UDP traffic

Datagrams matching port:5353 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Datagrams

Source addresses

Networks

Countries

Destination ports

Protocols

dns from 3 sources8
raw from 4 sources4

Destination ports

5353/udp from 7 sources12

DNS questions

8 queries and 0 unsolicited answers. An answer nobody asked for means a resolver was given a forged source address.

DNS record types

PTR8

Networks

AS401661 EMBNEX, LLC from 1 source3
AS63949 Akamai Connected Cloud from 1 source3
AS50219 Valence Technology Co. from 1 source2
AS8560 IONOS SE from 1 source1
AS15964 CAMTEL from 1 source1
AS135905 VIETNAM POSTS AND TELECOMMUNICATIONS GRO from 1 source1
AS198545 Flex Network Sarl from 1 source1

Countries

Source addresses (unverified)

Address	Network	Cc	Datagrams	Last seen (UTC)
16.5.0.234	AS401661 EMBNEX, LLC	BR	3	2026-10-05 17:01
172.104.155.101	AS63949 Akamai Connected Cloud	DE	3	2026-10-05 16:57
194.164.107.4	AS50219 Valence Technology Co.	US	2	2026-10-05 13:22
14.225.1.210	AS135905 VIETNAM POSTS AND TELECOMMUNICATIONS GRO	VN	1	2026-10-05 17:12
217.71.127.125	AS198545 Flex Network Sarl	FR	1	2026-10-05 15:43
217.160.190.176	AS8560 IONOS SE	DE	1	2026-10-05 14:59
195.24.207.184	AS15964 CAMTEL	CM	1	2026-10-05 15:20

Latest datagrams

2026-10-05 17:12:4914.225.1.210to 5353/udprawVN

3.·UW ·_(·t_,_@·%·0QW~I|o^^·A·~QgUZ{i:#·.·3·C83bJc3"b|·QZ|k·imv?Gq(·/0·c>Z·q<fUo·7k&·K

payload bytes

00000000  33 2e 10 55 57 09 14 13  5f 28 1e 74 5f 2c 5f 40  |3..UW..._(.t_,_@|
00000010  05 25 1f 12 30 51 57 7e  49 7c 6f 5e 5e 1a 41 12  |.%..0QW~I|o^^.A.|
00000020  7e 51 67 55 5a 7b 69 3a  23 07 2e 02 33 0e 43 38  |~QgUZ{i:#...3.C8|
00000030  33 62 4a 63 33 22 62 7c  1e 51 5a 7c 6b 1b 0e 69  |3bJc3"b|.QZ|k..i|
00000040  6d 76 3f 47 71 28 01 15  2f 30 17 63 3e 5a 1b 71  |mv?Gq(../0.c>Z.q|
00000050  3c 66 55 6f 08 37 6b 26  b7 4b                    |<fUo.7k&.K|

2026-10-05 17:01:5016.5.0.234to 5353/udpdnsBR

DNS query PTR _services._dns-sd._udp.local

payload bytes

00000000  00 00 00 00 00 01 00 00  00 00 00 00 09 5f 73 65  |............._se|
00000010  72 76 69 63 65 73 07 5f  64 6e 73 2d 73 64 04 5f  |rvices._dns-sd._|
00000020  75 64 70 05 6c 6f 63 61  6c 00 00 0c 00 01        |udp.local.....|

2026-10-05 17:01:3716.5.0.234to 5353/udpdnsBR

DNS query PTR _services._dns-sd._udp.local

payload bytes

00000000  00 00 00 00 00 01 00 00  00 00 00 00 09 5f 73 65  |............._se|
00000010  72 76 69 63 65 73 07 5f  64 6e 73 2d 73 64 04 5f  |rvices._dns-sd._|
00000020  75 64 70 05 6c 6f 63 61  6c 00 00 0c 00 01        |udp.local.....|

2026-10-05 16:59:3616.5.0.234to 5353/udpdnsBR

DNS query PTR _services._dns-sd._udp.local

payload bytes

00000000  00 00 00 00 00 01 00 00  00 00 00 00 09 5f 73 65  |............._se|
00000010  72 76 69 63 65 73 07 5f  64 6e 73 2d 73 64 04 5f  |rvices._dns-sd._|
00000020  75 64 70 05 6c 6f 63 61  6c 00 00 0c 00 01        |udp.local.....|

2026-10-05 16:57:17172.104.155.101to 5353/udpdnsDE

DNS query PTR _services._dns-sd._udp.local

payload bytes

00000000  00 00 00 00 00 01 00 00  00 00 00 00 09 5f 73 65  |............._se|
00000010  72 76 69 63 65 73 07 5f  64 6e 73 2d 73 64 04 5f  |rvices._dns-sd._|
00000020  75 64 70 05 6c 6f 63 61  6c 00 00 0c 00 01        |udp.local.....|

