UDP traffic

Datagrams matching proto:sip sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Your plan searches up to 7d, so 30d was shortened. Plans

2.7K

Datagrams

212

Source addresses

Networks

Countries

196

Destination ports

Traffic by type

Other services

2,683 datagrams from 212 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

SIP 2,683

Latest SIP datagram, to 5060/udp

INVITE sip:981048525223031@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 77.110.115.168:59389;branch=z9hG4bK1242388120 Max-Forwards: 70 From: <sip:5001@<HONEYPOT>>;tag=91841942 To: <sip:981048525223031@<HONEYPOT>> Call-ID: 1292650621-1293093950-1255321250 CSeq: 1 INVITE Contact: <sip:5001@77.110.115.16

Payload bytes withheld: they contain the sensor's address.

Destination ports

5060/udp SIP1,761
5059/udp SIP98
15060/udp SIP35
25060/udp SIP34
5080/udp SIP30
45060/udp SIP26
5062/udp SIP26
35060/udp SIP24
5070/udp SIP24
55060/udp SIP22
5061/udp SIP20
5090/udp SIP19

Networks

AS23470 ReliableSite.Net LLC from 10 sources1,136
AS203273 NetCrafters OU from 1 source348
AS16276 OVH SAS from 10 sources334
AS49870 Alsycon B.V. from 5 sources174
AS12876 Scaleway SAS from 8 sources115
AS32475 Internap Holding LLC from 2 sources58
AS51852 Private Layer INC from 3 sources51
AS53667 FranTech Solutions from 4 sources44
AS398324 Censys, Inc. from 14 sources43
AS215925 Vpsvault.host Ltd from 2 sources40

Countries

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
172.110.223.179	AS23470 ReliableSite.Net LLC	HK	SIP	770	2026-10-11 03:21
77.110.115.168	AS203273 NetCrafters OU	US	SIP	348	2026-10-11 04:29
160.119.76.127	AS49870 Alsycon B.V.	SC	SIP	153	2026-10-10 22:30
172.110.223.200	AS23470 ReliableSite.Net LLC	HK	SIP	125	2026-10-11 03:48
135.148.29.54	AS16276 OVH SAS	US	SIP	112	2026-10-11 04:06
198.244.200.163	AS16276 OVH SAS	GB	SIP	70	2026-10-11 03:05
172.110.223.188	AS23470 ReliableSite.Net LLC	HK	SIP	67	2026-10-11 04:01
172.110.223.159	AS23470 ReliableSite.Net LLC	HK	SIP	60	2026-10-08 21:49
51.161.136.177	AS16276 OVH SAS	AU	SIP	56	2026-10-11 03:09
51.161.57.3	AS16276 OVH SAS	CA	SIP	56	2026-10-10 14:23
185.243.5.243	AS23470 ReliableSite.Net LLC	HK	SIP	53	2026-10-05 22:22
172.110.223.192	AS23470 ReliableSite.Net LLC	HK	SIP	44	2026-10-10 23:43
162.217.103.70	AS32475 Internap Holding LLC	US	SIP	39	2026-10-11 03:30
179.43.167.3	AS51852 Private Layer INC	CH	SIP	32	2026-10-11 03:22
199.195.250.193	AS53667 FranTech Solutions	US	SIP	27	2026-10-09 10:22
45.198.224.251	AS215925 Vpsvault.host Ltd	US	SIP	24	2026-10-10 20:33
51.158.204.210	AS12876 Scaleway SAS	NL	SIP	21	2026-10-10 22:19
51.158.201.249	AS12876 Scaleway SAS	NL	SIP	21	2026-10-10 22:19
51.158.205.153	AS12876 Scaleway SAS	NL	SIP	21	2026-10-10 22:19
51.158.202.97	AS12876 Scaleway SAS	NL	SIP	21	2026-10-10 22:19

