HoneyLabs

UDP traffic

Datagrams matching port:5030 sent to HoneyLabs sensors over UDP in the last 24 hours. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

4

Datagrams

1

Source addresses

1

Networks

1

Countries

1

Destination ports

Traffic by type

Other services

4 datagrams from 1 source

First packets of sessions with VPN, voice, tunnelling, database and management services.

Latest SIP datagram, to 5030/udp

INVITE sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5061;branch=z9hG4bK1de763fa To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=4d0113bd Call-ID: 2667a952fb4ab01a CSeq: 1 INVITE Contact: <sip:a@127.0.0.1:5061> Content-Length: 0

Payload bytes withheld: they contain the sensor's address.

Destination ports

Networks

Countries

Source addresses (unverified)

AddressNetworkCcSendsDatagramsLast seen (UTC)
51.158.204.210AS12876 Scaleway SASNLSIP42026-10-10 22:19

Latest datagrams