UDP traffic

Datagrams matching port:53 sent to HoneyLabs sensors over UDP in the last 24 hours. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Datagrams

Source addresses

Networks

Countries

Destination ports

Protocols

dns from 12 sources31

Destination ports

53/udp from 12 sources31

DNS questions

31 queries and 0 unsolicited answers. An answer nobody asked for means a resolver was given a forged source address.

DNS record types

TXT11
A11
ANY9

Networks

AS16509 Amazon.com, Inc. from 1 source11
AS51396 Pfcloud UG (haftungsbeschrankt) from 2 sources5
AS209630 LLC Vash Kredit Bank from 1 source4
AS1103 SURF B.V. from 1 source3
AS213412 ONYPHE SAS from 2 sources2
AS10439 CariNet, Inc. from 1 source2
AS12876 Scaleway SAS from 1 source1
AS63949 Akamai Connected Cloud from 1 source1
AS211298 Driftnet Ltd from 1 source1
AS45102 Alibaba (US) Technology Co., Ltd. from 1 source1

Countries

Source addresses (unverified)

Address	Network	Cc	Datagrams	Last seen (UTC)
18.226.68.29	AS16509 Amazon.com, Inc.	US	11	2026-10-05 14:12
151.243.11.230	AS209630 LLC Vash Kredit Bank	AE	4	2026-10-05 16:04
192.87.173.76	AS1103 SURF B.V.	NL	3	2026-10-05 13:13
45.135.193.194	AS51396 Pfcloud UG (haftungsbeschrankt)	DE	3	2026-10-05 13:31
71.6.232.27	AS10439 CariNet, Inc.	US	2	2026-10-05 16:49
45.135.193.115	AS51396 Pfcloud UG (haftungsbeschrankt)	DE	2	2026-10-05 17:20
193.163.125.163	AS211298 Driftnet Ltd	GB	1	2026-10-05 14:34
91.230.168.216	AS213412 ONYPHE SAS	US	1	2026-10-05 14:37
91.231.89.88	AS213412 ONYPHE SAS	FR	1	2026-10-05 14:39
139.162.66.65	AS63949 Akamai Connected Cloud	JP	1	2026-10-05 17:39
51.158.205.203	AS12876 Scaleway SAS	NL	1	2026-10-05 17:32
8.210.123.17	AS45102 Alibaba (US) Technology Co., Ltd.	HK	1	2026-10-05 11:05

Latest datagrams

2026-10-05 17:39:50139.162.66.65to 53/udpdnsJP

DNS query A inanis.asertdnsresearch.com

payload bytes

00000000  80 0a 01 00 00 01 00 00  00 00 00 00 06 69 6e 61  |.............ina|
00000010  6e 69 73 10 61 73 65 72  74 64 6e 73 72 65 73 65  |nis.asertdnsrese|
00000020  61 72 63 68 03 63 6f 6d  00 00 01 00 01           |arch.com.....|

2026-10-05 17:32:5351.158.205.203to 53/udpdnsNL

DNS query TXT/CH version.bind

payload bytes

00000000  f6 49 01 20 00 01 00 00  00 00 00 00 07 76 65 72  |.I. .........ver|
00000010  73 69 6f 6e 04 62 69 6e  64 00 00 10 00 03 00     |sion.bind......|

2026-10-05 17:20:5045.135.193.115to 53/udpdnsDE

DNS query ANY dhitc.com

payload bytes

00000000  12 71 01 00 00 01 00 00  00 00 00 01 05 64 68 69  |.q...........dhi|
00000010  74 63 03 63 6f 6d 00 00  ff 00 01 00 00 29 ff ff  |tc.com.......)..|
00000020  00 00 00 00 00 00                                 |......|

2026-10-05 16:49:5071.6.232.27to 53/udpdnsUS

DNS query A a.gtld-servers.net

payload bytes

00000000  05 39 01 00 00 01 00 00  00 00 00 00 01 61 0c 67  |.9...........a.g|
00000010  74 6c 64 2d 73 65 72 76  65 72 73 03 6e 65 74 00  |tld-servers.net.|
00000020  00 01 00 01                                       |....|

2026-10-05 16:31:3945.135.193.115to 53/udpdnsDE

DNS query ANY dhitc.com

payload bytes

00000000  12 71 01 00 00 01 00 00  00 00 00 01 05 64 68 69  |.q...........dhi|
00000010  74 63 03 63 6f 6d 00 00  ff 00 01 00 00 29 ff ff  |tc.com.......)..|
00000020  00 00 00 00 00 00                                 |......|

2026-10-05 16:29:3371.6.232.27to 53/udpdnsUS

DNS query A a.gtld-servers.net

payload bytes

00000000  05 39 01 00 00 01 00 00  00 00 00 00 01 61 0c 67  |.9...........a.g|
00000010  74 6c 64 2d 73 65 72 76  65 72 73 03 6e 65 74 00  |tld-servers.net.|
00000020  00 01 00 01                                       |....|

2026-10-05 16:04:59151.243.11.230to 53/udpdnsAE

DNS query ANY wisc.edu

payload bytes

00000000  12 71 01 00 00 01 00 00  00 00 00 01 04 77 69 73  |.q...........wis|
00000010  63 03 65 64 75 00 00 ff  00 01 00 00 29 20 00 00  |c.edu.......) ..|
00000020  00 80 00 00 00                                    |.....|

2026-10-05 15:08:17151.243.11.230to 53/udpdnsAE

DNS query ANY wisc.edu

payload bytes

00000000  12 71 01 00 00 01 00 00  00 00 00 01 04 77 69 73  |.q...........wis|
00000010  63 03 65 64 75 00 00 ff  00 01 00 00 29 20 00 00  |c.edu.......) ..|
00000020  00 80 00 00 00                                    |.....|

