UDP traffic

Datagrams matching port:53 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Datagrams

Source addresses

Networks

Countries

Destination ports

Protocols

dns from 10 sources29

Destination ports

53/udp from 10 sources29

DNS questions

29 queries and 0 unsolicited answers. An answer nobody asked for means a resolver was given a forged source address.

DNS record types

TXT10
A10
ANY9

Networks

AS16509 Amazon.com, Inc. from 1 source11
AS51396 Pfcloud UG (haftungsbeschrankt) from 2 sources5
AS209630 LLC Vash Kredit Bank from 1 source4
AS1103 SURF B.V. from 1 source3
AS213412 ONYPHE SAS from 2 sources2
AS10439 CariNet, Inc. from 1 source2
AS211298 Driftnet Ltd from 1 source1
AS45102 Alibaba (US) Technology Co., Ltd. from 1 source1

Countries

Source addresses (unverified)

Address	Network	Cc	Datagrams	Last seen (UTC)
18.226.68.29	AS16509 Amazon.com, Inc.	US	11	2026-10-05 14:12
151.243.11.230	AS209630 LLC Vash Kredit Bank	AE	4	2026-10-05 16:04
192.87.173.76	AS1103 SURF B.V.	NL	3	2026-10-05 13:13
45.135.193.194	AS51396 Pfcloud UG (haftungsbeschrankt)	DE	3	2026-10-05 13:31
71.6.232.27	AS10439 CariNet, Inc.	US	2	2026-10-05 16:49
45.135.193.115	AS51396 Pfcloud UG (haftungsbeschrankt)	DE	2	2026-10-05 17:20
193.163.125.163	AS211298 Driftnet Ltd	GB	1	2026-10-05 14:34
91.230.168.216	AS213412 ONYPHE SAS	US	1	2026-10-05 14:37
91.231.89.88	AS213412 ONYPHE SAS	FR	1	2026-10-05 14:39
8.210.123.17	AS45102 Alibaba (US) Technology Co., Ltd.	HK	1	2026-10-05 11:05

Latest datagrams

2026-10-05 17:20:5045.135.193.115to 53/udpdnsDE

DNS query ANY dhitc.com

payload bytes

00000000  12 71 01 00 00 01 00 00  00 00 00 01 05 64 68 69  |.q...........dhi|
00000010  74 63 03 63 6f 6d 00 00  ff 00 01 00 00 29 ff ff  |tc.com.......)..|
00000020  00 00 00 00 00 00                                 |......|

2026-10-05 16:49:5071.6.232.27to 53/udpdnsUS

DNS query A a.gtld-servers.net

payload bytes

00000000  05 39 01 00 00 01 00 00  00 00 00 00 01 61 0c 67  |.9...........a.g|
00000010  74 6c 64 2d 73 65 72 76  65 72 73 03 6e 65 74 00  |tld-servers.net.|
00000020  00 01 00 01                                       |....|

2026-10-05 16:31:3945.135.193.115to 53/udpdnsDE

DNS query ANY dhitc.com

payload bytes

00000000  12 71 01 00 00 01 00 00  00 00 00 01 05 64 68 69  |.q...........dhi|
00000010  74 63 03 63 6f 6d 00 00  ff 00 01 00 00 29 ff ff  |tc.com.......)..|
00000020  00 00 00 00 00 00                                 |......|

2026-10-05 16:29:3371.6.232.27to 53/udpdnsUS

DNS query A a.gtld-servers.net

payload bytes

00000000  05 39 01 00 00 01 00 00  00 00 00 00 01 61 0c 67  |.9...........a.g|
00000010  74 6c 64 2d 73 65 72 76  65 72 73 03 6e 65 74 00  |tld-servers.net.|
00000020  00 01 00 01                                       |....|

2026-10-05 16:04:59151.243.11.230to 53/udpdnsAE

DNS query ANY wisc.edu

payload bytes

00000000  12 71 01 00 00 01 00 00  00 00 00 01 04 77 69 73  |.q...........wis|
00000010  63 03 65 64 75 00 00 ff  00 01 00 00 29 20 00 00  |c.edu.......) ..|
00000020  00 80 00 00 00                                    |.....|

2026-10-05 15:08:17151.243.11.230to 53/udpdnsAE

DNS query ANY wisc.edu

payload bytes

00000000  12 71 01 00 00 01 00 00  00 00 00 01 04 77 69 73  |.q...........wis|
00000010  63 03 65 64 75 00 00 ff  00 01 00 00 29 20 00 00  |c.edu.......) ..|
00000020  00 80 00 00 00                                    |.....|

2026-10-05 14:39:1991.231.89.88to 53/udpdnsFR

DNS query TXT/CH VERSION.BIND

payload bytes

00000000  34 ef 01 00 00 01 00 00  00 00 00 00 07 56 45 52  |4............VER|
00000010  53 49 4f 4e 04 42 49 4e  44 00 00 10 00 03        |SION.BIND.....|

2026-10-05 14:37:4991.230.168.216to 53/udpdnsUS

DNS query TXT/CH VERSION.BIND

payload bytes

00000000  34 ef 01 00 00 01 00 00  00 00 00 00 07 56 45 52  |4............VER|
00000010  53 49 4f 4e 04 42 49 4e  44 00 00 10 00 03        |SION.BIND.....|

