UDP traffic
Datagrams matching port:6881 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.
A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.
120
Datagrams
84
Source addresses
39
Networks
20
Countries
1
Destination ports
Traffic by type
Unrecognised
8 datagrams from 6 sourcesDatagrams no decoder recognised. Their first bytes are kept.
Latest Unrecognised datagram, to 6881/udp
payload bytes
00000000 70 2e 2b 19 3a 13 8c 35 |p.+.:..5|
Peer-to-peer
112 datagrams from 81 sourcesFile-sharing clients trying to reach a peer that used one of these addresses before. This is not scanning, so it is left out of every other figure on this page.
Destination ports
- 6881/udp BitTorrent120
Networks
- AS14061 DigitalOcean, LLC from 10 sources21
- AS398324 Censys, Inc. from 11 sources12
- AS20052 Arbor Networks, Inc. from 7 sources12
- AS213412 ONYPHE SAS from 6 sources8
- AS396982 Google LLC from 6 sources6
- AS401661 EMBNEX, LLC from 1 source5
- AS212219 Hosting Dunyam Bilisim Teknolojileri Tic from 1 source4
- AS63949 Akamai Connected Cloud from 1 source4
- AS10439 CariNet, Inc. from 3 sources3
- AS202425 IP Volume inc from 2 sources3
Countries
Source addresses (unverified)
| Address | Network | Cc | Sends | Datagrams | Last seen (UTC) |
|---|---|---|---|---|---|
| 16.5.0.234 | AS401661 EMBNEX, LLC | BR | BitTorrent | 5 | 2026-10-05 16:06 |
| 97.107.132.242 | AS63949 Akamai Connected Cloud | US | BitTorrent | 4 | 2026-10-06 20:05 |
| 104.236.229.227 | AS14061 DigitalOcean, LLC | US | BitTorrent | 4 | 2026-10-11 02:33 |
| 195.85.207.31 | AS212219 Hosting Dunyam Bilisim Teknolojileri Tic | TR | BitTorrent | 4 | 2026-10-09 05:37 |
| 198.211.100.179 | AS14061 DigitalOcean, LLC | US | BitTorrent | 4 | 2026-10-07 19:41 |
| 134.199.209.2 | AS14061 DigitalOcean, LLC | US | BitTorrent | 3 | 2026-10-08 07:34 |
| 146.88.240.42 | AS20052 Arbor Networks, Inc. | US | BitTorrent | 3 | 2026-10-09 13:48 |
| 62.210.89.150 | AS12876 Scaleway SAS | FR | BitTorrent | 3 | 2026-10-10 00:27 |
| 161.35.181.152 | AS14061 DigitalOcean, LLC | US | BitTorrent | 3 | 2026-10-09 19:05 |
| 146.88.241.50 | AS20052 Arbor Networks, Inc. | US | BitTorrent | 2 | 2026-10-09 02:25 |
| 146.88.241.120 | AS20052 Arbor Networks, Inc. | US | BitTorrent | 2 | 2026-10-09 13:15 |
| 45.170.248.29 | AS28423 Truxgo S. de R.L de C.V | MX | BitTorrent | 2 | 2026-10-09 09:39 |
| 185.242.226.62 | AS202425 IP Volume inc | US | BitTorrent | 2 | 2026-10-06 10:50 |
| 66.132.172.232 | AS398324 Censys, Inc. | US | BitTorrent | 2 | 2026-10-08 01:31 |
| 91.200.217.81 | AS44027 Spitamen Alexander Internet LLC. | TJ | BitTorrent | 2 | 2026-10-10 05:12 |
