UDP traffic

Datagrams matching port:5094 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Your plan searches up to 7d, so 30d was shortened. Plans

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

Other services

3 datagrams from 3 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

SIP 2 Redis 1

Latest SIP datagram, to 5094/udp

INVITE sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 172.110.223.200:14105;branch=z9hG4bK-1854935162;rport Content-Length: 0 From: "sipvicious"<sip:100@1.1.1.1>;tag=6239653435316339313365360133313031393432333633 Accept: application/sdp User-Agent: friendly-scanner To: "sipvicious"<sip:100@1.1.1.

Payload bytes withheld: they contain the sensor's address.

Unrecognised

22 datagrams from 15 sources

Datagrams no decoder recognised. Their first bytes are kept.

Unrecognised 22

Latest Unrecognised datagram, to 5094/udp

· ·u0

payload bytes

00000000  01 00 00 00 00 00 00 0d  01 00 00 75 30           |...........u0|

Destination ports

5094/udp25

Networks

AS202425 IP Volume inc from 1 source8
AS398324 Censys, Inc. from 6 sources6
AS45102 Alibaba (US) Technology Co., Ltd. from 4 sources4
AS398722 Censys, Inc. from 2 sources2
AS23470 ReliableSite.Net LLC from 2 sources2
AS24961 WIIT AG from 1 source1
AS58466 CHINANET Guangdong province network from 1 source1
AS63199 CDS Global Cloud Co., Ltd from 1 source1

Countries

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
185.242.226.67	AS202425 IP Volume inc	US	Unrecognised	8	2026-10-09 11:12
66.132.159.39	AS398324 Censys, Inc.	US	Unrecognised	1	2026-10-10 11:26
47.251.76.220	AS45102 Alibaba (US) Technology Co., Ltd.	US	Unrecognised	1	2026-10-06 03:50
198.11.180.76	AS45102 Alibaba (US) Technology Co., Ltd.	US	Unrecognised	1	2026-10-06 17:48
172.110.223.179	AS23470 ReliableSite.Net LLC	HK	SIP	1	2026-10-10 04:05
148.153.188.246	AS63199 CDS Global Cloud Co., Ltd	US	Unrecognised	1	2026-10-09 01:18
66.132.186.216	AS398324 Censys, Inc.	US	Unrecognised	1	2026-10-09 14:45
172.110.223.200	AS23470 ReliableSite.Net LLC	HK	SIP	1	2026-10-10 07:12
66.132.159.41	AS398324 Censys, Inc.	US	Unrecognised	1	2026-10-10 21:50
199.45.154.185	AS398722 Censys, Inc.	US	Unrecognised	1	2026-10-07 10:27
66.132.186.245	AS398324 Censys, Inc.	US	Unrecognised	1	2026-10-06 14:35
66.132.186.247	AS398324 Censys, Inc.	US	Unrecognised	1	2026-10-10 14:54
43.98.186.223	AS45102 Alibaba (US) Technology Co., Ltd.	SG	Unrecognised	1	2026-10-06 07:18
199.45.154.184	AS398722 Censys, Inc.	US	Unrecognised	1	2026-10-06 02:29
193.111.198.244	AS24961 WIIT AG	DE	Redis	1	2026-10-05 16:28
106.75.177.59	AS58466 CHINANET Guangdong province network	CN	Unrecognised	1	2026-10-10 13:34
8.216.8.122	AS45102 Alibaba (US) Technology Co., Ltd.	JP	Unrecognised	1	2026-10-07 13:26
66.132.186.215	AS398324 Censys, Inc.	US	Unrecognised	1	2026-10-07 16:49

Latest datagrams

2026-10-10 21:50:0866.132.159.41to 5094/udpUnrecognisedUS
· ·u0
payload bytes
```
00000000  01 00 00 00 00 00 00 0d  01 00 00 75 30           |...........u0|
```
2026-10-10 14:54:4266.132.186.247to 5094/udpUnrecognisedUS
· ·u0
payload bytes
```
00000000  01 00 00 00 00 00 00 0d  01 00 00 75 30           |...........u0|
```

2026-10-10 13:34:16106.75.177.59to 5094/udpUnrecognisedCN

payload bytes

00000000  01 00 00 00 00 00 00 00  00 00 00                 |...........|

2026-10-10 11:26:5166.132.159.39to 5094/udpUnrecognisedUS
· ·u0
payload bytes
```
00000000  01 00 00 00 00 00 00 0d  01 00 00 75 30           |...........u0|
```
2026-10-10 07:12:44172.110.223.200to 5094/udpSIPHK
INVITE sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 172.110.223.200:14105;branch=z9hG4bK-1854935162;rport Content-Length: 0 From: "sipvicious"<sip:100@1.1.1.1>;tag=6239653435316339313365360133313031
Payload bytes withheld: they contain the sensor's address.
2026-10-10 04:05:19172.110.223.179to 5094/udpSIPHK
INVITE sip:10000@<HONEYPOT>:5094 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t2590343700 Via: SIP/2.0/UDP 172.110.223.179:10060;branch=z9hG4bK-2590343700;rport Call-ID: c25
Payload bytes withheld: they contain the sensor's address.
2026-10-09 14:45:2066.132.186.216to 5094/udpUnrecognisedUS
· ·u0
payload bytes
```
00000000  01 00 00 00 00 00 00 0d  01 00 00 75 30           |...........u0|
```
2026-10-09 11:12:06185.242.226.67to 5094/udpUnrecognisedUS
·
payload bytes
```
00000000  02                                                |.|
```
2026-10-09 10:06:48185.242.226.67to 5094/udpUnrecognisedUS
·
payload bytes
```
00000000  02                                                |.|
```
2026-10-09 08:46:29185.242.226.67to 5094/udpUnrecognisedUS
·
payload bytes
```
00000000  02                                                |.|
```
2026-10-09 08:29:23185.242.226.67to 5094/udpUnrecognisedUS
·
payload bytes
```
00000000  02                                                |.|
```
2026-10-09 01:18:50148.153.188.246to 5094/udpUnrecognisedUS
· ·N
payload bytes
```
00000000  01 00 00 00 00 01 00 0d  01 00 00 4e 20           |...........N |
```
2026-10-07 16:49:5066.132.186.215to 5094/udpUnrecognisedUS
· ·u0
payload bytes
```
00000000  01 00 00 00 00 00 00 0d  01 00 00 75 30           |...........u0|
```

2026-10-07 13:26:588.216.8.122to 5094/udpUnrecognisedJP

· ·N

payload bytes

00000000  01 00 00 00 00 01 00 0d  01 00 00 4e 20           |...........N |

2026-10-07 10:27:43199.45.154.185to 5094/udpUnrecognisedUS
· ·u0
payload bytes
```
00000000  01 00 00 00 00 00 00 0d  01 00 00 75 30           |...........u0|
```