UDP traffic

Datagrams matching proto:dns sent to HoneyLabs sensors over UDP in the last 24 hours. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Datagrams

Source addresses

Networks

Countries

Destination ports

Protocols

dns from 38 sources91

Destination ports

53/udp from 12 sources31
137/udp from 6 sources16
5353/udp from 3 sources8
17185/udp from 3 sources7
5355/udp from 1 source5
123/udp from 2 sources3
111/udp from 2 sources2
443/udp from 2 sources2
17184/udp from 2 sources2
10443/udp from 1 source1
6953/udp from 1 source1
8252/udp from 1 source1

DNS questions

66 queries and 25 unsolicited answers. An answer nobody asked for means a resolver was given a forged source address.

DNS record types

SRV17
ANY14
A13
TXT11
PTR8
TYPE03

Networks

AS401661 EMBNEX, LLC from 1 source22
AS398324 Censys, Inc. from 10 sources15
AS16509 Amazon.com, Inc. from 1 source11
AS14061 DigitalOcean, LLC from 3 sources6
AS51396 Pfcloud UG (haftungsbeschrankt) from 2 sources5
AS209630 LLC Vash Kredit Bank from 1 source4
AS63949 Akamai Connected Cloud from 2 sources4
AS211298 Driftnet Ltd from 4 sources4
AS1103 SURF B.V. from 1 source3
AS12876 Scaleway SAS from 2 sources3

Countries

Source addresses (unverified)

Address	Network	Cc	Datagrams	Last seen (UTC)
16.5.0.234	AS401661 EMBNEX, LLC	BR	22	2026-10-05 17:19
18.226.68.29	AS16509 Amazon.com, Inc.	US	11	2026-10-05 14:12
66.132.172.254	AS398324 Censys, Inc.	US	5	2026-10-05 17:32
151.243.11.230	AS209630 LLC Vash Kredit Bank	AE	4	2026-10-05 16:04
45.135.193.194	AS51396 Pfcloud UG (haftungsbeschrankt)	DE	3	2026-10-05 13:31
172.104.155.101	AS63949 Akamai Connected Cloud	DE	3	2026-10-05 16:57
192.87.173.76	AS1103 SURF B.V.	NL	3	2026-10-05 13:13
137.184.210.250	AS14061 DigitalOcean, LLC	US	3	2026-10-05 13:50
71.6.232.27	AS10439 CariNet, Inc.	US	2	2026-10-05 16:49
146.88.241.80	AS20052 Arbor Networks, Inc.	US	2	2026-10-05 14:18
194.164.107.4	AS50219 Valence Technology Co.	US	2	2026-10-05 13:22
62.210.90.215	AS12876 Scaleway SAS	FR	2	2026-10-05 16:54
66.132.172.249	AS398324 Censys, Inc.	US	2	2026-10-05 17:04
45.135.193.115	AS51396 Pfcloud UG (haftungsbeschrankt)	DE	2	2026-10-05 17:20
201.79.2.46	AS14061 DigitalOcean, LLC	DE	2	2026-10-05 16:48
66.132.172.236	AS398324 Censys, Inc.	US	1	2026-10-05 17:49
91.230.168.216	AS213412 ONYPHE SAS	US	1	2026-10-05 14:37
66.132.186.214	AS398324 Censys, Inc.	US	1	2026-10-05 18:05
91.231.89.88	AS213412 ONYPHE SAS	FR	1	2026-10-05 14:39
8.211.44.141	AS45102 Alibaba (US) Technology Co., Ltd.	DE	1	2026-10-05 17:39

Latest datagrams

2026-10-05 18:05:0466.132.186.214to 17184/udpdnsUS

DNS response 15

payload bytes

00000000  1a 09 fa ba 00 00 00 00  00 00 00 02 55 55 55 55  |............UUUU|
00000010  00 00 00 01 00 00 00 01  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00  ff ff 55 12 00 00 00 3c  |..........U....<|
00000030  00 00 00 01 00 00 00 02  00 00 00 00 00 00 00 00  |................|

2026-10-05 17:49:5366.132.172.236to 17186/udpdnsUS

DNS response 15

payload bytes

00000000  1a 09 fa ba 00 00 00 00  00 00 00 02 55 55 55 55  |............UUUU|
00000010  00 00 00 01 00 00 00 01  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00  ff ff 55 12 00 00 00 3c  |..........U....<|
00000030  00 00 00 01 00 00 00 02  00 00 00 00 00 00 00 00  |................|

2026-10-05 17:45:0266.132.172.246to 33668/udpdnsUS

DNS response 15

payload bytes

00000000  16 fe ff 00 00 00 00 00  00 00 00 00 66 01 00 00  |............f...|
00000010  5a 00 00 00 00 00 00 00  5a fe fd 29 35 2b f9 c7  |Z.......Z..)5+..|
00000020  74 a8 9a 12 bf 07 b2 7b  fd d2 b9 77 63 1f 9e 9b  |t......{...wc...|
00000030  88 94 18 18 8a 1b 64 60  61 e4 38 00 00 00 32 c0  |......d`a.8...2.|
00000040  2c cc a9 c0 ad c0 0a c0  2b c0 ac c0 09 c0 30 cc  |,.......+.....0.|
00000050  a8 c0 14 c0 2f c0 13 00  9d c0 9d 00 35 00 9c c0  |..../.......5...|
00000060  9c 00 2f 00 9f cc aa c0  9f 00 39 00 9e c0 9e 00  |../.......9.....|
00000070  33 01 00                                          |3..|

