UDP traffic

Datagrams matching asn:213412 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Your plan searches up to 7d, so 30d was shortened. Plans

Datagrams

Source addresses

Networks

Countries

Destination ports

Protocols

raw from 10 sources12
nfs from 2 sources2
gtp_u from 2 sources2
dns from 2 sources2

Destination ports

1194/udp from 4 sources4
1434/udp from 4 sources4
53/udp from 2 sources2
111/udp from 2 sources2
2123/udp from 2 sources2
2152/udp from 2 sources2
2361/udp from 2 sources2

DNS questions

2 queries and 0 unsolicited answers. An answer nobody asked for means a resolver was given a forged source address.

VERSION.BIND TXT2

DNS record types

TXT2

Networks

AS213412 ONYPHE SAS from 14 sources18

Countries

Source addresses (unverified)

Address	Network	Cc	Datagrams	Last seen (UTC)
91.231.89.165	AS213412 ONYPHE SAS	FR	2	2026-10-05 14:41
91.231.89.166	AS213412 ONYPHE SAS	FR	2	2026-10-05 18:10
91.230.168.118	AS213412 ONYPHE SAS	US	2	2026-10-05 18:08
91.230.168.117	AS213412 ONYPHE SAS	US	2	2026-10-05 14:40
91.230.168.217	AS213412 ONYPHE SAS	US	1	2026-10-05 18:05
91.231.89.89	AS213412 ONYPHE SAS	FR	1	2026-10-05 18:07
91.231.89.92	AS213412 ONYPHE SAS	FR	1	2026-10-05 18:24
91.230.168.220	AS213412 ONYPHE SAS	US	1	2026-10-05 18:22
91.230.168.216	AS213412 ONYPHE SAS	US	1	2026-10-05 14:37
91.230.168.116	AS213412 ONYPHE SAS	US	1	2026-10-05 11:13
91.231.89.88	AS213412 ONYPHE SAS	FR	1	2026-10-05 14:39
91.231.89.164	AS213412 ONYPHE SAS	FR	1	2026-10-05 11:13
91.231.89.91	AS213412 ONYPHE SAS	FR	1	2026-10-05 14:55
91.230.168.219	AS213412 ONYPHE SAS	US	1	2026-10-05 14:54

Latest datagrams

2026-10-05 18:24:3891.231.89.92to 1434/udprawFR

payload bytes

00000000  02                                                |.|

2026-10-05 18:22:3091.230.168.220to 1434/udprawUS
·
payload bytes
```
00000000  02                                                |.|
```

2026-10-05 18:10:5891.231.89.166to 2361/udprawFR

DIGI·

payload bytes

00000000  44 49 47 49 00 01 00 06  ff ff ff ff ff ff        |DIGI..........|

2026-10-05 18:08:5491.230.168.118to 2361/udprawUS

DIGI·

payload bytes

00000000  44 49 47 49 00 01 00 06  ff ff ff ff ff ff        |DIGI..........|

2026-10-05 18:07:5491.231.89.89to 111/udpnfsFR

er 7·

payload bytes

00000000  65 72 0a 37 00 00 00 00  00 00 00 02 00 01 86 a0  |er.7............|
00000010  00 00 00 02 00 00 00 04  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00                           |........|

2026-10-05 18:05:5591.230.168.217to 111/udpnfsUS

er 7·

payload bytes

00000000  65 72 0a 37 00 00 00 00  00 00 00 02 00 01 86 a0  |er.7............|
00000010  00 00 00 02 00 00 00 04  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00                           |........|

2026-10-05 15:34:3291.231.89.166to 1434/udprawFR

payload bytes

00000000  02                                                |.|

2026-10-05 15:33:0591.230.168.118to 1434/udprawUS
·
payload bytes
```
00000000  02                                                |.|
```

2026-10-05 14:55:4391.231.89.91to 1194/udprawFR

8·

payload bytes

00000000  38 19 18 17 17 15 14 13  12 00 00 00 00 00        |8.............|

2026-10-05 14:54:2691.230.168.219to 1194/udprawUS

8·

payload bytes

00000000  38 19 18 17 17 15 14 13  12 00 00 00 00 00        |8.............|

2026-10-05 14:41:5791.231.89.165to 2152/udpgtp_uFR

2·

payload bytes

00000000  32 01 00 02 00 00 00 00  00 00                    |2.........|

2026-10-05 14:40:4291.230.168.117to 2152/udpgtp_uUS

2·

payload bytes

00000000  32 01 00 02 00 00 00 00  00 00                    |2.........|

2026-10-05 14:39:1991.231.89.88to 53/udpdnsFR

DNS query TXT/CH VERSION.BIND

payload bytes

00000000  34 ef 01 00 00 01 00 00  00 00 00 00 07 56 45 52  |4............VER|
00000010  53 49 4f 4e 04 42 49 4e  44 00 00 10 00 03        |SION.BIND.....|

2026-10-05 14:37:4991.230.168.216to 53/udpdnsUS

DNS query TXT/CH VERSION.BIND

payload bytes

00000000  34 ef 01 00 00 01 00 00  00 00 00 00 07 56 45 52  |4............VER|
00000010  53 49 4f 4e 04 42 49 4e  44 00 00 10 00 03        |SION.BIND.....|

2026-10-05 12:05:5391.231.89.165to 1194/udprawFR

8·

payload bytes

00000000  38 19 18 17 17 15 14 13  12 00 00 00 00 00        |8.............|

2026-10-05 12:05:1991.230.168.117to 1194/udprawUS

8·

payload bytes

00000000  38 19 18 17 17 15 14 13  12 00 00 00 00 00        |8.............|

2026-10-05 11:13:4791.231.89.164to 2123/udprawFR

2·

payload bytes

00000000  32 01 00 02 00 00 00 00  00 00                    |2.........|

2026-10-05 11:13:2291.230.168.116to 2123/udprawUS

2·

payload bytes

00000000  32 01 00 02 00 00 00 00  00 00                    |2.........|