UDP traffic

Datagrams matching asn:23470 sent to HoneyLabs sensors over UDP in the last 24 hours. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

197

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

Other services

197 datagrams from 4 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

SIP 196 TARGUSDATASPEED 1

Latest SIP datagram, to 5060/udp

INVITE sip:10000@<HONEYPOT>:5060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t3002150672 Via: SIP/2.0/UDP 172.110.223.179:10008;branch=z9hG4bK-3002150672;rport Call-ID: c3002150672 CSeq: 3002150672 INVITE Contact: <sip:10000@172.110.223.179:10008> Max-Forwards: 70 Use

Payload bytes withheld: they contain the sensor's address.

Destination ports

5060/udp SIP28
65060/udp SIP15
55060/udp SIP15
45060/udp SIP15
35060/udp SIP15
25060/udp SIP15
15060/udp SIP15
5059/udp SIP11
65476/udp SIP3
65477/udp SIP3
5067/udp SIP2
5076/udp SIP2

Networks

AS23470 ReliableSite.Net LLC from 4 sources197

Countries

HK Hong Kong197

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
172.110.223.179	AS23470 ReliableSite.Net LLC	HK	SIP	132	2026-10-11 08:30
172.110.223.192	AS23470 ReliableSite.Net LLC	HK	SIP	44	2026-10-10 23:43
172.110.223.200	AS23470 ReliableSite.Net LLC	HK	SIP	14	2026-10-11 07:43
172.110.223.188	AS23470 ReliableSite.Net LLC	HK	SIP	7	2026-10-11 04:42

Latest datagrams

2026-10-11 08:30:46172.110.223.179to 55060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:55060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t3002150692 Via: SIP/2.0/UDP 172.110.223.179:10008;branch=z9hG4bK-3002150692;rport Call-ID: c3
Payload bytes withheld: they contain the sensor's address.
2026-10-11 08:30:46172.110.223.179to 5059/udpSIPHK
INVITE sip:10000@<HONEYPOT>:5059 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t3002150676 Via: SIP/2.0/UDP 172.110.223.179:10008;branch=z9hG4bK-3002150676;rport Call-ID: c30
Payload bytes withheld: they contain the sensor's address.
2026-10-11 08:30:46172.110.223.179to 15060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:15060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t3002150678 Via: SIP/2.0/UDP 172.110.223.179:10008;branch=z9hG4bK-3002150678;rport Call-ID: c3
Payload bytes withheld: they contain the sensor's address.
2026-10-11 08:30:46172.110.223.179to 65060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:65060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t3002150695 Via: SIP/2.0/UDP 172.110.223.179:10008;branch=z9hG4bK-3002150695;rport Call-ID: c3
Payload bytes withheld: they contain the sensor's address.
2026-10-11 08:30:46172.110.223.179to 35060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:35060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t3002150685 Via: SIP/2.0/UDP 172.110.223.179:10008;branch=z9hG4bK-3002150685;rport Call-ID: c3
Payload bytes withheld: they contain the sensor's address.
2026-10-11 08:30:46172.110.223.179to 25060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:25060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t3002150683 Via: SIP/2.0/UDP 172.110.223.179:10008;branch=z9hG4bK-3002150683;rport Call-ID: c3
Payload bytes withheld: they contain the sensor's address.
2026-10-11 08:30:46172.110.223.179to 5060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:5060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t3002150672 Via: SIP/2.0/UDP 172.110.223.179:10008;branch=z9hG4bK-3002150672;rport Call-ID: c30
Payload bytes withheld: they contain the sensor's address.
2026-10-11 08:30:46172.110.223.179to 45060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:45060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t3002150689 Via: SIP/2.0/UDP 172.110.223.179:10008;branch=z9hG4bK-3002150689;rport Call-ID: c3
Payload bytes withheld: they contain the sensor's address.
2026-10-11 08:18:07172.110.223.179to 25060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:25060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t1165868056 Via: SIP/2.0/UDP 172.110.223.179:10063;branch=z9hG4bK-1165868056;rport Call-ID: c1
Payload bytes withheld: they contain the sensor's address.
2026-10-11 08:18:07172.110.223.179to 35060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:35060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t1165868069 Via: SIP/2.0/UDP 172.110.223.179:10063;branch=z9hG4bK-1165868069;rport Call-ID: c1
Payload bytes withheld: they contain the sensor's address.
2026-10-11 08:18:07172.110.223.179to 5059/udpSIPHK
INVITE sip:10000@<HONEYPOT>:5059 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t1165868031 Via: SIP/2.0/UDP 172.110.223.179:10063;branch=z9hG4bK-1165868031;rport Call-ID: c11
Payload bytes withheld: they contain the sensor's address.
2026-10-11 08:18:07172.110.223.179to 65060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:65060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t1165868102 Via: SIP/2.0/UDP 172.110.223.179:10063;branch=z9hG4bK-1165868102;rport Call-ID: c1
Payload bytes withheld: they contain the sensor's address.
2026-10-11 08:18:07172.110.223.179to 55060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:55060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t1165868090 Via: SIP/2.0/UDP 172.110.223.179:10063;branch=z9hG4bK-1165868090;rport Call-ID: c1
Payload bytes withheld: they contain the sensor's address.
2026-10-11 08:18:07172.110.223.179to 45060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:45060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t1165868078 Via: SIP/2.0/UDP 172.110.223.179:10063;branch=z9hG4bK-1165868078;rport Call-ID: c1
Payload bytes withheld: they contain the sensor's address.
2026-10-11 08:18:07172.110.223.179to 15060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:15060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t1165868042 Via: SIP/2.0/UDP 172.110.223.179:10063;branch=z9hG4bK-1165868042;rport Call-ID: c1
Payload bytes withheld: they contain the sensor's address.