UDP traffic

Datagrams matching port:5095 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

Other services

2 datagrams from 2 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

Redis 1 SIP 1

Latest Redis datagram, to 5095/udp

INFO sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5060;branch=z9hG4bK2bb3322a To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=a0f19ece Call-ID: 3ae078b3665ec626 CSeq: 1 INFO Contact: <sip:a@127.0.0.1:5060> Content-Length: 0

Payload bytes withheld: they contain the sensor's address.

Unrecognised

4 datagrams from 4 sources

Datagrams no decoder recognised. Their first bytes are kept.

Unrecognised 4

Latest Unrecognised datagram, to 5095/udp

· ·N

payload bytes

00000000  01 00 00 00 00 01 00 0d  01 00 00 4e 20           |...........N |

Destination ports

5095/udp6

Networks

AS45102 Alibaba (US) Technology Co., Ltd. from 2 sources2
AS398324 Censys, Inc. from 1 source1
AS24961 WIIT AG from 1 source1
AS398722 Censys, Inc. from 1 source1
AS23470 ReliableSite.Net LLC from 1 source1

Countries

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
199.45.154.178	AS398722 Censys, Inc.	US	Unrecognised	1	2026-10-07 03:13
172.110.223.179	AS23470 ReliableSite.Net LLC	HK	SIP	1	2026-10-10 04:05
8.209.83.9	AS45102 Alibaba (US) Technology Co., Ltd.	DE	Unrecognised	1	2026-10-11 03:55
66.132.186.254	AS398324 Censys, Inc.	US	Unrecognised	1	2026-10-07 00:33
47.251.81.110	AS45102 Alibaba (US) Technology Co., Ltd.	US	Unrecognised	1	2026-10-11 04:47
89.163.146.51	AS24961 WIIT AG	DE	Redis	1	2026-10-05 17:40

Latest datagrams

2026-10-11 04:47:5647.251.81.110to 5095/udpUnrecognisedUS
· ·N
payload bytes
```
00000000  01 00 00 00 00 01 00 0d  01 00 00 4e 20           |...........N |
```

2026-10-11 03:55:178.209.83.9to 5095/udpUnrecognisedDE

· ·N

payload bytes

00000000  01 00 00 00 00 01 00 0d  01 00 00 4e 20           |...........N |

2026-10-10 04:05:19172.110.223.179to 5095/udpSIPHK
INVITE sip:10000@<HONEYPOT>:5095 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t2590343706 Via: SIP/2.0/UDP 172.110.223.179:10060;branch=z9hG4bK-2590343706;rport Call-ID: c25
Payload bytes withheld: they contain the sensor's address.
2026-10-07 03:13:13199.45.154.178to 5095/udpUnrecognisedUS
· ·u0
payload bytes
```
00000000  01 00 00 00 00 00 00 0d  01 00 00 75 30           |...........u0|
```
2026-10-07 00:33:0066.132.186.254to 5095/udpUnrecognisedUS
· ·u0
payload bytes
```
00000000  01 00 00 00 00 00 00 0d  01 00 00 75 30           |...........u0|
```
2026-10-05 17:40:4189.163.146.51to 5095/udpRedisDE
INFO sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5060;branch=z9hG4bK2bb3322a To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=a0f19ece Call-ID: 3ae078b3665ec626 CSeq: 1 INFO Contact:
Payload bytes withheld: they contain the sensor's address.