UDP traffic

Datagrams matching asn:53667 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

Other services

6 datagrams from 3 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

SIP 6

Latest SIP datagram, to 5060/udp

OPTIONS sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5065;branch=z9hG4bK-1066721738;rport Content-Length: 0 From: "sipvicious"<sip:100@1.1.1.1>;tag=3137356532356533313363340133373532383534353331 Accept: application/sdp User-Agent: friendly-scanner To: "sipvicious"<sip:100@1.1.1.1> Co

payload bytes

Unrecognised

1 datagrams from 1 source

Datagrams no decoder recognised. Their first bytes are kept.

Unrecognised 1

Latest Unrecognised datagram, to 1027/udp

·.;<Z7n:$ "·!RLHR Z·Jq·%6T"a?3\zo61]pUf·o{·

payload bytes

00000000  10 2e 3b 3c 5a 37 6e 3a  24 09 22 1a 15 21 52 4c  |..;<Z7n:$."..!RL|
00000010  48 52 0d 5a 7f 03 4a 71  1c 25 36 54 22 61 3f 33  |HR.Z..Jq.%6T"a?3|
00000020  5c 7a 6f 36 31 5d 70 55  66 12 6f 7b 1b af        |\zo61]pUf.o{..|

Peer-to-peer

1 datagrams from 1 source

File-sharing clients trying to reach a peer that used one of these addresses before. This is not scanning, so it is left out of every other figure on this page.

BitTorrent 1

Destination ports

5060/udp SIP3
1027/udp1
5064/udp SIP1
5065/udp SIP1
5066/udp SIP1
6881/udp BitTorrent1

Networks

AS53667 FranTech Solutions from 4 sources8

Countries

US United States8

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
198.98.57.120	AS53667 FranTech Solutions	US	SIP	3	2026-10-06 10:49
209.141.51.29	AS53667 FranTech Solutions	US	BitTorrent	2	2026-10-06 01:58
199.195.252.209	AS53667 FranTech Solutions	US	SIP	2	2026-10-06 16:05
198.98.58.74	AS53667 FranTech Solutions	US	SIP	1	2026-10-06 14:31

Latest datagrams

2026-10-06 16:05:47199.195.252.209to 5060/udpSIPUS
OPTIONS sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5065;branch=z9hG4bK-1066721738;rport Content-Length: 0 From: "sipvicious"<sip:100@1.1.1.1>;tag=3137356532356533313363340133373532383534
payload bytes
2026-10-06 14:31:35198.98.58.74to 5060/udpSIPUS
OPTIONS sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5062;branch=z9hG4bK-3936141654;rport Content-Length: 0 From: "sipvicious"<sip:100@1.1.1.1>;tag=6239653435316339313363340136343433333439
payload bytes
2026-10-06 13:27:50199.195.252.209to 5060/udpSIPUS
OPTIONS sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5066;branch=z9hG4bK-3459626731;rport Content-Length: 0 From: "sipvicious"<sip:100@1.1.1.1>;tag=3035616662373834313363340132303435323431
payload bytes
2026-10-06 10:49:56198.98.57.120to 5066/udpSIPUS
REGISTER sip:<HONEYPOT> SIP/2.0 To: <sip:10019854054@<HONEYPOT>> From: <sip:10019854054@<HONEYPOT>>;tag=31368efde Via: SIP/2.0/UDP 198.98.57.120:59567;branch=z9hG4bK-d87543-024700541-1--d87543;rpor
payload bytes
2026-10-06 10:36:01198.98.57.120to 5064/udpSIPUS
REGISTER sip:<HONEYPOT> SIP/2.0 To: <sip:10019854054@<HONEYPOT>> From: <sip:10019854054@<HONEYPOT>>;tag=67c900090 Via: SIP/2.0/UDP 198.98.57.120:61368;branch=z9hG4bK-d87543-189205515-1--d87543;rpor
payload bytes
2026-10-06 10:20:26198.98.57.120to 5065/udpSIPUS
REGISTER sip:<HONEYPOT> SIP/2.0 To: <sip:10019854054@<HONEYPOT>> From: <sip:10019854054@<HONEYPOT>>;tag=660453fe0 Via: SIP/2.0/UDP 198.98.57.120:65456;branch=z9hG4bK-d87543-555580435-1--d87543;rpor
payload bytes

2026-10-06 01:58:57209.141.51.29to 1027/udpUnrecognisedUS

·.;<Z7n:$ "·!RLHR Z·Jq·%6T"a?3\zo61]pUf·o{·

payload bytes

00000000  10 2e 3b 3c 5a 37 6e 3a  24 09 22 1a 15 21 52 4c  |..;<Z7n:$."..!RL|
00000010  48 52 0d 5a 7f 03 4a 71  1c 25 36 54 22 61 3f 33  |HR.Z..Jq.%6T"a?3|
00000020  5c 7a 6f 36 31 5d 70 55  66 12 6f 7b 1b af        |\zo61]pUf.o{..|

2026-10-06 01:40:18209.141.51.29to 6881/udpBitTorrentUS

·.·^·ymHo·QE>hBU·!·\j·CdImy·(·Ds3=`{,cLr!44wQU·-?·G·zh

payload bytes

00000000  04 2e 1c 5e 14 79 6d 48  6f 03 51 45 3e 68 42 55  |...^.ymHo.QE>hBU|
00000010  1d 21 08 5c 6a 00 1a 43  64 49 6d 79 11 1e 28 15  |.!.\j..CdImy..(.|
00000020  1f 44 73 33 3d 60 7b 2c  63 4c 72 21 34 34 77 51  |.Ds3=`{,cLr!44wQ|
00000030  55 7f 2d 3f 7f 47 02 7a  68                       |U.-?.G.zh|