UDP traffic

Datagrams matching qtype:ANY sent to HoneyLabs sensors over UDP in the last 24 hours. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Datagrams

Source addresses

Networks

Countries

Destination ports

Protocols

dns from 4 sources14

Destination ports

53/udp from 3 sources9
5355/udp from 1 source5

DNS questions

14 queries and 0 unsolicited answers. An answer nobody asked for means a resolver was given a forged source address.

DNS record types

ANY14

Networks

AS51396 Pfcloud UG (haftungsbeschrankt) from 2 sources5
AS401661 EMBNEX, LLC from 1 source5
AS209630 LLC Vash Kredit Bank from 1 source4

Countries

Source addresses (unverified)

Address	Network	Cc	Datagrams	Last seen (UTC)
16.5.0.234	AS401661 EMBNEX, LLC	BR	5	2026-10-05 16:57
151.243.11.230	AS209630 LLC Vash Kredit Bank	AE	4	2026-10-05 16:04
45.135.193.194	AS51396 Pfcloud UG (haftungsbeschrankt)	DE	3	2026-10-05 13:31
45.135.193.115	AS51396 Pfcloud UG (haftungsbeschrankt)	DE	2	2026-10-05 17:20

Latest datagrams

2026-10-05 17:20:5045.135.193.115to 53/udpdnsDE

DNS query ANY dhitc.com

payload bytes

00000000  12 71 01 00 00 01 00 00  00 00 00 01 05 64 68 69  |.q...........dhi|
00000010  74 63 03 63 6f 6d 00 00  ff 00 01 00 00 29 ff ff  |tc.com.......)..|
00000020  00 00 00 00 00 00                                 |......|

2026-10-05 16:57:4116.5.0.234to 5355/udpdnsBR

DNS query ANY a

payload bytes

00000000  00 00 00 00 00 01 00 00  00 00 00 00 01 61 00 00  |.............a..|
00000010  ff 00 01                                          |...|

2026-10-05 16:56:3716.5.0.234to 5355/udpdnsBR

DNS query ANY a

payload bytes

00000000  00 00 00 00 00 01 00 00  00 00 00 00 01 61 00 00  |.............a..|
00000010  ff 00 01                                          |...|

2026-10-05 16:54:1916.5.0.234to 5355/udpdnsBR

DNS query ANY a

payload bytes

00000000  00 00 00 00 00 01 00 00  00 00 00 00 01 61 00 00  |.............a..|
00000010  ff 00 01                                          |...|

2026-10-05 16:53:4416.5.0.234to 5355/udpdnsBR

DNS query ANY a

payload bytes

00000000  00 00 00 00 00 01 00 00  00 00 00 00 01 61 00 00  |.............a..|
00000010  ff 00 01                                          |...|

2026-10-05 16:52:4016.5.0.234to 5355/udpdnsBR

DNS query ANY a

payload bytes

00000000  00 00 00 00 00 01 00 00  00 00 00 00 01 61 00 00  |.............a..|
00000010  ff 00 01                                          |...|

2026-10-05 16:31:3945.135.193.115to 53/udpdnsDE

DNS query ANY dhitc.com

payload bytes

00000000  12 71 01 00 00 01 00 00  00 00 00 01 05 64 68 69  |.q...........dhi|
00000010  74 63 03 63 6f 6d 00 00  ff 00 01 00 00 29 ff ff  |tc.com.......)..|
00000020  00 00 00 00 00 00                                 |......|

2026-10-05 16:04:59151.243.11.230to 53/udpdnsAE

DNS query ANY wisc.edu

payload bytes

00000000  12 71 01 00 00 01 00 00  00 00 00 01 04 77 69 73  |.q...........wis|
00000010  63 03 65 64 75 00 00 ff  00 01 00 00 29 20 00 00  |c.edu.......) ..|
00000020  00 80 00 00 00                                    |.....|

2026-10-05 15:08:17151.243.11.230to 53/udpdnsAE

DNS query ANY wisc.edu

payload bytes

00000000  12 71 01 00 00 01 00 00  00 00 00 01 04 77 69 73  |.q...........wis|
00000010  63 03 65 64 75 00 00 ff  00 01 00 00 29 20 00 00  |c.edu.......) ..|
00000020  00 80 00 00 00                                    |.....|

2026-10-05 14:37:27151.243.11.230to 53/udpdnsAE

DNS query ANY wisc.edu

payload bytes

00000000  12 71 01 00 00 01 00 00  00 00 00 01 04 77 69 73  |.q...........wis|
00000010  63 03 65 64 75 00 00 ff  00 01 00 00 29 20 00 00  |c.edu.......) ..|
00000020  00 80 00 00 00                                    |.....|

2026-10-05 14:30:08151.243.11.230to 53/udpdnsAE

DNS query ANY wisc.edu

payload bytes

00000000  12 71 01 00 00 01 00 00  00 00 00 01 04 77 69 73  |.q...........wis|
00000010  63 03 65 64 75 00 00 ff  00 01 00 00 29 20 00 00  |c.edu.......) ..|
00000020  00 80 00 00 00                                    |.....|

2026-10-05 13:31:0745.135.193.194to 53/udpdnsDE

DNS query ANY uu.nl

payload bytes

00000000  45 67 01 00 00 01 00 00  00 00 00 01 02 75 75 02  |Eg...........uu.|
00000010  6e 6c 00 00 ff 00 01 00  00 29 ff ff 00 00 00 00  |nl.......)......|
00000020  00 00                                             |..|

2026-10-05 13:30:5945.135.193.194to 53/udpdnsDE

DNS query ANY uu.nl

payload bytes

00000000  45 67 01 00 00 01 00 00  00 00 00 01 02 75 75 02  |Eg...........uu.|
00000010  6e 6c 00 00 ff 00 01 00  00 29 ff ff 00 00 00 00  |nl.......)......|
00000020  00 00                                             |..|

2026-10-05 13:22:4545.135.193.194to 53/udpdnsDE

DNS query ANY uu.nl

payload bytes

00000000  45 67 01 00 00 01 00 00  00 00 00 01 02 75 75 02  |Eg...........uu.|
00000010  6e 6c 00 00 ff 00 01 00  00 29 ff ff 00 00 00 00  |nl.......)......|
00000020  00 00                                             |..|