UDP traffic

Datagrams matching country:NL sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Datagrams

Source addresses

Networks

Countries

Destination ports

Protocols

bittorrent from 1 source10
dns from 2 sources4
stun from 1 source3
raw from 1 source1
snmp from 1 source1

Destination ports

39131/udp from 1 source10
53/udp from 2 sources4
3478/udp from 1 source3
161/udp from 1 source1
520/udp from 1 source1

DNS questions

4 queries and 0 unsolicited answers. An answer nobody asked for means a resolver was given a forged source address.

DNS record types

A3
TXT1

Networks

AS60781 LeaseWeb Netherlands B.V. from 1 source10
AS1103 SURF B.V. from 2 sources4
AS219502 Storm Industries LLC from 1 source3
AS12876 Scaleway SAS from 1 source1
AS202425 IP Volume inc from 1 source1

Countries

NL The Netherlands19

Source addresses (unverified)

Address	Network	Cc	Datagrams	Last seen (UTC)
94.75.213.36	AS60781 LeaseWeb Netherlands B.V.	NL	10	2026-10-05 12:23
94.154.43.251	AS219502 Storm Industries LLC	NL	3	2026-10-05 16:08
192.87.173.76	AS1103 SURF B.V.	NL	3	2026-10-05 13:13
93.174.95.106	AS202425 IP Volume inc	NL	1	2026-10-05 14:17
51.158.205.203	AS12876 Scaleway SAS	NL	1	2026-10-05 17:32
145.90.8.9	AS1103 SURF B.V.	NL	1	2026-10-05 16:53

Latest datagrams

2026-10-05 17:32:5351.158.205.203to 53/udpdnsNL

DNS query TXT/CH version.bind

payload bytes

00000000  f6 49 01 20 00 01 00 00  00 00 00 00 07 76 65 72  |.I. .........ver|
00000010  73 69 6f 6e 04 62 69 6e  64 00 00 10 00 03 00     |sion.bind......|

2026-10-05 16:53:20145.90.8.9to 161/udpsnmpNL

0)·public·7·0·0·+·

payload bytes

00000000  30 29 02 01 01 04 06 70  75 62 6c 69 63 a0 1c 02  |0).....public...|
00000010  04 37 8f a7 87 02 01 00  02 01 00 30 0e 30 0c 06  |.7.........0.0..|
00000020  08 2b 06 01 02 01 01 01  00 05 00                 |.+.........|

2026-10-05 16:08:0594.154.43.251to 3478/udpstunNL

·#4EVgx·#4EVg·

payload bytes

00000000  00 01 00 08 12 23 34 45  56 67 78 89 90 01 12 23  |.....#4EVgx....#|
00000010  34 45 56 67 00 03 00 04  00 00 00 00 00           |4EVg.........|

2026-10-05 14:35:0594.154.43.251to 3478/udpstunNL

·#4EVgx·#4EVg·

payload bytes

00000000  00 01 00 08 12 23 34 45  56 67 78 89 90 01 12 23  |.....#4EVgx....#|
00000010  34 45 56 67 00 03 00 04  00 00 00 00 00           |4EVg.........|

2026-10-05 14:17:2593.174.95.106to 520/udprawNL

payload bytes

00000000  01 01 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000010  00 00 00 00 00 00 00 10                           |........|

2026-10-05 14:09:0694.154.43.251to 3478/udpstunNL

·#4EVgx·#4EVg·

payload bytes

00000000  00 01 00 08 12 23 34 45  56 67 78 89 90 01 12 23  |.....#4EVgx....#|
00000010  34 45 56 67 00 03 00 04  00 00 00 00 00           |4EVg.........|

2026-10-05 13:13:06192.87.173.76to 53/udpdnsNL
DNS query A <HONEYPOT>.1791194400.main.research.openresolve.rs
payload bytes
2026-10-05 13:08:56192.87.173.76to 53/udpdnsNL
DNS query A <HONEYPOT>.1791194400.main.research.openresolve.rs
payload bytes
2026-10-05 12:53:38192.87.173.76to 53/udpdnsNL
DNS query A <HONEYPOT>.1791194400.main.research.openresolve.rs
payload bytes

2026-10-05 12:23:0194.75.213.36to 39131/udpbittorrentNL

A· ·#`·H·

payload bytes

00000000  41 00 c9 20 89 23 60 98  00 00 00 00 00 10 00 00  |A.. .#`.........|
00000010  48 90 00 00                                       |H...|

2026-10-05 12:22:5794.75.213.36to 39131/udpbittorrentNL

A· ·H·

payload bytes

00000000  41 00 c9 20 88 f4 82 84  00 00 00 00 00 10 00 00  |A.. ............|
00000010  48 90 00 00                                       |H...|

2026-10-05 12:20:0094.75.213.36to 39131/udpbittorrentNL

A·~]Ƕ·I·

payload bytes

00000000  41 00 8b f2 7e 5d c7 b6  00 00 00 00 00 10 00 00  |A...~]..........|
00000010  49 97 00 00                                       |I...|

2026-10-05 12:19:5694.75.213.36to 39131/udpbittorrentNL

A·~*.4·I·

payload bytes

00000000  41 00 8b f2 7e 2a 2e 34  00 00 00 00 00 10 00 00  |A...~*.4........|
00000010  49 97 00 00                                       |I...|

2026-10-05 12:13:5894.75.213.36to 39131/udpbittorrentNL

A·/h·:·

payload bytes

00000000  41 00 c2 2f 68 ca d5 3a  00 00 00 00 00 10 00 00  |A../h..:........|
00000010  8f bf 00 00                                       |....|

2026-10-05 12:13:5594.75.213.36to 39131/udpbittorrentNL

A·/h·

payload bytes

00000000  41 00 c2 2f 68 9c e9 a4  00 00 00 00 00 10 00 00  |A../h...........|
00000010  8f bf 00 00                                       |....|

2026-10-05 12:10:5194.75.213.36to 39131/udpbittorrentNL

A·b,]·

payload bytes

00000000  41 00 62 2c 5d a8 df 1f  00 00 00 00 00 10 00 00  |A.b,]...........|
00000010  88 bb 00 00                                       |....|

2026-10-05 12:05:4994.75.213.36to 39131/udpbittorrentNL

A·C·K·w·

payload bytes

00000000  41 00 43 1a 4b a8 77 9d  00 00 00 00 00 10 00 00  |A.C.K.w.........|
00000010  f5 96 00 00                                       |....|

2026-10-05 12:02:4994.75.213.36to 39131/udpbittorrentNL

A·U@·hc·,l·

payload bytes

00000000  41 00 d2 55 40 ee 68 63  00 00 00 00 00 10 00 00  |A..U@.hc........|
00000010  2c 6c 00 00                                       |,l..|

2026-10-05 12:02:4694.75.213.36to 39131/udpbittorrentNL

A·U@·,l·

payload bytes

00000000  41 00 d2 55 40 ba 87 f4  00 00 00 00 00 10 00 00  |A..U@...........|
00000010  2c 6c 00 00                                       |,l..|