UDP traffic

Datagrams matching asn:203273 sent to HoneyLabs sensors over UDP in the last 24 hours. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

349

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

Other services

349 datagrams from 1 source

First packets of sessions with VPN, voice, tunnelling, database and management services.

SIP 349

Latest SIP datagram, to 5060/udp

INVITE sip:00948525223031@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 77.110.115.168:64571;branch=z9hG4bK1839919186 Max-Forwards: 70 From: <sip:5001@<HONEYPOT>>;tag=1952868035 To: <sip:00948525223031@<HONEYPOT>> Call-ID: 47649017-200491383-1080054184 CSeq: 1 INVITE Contact: <sip:5001@77.110.115.168:6

Payload bytes withheld: they contain the sensor's address.

Destination ports

5060/udp SIP349

Networks

AS203273 NetCrafters OU from 1 source349

Countries

US United States349

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
77.110.115.168	AS203273 NetCrafters OU	US	SIP	349	2026-10-11 04:31

Latest datagrams

2026-10-11 04:31:1877.110.115.168to 5060/udpSIPUS
INVITE sip:00948525223031@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 77.110.115.168:64571;branch=z9hG4bK1839919186 Max-Forwards: 70 From: <sip:5001@<HONEYPOT>>;tag=1952868035 To: <sip:00948525223031@<HON
Payload bytes withheld: they contain the sensor's address.
2026-10-11 04:29:5977.110.115.168to 5060/udpSIPUS
INVITE sip:981048525223031@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 77.110.115.168:59389;branch=z9hG4bK1242388120 Max-Forwards: 70 From: <sip:5001@<HONEYPOT>>;tag=91841942 To: <sip:981048525223031@<HON
Payload bytes withheld: they contain the sensor's address.
2026-10-11 04:28:3877.110.115.168to 5060/udpSIPUS
INVITE sip:81048525223031@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 77.110.115.168:54632;branch=z9hG4bK1829788299 Max-Forwards: 70 From: <sip:5001@<HONEYPOT>>;tag=620840648 To: <sip:81048525223031@<HONE
Payload bytes withheld: they contain the sensor's address.
2026-10-11 04:27:1877.110.115.168to 5060/udpSIPUS
INVITE sip:901148525223031@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 77.110.115.168:54327;branch=z9hG4bK2051709496 Max-Forwards: 70 From: <sip:5001@<HONEYPOT>>;tag=1240949019 To: <sip:901148525223031@<H
Payload bytes withheld: they contain the sensor's address.
2026-10-11 04:26:3477.110.115.168to 5060/udpSIPUS
INVITE sip:50048818204112@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 77.110.115.168:62945;branch=z9hG4bK1368535950 Max-Forwards: 70 From: <sip:13216220427@<HONEYPOT>>;tag=1709035853 To: <sip:500488182041
Payload bytes withheld: they contain the sensor's address.
2026-10-11 04:25:5877.110.115.168to 5060/udpSIPUS
INVITE sip:01148525223031@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 77.110.115.168:49967;branch=z9hG4bK117006175 Max-Forwards: 70 From: <sip:5001@<HONEYPOT>>;tag=821619183 To: <sip:01148525223031@<HONEY
Payload bytes withheld: they contain the sensor's address.
2026-10-11 04:24:3977.110.115.168to 5060/udpSIPUS
INVITE sip:048525223031@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 77.110.115.168:49295;branch=z9hG4bK260570906 Max-Forwards: 70 From: <sip:5001@<HONEYPOT>>;tag=1457462092 To: <sip:048525223031@<HONEYPOT
Payload bytes withheld: they contain the sensor's address.
2026-10-11 04:23:2177.110.115.168to 5060/udpSIPUS
INVITE sip:00048525223031@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 77.110.115.168:65106;branch=z9hG4bK1517070137 Max-Forwards: 70 From: <sip:5001@<HONEYPOT>>;tag=705319961 To: <sip:00048525223031@<HONE
Payload bytes withheld: they contain the sensor's address.
2026-10-11 04:22:0077.110.115.168to 5060/udpSIPUS
INVITE sip:90048525223031@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 77.110.115.168:57617;branch=z9hG4bK1200417972 Max-Forwards: 70 From: <sip:5001@<HONEYPOT>>;tag=1230658335 To: <sip:90048525223031@<HON
Payload bytes withheld: they contain the sensor's address.
2026-10-11 04:20:4077.110.115.168to 5060/udpSIPUS
INVITE sip:0048525223031@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 77.110.115.168:58697;branch=z9hG4bK2113998204 Max-Forwards: 70 From: <sip:5001@<HONEYPOT>>;tag=1530876759 To: <sip:0048525223031@<HONEY
Payload bytes withheld: they contain the sensor's address.
2026-10-11 04:19:2077.110.115.168to 5060/udpSIPUS
INVITE sip:48525223031@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 77.110.115.168:52637;branch=z9hG4bK923200204 Max-Forwards: 70 From: <sip:5001@<HONEYPOT>>;tag=1677100820 To: <sip:48525223031@<HONEYPOT>>
Payload bytes withheld: they contain the sensor's address.
2026-10-11 04:17:5977.110.115.168to 5060/udpSIPUS
INVITE sip:+48525223031@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 77.110.115.168:57011;branch=z9hG4bK1647680799 Max-Forwards: 70 From: <sip:5001@<HONEYPOT>>;tag=473507210 To: <sip:+48525223031@<HONEYPOT
Payload bytes withheld: they contain the sensor's address.
2026-10-11 04:16:3177.110.115.168to 5060/udpSIPUS
INVITE sip:80048525223031@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 77.110.115.168:62771;branch=z9hG4bK1221904888 Max-Forwards: 70 From: <sip:4001@<HONEYPOT>>;tag=283925533 To: <sip:80048525223031@<HONE
Payload bytes withheld: they contain the sensor's address.
2026-10-11 04:15:1077.110.115.168to 5060/udpSIPUS
INVITE sip:00148525223031@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 77.110.115.168:53916;branch=z9hG4bK1016222435 Max-Forwards: 70 From: <sip:4001@<HONEYPOT>>;tag=1503173371 To: <sip:00148525223031@<HON
Payload bytes withheld: they contain the sensor's address.
2026-10-11 04:13:5077.110.115.168to 5060/udpSIPUS
INVITE sip:00948525223031@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 77.110.115.168:52239;branch=z9hG4bK1521674050 Max-Forwards: 70 From: <sip:4001@<HONEYPOT>>;tag=1100937460 To: <sip:00948525223031@<HON
Payload bytes withheld: they contain the sensor's address.