UDP traffic

Datagrams matching asn:208686 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Your plan searches up to 7d, so 30d was shortened. Plans

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

Other services

18 datagrams from 1 source

First packets of sessions with VPN, voice, tunnelling, database and management services.

SIP 18

Latest SIP datagram, to 5060/udp

MESSAGE sip:16572338929@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 151.240.121.146:5060;branch=z9hG4bK.Ymkmge76u;rport From: <sip:1000@<HONEYPOT>>;tag=LZfWHwEWZP17 To: sip:16572338929@<HONEYPOT> CSeq: 1 MESSAGE Call-ID: 14KOLn7dbckS Max-Forwards: 70 Content-Type: text/plain;msgtype=OTP Content-Leng

Payload bytes withheld: they contain the sensor's address.

Destination ports

5060/udp SIP6
5061/udp SIP3
5070/udp SIP3
5080/udp SIP3
5090/udp SIP3

Networks

AS208686 Nordic Servers AS from 1 source18

Countries

NO Norway18

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
151.240.121.146	AS208686 Nordic Servers AS	NO	SIP	18	2026-10-12 00:42

Latest datagrams

2026-10-12 00:42:05151.240.121.146to 5060/udpSIPNO
MESSAGE sip:16572338929@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 151.240.121.146:5060;branch=z9hG4bK.Ymkmge76u;rport From: <sip:1000@<HONEYPOT>>;tag=LZfWHwEWZP17 To: sip:16572338929@<HONEYPOT> CSeq: 1
Payload bytes withheld: they contain the sensor's address.
2026-10-12 00:42:02151.240.121.146to 5060/udpSIPNO
MESSAGE sip:16572338929@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 151.240.121.146:5060;branch=z9hG4bK.EnP91YLU6;rport From: <sip:1002@<HONEYPOT>>;tag=9Uz9wxWrLuM3 To: sip:16572338929@<HONEYPOT> CSeq: 1
Payload bytes withheld: they contain the sensor's address.
2026-10-12 00:41:59151.240.121.146to 5060/udpSIPNO
MESSAGE sip:16572338929@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 151.240.121.146:5060;branch=z9hG4bK.zTNpubocc;rport From: <sip:1001@<HONEYPOT>>;tag=L0p7q3iJXmSh To: sip:16572338929@<HONEYPOT> CSeq: 1
Payload bytes withheld: they contain the sensor's address.
2026-10-11 14:32:09151.240.121.146to 5090/udpSIPNO
MESSAGE sip:201021112424@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 151.240.121.146:5090;branch=z9hG4bK.KelB8EsLh;rport From: <sip:1000@<HONEYPOT>>;tag=MELocG97Qm4i To: sip:201021112424@<HONEYPOT> CSeq:
Payload bytes withheld: they contain the sensor's address.
2026-10-11 14:32:08151.240.121.146to 5090/udpSIPNO
MESSAGE sip:201021112424@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 151.240.121.146:5090;branch=z9hG4bK.Ucqbsq5wD;rport From: <sip:1002@<HONEYPOT>>;tag=YCHNoYc0Y2JC To: sip:201021112424@<HONEYPOT> CSeq:
Payload bytes withheld: they contain the sensor's address.
2026-10-11 14:32:07151.240.121.146to 5090/udpSIPNO
MESSAGE sip:201021112424@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 151.240.121.146:5090;branch=z9hG4bK.ruK0nrOr0;rport From: <sip:1001@<HONEYPOT>>;tag=1RNXk03J37Qt To: sip:201021112424@<HONEYPOT> CSeq:
Payload bytes withheld: they contain the sensor's address.
2026-10-11 14:32:06151.240.121.146to 5080/udpSIPNO
MESSAGE sip:201021112424@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 151.240.121.146:5080;branch=z9hG4bK.Zz4PTNfG1;rport From: <sip:1000@<HONEYPOT>>;tag=EFsvZxzv2uWq To: sip:201021112424@<HONEYPOT> CSeq:
Payload bytes withheld: they contain the sensor's address.
2026-10-11 14:32:05151.240.121.146to 5080/udpSIPNO
MESSAGE sip:201021112424@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 151.240.121.146:5080;branch=z9hG4bK.CwEMyw7sL;rport From: <sip:1002@<HONEYPOT>>;tag=Qntgto3NJE89 To: sip:201021112424@<HONEYPOT> CSeq:
Payload bytes withheld: they contain the sensor's address.
2026-10-11 14:32:04151.240.121.146to 5080/udpSIPNO
MESSAGE sip:201021112424@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 151.240.121.146:5080;branch=z9hG4bK.hYQ5z1DLh;rport From: <sip:1001@<HONEYPOT>>;tag=cY9f64UhIwoH To: sip:201021112424@<HONEYPOT> CSeq:
Payload bytes withheld: they contain the sensor's address.
2026-10-11 14:32:03151.240.121.146to 5070/udpSIPNO
MESSAGE sip:201021112424@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 151.240.121.146:5070;branch=z9hG4bK.7YlKW7K1a;rport From: <sip:1000@<HONEYPOT>>;tag=oC4ihsO7mqGW To: sip:201021112424@<HONEYPOT> CSeq:
Payload bytes withheld: they contain the sensor's address.
2026-10-11 14:32:02151.240.121.146to 5070/udpSIPNO
MESSAGE sip:201021112424@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 151.240.121.146:5070;branch=z9hG4bK.e0lrRwlnK;rport From: <sip:1002@<HONEYPOT>>;tag=pZp4wUzHI2Bb To: sip:201021112424@<HONEYPOT> CSeq:
Payload bytes withheld: they contain the sensor's address.
2026-10-11 14:32:01151.240.121.146to 5070/udpSIPNO
MESSAGE sip:201021112424@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 151.240.121.146:5070;branch=z9hG4bK.2dAv3tvKb;rport From: <sip:1001@<HONEYPOT>>;tag=g9J5EkWotODW To: sip:201021112424@<HONEYPOT> CSeq:
Payload bytes withheld: they contain the sensor's address.
2026-10-11 14:32:00151.240.121.146to 5061/udpSIPNO
MESSAGE sip:201021112424@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 151.240.121.146:5061;branch=z9hG4bK.uoiMwmKbU;rport From: <sip:1000@<HONEYPOT>>;tag=h2gD4cCSICGH To: sip:201021112424@<HONEYPOT> CSeq:
Payload bytes withheld: they contain the sensor's address.
2026-10-11 14:31:59151.240.121.146to 5061/udpSIPNO
MESSAGE sip:201021112424@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 151.240.121.146:5061;branch=z9hG4bK.CAZwlWF3z;rport From: <sip:1002@<HONEYPOT>>;tag=QIwBX0GENrZH To: sip:201021112424@<HONEYPOT> CSeq:
Payload bytes withheld: they contain the sensor's address.
2026-10-11 14:31:58151.240.121.146to 5061/udpSIPNO
MESSAGE sip:201021112424@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 151.240.121.146:5061;branch=z9hG4bK.odcMgeFaN;rport From: <sip:1001@<HONEYPOT>>;tag=pGPE7RZFjsnX To: sip:201021112424@<HONEYPOT> CSeq:
Payload bytes withheld: they contain the sensor's address.