UDP traffic
Datagrams matching asn:211298 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.
A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.
12
Datagrams
9
Source addresses
1
Networks
1
Countries
9
Destination ports
Protocols
Destination ports
DNS questions
1 queries and 3 unsolicited answers. An answer nobody asked for means a resolver was given a forged source address.
DNS record types
- A1
Networks
- AS211298 Driftnet Ltd from 9 sources12
Countries
Source addresses (unverified)
| Address | Network | Cc | Datagrams | Last seen (UTC) |
|---|---|---|---|---|
| 193.163.125.241 | AS211298 Driftnet Ltd | GB | 3 | 2026-10-05 14:25 |
| 193.163.125.234 | AS211298 Driftnet Ltd | GB | 2 | 2026-10-05 12:24 |
| 193.163.125.208 | AS211298 Driftnet Ltd | GB | 1 | 2026-10-05 12:23 |
| 193.163.125.163 | AS211298 Driftnet Ltd | GB | 1 | 2026-10-05 14:34 |
| 193.163.125.219 | AS211298 Driftnet Ltd | GB | 1 | 2026-10-05 16:38 |
| 193.163.125.244 | AS211298 Driftnet Ltd | GB | 1 | 2026-10-05 12:09 |
| 193.163.125.144 | AS211298 Driftnet Ltd | GB | 1 | 2026-10-05 16:51 |
| 193.163.125.164 | AS211298 Driftnet Ltd | GB | 1 | 2026-10-05 16:23 |
| 193.163.125.230 | AS211298 Driftnet Ltd | GB | 1 | 2026-10-05 14:05 |
Latest datagrams
payload bytes
00000000 16 fe fd 00 00 00 00 00 00 00 00 00 85 01 00 00 |................| 00000010 79 00 00 00 00 00 00 00 79 fe fd 1d 12 8f a2 8d |y.......y.......| 00000020 71 3e 5f 1a 7d bd 07 8b 78 fc cf 3e 08 95 de 25 |q>_.}...x..>...%| 00000030 60 95 66 bd ed a2 36 b7 e9 6f dd 00 00 00 18 c0 |`.f...6..o......| 00000040 ac c0 ae c0 2b c0 2f c0 09 c0 13 c0 0a c0 14 c0 |....+./.........| 00000050 2c c0 30 cc a9 cc a8 01 00 00 37 00 0d 00 16 00 |,.0.......7.....| 00000060 14 04 03 05 03 06 03 08 07 08 04 08 05 08 06 04 |................| 00000070 01 05 01 06 01 ff 01 00 01 00 00 0a 00 0a 00 08 |................| 00000080 00 1d 00 17 00 18 00 19 00 0b 00 02 01 00 00 17 |................| 00000090 00 00 |..|
payload bytes
00000000 e3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000020 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
payload bytes
00000000 38 ea 87 a7 c4 63 0e 7f 70 00 00 00 00 00 |8....c..p.....|
payload bytes
00000000 c0 68 01 20 00 01 00 00 00 00 00 00 07 65 78 61 |.h. .........exa| 00000010 6d 70 6c 65 03 63 6f 6d 00 00 01 00 01 |mple.com.....|
payload bytes
00000000 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 |<?xml version="1| 00000010 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 |.0" encoding="UT| 00000020 46 2d 38 22 3f 3e 3c 65 3a 45 6e 76 65 6c 6f 70 |F-8"?><e:Envelop| 00000030 65 20 78 6d 6c 6e 73 3a 65 3d 22 68 74 74 70 3a |e xmlns:e="http:| 00000040 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 |//www.w3.org/200| 00000050 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f |3/05/soap-envelo| 00000060 70 65 22 20 78 6d 6c 6e 73 3a 77 3d 22 68 74 74 |pe" xmlns:w="htt| 00000070 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 |p://schemas.xmls| 00000080 6f 61 70 2e 6f 72 67 2f 77 73 2f 32 30 30 34 2f |oap.org/ws/2004/| 00000090 30 38 2f 61 64 64 72 65 73 73 69 6e 67 22 20 78 |08/addressing" x| 000000a0 6d 6c 6e 73 3a 64 3d 22 68 74 74 70 3a 2f 2f 73 |mlns:d="http://s| 000000b0 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f |chemas.xmlsoap.o| 000000c0 72 67 2f 77 73 2f 32 30 30 35 2f 30 34 2f 64 69 |rg/ws/2005/04/di| 000000d0 73 63 6f 76 65 72 79 22 20 78 6d 6c 6e 73 3a 64 |scovery" xmlns:d| 000000e0 6e 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 6e |n="http://www.on| 000000f0 76 69 66 2e 6f 72 67 2f 76 65 72 31 30 2f 6e 65 |vif.org/ver10/ne| ... 512 bytes shown in part
payload bytes
