UDP traffic

Datagrams matching port:5080 sent to HoneyLabs sensors over UDP in the last 24 hours. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

Other services

19 datagrams from 3 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

SIP 14 Redis 5

Latest SIP datagram, to 5080/udp

REGISTER sip:<HONEYPOT> SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t349959141 Via: SIP/2.0/UDP 209.46.124.116:10017;branch=z9hG4bK-349959141;rport Call-ID: c349959141 CSeq: 349959141 REGISTER Contact: <sip:10000@209.46.124.116:10017> Max-Forwards: 70 Expires: 3600 U

Payload bytes withheld: they contain the sensor's address.

Destination ports

5080/udp SIP19

Networks

AS12876 Scaleway SAS from 2 sources14
AS8560 IONOS SE from 1 source5

Countries

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
51.158.202.6	AS12876 Scaleway SAS	NL	SIP	10	2026-10-10 17:17
209.46.124.116	AS8560 IONOS SE	US	SIP	5	2026-10-11 09:02
51.158.205.153	AS12876 Scaleway SAS	NL	SIP	4	2026-10-10 22:19

Latest datagrams

2026-10-11 09:02:52209.46.124.116to 5080/udpSIPUS
REGISTER sip:<HONEYPOT> SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t349959141 Via: SIP/2.0/UDP 209.46.124.116:10017;branch=z9hG4bK-349959141;rport Call-ID: c349959141 CSe
Payload bytes withheld: they contain the sensor's address.
2026-10-11 05:15:59209.46.124.116to 5080/udpSIPUS
REGISTER sip:<HONEYPOT> SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t1464194708 Via: SIP/2.0/UDP 209.46.124.116:10032;branch=z9hG4bK-1464194708;rport Call-ID: c1464194708
Payload bytes withheld: they contain the sensor's address.
2026-10-11 03:38:54209.46.124.116to 5080/udpSIPUS
INVITE sip:10000@<HONEYPOT>:5080 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t1464194708 Via: SIP/2.0/UDP 209.46.124.116:10047;branch=z9hG4bK-1464194708;rport Call-ID: c146
Payload bytes withheld: they contain the sensor's address.
2026-10-10 22:19:1151.158.205.153to 5080/udpRedisNL
INFO sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5063;branch=z9hG4bK91b72881 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=116e4690 Call-ID: e20edf2c39a6478e CSeq: 1 INFO Contact:
Payload bytes withheld: they contain the sensor's address.
2026-10-10 22:19:1151.158.205.153to 5080/udpSIPNL
OPTIONS sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5063;branch=z9hG4bK424b7321 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=33790d87 Call-ID: 48c2912b58353e1d CSeq: 1 OPTIONS Con
Payload bytes withheld: they contain the sensor's address.
2026-10-10 22:19:1151.158.205.153to 5080/udpSIPNL
REGISTER sip:<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5063;branch=z9hG4bK8abcc1a0 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=2aebd023 Call-ID: b054a8d6be547e5c CSeq: 1 REGISTER Conta
Payload bytes withheld: they contain the sensor's address.
2026-10-10 22:19:1151.158.205.153to 5080/udpSIPNL
INVITE sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5063;branch=z9hG4bK4fbc4f5d To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=8add4083 Call-ID: 69abbdb81ec86f43 CSeq: 1 INVITE Conta
Payload bytes withheld: they contain the sensor's address.
2026-10-10 17:17:0851.158.202.6to 5080/udpRedisNL
INFO sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5060;branch=z9hG4bK8ef7ef50 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=fae7d48e Call-ID: 6f6dc3aeb323b7ff CSeq: 1 INFO Contact:
Payload bytes withheld: they contain the sensor's address.
2026-10-10 16:25:5051.158.202.6to 5080/udpRedisNL
INFO sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5063;branch=z9hG4bKb5f77ce4 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=48e52b1d Call-ID: 641733f2d617d383 CSeq: 1 INFO Contact:
Payload bytes withheld: they contain the sensor's address.
2026-10-10 15:10:5251.158.202.6to 5080/udpRedisNL
INFO sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5060;branch=z9hG4bK21e51de6 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=8be76e5d Call-ID: 31657a4429f63006 CSeq: 1 INFO Contact:
Payload bytes withheld: they contain the sensor's address.
2026-10-10 15:10:5251.158.202.6to 5080/udpSIPNL
OPTIONS sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5060;branch=z9hG4bK72e582ae To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=d963222b Call-ID: 2f13b1df436297c1 CSeq: 1 OPTIONS Con
Payload bytes withheld: they contain the sensor's address.
2026-10-10 15:10:5251.158.202.6to 5080/udpSIPNL
REGISTER sip:<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5060;branch=z9hG4bK52164172 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=d1ec7170 Call-ID: 9f1e38153020eaf CSeq: 1 REGISTER Contac
Payload bytes withheld: they contain the sensor's address.
2026-10-10 15:10:5251.158.202.6to 5080/udpSIPNL
INVITE sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5060;branch=z9hG4bKb4c462f9 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=d812747c Call-ID: 791805c4d059f592 CSeq: 1 INVITE Conta
Payload bytes withheld: they contain the sensor's address.
2026-10-10 11:45:4151.158.202.6to 5080/udpRedisNL
INFO sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5061;branch=z9hG4bK24047871 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=3de4cc1 Call-ID: d1c81533b91a60b0 CSeq: 1 INFO Contact: <
Payload bytes withheld: they contain the sensor's address.
2026-10-10 11:45:4151.158.202.6to 5080/udpSIPNL
OPTIONS sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5061;branch=z9hG4bKaf0e23d8 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=d89dc99f Call-ID: fabda95ff3e2e018 CSeq: 1 OPTIONS Con
Payload bytes withheld: they contain the sensor's address.