UDP traffic

Datagrams matching asn:20052 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Your plan searches up to 7d, so 30d was shortened. Plans

Datagrams

Source addresses

Networks

Countries

Destination ports

Protocols

raw from 5 sources8
dns from 2 sources3
snmp from 1 source2
stun from 1 source1
nfs from 1 source1

Destination ports

137/udp from 2 sources3
161/udp from 1 source2
1434/udp from 1 source2
27022/udp from 1 source2
27029/udp from 1 source2
500/udp from 1 source1
27030/udp from 1 source1
27961/udp from 1 source1
37833/udp from 1 source1

DNS questions

3 queries and 0 unsolicited answers. An answer nobody asked for means a resolver was given a forged source address.

CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA SRV3

DNS record types

SRV3

Networks

AS20052 Arbor Networks, Inc. from 9 sources15

Countries

US United States15

Source addresses (unverified)

Address	Network	Cc	Datagrams	Last seen (UTC)
146.88.240.43	AS20052 Arbor Networks, Inc.	US	3	2026-10-05 13:04
146.88.241.100	AS20052 Arbor Networks, Inc.	US	2	2026-10-05 12:42
146.88.241.140	AS20052 Arbor Networks, Inc.	US	2	2026-10-05 13:24
146.88.241.80	AS20052 Arbor Networks, Inc.	US	2	2026-10-05 14:18
146.88.241.120	AS20052 Arbor Networks, Inc.	US	2	2026-10-05 13:01
146.88.240.27	AS20052 Arbor Networks, Inc.	US	1	2026-10-05 13:05
146.88.241.150	AS20052 Arbor Networks, Inc.	US	1	2026-10-05 12:14
146.88.241.130	AS20052 Arbor Networks, Inc.	US	1	2026-10-05 13:56
146.88.240.31	AS20052 Arbor Networks, Inc.	US	1	2026-10-05 12:28

Latest datagrams

2026-10-05 14:18:00146.88.241.80to 137/udpdnsUS

DNS query SRV CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

payload bytes

00000000  e5 d8 00 00 00 01 00 00  00 00 00 00 20 43 4b 41  |............ CKA|
00000010  41 41 41 41 41 41 41 41  41 41 41 41 41 41 41 41  |AAAAAAAAAAAAAAAA|
00000020  41 41 41 41 41 41 41 41  41 41 41 41 41 00 00 21  |AAAAAAAAAAAAA..!|
00000030  00 01                                             |..|

2026-10-05 13:56:29146.88.241.130to 27030/udprawUS

·TTSource Engine Query

payload bytes

00000000  ff ff ff ff 54 54 53 6f  75 72 63 65 20 45 6e 67  |....TTSource Eng|
00000010  69 6e 65 20 51 75 65 72  79                       |ine Query|

2026-10-05 13:24:12146.88.241.140to 27022/udprawUS

·TTSource Engine Query

payload bytes

00000000  ff ff ff ff 54 54 53 6f  75 72 63 65 20 45 6e 67  |....TTSource Eng|
00000010  69 6e 65 20 51 75 65 72  79                       |ine Query|

2026-10-05 13:09:57146.88.241.140to 27022/udprawUS

·TTSource Engine Query

payload bytes

00000000  ff ff ff ff 54 54 53 6f  75 72 63 65 20 45 6e 67  |....TTSource Eng|
00000010  69 6e 65 20 51 75 65 72  79                       |ine Query|

2026-10-05 13:05:08146.88.240.27to 137/udpdnsUS

DNS query SRV CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

payload bytes

00000000  e5 d8 00 00 00 01 00 00  00 00 00 00 20 43 4b 41  |............ CKA|
00000010  41 41 41 41 41 41 41 41  41 41 41 41 41 41 41 41  |AAAAAAAAAAAAAAAA|
00000020  41 41 41 41 41 41 41 41  41 41 41 41 41 00 00 21  |AAAAAAAAAAAAA..!|
00000030  00 01                                             |..|

2026-10-05 13:04:12146.88.240.43to 500/udpnfsUS

er 7·

payload bytes

00000000  65 72 0a 37 00 00 00 00  00 00 00 02 00 01 86 a0  |er.7............|
00000010  00 00 00 02 00 00 00 04  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00        |..............|

2026-10-05 13:01:01146.88.241.120to 161/udpsnmpUS

0&·public·c·0·0 ·+·

payload bytes

00000000  30 26 02 01 01 04 06 70  75 62 6c 69 63 a1 19 02  |0&.....public...|
00000010  04 dc 63 c2 9a 02 01 00  02 01 00 30 0b 30 09 06  |..c........0.0..|
00000020  05 2b 06 01 02 01 05 00                           |.+......|

2026-10-05 12:59:18146.88.241.80to 137/udpdnsUS

DNS query SRV CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

payload bytes

00000000  e5 d8 00 00 00 01 00 00  00 00 00 00 20 43 4b 41  |............ CKA|
00000010  41 41 41 41 41 41 41 41  41 41 41 41 41 41 41 41  |AAAAAAAAAAAAAAAA|
00000020  41 41 41 41 41 41 41 41  41 41 41 41 41 00 00 21  |AAAAAAAAAAAAA..!|
00000030  00 01                                             |..|

2026-10-05 12:46:55146.88.240.43to 1434/udprawUS

payload bytes

00000000  02                                                |.|

2026-10-05 12:42:46146.88.241.100to 27029/udprawUS

·TTSource Engine Query

payload bytes

00000000  ff ff ff ff 54 54 53 6f  75 72 63 65 20 45 6e 67  |....TTSource Eng|
00000010  69 6e 65 20 51 75 65 72  79                       |ine Query|

2026-10-05 12:32:06146.88.240.43to 1434/udprawUS

payload bytes

00000000  02                                                |.|

2026-10-05 12:28:32146.88.240.31to 37833/udpstunUS

·!· D ·4Vx·#Eg

payload bytes

00000000  00 01 00 00 21 12 0a 44  20 12 34 56 78 9a bc de  |....!..D .4Vx...|
00000010  f1 23 45 67                                       |.#Eg|

2026-10-05 12:18:33146.88.241.100to 27029/udprawUS

·TTSource Engine Query

payload bytes

00000000  ff ff ff ff 54 54 53 6f  75 72 63 65 20 45 6e 67  |....TTSource Eng|
00000010  69 6e 65 20 51 75 65 72  79                       |ine Query|

2026-10-05 12:14:39146.88.241.150to 27961/udprawUS

·getstatus·

payload bytes

00000000  ff ff ff ff 67 65 74 73  74 61 74 75 73 10        |....getstatus.|

2026-10-05 11:50:52146.88.241.120to 161/udpsnmpUS

0&·public·c·0·0 ·+·

payload bytes

00000000  30 26 02 01 01 04 06 70  75 62 6c 69 63 a1 19 02  |0&.....public...|
00000010  04 dc 63 c2 9a 02 01 00  02 01 00 30 0b 30 09 06  |..c........0.0..|
00000020  05 2b 06 01 02 01 05 00                           |.+......|