UDP traffic

Datagrams matching country:CO sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Your plan searches up to 7d, so 30d was shortened. Plans

4.5K

Datagrams

128

Source addresses

Networks

Countries

Destination ports

Traffic by type

Service queries

2 datagrams from 2 sources

Requests a service answers without a handshake. Scanners send them to find open DNS, NTP, SNMP or SSDP servers, which are also the servers reflection attacks abuse.

NetBIOS 1 DNS 1

Latest NetBIOS datagram, to 137/udp

NetBIOS node status query *

payload bytes

00000000  f5 d6 00 00 00 01 00 00  00 00 00 00 20 43 4b 41  |............ CKA|
00000010  41 41 41 41 41 41 41 41  41 41 41 41 41 41 41 41  |AAAAAAAAAAAAAAAA|
00000020  41 41 41 41 41 41 41 41  41 41 41 41 41 00 00 21  |AAAAAAAAAAAAA..!|
00000030  00 01                                             |..|

Other services

19 datagrams from 15 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

SOCKS5 19

Latest SOCKS5 datagram, to 31285/udp

·4Vx ·

payload bytes

00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 09 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

Unrecognised

35 datagrams from 31 sources

Datagrams no decoder recognised. Their first bytes are kept.

Unrecognised 35

Latest Unrecognised datagram, to 30942/udp

·Ы·U·O{-_1·o·<bG· /·=·Mi·\·&qM·s·rj:kH·4·g·paȺ!!·0\G·@·2]·q·h·ϥ·b ·C·֬p·E·)·[·ߓBRl{HD6·>·M.· J~·"ZCg·tn·

payload bytes

00000000  b8 91 84 ae d0 ab cf 55  82 80 4f 7b 2d 5f 31 08  |.......U..O{-_1.|
00000010  c2 06 b2 82 6f ac 0b aa  3c 62 47 ad 8e 88 0d 2f  |....o...<bG..../|
00000020  bb 1f 9b 3d b3 a4 04 ca  4d 69 c4 5c a3 d3 ce 1f  |...=....Mi.\....|
00000030  26 71 4d fa e0 73 83 15  1c fe 72 6a 3a 6b 48 03  |&qM..s....rj:kH.|
00000040  34 ee 1d 92 e4 93 0f 9c  67 1c 70 61 c8 ba 21 21  |4.......g.pa..!!|
00000050  96 9c 30 5c 47 b4 40 bc  8c 14 32 5d 18 12 e9 71  |..0\G.@...2]...q|
00000060  9f e4 e5 a9 68 9f be 10  87 7f e5 dd f1 cf a5 e4  |....h...........|
00000070  e6 0e e2 62 0d 98 43 86  05 d6 ac 70 a6 45 bc ba  |...b..C....p.E..|
00000080  29 f9 5b c8 df 93 42 52  6c 7b 48 44 36 97 81 1c  |).[...BRl{HD6...|
00000090  3e b7 04 0b ea 01 9e 4d  2e 80 0a 4a 7e 96 22 5a  |>......M...J~."Z|
000000a0  43 67 b1 74 6e a9 9d c9  83 4b 88 d7 6a a6 57 99  |Cg.tn....K..j.W.|
000000b0  7c 41 23 66 0f 42 d1 42  85 cd 90 d7 eb 45 d0 f3  ||A#f.B.B.....E..|
000000c0  4c d2 84 8f 89 38 8d 47  18 29 20 16 2a c9 ae 67  |L....8.G.) .*..g|
000000d0  21 61 11 ce 1a 41 76 e0  e5 dc 09 f7 b7 bc ff e6  |!a...Av.........|
000000e0  20 d1 a2 a3 df 2a 8e f1  ff 2e d9 48 57 39 d8 53  | ....*.....HW9.S|
000000f0  dd c9 46 e6 18 df 1e 66  f2 ab 31 e7 c2 24 b1 75  |..F....f..1..$.u|

Peer-to-peer

4,474 datagrams from 86 sources

File-sharing clients trying to reach a peer that used one of these addresses before. This is not scanning, so it is left out of every other figure on this page.

