 3a 74 32 3a 54 0d 31 3a 76 34 3a 4c 54 01 |s1:t2:T.1:v4:LT.| 00000060 2f 31 3a 79 31 3a 71 65 |/1:y1:qe|
payload bytes
00000000 64 31 3a 61 64 32 3a 69 64 32 30 3a 78 ac 39 5d |d1:ad2:id20:x.9]| 00000010 a4 b0 33 37 74 2d 6a fe ad f4 f5 e3 76 89 3b 58 |..37t-j.....v.;X| 00000020 39 3a 69 6e 66 6f 5f 68 61 73 68 32 30 3a 78 a0 |9:info_hash20:x.| 00000030 d7 12 53 03 e1 a6 ea 1e 14 8f de 64 cd 6c 51 16 |..S........d.lQ.| 00000040 fc 9f 65 31 3a 71 39 3a 67 65 74 5f 70 65 65 72 |..e1:q9:get_peer| 00000050 73 31 3a 74 32 3a cf 8a 31 3a 76 34 3a 4c 54 01 |s1:t2:..1:v4:LT.| 00000060 2f 31 3a 79 31 3a 71 65 |/1:y1:qe|
payload bytes
00000000 64 31 3a 61 64 32 3a 69 64 32 30 3a a7 0b 4d 61 |d1:ad2:id20:..Ma| 00000010 51 55 33 e0 63 fc 9f b1 c9 89 e7 74 07 60 a1 a6 |QU3.c......t.`..| 00000020 39 3a 69 6e 66 6f 5f 68 61 73 68 32 30 3a a7 07 |9:info_hash20:..| 00000030 dd c2 64 69 67 b6 dd 95 2b 85 d9 0c ab 08 6c 11 |..dig...+.....l.| 00000040 47 79 65 31 3a 71 39 3a 67 65 74 5f 70 65 65 72 |Gye1:q9:get_peer| 00000050 73 31 3a 74 32 3a e4 f1 31 3a 76 34 3a 4c 54 01 |s1:t2:..1:v4:LT.| 00000060 2f 31 3a 79 31 3a 71 65 |/1:y1:qe|
payload bytes
00000000 64 31 3a 61 64 32 3a 69 64 32 30 3a a7 0b 4d 61 |d1:ad2:id20:..Ma| 00000010 51 55 33 e0 63 fc 9f b1 c9 89 e7 74 07 60 a1 a6 |QU3.c......t.`..| 00000020 39 3a 69 6e 66 6f 5f 68 61 73 68 32 30 3a a7 07 |9:info_hash20:..| 00000030 11 66 66 d0 04 18 f5 56 b8 83 84 99 65 c8 9b e8 |.ff....V....e...| 00000040 65 5a 65 31 3a 71 39 3a 67 65 74 5f 70 65 65 72 |eZe1:q9:get_peer| 00000050 73 31 3a 74 32 3a 7c 39 31 3a 76 34 3a 4c 54 01 |s1:t2:|91:v4:LT.| 00000060 2f 31 3a 79 31 3a 71 65 |/1:y1:qe|
payload bytes
00000000 64 31 3a 61 64 32 3a 69 64 32 30 3a a7 0b 4d 61 |d1:ad2:id20:..Ma| 00000010 51 55 33 e0 63 fc 9f b1 c9 89 e7 74 07 60 a1 a6 |QU3.c......t.`..| 00000020 39 3a 69 6e 66 6f 5f 68 61 73 68 32 30 3a a7 01 |9:info_hash20:..| 00000030 24 13 ce 35 2b e1 69 3d 24 52 62 9d c2 32 06 5a |$..5+.i=$Rb..2.Z| 00000040 78 79 65 31 3a 71 39 3a 67 65 74 5f 70 65 65 72 |xye1:q9:get_peer| 00000050 73 31 3a 74 32 3a 19 3c 31 3a 76 34 3a 4c 54 01 |s1:t2:.<1:v4:LT.| 00000060 2f 31 3a 79 31 3a 71 65 |/1:y1:qe|
payload bytes
00000000 64 31 3a 61 64 32 3a 69 64 32 30 3a a7 0b 4d 61 |d1:ad2:id20:..Ma| 00000010 51 55 33 e0 63 fc 9f b1 c9 89 e7 74 07 60 a1 a6 |QU3.c......t.`..| 00000020 39 3a 69 6e 66 6f 5f 68 61 73 68 32 30 3a a7 00 |9:info_hash20:..| 00000030 06 72 98 c0 3e 95 ce 74 12 16 4a d0 58 3a 55 be |.r..>..t..J.X:U.| 00000040 a3 0f 65 31 3a 71 39 3a 67 65 74 5f 70 65 65 72 |..e1:q9:get_peer| 00000050 73 31 3a 74 32 3a 4d 93 31 3a 76 34 3a 4c 54 01 |s1:t2:M.1:v4:LT.| 00000060 2f 31 3a 79 31 3a 71 65 |/1:y1:qe|
payload bytes
00000000 64 31 3a 61 64 32 3a 69 64 32 30 3a a7 0b 4d 61 |d1:ad2:id20:..Ma| 00000010 51 55 33 e0 63 fc 9f b1 c9 89 e7 74 07 60 a1 a6 |QU3.c......t.`..| 00000020 39 3a 69 6e 66 6f 5f 68 61 73 68 32 30 3a a7 02 |9:info_hash20:..| 00000030 60 e3 c6 d9 bb 95 89 18 11 db 09 80 ca 41 3c 9b |`............A<.| 00000040 da 98 65 31 3a 71 39 3a 67 65 74 5f 70 65 65 72 |..e1:q9:get_peer| 00000050 73 31 3a 74 32 3a 21 43 31 3a 76 34 3a 4c 54 01 |s1:t2:!C1:v4:LT.| 00000060 2f 31 3a 79 31 3a 71 65 |/1:y1:qe|
payload bytes
00000000 64 31 3a 61 64 32 3a 69 64 32 30 3a a7 0b 4d 61 |d1:ad2:id20:..Ma| 00000010 51 55 33 e0 63 fc 9f b1 c9 89 e7 74 07 60 a1 a6 |QU3.c......t.`..| 00000020 39 3a 69 6e 66 6f 5f 68 61 73 68 32 30 3a a7 01 |9:info_hash20:..| 00000030 b5 f0 15 d5 95 c1 1e 68 f2 f3 a9 4a cb f9 da 32 |.......h...J...2| 00000040 e9 c3 65 31 3a 71 39 3a 67 65 74 5f 70 65 65 72 |..e1:q9:get_peer| 00000050 73 31 3a 74 32 3a c2 5f 31 3a 76 34 3a 4c 54 01 |s1:t2:._1:v4:LT.| 00000060 2f 31 3a 79 31 3a 71 65 |/1:y1:qe|