UDP traffic

Datagrams matching port:111 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Datagrams

Source addresses

Networks

Countries

Destination ports

Protocols

nfs from 4 sources4
raw from 1 source2
dns from 2 sources2

Destination ports

111/udp from 6 sources8

Networks

AS14061 DigitalOcean, LLC from 1 source3
AS213412 ONYPHE SAS from 2 sources2
AS401661 EMBNEX, LLC from 1 source1
AS63949 Akamai Connected Cloud from 1 source1
AS211298 Driftnet Ltd from 1 source1

Countries

Source addresses (unverified)

Address	Network	Cc	Datagrams	Last seen (UTC)
137.184.210.250	AS14061 DigitalOcean, LLC	US	3	2026-10-05 13:50
91.230.168.217	AS213412 ONYPHE SAS	US	1	2026-10-05 18:05
193.163.125.208	AS211298 Driftnet Ltd	GB	1	2026-10-05 12:23
80.85.84.130	AS63949 Akamai Connected Cloud	GB	1	2026-10-05 14:17
91.231.89.89	AS213412 ONYPHE SAS	FR	1	2026-10-05 18:07
16.5.0.234	AS401661 EMBNEX, LLC	BR	1	2026-10-05 16:11

Latest datagrams

2026-10-05 18:07:5491.231.89.89to 111/udpnfsFR

er 7·

payload bytes

00000000  65 72 0a 37 00 00 00 00  00 00 00 02 00 01 86 a0  |er.7............|
00000010  00 00 00 02 00 00 00 04  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00                           |........|

2026-10-05 18:05:5591.230.168.217to 111/udpnfsUS

er 7·

payload bytes

00000000  65 72 0a 37 00 00 00 00  00 00 00 02 00 01 86 a0  |er.7............|
00000010  00 00 00 02 00 00 00 04  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00                           |........|

2026-10-05 16:11:5016.5.0.234to 111/udpnfsBR

er 7·

payload bytes

00000000  65 72 0a 37 00 00 00 00  00 00 00 02 00 01 86 a0  |er.7............|
00000010  00 00 00 02 00 00 00 04  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00                           |........|

2026-10-05 14:17:0380.85.84.130to 111/udpnfsGB

er 7·

payload bytes

00000000  65 72 0a 37 00 00 00 00  00 00 00 02 00 01 86 a0  |er.7............|
00000010  00 00 00 02 00 00 00 04  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00                           |........|

2026-10-05 13:50:12137.184.210.250to 111/udprawUS

>·0000000·0·aN000000000000000000000000

payload bytes

00000000  3e ec e3 ca 30 30 30 30  30 30 30 02 30 bc 61 4e  |>...0000000.0.aN|
00000010  30 30 30 30 30 30 30 30  30 30 30 30 30 30 30 30  |0000000000000000|
00000020  30 30 30 30 30 30 30 30                           |00000000|

2026-10-05 13:49:53137.184.210.250to 111/udprawUS

r·0000000·0·0·|00000000000000000000

payload bytes

00000000  72 fe 1d 13 30 30 30 30  30 30 30 02 30 01 86 a0  |r...0000000.0...|
00000010  30 01 97 7c 30 30 30 30  30 30 30 30 30 30 30 30  |0..|000000000000|
00000020  30 30 30 30 30 30 30 30                           |00000000|

2026-10-05 13:49:47137.184.210.250to 111/udpdnsUS

DNS response 15

payload bytes

00000000  1a a9 ff e1 00 00 00 00  00 00 00 02 00 01 86 a0  |................|
00000010  00 00 00 02 00 00 00 04  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00                           |........|

2026-10-05 12:23:48193.163.125.208to 111/udpdnsGB

DNS response 8

payload bytes

00000000  44 d2 c7 db 00 00 00 00  00 00 00 02 00 01 86 a0  |D...............|
00000010  00 00 00 04 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00                           |........|