BitTorrent 4,474

Amplification checks

Probes for services that answer a small request with a much larger reply, the property reflection attacks rely on.

Service	Port	Datagrams	Sources	Factor
DNS	53/udp	1	1	28 to 54
NetBIOS	137/udp	1	1	3.8

The factor is how many bytes a reachable server can send back for each byte it receives, as published by CISA in alert TA14-017A.

Destination ports

39131/udp BitTorrent4,474
80/udp2
62442/udp SOCKS52
53/udp DNS1
48618/udp1
1691/udp SOCKS51
2355/udp SOCKS51
2859/udp1
3356/udp SOCKS51
3541/udp1
5396/udp SOCKS51
6009/udp1

DNS questions

gsu.edu ANY1

DNS record types

ANY1

Networks

AS13489 UNE EPM TELECOMUNICACIONES S.A. from 18 sources1,747
AS10620 Telmex Colombia S.A. from 30 sources1,100
AS3816 COLOMBIA TELECOMUNICACIONES S.A. ESP BIC from 19 sources520
AS267832 VELONET SAS from 1 source377
AS52468 UFINET PANAMA S.A. from 6 sources251
AS19429 Colombia from 9 sources164
AS272851 GIGA FIBRA SAS from 1 source130
AS271773 PARTNERS TELECOM COLOMBIA SAS from 1 source49
AS265688 SINERGY SOLUCIONES INTEGRALES from 4 sources40
AS272869 INTERCOMM DE NARINO SAS from 5 sources34

Countries

CO Colombia4,530

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
191.95.130.237	AS13489 UNE EPM TELECOMUNICACIONES S.A.	CO	BitTorrent	716	2026-10-11 00:55
186.81.124.167	AS10620 Telmex Colombia S.A.	CO	BitTorrent	458	2026-10-10 23:07
181.189.17.97	AS267832 VELONET SAS	CO	BitTorrent	377	2026-10-11 05:06
181.68.24.141	AS13489 UNE EPM TELECOMUNICACIONES S.A.	CO	BitTorrent	367	2026-10-11 04:57
186.116.223.145	AS3816 COLOMBIA TELECOMUNICACIONES S.A. ESP BIC	CO	BitTorrent	266	2026-10-09 19:58
181.59.2.79	AS10620 Telmex Colombia S.A.	CO	BitTorrent	239	2026-10-09 05:17
190.128.98.78	AS13489 UNE EPM TELECOMUNICACIONES S.A.	CO	BitTorrent	208	2026-10-11 02:48
181.59.3.34	AS10620 Telmex Colombia S.A.	CO	BitTorrent	172	2026-10-10 20:47
190.60.61.155	AS52468 UFINET PANAMA S.A.	CO	BitTorrent	169	2026-10-09 02:48
191.95.161.175	AS13489 UNE EPM TELECOMUNICACIONES S.A.	CO	BitTorrent	157	2026-10-10 20:59
186.28.16.190	AS19429 Colombia	CO	BitTorrent	150	2026-10-08 16:16
152.205.11.125	AS3816 COLOMBIA TELECOMUNICACIONES S.A. ESP BIC	CO	BitTorrent	142	2026-10-08 23:10
186.194.62.170	AS272851 GIGA FIBRA SAS	CO	BitTorrent	130	2026-10-10 05:33
191.95.166.77	AS13489 UNE EPM TELECOMUNICACIONES S.A.	CO	BitTorrent	106	2026-10-06 22:05
181.59.3.4	AS10620 Telmex Colombia S.A.	CO	BitTorrent	103	2026-10-08 02:14
181.119.202.54	AS52468 UFINET PANAMA S.A.	CO	BitTorrent	50	2026-10-10 02:54
179.12.253.200	AS13489 UNE EPM TELECOMUNICACIONES S.A.	CO	BitTorrent	50	2026-10-09 15:07
186.99.21.49	AS3816 COLOMBIA TELECOMUNICACIONES S.A. ESP BIC	CO	BitTorrent	49	2026-10-10 21:31
179.19.238.190	AS271773 PARTNERS TELECOM COLOMBIA SAS	CO	BitTorrent	49	2026-10-10 20:46
179.12.190.175	AS13489 UNE EPM TELECOMUNICACIONES S.A.	CO	BitTorrent	44	2026-10-09 03:25

