UDP traffic

Datagrams matching port:5006 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

Other services

2 datagrams from 1 source

First packets of sessions with VPN, voice, tunnelling, database and management services.

SIP 2

Latest SIP datagram, to 5006/udp

INVITE sip:10000@<HONEYPOT>:5006 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t3926972959 Via: SIP/2.0/UDP 172.110.223.179:10010;branch=z9hG4bK-3926972959;rport Call-ID: c3926972959 CSeq: 3926972959 INVITE Contact: <sip:10000@172.110.223.179:10010> Max-Forwards: 70 Use

Payload bytes withheld: they contain the sensor's address.

Unrecognised

8 datagrams from 5 sources

Datagrams no decoder recognised. Their first bytes are kept.

Unrecognised 8

Latest Unrecognised datagram, to 5006/udp

W· ·

payload bytes

00000000  57 00 00 00 00 11 11 07  00 00 ff ff 03 00 00 fe  |W...............|
00000010  03 00 00 14 00 1c 08 0a  08 00 00 00 00 00 00 00  |................|
00000020  04 01 01 01 00 00 00 00  01                       |.........|

Destination ports

5006/udp10

Networks

AS202425 IP Volume inc from 2 sources5
AS23470 ReliableSite.Net LLC from 1 source2
AS10439 CariNet, Inc. from 1 source1
AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMIT from 1 source1
AS45102 Alibaba (US) Technology Co., Ltd. from 1 source1

Countries

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
185.242.226.68	AS202425 IP Volume inc	US	Unrecognised	4	2026-10-09 13:37
172.110.223.179	AS23470 ReliableSite.Net LLC	HK	SIP	2	2026-10-10 12:39
66.240.236.119	AS10439 CariNet, Inc.	US	Unrecognised	1	2026-10-11 01:20
89.248.167.131	AS202425 IP Volume inc	NL	Unrecognised	1	2026-10-09 00:40
152.32.208.7	AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMIT	US	Unrecognised	1	2026-10-09 15:57
47.84.101.219	AS45102 Alibaba (US) Technology Co., Ltd.	SG	Unrecognised	1	2026-10-06 07:46

Latest datagrams

2026-10-11 01:20:3466.240.236.119to 5006/udpUnrecognisedUS

W· ·

payload bytes

00000000  57 00 00 00 00 11 11 07  00 00 ff ff 03 00 00 fe  |W...............|
00000010  03 00 00 14 00 1c 08 0a  08 00 00 00 00 00 00 00  |................|
00000020  04 01 01 01 00 00 00 00  01                       |.........|

2026-10-10 12:39:31172.110.223.179to 5006/udpSIPHK
INVITE sip:10000@<HONEYPOT>:5006 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t3926972959 Via: SIP/2.0/UDP 172.110.223.179:10010;branch=z9hG4bK-3926972959;rport Call-ID: c39
Payload bytes withheld: they contain the sensor's address.
2026-10-10 08:49:27172.110.223.179to 5006/udpSIPHK
INVITE sip:10000@<HONEYPOT>:5006 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t3039755162 Via: SIP/2.0/UDP 172.110.223.179:10062;branch=z9hG4bK-3039755162;rport Call-ID: c30
Payload bytes withheld: they contain the sensor's address.

2026-10-09 15:57:24152.32.208.7to 5006/udpUnrecognisedUS

W· ·

payload bytes

00000000  57 00 00 00 00 11 11 07  00 00 ff ff 03 00 00 fe  |W...............|
00000010  03 00 00 14 00 1c 08 0a  08 00 00 00 00 00 00 00  |................|
00000020  04 01 01 01 00 00 00 00  01                       |.........|

2026-10-09 13:37:13185.242.226.68to 5006/udpUnrecognisedUS
·
payload bytes
```
00000000  00                                                |.|
```
2026-10-09 12:35:57185.242.226.68to 5006/udpUnrecognisedUS
·
payload bytes
```
00000000  00                                                |.|
```
2026-10-09 11:20:24185.242.226.68to 5006/udpUnrecognisedUS
·
payload bytes
```
00000000  00                                                |.|
```
2026-10-09 11:02:56185.242.226.68to 5006/udpUnrecognisedUS
·
payload bytes
```
00000000  00                                                |.|
```

2026-10-09 00:40:2189.248.167.131to 5006/udpUnrecognisedNL

W· ·

payload bytes

00000000  57 00 00 00 00 11 11 07  00 00 ff ff 03 00 00 fe  |W...............|
00000010  03 00 00 14 00 1c 08 0a  08 00 00 00 00 00 00 00  |................|
00000020  04 01 01 01 00 00 00 00  01                       |.........|

2026-10-06 07:46:2347.84.101.219to 5006/udpUnrecognisedSG

{·13911111112{{.ip}}{{.port}}{

payload bytes

00000000  7b 01 00 16 31 33 39 31  31 31 31 31 31 31 32 7b  |{...13911111112{|
00000010  7b 2e 69 70 7d 7d 7b 7b  2e 70 6f 72 74 7d 7d 7b  |{.ip}}{{.port}}{|