00000000 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 |<?xml version="1| 00000010 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 |.0" encoding="ut| 00000020 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 |f-8"?><soap:Enve| 00000030 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d |lope xmlns:soap=| 00000040 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f |"http://www.w3.o| 00000050 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d |rg/2003/05/soap-| 00000060 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a |envelope" xmlns:| 00000070 77 73 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 |wsa="http://sche| 00000080 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f |mas.xmlsoap.org/| 00000090 77 73 2f 32 30 30 34 2f 30 38 2f 61 64 64 72 65 |ws/2004/08/addre| 000000a0 73 73 69 6e 67 22 20 78 6d 6c 6e 73 3a 77 73 64 |ssing" xmlns:wsd| 000000b0 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 |="http://schemas| 000000c0 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 77 73 2f |.xmlsoap.org/ws/| 000000d0 32 30 30 35 2f 30 34 2f 64 69 73 63 6f 76 65 72 |2005/04/discover| 000000e0 79 22 20 78 6d 6c 6e 73 3a 77 73 64 70 3d 22 68 |y" xmlns:wsdp="h| 000000f0 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d |ttp://schemas.xm| ... 512 bytes shown in part
payload bytes
00000000 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 |<?xml version="1| 00000010 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 |.0" encoding="UT| 00000020 46 2d 38 22 3f 3e 3c 65 6e 76 3a 45 6e 76 65 6c |F-8"?><env:Envel| 00000030 6f 70 65 20 78 6d 6c 6e 73 3a 65 6e 76 3d 22 68 |ope xmlns:env="h| 00000040 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 |ttp://www.w3.org| 00000050 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e |/2003/05/soap-en| 00000060 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 |velope" xmlns:ws| 00000070 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 |a="http://schema| 00000080 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 77 73 |s.xmlsoap.org/ws| 00000090 2f 32 30 30 34 2f 30 38 2f 61 64 64 72 65 73 73 |/2004/08/address| 000000a0 69 6e 67 22 20 78 6d 6c 6e 73 3a 77 73 64 3d 22 |ing" xmlns:wsd="| 000000b0 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 |http://schemas.x| 000000c0 6d 6c 73 6f 61 70 2e 6f 72 67 2f 77 73 2f 32 30 |mlsoap.org/ws/20| 000000d0 30 35 2f 30 34 2f 64 69 73 63 6f 76 65 72 79 22 |05/04/discovery"| 000000e0 3e 3c 65 6e 76 3a 48 65 61 64 65 72 3e 3c 77 73 |><env:Header><ws| 000000f0 61 3a 54 6f 3e 75 72 6e 3a 73 63 68 65 6d 61 73 |a:To>urn:schemas| ... 512 bytes shown in part
payload bytes
00000000 16 fe fd 00 00 00 00 00 00 00 00 00 85 01 00 00 |................| 00000010 79 00 00 00 00 00 00 00 79 fe fd 33 2f 78 3b f6 |y.......y..3/x;.| 00000020 b4 bf fe 5f 75 ee c0 f4 78 43 33 03 f0 b2 19 9f |..._u...xC3.....| 00000030 ed 34 b1 d8 bc 8c d2 d0 22 eb 86 00 00 00 18 c0 |.4......".......| 00000040 ac c0 ae c0 2b c0 2f c0 09 c0 13 c0 0a c0 14 c0 |....+./.........| 00000050 2c c0 30 cc a9 cc a8 01 00 00 37 00 0d 00 16 00 |,.0.......7.....| 00000060 14 04 03 05 03 06 03 08 07 08 04 08 05 08 06 04 |................| 00000070 01 05 01 06 01 ff 01 00 01 00 00 0a 00 0a 00 08 |................| 00000080 00 1d 00 17 00 18 00 19 00 0b 00 02 01 00 00 17 |................| 00000090 00 00 |..|
payload bytes
00000000 02 08 00 00 |....|
payload bytes
00000000 01 00 00 00 |....|
payload bytes
00000000 44 d2 c7 db 00 00 00 00 00 00 00 02 00 01 86 a0 |D...............| 00000010 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000020 00 00 00 00 00 00 00 00 |........|
payload bytes