UDP traffic

Datagrams matching asn:16509 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Datagrams

Source addresses

Networks

Countries

Destination ports

Protocols

dns from 1 source11
raw from 1 source2

Destination ports

53/udp from 2 sources13

DNS questions

11 queries and 0 unsolicited answers. An answer nobody asked for means a resolver was given a forged source address.

DNS record types

TXT8
A3

Networks

AS16509 Amazon.com, Inc. from 2 sources13

Countries

Source addresses (unverified)

Address	Network	Cc	Datagrams	Last seen (UTC)
18.226.68.29	AS16509 Amazon.com, Inc.	US	11	2026-10-05 14:12
52.56.233.136	AS16509 Amazon.com, Inc.	GB	2	2026-10-05 20:47

Latest datagrams

2026-10-05 20:47:5552.56.233.136to 53/udprawGB

payload bytes

00000000  00 00 10 00 00 00 00 00  00 00 00 00              |............|

2026-10-05 20:45:2852.56.233.136to 53/udprawGB

payload bytes

00000000  00 00 10 00 00 00 00 00  00 00 00 00              |............|

2026-10-05 14:12:4518.226.68.29to 53/udpdnsUS

DNS query TXT/CH id.server

payload bytes

00000000  12 d9 01 00 00 01 00 00  00 00 00 00 02 69 64 06  |.............id.|
00000010  73 65 72 76 65 72 00 00  10 00 03                 |server.....|

2026-10-05 14:12:4418.226.68.29to 53/udpdnsUS

DNS query TXT/CH hostname.bind

payload bytes

00000000  55 01 01 00 00 01 00 00  00 00 00 00 08 68 6f 73  |U............hos|
00000010  74 6e 61 6d 65 04 62 69  6e 64 00 00 10 00 03     |tname.bind.....|

2026-10-05 14:09:3918.226.68.29to 53/udpdnsUS

DNS query A google.com

payload bytes

00000000  bc 75 00 00 00 01 00 00  00 00 00 00 06 67 6f 6f  |.u...........goo|
00000010  67 6c 65 03 63 6f 6d 00  00 01 00 01              |gle.com.....|

2026-10-05 14:09:3818.226.68.29to 53/udpdnsUS

DNS query TXT/CH id.server

payload bytes

00000000  8b 22 01 00 00 01 00 00  00 00 00 00 02 69 64 06  |."...........id.|
00000010  73 65 72 76 65 72 00 00  10 00 03                 |server.....|

2026-10-05 14:09:3718.226.68.29to 53/udpdnsUS

DNS query TXT/CH hostname.bind

payload bytes

00000000  30 73 01 00 00 01 00 00  00 00 00 00 08 68 6f 73  |0s...........hos|
00000010  74 6e 61 6d 65 04 62 69  6e 64 00 00 10 00 03     |tname.bind.....|

2026-10-05 14:09:3618.226.68.29to 53/udpdnsUS

DNS query TXT/CH version.server

payload bytes

00000000  d8 2a 01 00 00 01 00 00  00 00 00 00 07 76 65 72  |.*...........ver|
00000010  73 69 6f 6e 06 73 65 72  76 65 72 00 00 10 00 03  |sion.server.....|

2026-10-05 12:32:3118.226.68.29to 53/udpdnsUS

DNS query A google.com

payload bytes

00000000  91 f8 00 00 00 01 00 00  00 00 00 00 06 67 6f 6f  |.............goo|
00000010  67 6c 65 03 63 6f 6d 00  00 01 00 01              |gle.com.....|

2026-10-05 12:32:3018.226.68.29to 53/udpdnsUS

DNS query TXT/CH id.server

payload bytes

00000000  cb 47 01 00 00 01 00 00  00 00 00 00 02 69 64 06  |.G...........id.|
00000010  73 65 72 76 65 72 00 00  10 00 03                 |server.....|

2026-10-05 12:32:2718.226.68.29to 53/udpdnsUS

DNS query TXT/CH version.bind

payload bytes

00000000  57 1c 01 00 00 01 00 00  00 00 00 00 07 76 65 72  |W............ver|
00000010  73 69 6f 6e 04 62 69 6e  64 00 00 10 00 03        |sion.bind.....|

2026-10-05 12:25:5518.226.68.29to 53/udpdnsUS

DNS query A google.com

payload bytes

00000000  d6 ee 00 00 00 01 00 00  00 00 00 00 06 67 6f 6f  |.............goo|
00000010  67 6c 65 03 63 6f 6d 00  00 01 00 01              |gle.com.....|

2026-10-05 12:25:5418.226.68.29to 53/udpdnsUS

DNS query TXT/CH id.server

payload bytes

00000000  d1 04 01 00 00 01 00 00  00 00 00 00 02 69 64 06  |.............id.|
00000010  73 65 72 76 65 72 00 00  10 00 03                 |server.....|