UDP traffic

Datagrams matching qname:"a" sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Your plan searches up to 7d, so 30d was shortened. Plans

Datagrams

Source addresses

Networks

Countries

Destination ports

Protocols

dns from 16 sources42

Destination ports

137/udp from 6 sources16
53/udp from 6 sources10
5353/udp from 3 sources8
5355/udp from 1 source5
6301/udp from 1 source1
15234/udp from 1 source1
39290/udp from 1 source1

DNS questions

42 queries and 0 unsolicited answers. An answer nobody asked for means a resolver was given a forged source address.

DNS record types

SRV17
A10
PTR8
ANY5
TXT2

Networks

AS401661 EMBNEX, LLC from 1 source17
AS63949 Akamai Connected Cloud from 2 sources4
AS398324 Censys, Inc. from 2 sources3
AS1103 SURF B.V. from 1 source3
AS20052 Arbor Networks, Inc. from 2 sources3
AS50219 Valence Technology Co. from 1 source2
AS12876 Scaleway SAS from 1 source2
AS16509 Amazon.com, Inc. from 1 source2
AS10439 CariNet, Inc. from 1 source2
AS209605 UAB Host Baltic from 1 source1

Countries

Source addresses (unverified)

Address	Network	Cc	Datagrams	Last seen (UTC)
16.5.0.234	AS401661 EMBNEX, LLC	BR	17	2026-10-05 17:01
192.87.173.76	AS1103 SURF B.V.	NL	3	2026-10-05 13:13
172.104.155.101	AS63949 Akamai Connected Cloud	DE	3	2026-10-05 16:57
71.6.232.27	AS10439 CariNet, Inc.	US	2	2026-10-05 16:49
194.164.107.4	AS50219 Valence Technology Co.	US	2	2026-10-05 13:22
18.226.68.29	AS16509 Amazon.com, Inc.	US	2	2026-10-05 14:12
66.132.172.249	AS398324 Censys, Inc.	US	2	2026-10-05 17:04
62.210.90.215	AS12876 Scaleway SAS	FR	2	2026-10-05 16:54
146.88.241.80	AS20052 Arbor Networks, Inc.	US	2	2026-10-05 14:18
146.88.240.27	AS20052 Arbor Networks, Inc.	US	1	2026-10-05 13:05
193.163.125.163	AS211298 Driftnet Ltd	GB	1	2026-10-05 14:34
137.184.210.250	AS14061 DigitalOcean, LLC	US	1	2026-10-05 13:49
139.162.66.65	AS63949 Akamai Connected Cloud	JP	1	2026-10-05 17:39
66.132.172.242	AS398324 Censys, Inc.	US	1	2026-10-05 12:50
185.36.81.23	AS209605 UAB Host Baltic	LT	1	2026-10-05 11:54
8.210.123.17	AS45102 Alibaba (US) Technology Co., Ltd.	HK	1	2026-10-05 11:05

Latest datagrams

2026-10-05 17:39:50139.162.66.65to 53/udpdnsJP

DNS query A inanis.asertdnsresearch.com

payload bytes

00000000  80 0a 01 00 00 01 00 00  00 00 00 00 06 69 6e 61  |.............ina|
00000010  6e 69 73 10 61 73 65 72  74 64 6e 73 72 65 73 65  |nis.asertdnsrese|
00000020  61 72 63 68 03 63 6f 6d  00 00 01 00 01           |arch.com.....|

2026-10-05 17:04:2066.132.172.249to 6301/udpdnsUS

DNS query A ip.parrotdns.com

payload bytes

00000000  70 9a 01 00 00 01 00 00  00 00 00 01 02 69 70 09  |p............ip.|
00000010  70 61 72 72 6f 74 64 6e  73 03 63 6f 6d 00 00 01  |parrotdns.com...|
00000020  00 01 00 00 29 02 00 00  00 80 00 00 00           |....)........|

2026-10-05 17:01:5016.5.0.234to 5353/udpdnsBR

DNS query PTR _services._dns-sd._udp.local

payload bytes

00000000  00 00 00 00 00 01 00 00  00 00 00 00 09 5f 73 65  |............._se|
00000010  72 76 69 63 65 73 07 5f  64 6e 73 2d 73 64 04 5f  |rvices._dns-sd._|
00000020  75 64 70 05 6c 6f 63 61  6c 00 00 0c 00 01        |udp.local.....|

2026-10-05 17:01:3716.5.0.234to 5353/udpdnsBR

DNS query PTR _services._dns-sd._udp.local

payload bytes

00000000  00 00 00 00 00 01 00 00  00 00 00 00 09 5f 73 65  |............._se|
00000010  72 76 69 63 65 73 07 5f  64 6e 73 2d 73 64 04 5f  |rvices._dns-sd._|
00000020  75 64 70 05 6c 6f 63 61  6c 00 00 0c 00 01        |udp.local.....|

