UDP traffic
Datagrams matching qname:"dhitc.com" sent to HoneyLabs sensors over UDP in the last 24 hours. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.
A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.
2
Datagrams
1
Source addresses
1
Networks
1
Countries
1
Destination ports
Protocols
- dns from 1 source2
Destination ports
- 53/udp from 1 source2
DNS questions
2 queries and 0 unsolicited answers. An answer nobody asked for means a resolver was given a forged source address.
DNS record types
- ANY2
Networks
- AS51396 Pfcloud UG (haftungsbeschrankt) from 1 source2
Countries
Source addresses (unverified)
| Address | Network | Cc | Datagrams | Last seen (UTC) |
|---|---|---|---|---|
| 45.135.193.115 | AS51396 Pfcloud UG (haftungsbeschrankt) | DE | 2 | 2026-10-05 17:20 |
Latest datagrams
payload bytes
00000000 12 71 01 00 00 01 00 00 00 00 00 01 05 64 68 69 |.q...........dhi| 00000010 74 63 03 63 6f 6d 00 00 ff 00 01 00 00 29 ff ff |tc.com.......)..| 00000020 00 00 00 00 00 00 |......|
payload bytes
00000000 12 71 01 00 00 01 00 00 00 00 00 01 05 64 68 69 |.q...........dhi| 00000010 74 63 03 63 6f 6d 00 00 ff 00 01 00 00 29 ff ff |tc.com.......)..| 00000020 00 00 00 00 00 00 |......|