HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsEmissions IndexPortsUser-agentsUDP traffic
Integrations
OverviewMCPFeedsAPI / EnrichSplunk ESMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog
Dashboard

UDP traffic

Datagrams matching port:5060 sent to HoneyLabs sensors over UDP in the last 24 hours. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

796

Datagrams

63

Source addresses

30

Networks

16

Countries

1

Destination ports

Traffic by type

Other services

779 datagrams from 46 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

SIP 768 Redis 11

Latest SIP datagram, to 5060/udp

INVITE sip:0048525223031@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 77.110.115.168:58489;branch=z9hG4bK687195406 Max-Forwards: 70 From: <sip:10001@<HONEYPOT>>;tag=1608572584 To: <sip:0048525223031@<HONEYPOT>> Call-ID: 769129139-1674483324-1208278061 CSeq: 1 INVITE Contact: <sip:10001@77.110.115.168:

Payload bytes withheld: they contain the sensor's address.

Unrecognised

17 datagrams from 17 sources

Datagrams no decoder recognised. Their first bytes are kept.

Unrecognised 17

Latest Unrecognised datagram, to 5060/udp

OPTIONS

payload bytes
00000000  4f 50 54 49 4f 4e 53                              |OPTIONS|

Destination ports

Networks

Countries

Source addresses (unverified)

AddressNetworkCcSendsDatagramsLast seen (UTC)
77.110.115.168AS203273 NetCrafters OUUSSIP5552026-10-11 09:02
198.244.200.163AS16276 OVH SASGBSIP192026-10-11 08:38
135.148.29.54AS16276 OVH SASUSSIP182026-10-11 08:33
172.110.223.200AS23470 ReliableSite.Net LLCHKSIP142026-10-11 07:43
51.158.205.153AS12876 Scaleway SASNLSIP122026-10-10 22:19
51.161.136.177AS16276 OVH SASAUSIP122026-10-11 05:17
172.110.223.179AS23470 ReliableSite.Net LLCHKSIP112026-10-11 08:30
162.217.103.70AS32475 Internap Holding LLCUSSIP112026-10-11 07:43
89.190.156.22AS49870 Alsycon B.V.NLSIP102026-10-10 20:43
172.86.125.231AS14956 RouterHosting LLCUSSIP102026-10-11 08:36
51.158.202.97AS12876 Scaleway SASNLSIP102026-10-10 16:48
144.172.64.68AS14956 RouterHosting LLCAUSIP102026-10-11 08:02
51.158.204.210AS12876 Scaleway SASNLSIP82026-10-10 16:42
179.43.167.3AS51852 Private Layer INCCHSIP82026-10-11 04:32
51.158.201.249AS12876 Scaleway SASNLSIP82026-10-10 16:42
144.172.64.83AS14956 RouterHosting LLCAUSIP82026-10-11 07:22
5.196.61.130AS16276 OVH SASFRSIP52026-10-11 02:51
5.39.125.103AS16276 OVH SASFRSIP52026-10-11 06:58
51.178.198.251AS16276 OVH SASFRSIP42026-10-11 03:06
31.70.64.154AS8560 IONOS SEDESIP42026-10-11 07:04

Latest datagrams