| 91.231.89.88 | AS213412 ONYPHE SAS | FR | Unrecognised | 2 | 2026-10-10 06:06 |
| 146.88.241.140 | AS20052 Arbor Networks, Inc. | US | BitTorrent | 2 | 2026-10-07 02:04 |
| 144.31.132.58 | AS210546 Chsl One Ltd | FI | BitTorrent | 2 | 2026-10-09 21:50 |
| 91.230.168.216 | AS213412 ONYPHE SAS | US | Unrecognised | 2 | 2026-10-10 05:51 |
| 172.245.90.204 | AS36352 HostPapa | US | BitTorrent | 2 | 2026-10-10 02:04 |
Latest datagrams
payload bytes
00000000 70 2e 2b 19 3a 13 8c 35 |p.+.:..5|
payload bytes
00000000 64 31 3a 61 64 32 3a 69 64 32 30 3a 71 88 80 c8 |d1:ad2:id20:q...| 00000010 76 72 f1 13 d3 a2 a4 f6 64 45 c7 50 46 0c 33 46 |vr......dE.PF.3F| 00000020 36 3a 74 61 72 67 65 74 32 30 3a be f6 01 d2 c0 |6:target20:.....| 00000030 f9 b2 5c 82 05 5b 4f c6 68 e3 53 94 d2 d0 b7 65 |..\..[O.h.S....e| 00000040 31 3a 71 39 3a 66 69 6e 64 5f 6e 6f 64 65 31 3a |1:q9:find_node1:| 00000050 74 31 3a 61 31 3a 79 31 3a 71 65 |t1:a1:y1:qe|
payload bytes
00000000 44 2e 74 2e 0a 5e 73 0e 26 4a 6f 17 20 10 5d 11 |D.t..^s.&Jo. .].| 00000010 5e 41 6e 62 29 69 72 05 7d 43 14 2f 57 78 79 1b |^Anb)ir.}C./Wxy.| 00000020 44 d8 |D.|
payload bytes
00000000 64 31 3a 61 64 32 3a 69 64 32 30 3a 63 65 6e 73 |d1:ad2:id20:cens| 00000010 79 73 69 6e 73 70 65 63 74 73 63 61 6e 6e 65 72 |ysinspectscanner| 00000020 65 31 3a 71 34 3a 70 69 6e 67 31 3a 74 32 3a 61 |e1:q4:ping1:t2:a| 00000030 61 31 3a 79 31 3a 71 65 |a1:y1:qe|
payload bytes
00000000 1e 2e 78 02 43 6a 6a 67 6a 5c 45 36 04 5d 76 6c |..x.Cjjgj\E6.]vl| 00000010 15 7b 75 3c 77 70 2f 0e 6b 58 61 61 49 12 51 67 |.{u<wp/.kXaaI.Qg| 00000020 51 4a 6a 14 34 54 7b 1e 30 40 55 35 1e 4b 21 33 |QJj.4T{.0@U5.K!3| 00000030 46 16 6f 3d 06 1e 4b 71 77 2c 52 40 3e 23 27 0f |F.o=..Kqw,R@>#'.| 00000040 6d 11 23 22 65 1f 40 16 5f 15 4b 7d 60 6c 30 26 |m.#"e.@._.K}`l0&| 00000050 02 20 64 08 3e 2f 79 93 99 |. d.>/y..|payload bytes
00000000 64 31 3a 61 64 32 3a 69 64 32 30 3a 63 65 6e 73 |d1:ad2:id20:cens| 00000010 79 73 69 6e 73 70 65 63 74 73 63 61 6e 6e 65 72 |ysinspectscanner| 00000020 65 31 3a 71 34 3a 70 69 6e 67 31 3a 74 32 3a 61 |e1:q4:ping1:t2:a| 00000030 61 31 3a 79 31 3a 71 65 |a1:y1:qe|
payload bytes
00000000 64 31 3a 61 64 32 3a 69 64 32 30 3a 2a 3c b7 f4 |d1:ad2:id20:*<..| 00000010 1c a5 97 09 de 79 d1 6f 02 8c 00 0c 6d 0d b6 75 |.....y.o....m..u| 00000020 65 31 3a 71 34 3a 70 69 6e 67 31 3a 74 31 39 3a |e1:q4:ping1:t19:| 00000030 31 36 32 36 31 36 39 31 36 32 30 36 37 39 33 30 |1626169162067930| 00000040 30 30 31 31 3a 79 31 3a 71 65 |0011:y1:qe|
payload bytes