Latest datagrams

2026-10-11 05:06:25181.189.17.97to 39131/udpBitTorrentCO

A·w·#·

payload bytes

00000000  41 00 77 f0 87 bb e0 aa  00 00 00 00 00 10 00 00  |A.w.............|
00000010  23 d7 00 00                                       |#...|

2026-10-11 05:06:19181.189.17.97to 39131/udpBitTorrentCO

A·w·`H·#·

payload bytes

00000000  41 00 77 f0 87 60 48 1d  00 00 00 00 00 10 00 00  |A.w..`H.........|
00000010  23 d7 00 00                                       |#...|

2026-10-11 05:06:16181.189.17.97to 39131/udpBitTorrentCO

A·w·1·#·

payload bytes

00000000  41 00 77 f0 87 31 a9 bc  00 00 00 00 00 10 00 00  |A.w..1..........|
00000010  23 d7 00 00                                       |#...|

2026-10-11 05:01:40181.189.17.97to 39131/udpBitTorrentCO

A·wv·W·{·

payload bytes

00000000  41 00 c7 77 76 c1 8a 57  00 00 00 00 00 10 00 00  |A..wv..W........|
00000010  e2 7b 00 00                                       |.{..|

2026-10-11 05:01:34181.189.17.97to 39131/udpBitTorrentCO

A·wve·{·

payload bytes

00000000  41 00 c7 77 76 65 ee c8  00 00 00 00 00 10 00 00  |A..wve..........|
00000010  e2 7b 00 00                                       |.{..|

2026-10-11 05:01:31181.189.17.97to 39131/udpBitTorrentCO

A·wv4·m·{·

payload bytes

00000000  41 00 c7 77 76 34 f6 6d  00 00 00 00 00 10 00 00  |A..wv4.m........|
00000010  e2 7b 00 00                                       |.{..|

2026-10-11 04:59:02209.61.12.137to 39131/udpBitTorrentCO

d1:ad2:id20:· a3·F·VKҊ>·ȱ·9:info_hash20:·E·l·k Zz·)·&e1:q9:get_peers1:t2:·1:v4:LT·/1:y1:qe

payload bytes

00000000  64 31 3a 61 64 32 3a 69  64 32 30 3a d3 0a 61 33  |d1:ad2:id20:..a3|
00000010  16 46 7f 56 4b d2 8a 3e  82 cf de 0e c8 b1 fd fa  |.F.VK..>........|
00000020  39 3a 69 6e 66 6f 5f 68  61 73 68 32 30 3a d3 45  |9:info_hash20:.E|
00000030  c0 04 db c3 6c 92 82 6b  09 5a 7a 93 91 29 18 c4  |....l..k.Zz..)..|
00000040  db 26 65 31 3a 71 39 3a  67 65 74 5f 70 65 65 72  |.&e1:q9:get_peer|
00000050  73 31 3a 74 32 3a a7 d9  31 3a 76 34 3a 4c 54 01  |s1:t2:..1:v4:LT.|
00000060  2f 31 3a 79 31 3a 71 65                           |/1:y1:qe|

2026-10-11 04:57:11181.68.24.141to 39131/udpBitTorrentCO

A·C·4k·YA·

payload bytes

00000000  41 00 43 e5 34 6b 11 de  00 00 00 00 00 10 00 00  |A.C.4k..........|
00000010  59 41 00 00                                       |YA..|

