UDP traffic

Datagrams matching port:5062 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Your plan searches up to 7d, so 30d was shortened. Plans

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

Other services

27 datagrams from 9 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

SIP 26 Redis 1

Latest SIP datagram, to 5062/udp

REGISTER sip:<HONEYPOT> SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t1002830158 Via: SIP/2.0/UDP 172.110.223.192:10016;branch=z9hG4bK-1002830158;rport Call-ID: c1002830158 CSeq: 1002830158 REGISTER Contact: <sip:10000@172.110.223.192:10016> Max-Forwards: 70 Expires: 3

Payload bytes withheld: they contain the sensor's address.

Unrecognised

4 datagrams from 1 source

Datagrams no decoder recognised. Their first bytes are kept.

Unrecognised 4

Latest Unrecognised datagram, to 5062/udp

payload bytes

00000000  00                                                |.|

Destination ports

5062/udp SIP31

Networks

AS23470 ReliableSite.Net LLC from 3 sources8
AS49870 Alsycon B.V. from 1 source8
AS53667 FranTech Solutions from 1 source4
AS51852 Private Layer INC from 1 source4
AS202425 IP Volume inc from 1 source4
AS396982 Google LLC from 2 sources2
AS24961 WIIT AG from 1 source1

Countries

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
160.119.76.127	AS49870 Alsycon B.V.	SC	SIP	8	2026-10-10 03:34
179.43.134.194	AS51852 Private Layer INC	CH	SIP	4	2026-10-09 02:44
185.242.226.68	AS202425 IP Volume inc	US	Unrecognised	4	2026-10-10 05:17
199.195.250.193	AS53667 FranTech Solutions	US	SIP	4	2026-10-09 10:11
172.110.223.159	AS23470 ReliableSite.Net LLC	HK	SIP	3	2026-10-08 21:49
172.110.223.200	AS23470 ReliableSite.Net LLC	HK	SIP	3	2026-10-07 00:11
172.110.223.192	AS23470 ReliableSite.Net LLC	HK	SIP	2	2026-10-10 23:43
89.163.239.201	AS24961 WIIT AG	DE	Redis	1	2026-10-05 16:27
162.216.149.57	AS396982 Google LLC	US	SIP	1	2026-10-08 06:06
147.185.132.199	AS396982 Google LLC	US	SIP	1	2026-10-08 09:40

Latest datagrams

2026-10-10 23:43:01172.110.223.192to 5062/udpSIPHK
REGISTER sip:<HONEYPOT> SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t1002830158 Via: SIP/2.0/UDP 172.110.223.192:10016;branch=z9hG4bK-1002830158;rport Call-ID: c1002830158
Payload bytes withheld: they contain the sensor's address.
2026-10-10 18:23:01172.110.223.192to 5062/udpSIPHK
REGISTER sip:<HONEYPOT> SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t1002826900 Via: SIP/2.0/UDP 172.110.223.192:10048;branch=z9hG4bK-1002826900;rport Call-ID: c1002826900
Payload bytes withheld: they contain the sensor's address.
2026-10-10 05:17:16185.242.226.68to 5062/udpUnrecognisedUS
·
payload bytes
```
00000000  00                                                |.|
```
2026-10-10 04:15:30185.242.226.68to 5062/udpUnrecognisedUS
·
payload bytes
```
00000000  00                                                |.|
```
2026-10-10 03:34:45160.119.76.127to 5062/udpSIPSC
INVITE sip:10000@<HONEYPOT>:5062 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t963251380 Via: SIP/2.0/UDP 160.119.76.127:10031;branch=z9hG4bK-963251380;rport Call-ID: c96325
Payload bytes withheld: they contain the sensor's address.
2026-10-10 02:59:35185.242.226.68to 5062/udpUnrecognisedUS
·
payload bytes
```
00000000  00                                                |.|
```
2026-10-10 02:43:23185.242.226.68to 5062/udpUnrecognisedUS
·
payload bytes
```
00000000  00                                                |.|
```
2026-10-10 00:21:34160.119.76.127to 5062/udpSIPSC
INVITE sip:10000@<HONEYPOT>:5062 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t3703223675 Via: SIP/2.0/UDP 160.119.76.127:10047;branch=z9hG4bK-3703223675;rport Call-ID: c370
Payload bytes withheld: they contain the sensor's address.
2026-10-09 15:48:30160.119.76.127to 5062/udpSIPSC
INVITE sip:10000@<HONEYPOT>:5062 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t3163349501 Via: SIP/2.0/UDP 160.119.76.127:10043;branch=z9hG4bK-3163349501;rport Call-ID: c316
Payload bytes withheld: they contain the sensor's address.
2026-10-09 14:08:10160.119.76.127to 5062/udpSIPSC
INVITE sip:10000@<HONEYPOT>:5062 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t2144305928 Via: SIP/2.0/UDP 160.119.76.127:10064;branch=z9hG4bK-2144305928;rport Call-ID: c214
Payload bytes withheld: they contain the sensor's address.
2026-10-09 10:11:27199.195.250.193to 5062/udpSIPUS
REGISTER sip:<HONEYPOT> SIP/2.0 To: <sip:1001@<HONEYPOT>> From: <sip:1001@<HONEYPOT>>;tag=2df1e9a6e Via: SIP/2.0/UDP 199.195.250.193:65520;branch=z9hG4bK-d87543-922907499-1--d87543;rport Call-ID:
Payload bytes withheld: they contain the sensor's address.
2026-10-09 07:49:52160.119.76.127to 5062/udpSIPSC
INVITE sip:10000@<HONEYPOT>:5062 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t2144305853 Via: SIP/2.0/UDP 160.119.76.127:10039;branch=z9hG4bK-2144305853;rport Call-ID: c214
Payload bytes withheld: they contain the sensor's address.
2026-10-09 05:00:31199.195.250.193to 5062/udpSIPUS
REGISTER sip:<HONEYPOT> SIP/2.0 To: <sip:1001@<HONEYPOT>> From: <sip:1001@<HONEYPOT>>;tag=fa853502d Via: SIP/2.0/UDP 199.195.250.193:51146;branch=z9hG4bK-d87543-504443468-1--d87543;rport Call-ID:
Payload bytes withheld: they contain the sensor's address.
2026-10-09 02:44:44179.43.134.194to 5062/udpSIPCH
INVITE sip:295127755584@<HONEYPOT>:5062 SIP/2.0 Via: SIP/2.0/UDP 179.43.134.194:8309;rport=8309;branch=z9hG4bK0S6zmwX7Xtqp2 Contact: <sip:510006170083@179.43.134.194:8309> From: "510006170083"<sip:
Payload bytes withheld: they contain the sensor's address.
2026-10-08 23:50:20199.195.250.193to 5062/udpSIPUS
REGISTER sip:<HONEYPOT> SIP/2.0 To: <sip:1001@<HONEYPOT>> From: <sip:1001@<HONEYPOT>>;tag=3a7c1e386 Via: SIP/2.0/UDP 199.195.250.193:49964;branch=z9hG4bK-d87543-875345232-1--d87543;rport Call-ID:
Payload bytes withheld: they contain the sensor's address.