HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsEmissions IndexPortsUser-agentsUDP traffic
Integrations
OverviewMCPFeedsAPI / EnrichSplunk ESMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog
Dashboard

UDP traffic

Datagrams matching port:5060 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Your plan searches up to 7d, so 30d was shortened. Plans

1.9K

Datagrams

255

Source addresses

77

Networks

24

Countries

1

Destination ports

Traffic by type

Other services

1,763 datagrams from 174 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

SIP 1,751 Redis 12

Latest SIP datagram, to 5060/udp

INVITE sip:+48525223031@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 77.110.115.168:57011;branch=z9hG4bK1647680799 Max-Forwards: 70 From: <sip:5001@<HONEYPOT>>;tag=473507210 To: <sip:+48525223031@<HONEYPOT>> Call-ID: 1254248877-2107387345-706593999 CSeq: 1 INVITE Contact: <sip:5001@77.110.115.168:5701

Payload bytes withheld: they contain the sensor's address.

Unrecognised

97 datagrams from 81 sources

Datagrams no decoder recognised. Their first bytes are kept.

Unrecognised 97

Latest Unrecognised datagram, to 5060/udp

u.XUY·v:R{^j· y

payload bytes
00000000  75 2e 58 55 59 11 76 3a  52 7b 5e 6a 14 09 79     |u.XUY.v:R{^j..y|

Destination ports

Networks

Countries

Source addresses (unverified)

AddressNetworkCcSendsDatagramsLast seen (UTC)
172.110.223.179AS23470 ReliableSite.Net LLCHKSIP5092026-10-11 03:21
77.110.115.168AS203273 NetCrafters OUUSSIP3382026-10-11 04:17
135.148.29.54AS16276 OVH SASUSSIP1122026-10-11 04:06
198.244.200.163AS16276 OVH SASGBSIP702026-10-11 03:05
51.161.136.177AS16276 OVH SASAUSIP562026-10-11 03:09
185.243.5.243AS23470 ReliableSite.Net LLCHKSIP532026-10-05 22:22
162.217.103.70AS32475 Internap Holding LLCUSSIP392026-10-11 03:30
179.43.167.3AS51852 Private Layer INCCHSIP322026-10-11 03:22
172.110.223.200AS23470 ReliableSite.Net LLCHKSIP312026-10-11 03:48
45.198.224.251AS215925 Vpsvault.host LtdUSSIP242026-10-10 20:33
108.178.17.26AS32475 Internap Holding LLCUSSIP192026-10-11 03:59
16.5.0.234AS401661 EMBNEX, LLCBRSIP182026-10-10 07:10
45.205.1.231AS215925 Vpsvault.host LtdBRSIP162026-10-09 15:05
2.57.121.120AS47890 Unmanaged LtdROSIP152026-10-06 16:22
160.119.76.127AS49870 Alsycon B.V.SCSIP132026-10-10 22:30
167.250.202.30AS265226 UNICONNECT SERVICOS DE TELECOMUNICACOES BRSIP122026-10-10 04:14
51.158.205.153AS12876 Scaleway SASNLSIP122026-10-10 22:19
151.243.11.230AS209630 LLC Vash Kredit BankAESIP122026-10-09 11:46
144.172.64.68AS14956 RouterHosting LLCAUSIP112026-10-11 03:14
31.70.64.154AS8560 IONOS SEDESIP102026-10-11 03:03

Latest datagrams