UDP traffic

Datagrams matching ip:198.244.200.163 sent to HoneyLabs sensors over UDP in the last 24 hours. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Datagrams

Source addresses

Networks

Countries

Destination ports

Protocols

sip from 1 source4

Destination ports

5060/udp from 1 source4

Networks

AS16276 OVH SAS from 1 source4

Countries

GB United Kingdom4

Source addresses (unverified)

Address	Network	Cc	Datagrams	Last seen (UTC)
198.244.200.163	AS16276 OVH SAS	GB	4	2026-10-05 17:19

Latest datagrams

2026-10-05 17:19:53198.244.200.163to 5060/udpsipGB
INVITE sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5118;branch=z9hG4bK-1378743462;rport Content-Length: 0 From: "sipvicious"<sip:100@1.1.1.1>;tag=30356166623738343133633401313938323839373
payload bytes
2026-10-05 16:29:11198.244.200.163to 5060/udpsipGB
INVITE sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5111;branch=z9hG4bK-991914996;rport Content-Length: 0 From: "sipvicious"<sip:100@1.1.1.1>;tag=623965343531633931336334013434363439393139
payload bytes
2026-10-05 15:47:25198.244.200.163to 5060/udpsipGB
INVITE sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5306;branch=z9hG4bK-2266814520;rport Content-Length: 0 From: "sipvicious"<sip:100@1.1.1.1>;tag=31373565323565333133633401333739343938373
payload bytes
2026-10-05 15:16:23198.244.200.163to 5060/udpsipGB
INVITE sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5292;branch=z9hG4bK-720719696;rport Content-Length: 0 From: "sipvicious"<sip:100@1.1.1.1>;tag=633030333736393231336334013430323138353137
payload bytes