2026-10-11 04:57:06181.189.17.97to 39131/udpBitTorrentCO

A·)4fk·%·

payload bytes

00000000  41 00 29 34 66 6b ac 15  00 00 00 00 00 10 00 00  |A.)4fk..........|
00000010  a2 25 00 00                                       |.%..|

2026-10-11 04:57:05181.68.24.141to 39131/udpBitTorrentCO

A·C·4 ·YA·

payload bytes

00000000  41 00 43 e5 34 0d ee 9f  00 00 00 00 00 10 00 00  |A.C.4...........|
00000010  59 41 00 00                                       |YA..|

2026-10-11 04:57:02181.68.24.141to 39131/udpBitTorrentCO

A·C·3ܖ·YA·

payload bytes

00000000  41 00 43 e5 33 dc 96 91  00 00 00 00 00 10 00 00  |A.C.3...........|
00000010  59 41 00 00                                       |YA..|

2026-10-11 04:57:00181.189.17.97to 39131/udpBitTorrentCO

A·)4f·l·%·

payload bytes

00000000  41 00 29 34 66 10 17 6c  00 00 00 00 00 10 00 00  |A.)4f..l........|
00000010  a2 25 00 00                                       |.%..|

2026-10-11 04:56:57181.189.17.97to 39131/udpBitTorrentCO

A·)4e·%·

payload bytes

00000000  41 00 29 34 65 df ff b7  00 00 00 00 00 10 00 00  |A.)4e...........|
00000010  a2 25 00 00                                       |.%..|

2026-10-11 04:55:21209.61.12.141to 39131/udpBitTorrentCO

d1:ad2:id20:· a3·F·VKҊ>·ȱ·9:info_hash20:·Qeq·줘·b8·e1:q9:get_peers1:t2:·\1:v4:LT·/1:y1:qe

payload bytes

00000000  64 31 3a 61 64 32 3a 69  64 32 30 3a d3 0a 61 33  |d1:ad2:id20:..a3|
00000010  16 46 7f 56 4b d2 8a 3e  82 cf de 0e c8 b1 fd fa  |.F.VK..>........|
00000020  39 3a 69 6e 66 6f 5f 68  61 73 68 32 30 3a d3 c5  |9:info_hash20:..|
00000030  e1 8b 51 65 71 ab c7 0b  19 c9 ec a4 98 16 e5 62  |..Qeq..........b|
00000040  38 19 65 31 3a 71 39 3a  67 65 74 5f 70 65 65 72  |8.e1:q9:get_peer|
00000050  73 31 3a 74 32 3a 1f 5c  31 3a 76 34 3a 4c 54 01  |s1:t2:.\1:v4:LT.|
00000060  2f 31 3a 79 31 3a 71 65                           |/1:y1:qe|

2026-10-11 04:54:12209.61.12.141to 39131/udpBitTorrentCO

d1:ad2:id20:· a3·F·VKҊ>·ȱ·9:info_hash20:Ӵr#·(·}·m·o·ϧh·[e1:q9:get_peers1:t2:·1:v4:LT·/1:y1:qe

payload bytes

00000000  64 31 3a 61 64 32 3a 69  64 32 30 3a d3 0a 61 33  |d1:ad2:id20:..a3|
00000010  16 46 7f 56 4b d2 8a 3e  82 cf de 0e c8 b1 fd fa  |.F.VK..>........|
00000020  39 3a 69 6e 66 6f 5f 68  61 73 68 32 30 3a d3 b4  |9:info_hash20:..|
00000030  72 23 cb 28 88 7d b1 6d  19 8a 6f e1 cf a7 68 f3  |r#.(.}.m..o...h.|
00000040  1c 5b 65 31 3a 71 39 3a  67 65 74 5f 70 65 65 72  |.[e1:q9:get_peer|
00000050  73 31 3a 74 32 3a d5 da  31 3a 76 34 3a 4c 54 01  |s1:t2:..1:v4:LT.|
00000060  2f 31 3a 79 31 3a 71 65                           |/1:y1:qe|