2026-10-05 14:39:1991.231.89.88to 53/udpdnsFR

DNS query TXT/CH VERSION.BIND

payload bytes

00000000  34 ef 01 00 00 01 00 00  00 00 00 00 07 56 45 52  |4............VER|
00000010  53 49 4f 4e 04 42 49 4e  44 00 00 10 00 03        |SION.BIND.....|

2026-10-05 14:37:4991.230.168.216to 53/udpdnsUS

DNS query TXT/CH VERSION.BIND

payload bytes

00000000  34 ef 01 00 00 01 00 00  00 00 00 00 07 56 45 52  |4............VER|
00000010  53 49 4f 4e 04 42 49 4e  44 00 00 10 00 03        |SION.BIND.....|

2026-10-05 14:37:27151.243.11.230to 53/udpdnsAE

DNS query ANY wisc.edu

payload bytes

00000000  12 71 01 00 00 01 00 00  00 00 00 01 04 77 69 73  |.q...........wis|
00000010  63 03 65 64 75 00 00 ff  00 01 00 00 29 20 00 00  |c.edu.......) ..|
00000020  00 80 00 00 00                                    |.....|

2026-10-05 14:34:27193.163.125.163to 53/udpdnsGB

DNS query A example.com

payload bytes

00000000  c0 68 01 20 00 01 00 00  00 00 00 00 07 65 78 61  |.h. .........exa|
00000010  6d 70 6c 65 03 63 6f 6d  00 00 01 00 01           |mple.com.....|

2026-10-05 14:30:08151.243.11.230to 53/udpdnsAE

DNS query ANY wisc.edu

payload bytes

00000000  12 71 01 00 00 01 00 00  00 00 00 01 04 77 69 73  |.q...........wis|
00000010  63 03 65 64 75 00 00 ff  00 01 00 00 29 20 00 00  |c.edu.......) ..|
00000020  00 80 00 00 00                                    |.....|

2026-10-05 14:12:4518.226.68.29to 53/udpdnsUS

DNS query TXT/CH id.server

payload bytes

00000000  12 d9 01 00 00 01 00 00  00 00 00 00 02 69 64 06  |.............id.|
00000010  73 65 72 76 65 72 00 00  10 00 03                 |server.....|

2026-10-05 14:12:4418.226.68.29to 53/udpdnsUS

DNS query TXT/CH hostname.bind

payload bytes

00000000  55 01 01 00 00 01 00 00  00 00 00 00 08 68 6f 73  |U............hos|
00000010  74 6e 61 6d 65 04 62 69  6e 64 00 00 10 00 03     |tname.bind.....|

2026-10-05 14:09:3918.226.68.29to 53/udpdnsUS

DNS query A google.com

payload bytes

00000000  bc 75 00 00 00 01 00 00  00 00 00 00 06 67 6f 6f  |.u...........goo|
00000010  67 6c 65 03 63 6f 6d 00  00 01 00 01              |gle.com.....|

2026-10-05 14:09:3818.226.68.29to 53/udpdnsUS

DNS query TXT/CH id.server

payload bytes

00000000  8b 22 01 00 00 01 00 00  00 00 00 00 02 69 64 06  |."...........id.|
00000010  73 65 72 76 65 72 00 00  10 00 03                 |server.....|

2026-10-05 14:09:3718.226.68.29to 53/udpdnsUS

DNS query TXT/CH hostname.bind

payload bytes

00000000  30 73 01 00 00 01 00 00  00 00 00 00 08 68 6f 73  |0s...........hos|
00000010  74 6e 61 6d 65 04 62 69  6e 64 00 00 10 00 03     |tname.bind.....|

2026-10-05 14:09:3618.226.68.29to 53/udpdnsUS

DNS query TXT/CH version.server

payload bytes

00000000  d8 2a 01 00 00 01 00 00  00 00 00 00 07 76 65 72  |.*...........ver|
00000010  73 69 6f 6e 06 73 65 72  76 65 72 00 00 10 00 03  |sion.server.....|

2026-10-05 13:31:0745.135.193.194to 53/udpdnsDE

DNS query ANY uu.nl

payload bytes

00000000  45 67 01 00 00 01 00 00  00 00 00 01 02 75 75 02  |Eg...........uu.|
00000010  6e 6c 00 00 ff 00 01 00  00 29 ff ff 00 00 00 00  |nl.......)......|
00000020  00 00                                             |..|

2026-10-05 13:30:5945.135.193.194to 53/udpdnsDE

DNS query ANY uu.nl

payload bytes

00000000  45 67 01 00 00 01 00 00  00 00 00 01 02 75 75 02  |Eg...........uu.|
00000010  6e 6c 00 00 ff 00 01 00  00 29 ff ff 00 00 00 00  |nl.......)......|
00000020  00 00                                             |..|

2026-10-05 13:22:4545.135.193.194to 53/udpdnsDE

DNS query ANY uu.nl

payload bytes

00000000  45 67 01 00 00 01 00 00  00 00 00 01 02 75 75 02  |Eg...........uu.|
00000010  6e 6c 00 00 ff 00 01 00  00 29 ff ff 00 00 00 00  |nl.......)......|
00000020  00 00                                             |..|

2026-10-05 13:13:06192.87.173.76to 53/udpdnsNL
DNS query A <HONEYPOT>.1791194400.main.research.openresolve.rs
payload bytes
2026-10-05 13:08:56192.87.173.76to 53/udpdnsNL
DNS query A <HONEYPOT>.1791194400.main.research.openresolve.rs
payload bytes
2026-10-05 12:53:38192.87.173.76to 53/udpdnsNL
DNS query A <HONEYPOT>.1791194400.main.research.openresolve.rs
payload bytes