UDP traffic

Datagrams matching port:5065 sent to HoneyLabs sensors over UDP in the last 24 hours. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Datagrams

Source addresses

Networks

Countries

Destination ports

Protocols

sip from 1 source1
redis from 1 source1

Destination ports

5065/udp from 2 sources2

Networks

AS24961 WIIT AG from 1 source1
AS23470 ReliableSite.Net LLC from 1 source1

Countries

Source addresses (unverified)

Address	Network	Cc	Datagrams	Last seen (UTC)
185.243.5.10	AS23470 ReliableSite.Net LLC	HK	1	2026-10-05 14:34
89.163.146.51	AS24961 WIIT AG	DE	1	2026-10-05 17:40

Latest datagrams

2026-10-05 17:40:4189.163.146.51to 5065/udpredisDE
INFO sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5060;branch=z9hG4bK78d31e5e To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=64eaefe2 Call-ID: 6fb368e01d16e7d1 CSeq: 1 INFO Contact:
payload bytes
2026-10-05 14:34:53185.243.5.10to 5065/udpsipHK
REGISTER sip:<HONEYPOT>:5065 SIP/2.0 To: <sip:1000@<HONEYPOT>> From: <sip:1000@<HONEYPOT>>;tag=e5f4a9056018270168481EBC Via: SIP/2.0/UDP 185.243.5.10:61838;branch=z9hG4bK-d87543-914182270168482-1--
payload bytes