UDP traffic

Datagrams matching port:15060 sent to HoneyLabs sensors over UDP in the last 24 hours. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

Other services

22 datagrams from 4 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

SIP 21 Redis 1

Latest SIP datagram, to 15060/udp

INVITE sip:10000@<HONEYPOT>:15060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t3002150678 Via: SIP/2.0/UDP 172.110.223.179:10008;branch=z9hG4bK-3002150678;rport Call-ID: c3002150678 CSeq: 3002150678 INVITE Contact: <sip:10000@172.110.223.179:10008> Max-Forwards: 70 Us

Payload bytes withheld: they contain the sensor's address.

Destination ports

15060/udp SIP22

Networks

AS23470 ReliableSite.Net LLC from 1 source15
AS12876 Scaleway SAS from 1 source4
AS49870 Alsycon B.V. from 1 source2
AS396982 Google LLC from 1 source1

Countries

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
172.110.223.179	AS23470 ReliableSite.Net LLC	HK	SIP	15	2026-10-11 08:30
51.158.202.6	AS12876 Scaleway SAS	NL	SIP	4	2026-10-10 22:19
160.119.76.127	AS49870 Alsycon B.V.	SC	SIP	2	2026-10-10 19:21
35.203.211.118	AS396982 Google LLC	GB	SIP	1	2026-10-11 07:16

Latest datagrams

2026-10-11 08:30:46172.110.223.179to 15060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:15060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t3002150678 Via: SIP/2.0/UDP 172.110.223.179:10008;branch=z9hG4bK-3002150678;rport Call-ID: c3
Payload bytes withheld: they contain the sensor's address.
2026-10-11 08:18:07172.110.223.179to 15060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:15060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t1165868042 Via: SIP/2.0/UDP 172.110.223.179:10063;branch=z9hG4bK-1165868042;rport Call-ID: c1
Payload bytes withheld: they contain the sensor's address.
2026-10-11 07:16:4235.203.211.118to 15060/udpSIPGB
OPTIONS sip:RECQqpJw@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 10.154.1.118:56880;branch=LHuBxs.8634091427;rport;alias From: sip:HzeMkmot@10.154.1.118:56880;tag=77392728 To: sip:zcJjVipd@<HONEYPOT> Call
Payload bytes withheld: they contain the sensor's address.
2026-10-11 07:04:09172.110.223.179to 15060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:15060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t3743583771 Via: SIP/2.0/UDP 172.110.223.179:10051;branch=z9hG4bK-3743583771;rport Call-ID: c3
Payload bytes withheld: they contain the sensor's address.
2026-10-11 04:48:22172.110.223.179to 15060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:15060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t1794191104 Via: SIP/2.0/UDP 172.110.223.179:10015;branch=z9hG4bK-1794191104;rport Call-ID: c1
Payload bytes withheld: they contain the sensor's address.
2026-10-11 04:35:42172.110.223.179to 15060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:15060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t4252875779 Via: SIP/2.0/UDP 172.110.223.179:10016;branch=z9hG4bK-4252875779;rport Call-ID: c4
Payload bytes withheld: they contain the sensor's address.
2026-10-11 03:21:46172.110.223.179to 15060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:15060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t2535624261 Via: SIP/2.0/UDP 172.110.223.179:10008;branch=z9hG4bK-2535624261;rport Call-ID: c2
Payload bytes withheld: they contain the sensor's address.
2026-10-11 01:06:12172.110.223.179to 15060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:15060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t586231559 Via: SIP/2.0/UDP 172.110.223.179:10060;branch=z9hG4bK-586231559;rport Call-ID: c586
Payload bytes withheld: they contain the sensor's address.
2026-10-11 00:53:35172.110.223.179to 15060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:15060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t3044916245 Via: SIP/2.0/UDP 172.110.223.179:10046;branch=z9hG4bK-3044916245;rport Call-ID: c3
Payload bytes withheld: they contain the sensor's address.
2026-10-10 23:39:55172.110.223.179to 15060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:15060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t1327664717 Via: SIP/2.0/UDP 172.110.223.179:10004;branch=z9hG4bK-1327664717;rport Call-ID: c1
Payload bytes withheld: they contain the sensor's address.
2026-10-10 22:19:0751.158.202.6to 15060/udpRedisNL
INFO sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5063;branch=z9hG4bKf90bc007 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=84873647 Call-ID: 9a3ef70fc07dcc5f CSeq: 1 INFO Contact:
Payload bytes withheld: they contain the sensor's address.
2026-10-10 22:19:0751.158.202.6to 15060/udpSIPNL
OPTIONS sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5063;branch=z9hG4bK4498e9b8 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=23cab66b Call-ID: 13fafd826d5d49eb CSeq: 1 OPTIONS Con
Payload bytes withheld: they contain the sensor's address.
2026-10-10 22:19:0751.158.202.6to 15060/udpSIPNL
REGISTER sip:<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5063;branch=z9hG4bKfc758fb4 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=544e09ab Call-ID: d553236c5863d9c7 CSeq: 1 REGISTER Conta
Payload bytes withheld: they contain the sensor's address.
2026-10-10 22:19:0751.158.202.6to 15060/udpSIPNL
INVITE sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5063;branch=z9hG4bKb1640246 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=d6ca9bc2 Call-ID: 5d64dfe760a19f78 CSeq: 1 INVITE Conta
Payload bytes withheld: they contain the sensor's address.
2026-10-10 21:24:20172.110.223.179to 15060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:15060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t3673239302 Via: SIP/2.0/UDP 172.110.223.179:10008;branch=z9hG4bK-3673239302;rport Call-ID: c3
Payload bytes withheld: they contain the sensor's address.