2026-10-05 17:39:50139.162.66.65to 53/udpdnsJP

DNS query A inanis.asertdnsresearch.com

payload bytes

00000000  80 0a 01 00 00 01 00 00  00 00 00 00 06 69 6e 61  |.............ina|
00000010  6e 69 73 10 61 73 65 72  74 64 6e 73 72 65 73 65  |nis.asertdnsrese|
00000020  61 72 63 68 03 63 6f 6d  00 00 01 00 01           |arch.com.....|

2026-10-05 17:39:458.211.44.141to 123/udpdnsDE

DNS query TYPE0/CLASS0 .

payload bytes

00000000  e3 00 04 fa 00 01 00 00  00 01 00 00 00 00 00 00  |................|
00000010  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00  c5 4f 23 4b 71 b1 52 f3  |.........O#Kq.R.|

2026-10-05 17:32:5466.132.172.254to 42795/udpdnsUS

DNS response 15

payload bytes

00000000  16 fe fd 00 00 00 00 00  00 00 00 00 7e 01 00 00  |............~...|
00000010  72 00 00 00 00 00 00 00  72 fe fd 5f 06 07 42 6e  |r.......r.._..Bn|
00000020  53 de 72 d8 ef 33 7e 5f  ee 59 10 19 49 8b 2d 4e  |S.r..3~_.Y..I.-N|
00000030  7f de 3e 09 f4 a8 3f 03  f9 57 06 00 00 00 0c c0  |..>...?..W......|
00000040  ac c0 ae c0 2b c0 2f c0  0a c0 14 01 00 00 3c 00  |....+./.......<.|
00000050  0d 00 10 00 0e 04 03 05  03 06 03 04 01 05 01 06  |................|
00000060  01 08 07 00 0a 00 08 00  06 00 1d 00 17 00 18 00  |................|
00000070  0b 00 02 01 00 00 17 00  00 00 00 00 0e 00 0c 00  |................|
00000080  00 09 31 32 37 2e 30 2e  30 2e 31                 |..127.0.0.1|

2026-10-05 17:32:5351.158.205.203to 53/udpdnsNL

DNS query TXT/CH version.bind

payload bytes

00000000  f6 49 01 20 00 01 00 00  00 00 00 00 07 76 65 72  |.I. .........ver|
00000010  73 69 6f 6e 04 62 69 6e  64 00 00 10 00 03 00     |sion.bind......|

2026-10-05 17:27:4566.132.172.251to 8252/udpdnsUS

DNS response 15

payload bytes

00000000  1a a9 ff e1 00 00 00 00  00 00 00 02 00 01 86 a0  |................|
00000010  00 00 00 02 00 00 00 04  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00                           |........|

2026-10-05 17:20:5045.135.193.115to 53/udpdnsDE

DNS query ANY dhitc.com

payload bytes

00000000  12 71 01 00 00 01 00 00  00 00 00 01 05 64 68 69  |.q...........dhi|
00000010  74 63 03 63 6f 6d 00 00  ff 00 01 00 00 29 ff ff  |tc.com.......)..|
00000020  00 00 00 00 00 00                                 |......|

2026-10-05 17:19:2016.5.0.234to 17185/udpdnsBR

DNS response 15

payload bytes

00000000  1a 09 fa ba 00 00 00 00  00 00 00 02 55 55 55 55  |............UUUU|
00000010  00 00 00 01 00 00 00 01  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00  ff ff 55 12 00 00 00 3c  |..........U....<|
00000030  00 00 00 01 00 00 00 02  00 00 00 00 00 00 00 00  |................|

2026-10-05 17:17:5116.5.0.234to 17185/udpdnsBR

DNS response 15

payload bytes

00000000  1a 09 fa ba 00 00 00 00  00 00 00 02 55 55 55 55  |............UUUU|
00000010  00 00 00 01 00 00 00 01  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00  ff ff 55 12 00 00 00 3c  |..........U....<|
00000030  00 00 00 01 00 00 00 02  00 00 00 00 00 00 00 00  |................|

2026-10-05 17:16:5716.5.0.234to 17185/udpdnsBR

DNS response 15

payload bytes

00000000  1a 09 fa ba 00 00 00 00  00 00 00 02 55 55 55 55  |............UUUU|
00000010  00 00 00 01 00 00 00 01  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00  ff ff 55 12 00 00 00 3c  |..........U....<|
00000030  00 00 00 01 00 00 00 02  00 00 00 00 00 00 00 00  |................|