2026-10-05 15:43:45217.71.127.125to 5353/udprawFR

X...~·h|YU ·u3S·JnmR+49·F·Y·n·M·~Q·:·l·;r·n·

payload bytes

00000000  58 2e 2e 2e 7e 04 02 14  68 7c 59 55 20 06 75 33  |X...~...h|YU .u3|
00000010  53 13 11 4a 6e 6d 52 2b  34 39 1f 46 16 59 1f 6e  |S..JnmR+49.F.Y.n|
00000020  00 4d 1c 7e 51 1e 13 3a  1b 6c 0f 3b 72 04 6e 9b  |.M.~Q..:.l.;r.n.|
00000030  cb                                                |.|

2026-10-05 15:20:28195.24.207.184to 5353/udprawCM

·.Z·O>?eH·95& `I·"z~z\·mZFh;O·V"w[q5·V}4·3Z·#4/E.-@ H-d· ^2v·)Qr^lH\ X·{p"·$QdS~$]FQB?·

payload bytes

00000000  1b 2e 5a 04 4f 3e 3f 65  48 1a 39 35 26 09 60 49  |..Z.O>?eH.95&.`I|
00000010  1b 1c 22 7a 7e 7a 5c 1b  6d 5a 46 68 3b 4f 1d 56  |.."z~z\.mZFh;O.V|
00000020  22 77 5b 71 35 1a 56 7d  34 0f 33 5a 18 13 23 34  |"w[q5.V}4.3Z..#4|
00000030  2f 45 2e 2d 40 0a 48 2d  64 0f 15 20 5e 32 76 00  |/E.-@.H-d.. ^2v.|
00000040  29 51 72 5e 6c 48 5c 20  58 0f 7b 70 22 1e 24 51  |)Qr^lH\ X.{p".$Q|
00000050  64 53 7e 24 5d 46 51 42  3f 90                    |dS~$]FQB?.|

2026-10-05 14:59:25217.160.190.176to 5353/udprawDE

·.e[./n DuzsyD z·3`\·6,OW+·

payload bytes

00000000  03 2e 65 5b 2e 2f 6e 09  44 75 7a 73 79 44 0a 7a  |..e[./n.DuzsyD.z|
00000010  04 33 60 5c 0b 36 2c 4f  57 2b d3 ca              |.3`\.6,OW+..|

2026-10-05 14:00:41172.104.155.101to 5353/udpdnsDE

DNS query PTR _services._dns-sd._udp.local

payload bytes

00000000  00 00 00 00 00 01 00 00  00 00 00 00 09 5f 73 65  |............._se|
00000010  72 76 69 63 65 73 07 5f  64 6e 73 2d 73 64 04 5f  |rvices._dns-sd._|
00000020  75 64 70 05 6c 6f 63 61  6c 00 00 0c 00 01        |udp.local.....|

2026-10-05 13:22:37194.164.107.4to 5353/udpdnsUS

DNS query PTR _device-info._tcp.local

payload bytes

00000000  62 b9 01 20 00 01 00 00  00 00 00 01 0c 5f 64 65  |b.. ........._de|
00000010  76 69 63 65 2d 69 6e 66  6f 04 5f 74 63 70 05 6c  |vice-info._tcp.l|
00000020  6f 63 61 6c 00 00 0c 00  01 00 00 29 04 d0 00 00  |ocal.......)....|
00000030  00 00 00 0c 00 0a 00 08  83 4c 64 dd ca ac 8f 65  |.........Ld....e|

2026-10-05 12:59:38194.164.107.4to 5353/udpdnsUS

DNS query PTR _services._dns-sd._udp.local

payload bytes

00000000  00 00 00 00 00 01 00 00  00 00 00 00 09 5f 73 65  |............._se|
00000010  72 76 69 63 65 73 07 5f  64 6e 73 2d 73 64 04 5f  |rvices._dns-sd._|
00000020  75 64 70 05 6c 6f 63 61  6c 00 00 0c 00 01        |udp.local.....|

2026-10-05 12:41:45172.104.155.101to 5353/udpdnsDE

DNS query PTR _services._dns-sd._udp.local

payload bytes

00000000  00 00 00 00 00 01 00 00  00 00 00 00 09 5f 73 65  |............._se|
00000010  72 76 69 63 65 73 07 5f  64 6e 73 2d 73 64 04 5f  |rvices._dns-sd._|
00000020  75 64 70 05 6c 6f 63 61  6c 00 00 0c 00 01        |udp.local.....|