UDP traffic

Datagrams matching port:5008 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Your plan searches up to 7d, so 30d was shortened. Plans

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

Other services

2 datagrams from 1 source

First packets of sessions with VPN, voice, tunnelling, database and management services.

SIP 2

Latest SIP datagram, to 5008/udp

INVITE sip:10000@<HONEYPOT>:5008 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t3926972968 Via: SIP/2.0/UDP 172.110.223.179:10010;branch=z9hG4bK-3926972968;rport Call-ID: c3926972968 CSeq: 3926972968 INVITE Contact: <sip:10000@172.110.223.179:10010> Max-Forwards: 70 Use

Payload bytes withheld: they contain the sensor's address.

Unrecognised

5 datagrams from 5 sources

Datagrams no decoder recognised. Their first bytes are kept.

Unrecognised 5

Latest Unrecognised datagram, to 5008/udp

·@P·]·(·|·@·9·B7e·

payload bytes

00000000  00 40 50 00 00 00 00 85  5d b4 91 28 00 00 00 00  |.@P.....]..(....|
00000010  00 01 7c 91 40 00 00 00  aa 39 da 42 37 65 cf 01  |..|.@....9.B7e..|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

Destination ports

5008/udp7

Networks

AS45102 Alibaba (US) Technology Co., Ltd. from 3 sources3
AS23470 ReliableSite.Net LLC from 1 source2
AS4837 CHINA UNICOM China169 Backbone from 1 source1
AS10439 CariNet, Inc. from 1 source1

Countries

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
172.110.223.179	AS23470 ReliableSite.Net LLC	HK	SIP	2	2026-10-10 12:39
47.251.121.162	AS45102 Alibaba (US) Technology Co., Ltd.	US	Unrecognised	1	2026-10-09 23:33
113.206.146.178	AS4837 CHINA UNICOM China169 Backbone	CN	Unrecognised	1	2026-10-10 17:06
47.88.3.88	AS45102 Alibaba (US) Technology Co., Ltd.	US	Unrecognised	1	2026-10-09 19:46
71.6.135.131	AS10439 CariNet, Inc.	US	Unrecognised	1	2026-10-11 04:44
47.88.55.214	AS45102 Alibaba (US) Technology Co., Ltd.	US	Unrecognised	1	2026-10-06 13:22

Latest datagrams

2026-10-11 04:44:1371.6.135.131to 5008/udpUnrecognisedUS

·@P·]·(·|·@·9·B7e·

payload bytes

00000000  00 40 50 00 00 00 00 85  5d b4 91 28 00 00 00 00  |.@P.....]..(....|
00000010  00 01 7c 91 40 00 00 00  aa 39 da 42 37 65 cf 01  |..|.@....9.B7e..|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

2026-10-10 17:06:26113.206.146.178to 5008/udpUnrecognisedCN

·@P·]·(·|·@·9·B7e·

payload bytes

00000000  00 40 50 00 00 00 00 85  5d b4 91 28 00 00 00 00  |.@P.....]..(....|
00000010  00 01 7c 91 40 00 00 00  aa 39 da 42 37 65 cf 01  |..|.@....9.B7e..|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

2026-10-10 12:39:31172.110.223.179to 5008/udpSIPHK
INVITE sip:10000@<HONEYPOT>:5008 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t3926972968 Via: SIP/2.0/UDP 172.110.223.179:10010;branch=z9hG4bK-3926972968;rport Call-ID: c39
Payload bytes withheld: they contain the sensor's address.
2026-10-10 08:49:27172.110.223.179to 5008/udpSIPHK
INVITE sip:10000@<HONEYPOT>:5008 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t3039755181 Via: SIP/2.0/UDP 172.110.223.179:10062;branch=z9hG4bK-3039755181;rport Call-ID: c30
Payload bytes withheld: they contain the sensor's address.

2026-10-09 23:33:5147.251.121.162to 5008/udpUnrecognisedUS

·@P·]·(·|·@·9·B7e·

payload bytes

00000000  00 40 50 00 00 00 00 85  5d b4 91 28 00 00 00 00  |.@P.....]..(....|
00000010  00 01 7c 91 40 00 00 00  aa 39 da 42 37 65 cf 01  |..|.@....9.B7e..|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

2026-10-09 19:46:3647.88.3.88to 5008/udpUnrecognisedUS

·@P·]·(·|·@·9·B7e·

payload bytes

00000000  00 40 50 00 00 00 00 85  5d b4 91 28 00 00 00 00  |.@P.....]..(....|
00000010  00 01 7c 91 40 00 00 00  aa 39 da 42 37 65 cf 01  |..|.@....9.B7e..|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

2026-10-06 13:22:5247.88.55.214to 5008/udpUnrecognisedUS

·@P·]·(·|·@·9·B7e·

payload bytes

00000000  00 40 50 00 00 00 00 85  5d b4 91 28 00 00 00 00  |.@P.....]..(....|
00000010  00 01 7c 91 40 00 00 00  aa 39 da 42 37 65 cf 01  |..|.@....9.B7e..|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|