00000000 64 31 3a 61 64 32 3a 69 64 32 30 3a 61 62 63 64 |d1:ad2:id20:abcd| 00000010 65 66 67 68 69 6a 30 31 32 33 34 35 36 37 38 39 |efghij0123456789| 00000020 65 31 3a 71 34 3a 70 69 6e 67 31 3a 74 32 3a 61 |e1:q4:ping1:t2:a| 00000030 61 31 3a 79 31 3a 71 65 |a1:y1:qe|
payload bytes
00000000 64 31 3a 61 64 32 3a 69 64 32 30 3a 71 88 80 c8 |d1:ad2:id20:q...| 00000010 76 72 f1 13 d3 a2 a4 f6 64 45 c7 50 46 0c 33 46 |vr......dE.PF.3F| 00000020 36 3a 74 61 72 67 65 74 32 30 3a be f6 01 d2 c0 |6:target20:.....| 00000030 f9 b2 5c 82 05 5b 4f c6 68 e3 53 94 d2 d0 b7 65 |..\..[O.h.S....e| 00000040 31 3a 71 39 3a 66 69 6e 64 5f 6e 6f 64 65 31 3a |1:q9:find_node1:| 00000050 74 31 3a 61 31 3a 79 31 3a 71 65 |t1:a1:y1:qe|
payload bytes
00000000 64 31 3a 61 64 32 3a 69 64 32 30 3a 63 65 6e 73 |d1:ad2:id20:cens| 00000010 79 73 69 6e 73 70 65 63 74 73 63 61 6e 6e 65 72 |ysinspectscanner| 00000020 65 31 3a 71 34 3a 70 69 6e 67 31 3a 74 32 3a 61 |e1:q4:ping1:t2:a| 00000030 61 31 3a 79 31 3a 71 65 |a1:y1:qe|
payload bytes
00000000 64 31 3a 61 64 32 3a 69 64 32 30 3a 63 65 6e 73 |d1:ad2:id20:cens| 00000010 79 73 69 6e 73 70 65 63 74 73 63 61 6e 6e 65 72 |ysinspectscanner| 00000020 65 31 3a 71 34 3a 70 69 6e 67 31 3a 74 32 3a 61 |e1:q4:ping1:t2:a| 00000030 61 31 3a 79 31 3a 71 65 |a1:y1:qe|
payload bytes
00000000 64 31 3a 61 64 32 3a 69 64 37 3a 73 63 61 6e 6e |d1:ad2:id7:scann| 00000010 65 72 65 31 3a 71 34 3a 70 69 6e 67 31 3a 74 32 |ere1:q4:ping1:t2| 00000020 3a 61 61 31 3a 79 31 3a 71 65 |:aa1:y1:qe|
payload bytes
00000000 64 31 3a 61 64 32 3a 69 64 37 3a 73 63 61 6e 6e |d1:ad2:id7:scann| 00000010 65 72 65 31 3a 71 34 3a 70 69 6e 67 31 3a 74 32 |ere1:q4:ping1:t2| 00000020 3a 61 61 31 3a 79 31 3a 71 65 |:aa1:y1:qe|
payload bytes
00000000 42 2e 38 72 75 49 70 01 3b 73 3e 42 3a 2e 30 0d |B.8ruIp.;s>B:.0.| 00000010 53 26 26 01 28 70 5a 43 56 53 25 1c 14 3c 2d 56 |S&&.(pZCVS%..<-V| 00000020 0a 65 48 00 2e 38 01 6a 2c 3f 2c 66 6d 5c 73 40 |.eH..8.j,?,fm\s@| 00000030 02 1a 41 2b 0a 1b 6e 60 6e 13 7c 02 4f 29 58 5a |..A+..n`n.|.O)XZ| 00000040 0e 21 5a 3d 59 5b 27 05 1a 53 6c 07 2f 5f 47 32 |.!Z=Y['..Sl./_G2| 00000050 79 08 4c 1c |y.L.|
payload bytes
00000000 64 31 3a 61 64 32 3a 69 64 32 30 3a 74 68 30 58 |d1:ad2:id20:th0X| 00000010 6c 79 35 4a 4c 37 44 67 6b 47 46 49 4d 34 67 48 |ly5JL7DgkGFIM4gH| 00000020 36 3a 74 61 72 67 65 74 32 30 3a 79 6f 51 50 62 |6:target20:yoQPb| 00000030 5a 62 42 53 74 39 62 38 62 45 78 48 55 59 76 34 |ZbBSt9b8bExHUYv4| 00000040 3a 77 61 6e 74 34 3a 6e 34 6e 36 65 31 3a 71 39 |:want4:n4n6e1:q9| 00000050 3a 66 69 6e 64 5f 6e 6f 64 65 31 3a 74 32 3a 58 |:find_node1:t2:X| 00000060 5a 31 3a 79 31 3a 71 65 |Z1:y1:qe|