UDP traffic

Datagrams matching port:5080 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

Other services

36 datagrams from 8 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

SIP 30 Redis 6

Latest SIP datagram, to 5080/udp

INVITE sip:10000@<HONEYPOT>:5080 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t1464194708 Via: SIP/2.0/UDP 209.46.124.116:10047;branch=z9hG4bK-1464194708;rport Call-ID: c1464194708 CSeq: 1464194708 INVITE Contact: <sip:10000@209.46.124.116:10047> Max-Forwards: 70 User-

Payload bytes withheld: they contain the sensor's address.

Destination ports

5080/udp SIP36

Networks

AS12876 Scaleway SAS from 2 sources14
AS23470 ReliableSite.Net LLC from 2 sources7
AS8560 IONOS SE from 1 source6
AS49870 Alsycon B.V. from 1 source4
AS51852 Private Layer INC from 1 source4
AS24961 WIIT AG from 1 source1

Countries

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
51.158.202.6	AS12876 Scaleway SAS	NL	SIP	10	2026-10-10 17:17
172.110.223.200	AS23470 ReliableSite.Net LLC	HK	SIP	6	2026-10-09 04:18
209.46.124.116	AS8560 IONOS SE	US	SIP	6	2026-10-11 03:38
51.158.205.153	AS12876 Scaleway SAS	NL	SIP	4	2026-10-10 22:19
31.7.60.66	AS51852 Private Layer INC	CH	SIP	4	2026-10-10 06:25
160.119.76.127	AS49870 Alsycon B.V.	SC	SIP	4	2026-10-09 15:48
172.110.223.179	AS23470 ReliableSite.Net LLC	HK	SIP	1	2026-10-10 06:29
89.163.146.51	AS24961 WIIT AG	DE	Redis	1	2026-10-05 17:40

Latest datagrams

2026-10-11 03:38:54209.46.124.116to 5080/udpSIPUS
INVITE sip:10000@<HONEYPOT>:5080 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t1464194708 Via: SIP/2.0/UDP 209.46.124.116:10047;branch=z9hG4bK-1464194708;rport Call-ID: c146
Payload bytes withheld: they contain the sensor's address.
2026-10-10 22:19:1151.158.205.153to 5080/udpRedisNL
INFO sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5063;branch=z9hG4bK91b72881 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=116e4690 Call-ID: e20edf2c39a6478e CSeq: 1 INFO Contact:
Payload bytes withheld: they contain the sensor's address.
2026-10-10 22:19:1151.158.205.153to 5080/udpSIPNL
OPTIONS sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5063;branch=z9hG4bK424b7321 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=33790d87 Call-ID: 48c2912b58353e1d CSeq: 1 OPTIONS Con
Payload bytes withheld: they contain the sensor's address.
2026-10-10 22:19:1151.158.205.153to 5080/udpSIPNL
REGISTER sip:<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5063;branch=z9hG4bK8abcc1a0 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=2aebd023 Call-ID: b054a8d6be547e5c CSeq: 1 REGISTER Conta
Payload bytes withheld: they contain the sensor's address.
2026-10-10 22:19:1151.158.205.153to 5080/udpSIPNL
INVITE sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5063;branch=z9hG4bK4fbc4f5d To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=8add4083 Call-ID: 69abbdb81ec86f43 CSeq: 1 INVITE Conta
Payload bytes withheld: they contain the sensor's address.
2026-10-10 17:17:0851.158.202.6to 5080/udpRedisNL
INFO sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5060;branch=z9hG4bK8ef7ef50 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=fae7d48e Call-ID: 6f6dc3aeb323b7ff CSeq: 1 INFO Contact:
Payload bytes withheld: they contain the sensor's address.
2026-10-10 16:25:5051.158.202.6to 5080/udpRedisNL
INFO sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5063;branch=z9hG4bKb5f77ce4 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=48e52b1d Call-ID: 641733f2d617d383 CSeq: 1 INFO Contact:
Payload bytes withheld: they contain the sensor's address.
2026-10-10 15:10:5251.158.202.6to 5080/udpRedisNL
INFO sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5060;branch=z9hG4bK21e51de6 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=8be76e5d Call-ID: 31657a4429f63006 CSeq: 1 INFO Contact:
Payload bytes withheld: they contain the sensor's address.
2026-10-10 15:10:5251.158.202.6to 5080/udpSIPNL
OPTIONS sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5060;branch=z9hG4bK72e582ae To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=d963222b Call-ID: 2f13b1df436297c1 CSeq: 1 OPTIONS Con
Payload bytes withheld: they contain the sensor's address.
2026-10-10 15:10:5251.158.202.6to 5080/udpSIPNL
REGISTER sip:<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5060;branch=z9hG4bK52164172 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=d1ec7170 Call-ID: 9f1e38153020eaf CSeq: 1 REGISTER Contac
Payload bytes withheld: they contain the sensor's address.
2026-10-10 15:10:5251.158.202.6to 5080/udpSIPNL
INVITE sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5060;branch=z9hG4bKb4c462f9 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=d812747c Call-ID: 791805c4d059f592 CSeq: 1 INVITE Conta
Payload bytes withheld: they contain the sensor's address.
2026-10-10 11:45:4151.158.202.6to 5080/udpRedisNL
INFO sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5061;branch=z9hG4bK24047871 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=3de4cc1 Call-ID: d1c81533b91a60b0 CSeq: 1 INFO Contact: <
Payload bytes withheld: they contain the sensor's address.
2026-10-10 11:45:4151.158.202.6to 5080/udpSIPNL
OPTIONS sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5061;branch=z9hG4bKaf0e23d8 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=d89dc99f Call-ID: fabda95ff3e2e018 CSeq: 1 OPTIONS Con
Payload bytes withheld: they contain the sensor's address.
2026-10-10 11:45:4151.158.202.6to 5080/udpSIPNL
REGISTER sip:<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5061;branch=z9hG4bK5da26c27 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=1e78c13f Call-ID: 79df4ff47ef575cc CSeq: 1 REGISTER Conta
Payload bytes withheld: they contain the sensor's address.
2026-10-10 11:45:4151.158.202.6to 5080/udpSIPNL
INVITE sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5061;branch=z9hG4bKbf5ab303 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=89a2a6a5 Call-ID: e22af0bf3ea99f7d CSeq: 1 INVITE Conta
Payload bytes withheld: they contain the sensor's address.