UDP traffic

Datagrams matching asn:23470 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

1.2K

Datagrams

Source addresses

Networks

Countries

106

Destination ports

Traffic by type

Other services

1,154 datagrams from 10 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

SIP 1,153 TARGUSDATASPEED 1

Latest SIP datagram, to 5059/udp

INVITE sip:10000@<HONEYPOT>:5059 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t1794191089 Via: SIP/2.0/UDP 172.110.223.179:10015;branch=z9hG4bK-1794191089;rport Call-ID: c1794191089 CSeq: 1794191089 INVITE Contact: <sip:10000@172.110.223.179:10015> Max-Forwards: 70 Use

Payload bytes withheld: they contain the sensor's address.

Destination ports

5060/udp SIP616
5059/udp SIP94
15060/udp SIP23
65060/udp SIP17
55060/udp SIP17
45060/udp SIP17
35060/udp SIP17
25060/udp SIP17
5070/udp SIP14
5071/udp SIP13
5072/udp SIP12
5068/udp SIP12

Networks

AS23470 ReliableSite.Net LLC from 10 sources1,154

Countries

HK Hong Kong1,151
US United States3

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
172.110.223.179	AS23470 ReliableSite.Net LLC	HK	SIP	787	2026-10-11 04:48
172.110.223.200	AS23470 ReliableSite.Net LLC	HK	SIP	125	2026-10-11 03:48
172.110.223.188	AS23470 ReliableSite.Net LLC	HK	SIP	68	2026-10-11 04:42
172.110.223.159	AS23470 ReliableSite.Net LLC	HK	SIP	60	2026-10-08 21:49
185.243.5.243	AS23470 ReliableSite.Net LLC	HK	SIP	53	2026-10-05 22:22
172.110.223.192	AS23470 ReliableSite.Net LLC	HK	SIP	44	2026-10-10 23:43
172.110.223.207	AS23470 ReliableSite.Net LLC	HK	SIP	9	2026-10-10 02:22
104.243.40.207	AS23470 ReliableSite.Net LLC	US	SIP	3	2026-10-05 17:40
185.243.5.10	AS23470 ReliableSite.Net LLC	HK	SIP	3	2026-10-10 06:57
185.243.5.164	AS23470 ReliableSite.Net LLC	HK	SIP	2	2026-10-08 20:03

Latest datagrams

2026-10-11 04:48:22172.110.223.179to 5059/udpSIPHK
INVITE sip:10000@<HONEYPOT>:5059 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t1794191089 Via: SIP/2.0/UDP 172.110.223.179:10015;branch=z9hG4bK-1794191089;rport Call-ID: c17
Payload bytes withheld: they contain the sensor's address.
2026-10-11 04:48:22172.110.223.179to 25060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:25060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t1794191115 Via: SIP/2.0/UDP 172.110.223.179:10015;branch=z9hG4bK-1794191115;rport Call-ID: c1
Payload bytes withheld: they contain the sensor's address.
2026-10-11 04:48:22172.110.223.179to 35060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:35060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t1794191128 Via: SIP/2.0/UDP 172.110.223.179:10015;branch=z9hG4bK-1794191128;rport Call-ID: c1
Payload bytes withheld: they contain the sensor's address.
2026-10-11 04:48:22172.110.223.179to 15060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:15060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t1794191104 Via: SIP/2.0/UDP 172.110.223.179:10015;branch=z9hG4bK-1794191104;rport Call-ID: c1
Payload bytes withheld: they contain the sensor's address.
2026-10-11 04:48:22172.110.223.179to 65060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:65060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t1794191211 Via: SIP/2.0/UDP 172.110.223.179:10015;branch=z9hG4bK-1794191211;rport Call-ID: c1
Payload bytes withheld: they contain the sensor's address.
2026-10-11 04:48:22172.110.223.179to 45060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:45060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t1794191137 Via: SIP/2.0/UDP 172.110.223.179:10015;branch=z9hG4bK-1794191137;rport Call-ID: c1
Payload bytes withheld: they contain the sensor's address.
2026-10-11 04:48:22172.110.223.179to 5060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:5060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t1794191074 Via: SIP/2.0/UDP 172.110.223.179:10015;branch=z9hG4bK-1794191074;rport Call-ID: c17
Payload bytes withheld: they contain the sensor's address.
2026-10-11 04:48:22172.110.223.179to 55060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:55060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t1794191200 Via: SIP/2.0/UDP 172.110.223.179:10015;branch=z9hG4bK-1794191200;rport Call-ID: c1
Payload bytes withheld: they contain the sensor's address.
2026-10-11 04:42:25172.110.223.188to 65477/udpSIPHK
INVITE sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 172.110.223.188:5063;branch=z9hG4bK-2160958470;rport Content-Length: 0 From: "sipvicious"<sip:100@1.1.1.1>;tag=63303033373639326666633501333133353
Payload bytes withheld: they contain the sensor's address.
2026-10-11 04:35:42172.110.223.179to 15060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:15060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t4252875779 Via: SIP/2.0/UDP 172.110.223.179:10016;branch=z9hG4bK-4252875779;rport Call-ID: c4
Payload bytes withheld: they contain the sensor's address.
2026-10-11 04:35:42172.110.223.179to 35060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:35060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t4252875794 Via: SIP/2.0/UDP 172.110.223.179:10016;branch=z9hG4bK-4252875794;rport Call-ID: c4
Payload bytes withheld: they contain the sensor's address.
2026-10-11 04:35:42172.110.223.179to 55060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:55060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t4252875809 Via: SIP/2.0/UDP 172.110.223.179:10016;branch=z9hG4bK-4252875809;rport Call-ID: c4
Payload bytes withheld: they contain the sensor's address.
2026-10-11 04:35:42172.110.223.179to 45060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:45060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t4252875803 Via: SIP/2.0/UDP 172.110.223.179:10016;branch=z9hG4bK-4252875803;rport Call-ID: c4
Payload bytes withheld: they contain the sensor's address.
2026-10-11 04:35:42172.110.223.179to 5060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:5060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t4252875762 Via: SIP/2.0/UDP 172.110.223.179:10016;branch=z9hG4bK-4252875762;rport Call-ID: c42
Payload bytes withheld: they contain the sensor's address.
2026-10-11 04:35:42172.110.223.179to 65060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:65060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t4252875817 Via: SIP/2.0/UDP 172.110.223.179:10016;branch=z9hG4bK-4252875817;rport Call-ID: c4
Payload bytes withheld: they contain the sensor's address.