UDP traffic

Datagrams matching port:7777 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Your plan searches up to 7d, so 30d was shortened. Plans

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

Other services

2 datagrams from 1 source

First packets of sessions with VPN, voice, tunnelling, database and management services.

SIP 2

Latest SIP datagram, to 7777/udp

OPTIONS sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 51.161.57.3:5615;branch=z9hG4bK-2909931809;rport Content-Length: 0 From: "sipvicious"<sip:100@1.1.1.1>;tag=3137356532356533316536310131363431303530353234 Accept: application/sdp User-Agent: friendly-scanner To: "sipvicious"<sip:100@1.1.1.1>

Payload bytes withheld: they contain the sensor's address.

Unrecognised

9 datagrams from 6 sources

Datagrams no decoder recognised. Their first bytes are kept.

Unrecognised 9

Latest Unrecognised datagram, to 7777/udp

\status\·

payload bytes

00000000  5c 73 74 61 74 75 73 5c  00                       |\status\.|

Destination ports

7777/udp11

Networks

AS20052 Arbor Networks, Inc. from 5 sources8
AS16276 OVH SAS from 1 source2
AS12989 Black HOST Ltd from 1 source1

Countries

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
146.88.241.120	AS20052 Arbor Networks, Inc.	US	Unrecognised	4	2026-10-09 13:04
51.161.57.3	AS16276 OVH SAS	CA	SIP	2	2026-10-07 11:16
146.88.241.20	AS20052 Arbor Networks, Inc.	US	Unrecognised	1	2026-10-09 03:48
146.88.241.100	AS20052 Arbor Networks, Inc.	US	Unrecognised	1	2026-10-07 11:44
86.54.31.38	AS12989 Black HOST Ltd	CA	Unrecognised	1	2026-10-06 20:23
146.88.241.80	AS20052 Arbor Networks, Inc.	US	Unrecognised	1	2026-10-09 03:47
146.88.241.110	AS20052 Arbor Networks, Inc.	US	Unrecognised	1	2026-10-07 11:39

Latest datagrams

2026-10-09 13:04:55146.88.241.120to 7777/udpUnrecognisedUS
\status\·
payload bytes
```
00000000  5c 73 74 61 74 75 73 5c  00                       |\status\.|
```
2026-10-09 12:59:43146.88.241.120to 7777/udpUnrecognisedUS
\status\·
payload bytes
```
00000000  5c 73 74 61 74 75 73 5c  00                       |\status\.|
```
2026-10-09 03:48:33146.88.241.20to 7777/udpUnrecognisedUS
\status\·
payload bytes
```
00000000  5c 73 74 61 74 75 73 5c  00                       |\status\.|
```
2026-10-09 03:47:58146.88.241.80to 7777/udpUnrecognisedUS
\status\·
payload bytes
```
00000000  5c 73 74 61 74 75 73 5c  00                       |\status\.|
```
2026-10-07 13:05:49146.88.241.120to 7777/udpUnrecognisedUS
\status\·
payload bytes
```
00000000  5c 73 74 61 74 75 73 5c  00                       |\status\.|
```
2026-10-07 12:45:04146.88.241.120to 7777/udpUnrecognisedUS
\status\·
payload bytes
```
00000000  5c 73 74 61 74 75 73 5c  00                       |\status\.|
```
2026-10-07 11:44:51146.88.241.100to 7777/udpUnrecognisedUS
\status\·
payload bytes
```
00000000  5c 73 74 61 74 75 73 5c  00                       |\status\.|
```
2026-10-07 11:39:25146.88.241.110to 7777/udpUnrecognisedUS
\status\·
payload bytes
```
00000000  5c 73 74 61 74 75 73 5c  00                       |\status\.|
```
2026-10-07 11:16:1151.161.57.3to 7777/udpSIPCA
OPTIONS sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 51.161.57.3:5615;branch=z9hG4bK-2909931809;rport Content-Length: 0 From: "sipvicious"<sip:100@1.1.1.1>;tag=31373565323565333165363101313634313035
Payload bytes withheld: they contain the sensor's address.
2026-10-07 06:59:1251.161.57.3to 7777/udpSIPCA
OPTIONS sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 51.161.57.3:6239;branch=z9hG4bK-2638800276;rport Content-Length: 0 From: "sipvicious"<sip:100@1.1.1.1>;tag=30356166623738343165363101393534343836
Payload bytes withheld: they contain the sensor's address.

2026-10-06 20:23:0386.54.31.38to 7777/udpUnrecognisedCA

·;·

payload bytes

00000000  d5 f6 00 01 0c 3b 07 00  00 00 00 00 01           |.....;.......|