2026-10-05 17:11:4116.5.0.234to 17185/udpdnsBR

DNS response 15

payload bytes

00000000  1a 09 fa ba 00 00 00 00  00 00 00 02 55 55 55 55  |............UUUU|
00000010  00 00 00 01 00 00 00 01  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00  ff ff 55 12 00 00 00 3c  |..........U....<|
00000030  00 00 00 01 00 00 00 02  00 00 00 00 00 00 00 00  |................|

2026-10-05 17:11:2116.5.0.234to 17185/udpdnsBR

DNS response 15

payload bytes

00000000  1a 09 fa ba 00 00 00 00  00 00 00 02 55 55 55 55  |............UUUU|
00000010  00 00 00 01 00 00 00 01  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00  ff ff 55 12 00 00 00 3c  |..........U....<|
00000030  00 00 00 01 00 00 00 02  00 00 00 00 00 00 00 00  |................|

2026-10-05 17:04:2066.132.172.249to 6301/udpdnsUS

DNS query A ip.parrotdns.com

payload bytes

00000000  70 9a 01 00 00 01 00 00  00 00 00 01 02 69 70 09  |p............ip.|
00000010  70 61 72 72 6f 74 64 6e  73 03 63 6f 6d 00 00 01  |parrotdns.com...|
00000020  00 01 00 00 29 02 00 00  00 80 00 00 00           |....)........|

2026-10-05 17:01:5016.5.0.234to 5353/udpdnsBR

DNS query PTR _services._dns-sd._udp.local

payload bytes

00000000  00 00 00 00 00 01 00 00  00 00 00 00 09 5f 73 65  |............._se|
00000010  72 76 69 63 65 73 07 5f  64 6e 73 2d 73 64 04 5f  |rvices._dns-sd._|
00000020  75 64 70 05 6c 6f 63 61  6c 00 00 0c 00 01        |udp.local.....|

2026-10-05 17:01:3716.5.0.234to 5353/udpdnsBR

DNS query PTR _services._dns-sd._udp.local

payload bytes

00000000  00 00 00 00 00 01 00 00  00 00 00 00 09 5f 73 65  |............._se|
00000010  72 76 69 63 65 73 07 5f  64 6e 73 2d 73 64 04 5f  |rvices._dns-sd._|
00000020  75 64 70 05 6c 6f 63 61  6c 00 00 0c 00 01        |udp.local.....|

2026-10-05 16:59:3616.5.0.234to 5353/udpdnsBR

DNS query PTR _services._dns-sd._udp.local

payload bytes

00000000  00 00 00 00 00 01 00 00  00 00 00 00 09 5f 73 65  |............._se|
00000010  72 76 69 63 65 73 07 5f  64 6e 73 2d 73 64 04 5f  |rvices._dns-sd._|
00000020  75 64 70 05 6c 6f 63 61  6c 00 00 0c 00 01        |udp.local.....|

2026-10-05 16:57:4116.5.0.234to 5355/udpdnsBR

DNS query ANY a

payload bytes

00000000  00 00 00 00 00 01 00 00  00 00 00 00 01 61 00 00  |.............a..|
00000010  ff 00 01                                          |...|

2026-10-05 16:57:17172.104.155.101to 5353/udpdnsDE

DNS query PTR _services._dns-sd._udp.local

payload bytes

00000000  00 00 00 00 00 01 00 00  00 00 00 00 09 5f 73 65  |............._se|
00000010  72 76 69 63 65 73 07 5f  64 6e 73 2d 73 64 04 5f  |rvices._dns-sd._|
00000020  75 64 70 05 6c 6f 63 61  6c 00 00 0c 00 01        |udp.local.....|

2026-10-05 16:56:3716.5.0.234to 5355/udpdnsBR

DNS query ANY a

payload bytes

00000000  00 00 00 00 00 01 00 00  00 00 00 00 01 61 00 00  |.............a..|
00000010  ff 00 01                                          |...|

2026-10-05 16:54:1916.5.0.234to 5355/udpdnsBR

DNS query ANY a

payload bytes

00000000  00 00 00 00 00 01 00 00  00 00 00 00 01 61 00 00  |.............a..|
00000010  ff 00 01                                          |...|

2026-10-05 16:54:0162.210.90.215to 137/udpdnsFR

DNS query SRV CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

payload bytes

00000000  b3 2d 00 00 00 01 00 00  00 00 00 00 20 43 4b 41  |.-.......... CKA|
00000010  41 41 41 41 41 41 41 41  41 41 41 41 41 41 41 41  |AAAAAAAAAAAAAAAA|
00000020  41 41 41 41 41 41 41 41  41 41 41 41 41 00 00 21  |AAAAAAAAAAAAA..!|
00000030  00 01                                             |..|

2026-10-05 16:53:4416.5.0.234to 5355/udpdnsBR

DNS query ANY a

payload bytes

00000000  00 00 00 00 00 01 00 00  00 00 00 00 01 61 00 00  |.............a..|
00000010  ff 00 01                                          |...|

2026-10-05 16:52:4016.5.0.234to 5355/udpdnsBR

DNS query ANY a

payload bytes

00000000  00 00 00 00 00 01 00 00  00 00 00 00 01 61 00 00  |.............a..|
00000010  ff 00 01                                          |...|