UDP traffic

Datagrams matching asn:45102 sent to HoneyLabs sensors over UDP in the last 24 hours. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Datagrams

Source addresses

Networks

Countries

Destination ports

Protocols

raw from 2 sources3
dns from 2 sources2

Destination ports

10000/udp from 1 source2
53/udp from 1 source1
123/udp from 1 source1
30718/udp from 1 source1

DNS questions

2 queries and 0 unsolicited answers. An answer nobody asked for means a resolver was given a forged source address.

<HONEYPOT>.round2026-10-05.odns.m.dnsmeasure.top A1

DNS record types

TYPE01
A1

Networks

AS45102 Alibaba (US) Technology Co., Ltd. from 4 sources5

Countries

Source addresses (unverified)

Address	Network	Cc	Datagrams	Last seen (UTC)
8.211.41.180	AS45102 Alibaba (US) Technology Co., Ltd.	DE	2	2026-10-05 14:48
8.211.44.141	AS45102 Alibaba (US) Technology Co., Ltd.	DE	1	2026-10-05 17:39
8.211.45.42	AS45102 Alibaba (US) Technology Co., Ltd.	DE	1	2026-10-05 14:51
8.210.123.17	AS45102 Alibaba (US) Technology Co., Ltd.	HK	1	2026-10-05 11:05

Latest datagrams

2026-10-05 17:39:458.211.44.141to 123/udpdnsDE

DNS query TYPE0/CLASS0 .

payload bytes

00000000  e3 00 04 fa 00 01 00 00  00 01 00 00 00 00 00 00  |................|
00000010  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00  c5 4f 23 4b 71 b1 52 f3  |.........O#Kq.R.|

2026-10-05 14:51:468.211.45.42to 30718/udprawDE

payload bytes

00000000  00 00 00 f6                                       |....|

2026-10-05 14:48:328.211.41.180to 10000/udprawDE

{·13800138000{

payload bytes

00000000  7b 01 00 0b 31 33 38 30  30 31 33 38 30 30 30 7b  |{...13800138000{|

2026-10-05 14:48:298.211.41.180to 10000/udprawDE

r·|·

payload bytes

00000000  72 fe 1d 13 00 00 00 00  00 00 00 02 00 01 86 a0  |r...............|
00000010  00 01 97 7c 00 00 00 00  00 00 00 00 00 00 00 00  |...|............|
00000020  00 00 00 00 00 00 00 00                           |........|

2026-10-05 11:05:378.210.123.17to 53/udpdnsHK
DNS query A <HONEYPOT>.round2026-10-05.odns.m.dnsmeasure.top
payload bytes