2026-10-05 16:59:3616.5.0.234to 5353/udpdnsBR

DNS query PTR _services._dns-sd._udp.local

payload bytes

00000000  00 00 00 00 00 01 00 00  00 00 00 00 09 5f 73 65  |............._se|
00000010  72 76 69 63 65 73 07 5f  64 6e 73 2d 73 64 04 5f  |rvices._dns-sd._|
00000020  75 64 70 05 6c 6f 63 61  6c 00 00 0c 00 01        |udp.local.....|

2026-10-05 16:57:4116.5.0.234to 5355/udpdnsBR

DNS query ANY a

payload bytes

00000000  00 00 00 00 00 01 00 00  00 00 00 00 01 61 00 00  |.............a..|
00000010  ff 00 01                                          |...|

2026-10-05 16:57:17172.104.155.101to 5353/udpdnsDE

DNS query PTR _services._dns-sd._udp.local

payload bytes

00000000  00 00 00 00 00 01 00 00  00 00 00 00 09 5f 73 65  |............._se|
00000010  72 76 69 63 65 73 07 5f  64 6e 73 2d 73 64 04 5f  |rvices._dns-sd._|
00000020  75 64 70 05 6c 6f 63 61  6c 00 00 0c 00 01        |udp.local.....|

2026-10-05 16:56:3716.5.0.234to 5355/udpdnsBR

DNS query ANY a

payload bytes

00000000  00 00 00 00 00 01 00 00  00 00 00 00 01 61 00 00  |.............a..|
00000010  ff 00 01                                          |...|

2026-10-05 16:54:1916.5.0.234to 5355/udpdnsBR

DNS query ANY a

payload bytes

00000000  00 00 00 00 00 01 00 00  00 00 00 00 01 61 00 00  |.............a..|
00000010  ff 00 01                                          |...|

2026-10-05 16:54:0162.210.90.215to 137/udpdnsFR

DNS query SRV CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

payload bytes

00000000  b3 2d 00 00 00 01 00 00  00 00 00 00 20 43 4b 41  |.-.......... CKA|
00000010  41 41 41 41 41 41 41 41  41 41 41 41 41 41 41 41  |AAAAAAAAAAAAAAAA|
00000020  41 41 41 41 41 41 41 41  41 41 41 41 41 00 00 21  |AAAAAAAAAAAAA..!|
00000030  00 01                                             |..|

2026-10-05 16:53:4416.5.0.234to 5355/udpdnsBR

DNS query ANY a

payload bytes

00000000  00 00 00 00 00 01 00 00  00 00 00 00 01 61 00 00  |.............a..|
00000010  ff 00 01                                          |...|

2026-10-05 16:52:4016.5.0.234to 5355/udpdnsBR

DNS query ANY a

payload bytes

00000000  00 00 00 00 00 01 00 00  00 00 00 00 01 61 00 00  |.............a..|
00000010  ff 00 01                                          |...|

2026-10-05 16:49:5071.6.232.27to 53/udpdnsUS

DNS query A a.gtld-servers.net

payload bytes

00000000  05 39 01 00 00 01 00 00  00 00 00 00 01 61 0c 67  |.9...........a.g|
00000010  74 6c 64 2d 73 65 72 76  65 72 73 03 6e 65 74 00  |tld-servers.net.|
00000020  00 01 00 01                                       |....|

2026-10-05 16:29:3371.6.232.27to 53/udpdnsUS

DNS query A a.gtld-servers.net

payload bytes

00000000  05 39 01 00 00 01 00 00  00 00 00 00 01 61 0c 67  |.9...........a.g|
00000010  74 6c 64 2d 73 65 72 76  65 72 73 03 6e 65 74 00  |tld-servers.net.|
00000020  00 01 00 01                                       |....|

2026-10-05 15:55:1516.5.0.234to 137/udpdnsBR

DNS query SRV CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

payload bytes

00000000  e5 d8 00 00 00 01 00 00  00 00 00 00 20 43 4b 41  |............ CKA|
00000010  41 41 41 41 41 41 41 41  41 41 41 41 41 41 41 41  |AAAAAAAAAAAAAAAA|
00000020  41 41 41 41 41 41 41 41  41 41 41 41 41 00 00 21  |AAAAAAAAAAAAA..!|
00000030  00 01                                             |..|

2026-10-05 15:55:0316.5.0.234to 137/udpdnsBR

DNS query SRV CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

payload bytes

00000000  e5 d8 00 00 00 01 00 00  00 00 00 00 20 43 4b 41  |............ CKA|
00000010  41 41 41 41 41 41 41 41  41 41 41 41 41 41 41 41  |AAAAAAAAAAAAAAAA|
00000020  41 41 41 41 41 41 41 41  41 41 41 41 41 00 00 21  |AAAAAAAAAAAAA..!|
00000030  00 01                                             |..|