2026-10-05 14:37:27151.243.11.230to 53/udpdnsAE

DNS query ANY wisc.edu

payload bytes

00000000  12 71 01 00 00 01 00 00  00 00 00 01 04 77 69 73  |.q...........wis|
00000010  63 03 65 64 75 00 00 ff  00 01 00 00 29 20 00 00  |c.edu.......) ..|
00000020  00 80 00 00 00                                    |.....|

2026-10-05 14:34:27193.163.125.163to 53/udpdnsGB

DNS query A example.com

payload bytes

00000000  c0 68 01 20 00 01 00 00  00 00 00 00 07 65 78 61  |.h. .........exa|
00000010  6d 70 6c 65 03 63 6f 6d  00 00 01 00 01           |mple.com.....|

2026-10-05 14:30:08151.243.11.230to 53/udpdnsAE

DNS query ANY wisc.edu

payload bytes

00000000  12 71 01 00 00 01 00 00  00 00 00 01 04 77 69 73  |.q...........wis|
00000010  63 03 65 64 75 00 00 ff  00 01 00 00 29 20 00 00  |c.edu.......) ..|
00000020  00 80 00 00 00                                    |.....|

2026-10-05 14:12:4518.226.68.29to 53/udpdnsUS

DNS query TXT/CH id.server

payload bytes

00000000  12 d9 01 00 00 01 00 00  00 00 00 00 02 69 64 06  |.............id.|
00000010  73 65 72 76 65 72 00 00  10 00 03                 |server.....|

2026-10-05 14:12:4418.226.68.29to 53/udpdnsUS

DNS query TXT/CH hostname.bind

payload bytes

00000000  55 01 01 00 00 01 00 00  00 00 00 00 08 68 6f 73  |U............hos|
00000010  74 6e 61 6d 65 04 62 69  6e 64 00 00 10 00 03     |tname.bind.....|

2026-10-05 14:09:3918.226.68.29to 53/udpdnsUS

DNS query A google.com

payload bytes

00000000  bc 75 00 00 00 01 00 00  00 00 00 00 06 67 6f 6f  |.u...........goo|
00000010  67 6c 65 03 63 6f 6d 00  00 01 00 01              |gle.com.....|

2026-10-05 14:09:3818.226.68.29to 53/udpdnsUS

DNS query TXT/CH id.server

payload bytes

00000000  8b 22 01 00 00 01 00 00  00 00 00 00 02 69 64 06  |."...........id.|
00000010  73 65 72 76 65 72 00 00  10 00 03                 |server.....|

2026-10-05 14:09:3718.226.68.29to 53/udpdnsUS

DNS query TXT/CH hostname.bind

payload bytes

00000000  30 73 01 00 00 01 00 00  00 00 00 00 08 68 6f 73  |0s...........hos|
00000010  74 6e 61 6d 65 04 62 69  6e 64 00 00 10 00 03     |tname.bind.....|

2026-10-05 14:09:3618.226.68.29to 53/udpdnsUS

DNS query TXT/CH version.server

payload bytes

00000000  d8 2a 01 00 00 01 00 00  00 00 00 00 07 76 65 72  |.*...........ver|
00000010  73 69 6f 6e 06 73 65 72  76 65 72 00 00 10 00 03  |sion.server.....|

2026-10-05 13:31:0745.135.193.194to 53/udpdnsDE

DNS query ANY uu.nl

payload bytes

00000000  45 67 01 00 00 01 00 00  00 00 00 01 02 75 75 02  |Eg...........uu.|
00000010  6e 6c 00 00 ff 00 01 00  00 29 ff ff 00 00 00 00  |nl.......)......|
00000020  00 00                                             |..|

2026-10-05 13:30:5945.135.193.194to 53/udpdnsDE

DNS query ANY uu.nl

payload bytes

00000000  45 67 01 00 00 01 00 00  00 00 00 01 02 75 75 02  |Eg...........uu.|
00000010  6e 6c 00 00 ff 00 01 00  00 29 ff ff 00 00 00 00  |nl.......)......|
00000020  00 00                                             |..|

2026-10-05 13:22:4545.135.193.194to 53/udpdnsDE

DNS query ANY uu.nl

payload bytes

00000000  45 67 01 00 00 01 00 00  00 00 00 01 02 75 75 02  |Eg...........uu.|
00000010  6e 6c 00 00 ff 00 01 00  00 29 ff ff 00 00 00 00  |nl.......)......|
00000020  00 00                                             |..|

2026-10-05 13:13:06192.87.173.76to 53/udpdnsNL
DNS query A <HONEYPOT>.1791194400.main.research.openresolve.rs
payload bytes
2026-10-05 13:08:56192.87.173.76to 53/udpdnsNL
DNS query A <HONEYPOT>.1791194400.main.research.openresolve.rs
payload bytes
2026-10-05 12:53:38192.87.173.76to 53/udpdnsNL
DNS query A <HONEYPOT>.1791194400.main.research.openresolve.rs
payload bytes

2026-10-05 12:32:3118.226.68.29to 53/udpdnsUS

DNS query A google.com

payload bytes

00000000  91 f8 00 00 00 01 00 00  00 00 00 00 06 67 6f 6f  |.............goo|
00000010  67 6c 65 03 63 6f 6d 00  00 01 00 01              |gle.com.....|

2026-10-05 12:32:3018.226.68.29to 53/udpdnsUS

DNS query TXT/CH id.server

payload bytes

00000000  cb 47 01 00 00 01 00 00  00 00 00 00 02 69 64 06  |.G...........id.|
00000010  73 65 72 76 65 72 00 00  10 00 03                 |server.....|