Latest datagrams

2026-10-11 04:29:5977.110.115.168to 5060/udpSIPUS
INVITE sip:981048525223031@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 77.110.115.168:59389;branch=z9hG4bK1242388120 Max-Forwards: 70 From: <sip:5001@<HONEYPOT>>;tag=91841942 To: <sip:981048525223031@<HON
Payload bytes withheld: they contain the sensor's address.
2026-10-11 04:28:3877.110.115.168to 5060/udpSIPUS
INVITE sip:81048525223031@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 77.110.115.168:54632;branch=z9hG4bK1829788299 Max-Forwards: 70 From: <sip:5001@<HONEYPOT>>;tag=620840648 To: <sip:81048525223031@<HONE
Payload bytes withheld: they contain the sensor's address.
2026-10-11 04:27:1877.110.115.168to 5060/udpSIPUS
INVITE sip:901148525223031@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 77.110.115.168:54327;branch=z9hG4bK2051709496 Max-Forwards: 70 From: <sip:5001@<HONEYPOT>>;tag=1240949019 To: <sip:901148525223031@<H
Payload bytes withheld: they contain the sensor's address.
2026-10-11 04:26:3477.110.115.168to 5060/udpSIPUS
INVITE sip:50048818204112@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 77.110.115.168:62945;branch=z9hG4bK1368535950 Max-Forwards: 70 From: <sip:13216220427@<HONEYPOT>>;tag=1709035853 To: <sip:500488182041
Payload bytes withheld: they contain the sensor's address.
2026-10-11 04:25:5877.110.115.168to 5060/udpSIPUS
INVITE sip:01148525223031@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 77.110.115.168:49967;branch=z9hG4bK117006175 Max-Forwards: 70 From: <sip:5001@<HONEYPOT>>;tag=821619183 To: <sip:01148525223031@<HONEY
Payload bytes withheld: they contain the sensor's address.
2026-10-11 04:24:3977.110.115.168to 5060/udpSIPUS
INVITE sip:048525223031@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 77.110.115.168:49295;branch=z9hG4bK260570906 Max-Forwards: 70 From: <sip:5001@<HONEYPOT>>;tag=1457462092 To: <sip:048525223031@<HONEYPOT
Payload bytes withheld: they contain the sensor's address.
2026-10-11 04:23:2177.110.115.168to 5060/udpSIPUS
INVITE sip:00048525223031@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 77.110.115.168:65106;branch=z9hG4bK1517070137 Max-Forwards: 70 From: <sip:5001@<HONEYPOT>>;tag=705319961 To: <sip:00048525223031@<HONE
Payload bytes withheld: they contain the sensor's address.
2026-10-11 04:22:0077.110.115.168to 5060/udpSIPUS
INVITE sip:90048525223031@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 77.110.115.168:57617;branch=z9hG4bK1200417972 Max-Forwards: 70 From: <sip:5001@<HONEYPOT>>;tag=1230658335 To: <sip:90048525223031@<HON
Payload bytes withheld: they contain the sensor's address.
2026-10-11 04:20:4077.110.115.168to 5060/udpSIPUS
INVITE sip:0048525223031@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 77.110.115.168:58697;branch=z9hG4bK2113998204 Max-Forwards: 70 From: <sip:5001@<HONEYPOT>>;tag=1530876759 To: <sip:0048525223031@<HONEY
Payload bytes withheld: they contain the sensor's address.
2026-10-11 04:19:2077.110.115.168to 5060/udpSIPUS
INVITE sip:48525223031@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 77.110.115.168:52637;branch=z9hG4bK923200204 Max-Forwards: 70 From: <sip:5001@<HONEYPOT>>;tag=1677100820 To: <sip:48525223031@<HONEYPOT>>
Payload bytes withheld: they contain the sensor's address.
2026-10-11 04:17:5977.110.115.168to 5060/udpSIPUS
INVITE sip:+48525223031@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 77.110.115.168:57011;branch=z9hG4bK1647680799 Max-Forwards: 70 From: <sip:5001@<HONEYPOT>>;tag=473507210 To: <sip:+48525223031@<HONEYPOT
Payload bytes withheld: they contain the sensor's address.
2026-10-11 04:16:3177.110.115.168to 5060/udpSIPUS
INVITE sip:80048525223031@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 77.110.115.168:62771;branch=z9hG4bK1221904888 Max-Forwards: 70 From: <sip:4001@<HONEYPOT>>;tag=283925533 To: <sip:80048525223031@<HONE
Payload bytes withheld: they contain the sensor's address.
2026-10-11 04:15:1077.110.115.168to 5060/udpSIPUS
INVITE sip:00148525223031@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 77.110.115.168:53916;branch=z9hG4bK1016222435 Max-Forwards: 70 From: <sip:4001@<HONEYPOT>>;tag=1503173371 To: <sip:00148525223031@<HON
Payload bytes withheld: they contain the sensor's address.
2026-10-11 04:13:5077.110.115.168to 5060/udpSIPUS
INVITE sip:00948525223031@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 77.110.115.168:52239;branch=z9hG4bK1521674050 Max-Forwards: 70 From: <sip:4001@<HONEYPOT>>;tag=1100937460 To: <sip:00948525223031@<HON
Payload bytes withheld: they contain the sensor's address.
2026-10-11 04:12:3077.110.115.168to 5060/udpSIPUS
INVITE sip:981048525223031@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 77.110.115.168:55798;branch=z9hG4bK1330179720 Max-Forwards: 70 From: <sip:4001@<HONEYPOT>>;tag=1722017711 To: <sip:981048525223031@<H
Payload bytes withheld: they contain the sensor's address.