2026-10-05 15:54:2516.5.0.234to 137/udpdnsBR

DNS query SRV CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

payload bytes

00000000  e5 d8 00 00 00 01 00 00  00 00 00 00 20 43 4b 41  |............ CKA|
00000010  41 41 41 41 41 41 41 41  41 41 41 41 41 41 41 41  |AAAAAAAAAAAAAAAA|
00000020  41 41 41 41 41 41 41 41  41 41 41 41 41 00 00 21  |AAAAAAAAAAAAA..!|
00000030  00 01                                             |..|

2026-10-05 15:53:5216.5.0.234to 137/udpdnsBR

DNS query SRV CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

payload bytes

00000000  e5 d8 00 00 00 01 00 00  00 00 00 00 20 43 4b 41  |............ CKA|
00000010  41 41 41 41 41 41 41 41  41 41 41 41 41 41 41 41  |AAAAAAAAAAAAAAAA|
00000020  41 41 41 41 41 41 41 41  41 41 41 41 41 00 00 21  |AAAAAAAAAAAAA..!|
00000030  00 01                                             |..|

2026-10-05 15:53:1916.5.0.234to 137/udpdnsBR

DNS query SRV CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

payload bytes

00000000  e5 d8 00 00 00 01 00 00  00 00 00 00 20 43 4b 41  |............ CKA|
00000010  41 41 41 41 41 41 41 41  41 41 41 41 41 41 41 41  |AAAAAAAAAAAAAAAA|
00000020  41 41 41 41 41 41 41 41  41 41 41 41 41 00 00 21  |AAAAAAAAAAAAA..!|
00000030  00 01                                             |..|

2026-10-05 15:52:3016.5.0.234to 137/udpdnsBR

DNS query SRV CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

payload bytes

00000000  e5 d8 00 00 00 01 00 00  00 00 00 00 20 43 4b 41  |............ CKA|
00000010  41 41 41 41 41 41 41 41  41 41 41 41 41 41 41 41  |AAAAAAAAAAAAAAAA|
00000020  41 41 41 41 41 41 41 41  41 41 41 41 41 00 00 21  |AAAAAAAAAAAAA..!|
00000030  00 01                                             |..|

2026-10-05 15:52:2616.5.0.234to 137/udpdnsBR

DNS query SRV CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

payload bytes

00000000  e5 d8 00 00 00 01 00 00  00 00 00 00 20 43 4b 41  |............ CKA|
00000010  41 41 41 41 41 41 41 41  41 41 41 41 41 41 41 41  |AAAAAAAAAAAAAAAA|
00000020  41 41 41 41 41 41 41 41  41 41 41 41 41 00 00 21  |AAAAAAAAAAAAA..!|
00000030  00 01                                             |..|

2026-10-05 15:51:1516.5.0.234to 137/udpdnsBR

DNS query SRV CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

payload bytes

00000000  e5 d8 00 00 00 01 00 00  00 00 00 00 20 43 4b 41  |............ CKA|
00000010  41 41 41 41 41 41 41 41  41 41 41 41 41 41 41 41  |AAAAAAAAAAAAAAAA|
00000020  41 41 41 41 41 41 41 41  41 41 41 41 41 00 00 21  |AAAAAAAAAAAAA..!|
00000030  00 01                                             |..|

2026-10-05 15:50:4116.5.0.234to 137/udpdnsBR

DNS query SRV CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

payload bytes

00000000  e5 d8 00 00 00 01 00 00  00 00 00 00 20 43 4b 41  |............ CKA|
00000010  41 41 41 41 41 41 41 41  41 41 41 41 41 41 41 41  |AAAAAAAAAAAAAAAA|
00000020  41 41 41 41 41 41 41 41  41 41 41 41 41 00 00 21  |AAAAAAAAAAAAA..!|
00000030  00 01                                             |..|

2026-10-05 14:34:27193.163.125.163to 53/udpdnsGB

DNS query A example.com

payload bytes

00000000  c0 68 01 20 00 01 00 00  00 00 00 00 07 65 78 61  |.h. .........exa|
00000010  6d 70 6c 65 03 63 6f 6d  00 00 01 00 01           |mple.com.....|

2026-10-05 14:18:00146.88.241.80to 137/udpdnsUS

DNS query SRV CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

payload bytes

00000000  e5 d8 00 00 00 01 00 00  00 00 00 00 20 43 4b 41  |............ CKA|
00000010  41 41 41 41 41 41 41 41  41 41 41 41 41 41 41 41  |AAAAAAAAAAAAAAAA|
00000020  41 41 41 41 41 41 41 41  41 41 41 41 41 00 00 21  |AAAAAAAAAAAAA..!|
00000030  00 01                                             |..|