UDP traffic

Datagrams matching port:25060 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

Other services

41 datagrams from 7 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

SIP 39 Redis 2

Latest SIP datagram, to 25060/udp

INVITE sip:10000@<HONEYPOT>:25060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t3002150683 Via: SIP/2.0/UDP 172.110.223.179:10008;branch=z9hG4bK-3002150683;rport Call-ID: c3002150683 CSeq: 3002150683 INVITE Contact: <sip:10000@172.110.223.179:10008> Max-Forwards: 70 Us

Payload bytes withheld: they contain the sensor's address.

Destination ports

25060/udp SIP41

Networks

AS23470 ReliableSite.Net LLC from 1 source20
AS49870 Alsycon B.V. from 1 source13
AS12876 Scaleway SAS from 1 source4
AS396982 Google LLC from 3 sources3
AS24961 WIIT AG from 1 source1

Countries

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
172.110.223.179	AS23470 ReliableSite.Net LLC	HK	SIP	20	2026-10-11 08:30
160.119.76.127	AS49870 Alsycon B.V.	SC	SIP	13	2026-10-10 19:21
51.158.202.6	AS12876 Scaleway SAS	NL	SIP	4	2026-10-10 22:19
89.163.212.86	AS24961 WIIT AG	DE	Redis	1	2026-10-05 16:28
162.216.150.239	AS396982 Google LLC	US	SIP	1	2026-10-08 17:43
35.203.210.24	AS396982 Google LLC	GB	SIP	1	2026-10-08 20:30
162.216.149.72	AS396982 Google LLC	US	SIP	1	2026-10-09 19:14

Latest datagrams

2026-10-11 08:30:46172.110.223.179to 25060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:25060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t3002150683 Via: SIP/2.0/UDP 172.110.223.179:10008;branch=z9hG4bK-3002150683;rport Call-ID: c3
Payload bytes withheld: they contain the sensor's address.
2026-10-11 08:18:07172.110.223.179to 25060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:25060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t1165868056 Via: SIP/2.0/UDP 172.110.223.179:10063;branch=z9hG4bK-1165868056;rport Call-ID: c1
Payload bytes withheld: they contain the sensor's address.
2026-10-11 07:04:09172.110.223.179to 25060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:25060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t3743583800 Via: SIP/2.0/UDP 172.110.223.179:10051;branch=z9hG4bK-3743583800;rport Call-ID: c3
Payload bytes withheld: they contain the sensor's address.
2026-10-11 04:48:22172.110.223.179to 25060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:25060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t1794191115 Via: SIP/2.0/UDP 172.110.223.179:10015;branch=z9hG4bK-1794191115;rport Call-ID: c1
Payload bytes withheld: they contain the sensor's address.
2026-10-11 04:35:42172.110.223.179to 25060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:25060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t4252875786 Via: SIP/2.0/UDP 172.110.223.179:10016;branch=z9hG4bK-4252875786;rport Call-ID: c4
Payload bytes withheld: they contain the sensor's address.
2026-10-11 03:21:46172.110.223.179to 25060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:25060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t2535624270 Via: SIP/2.0/UDP 172.110.223.179:10008;branch=z9hG4bK-2535624270;rport Call-ID: c2
Payload bytes withheld: they contain the sensor's address.
2026-10-11 01:06:12172.110.223.179to 25060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:25060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t586231573 Via: SIP/2.0/UDP 172.110.223.179:10060;branch=z9hG4bK-586231573;rport Call-ID: c586
Payload bytes withheld: they contain the sensor's address.
2026-10-11 00:53:35172.110.223.179to 25060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:25060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t3044916251 Via: SIP/2.0/UDP 172.110.223.179:10046;branch=z9hG4bK-3044916251;rport Call-ID: c3
Payload bytes withheld: they contain the sensor's address.
2026-10-10 23:39:55172.110.223.179to 25060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:25060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t1327664734 Via: SIP/2.0/UDP 172.110.223.179:10004;branch=z9hG4bK-1327664734;rport Call-ID: c1
Payload bytes withheld: they contain the sensor's address.
2026-10-10 22:19:0751.158.202.6to 25060/udpRedisNL
INFO sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5063;branch=z9hG4bK8b502449 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=5644b641 Call-ID: cf286a7c5853be75 CSeq: 1 INFO Contact:
Payload bytes withheld: they contain the sensor's address.
2026-10-10 22:19:0751.158.202.6to 25060/udpSIPNL
OPTIONS sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5063;branch=z9hG4bK23bc5b33 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=8f018f45 Call-ID: ea28b68801d78f6d CSeq: 1 OPTIONS Con
Payload bytes withheld: they contain the sensor's address.
2026-10-10 22:19:0751.158.202.6to 25060/udpSIPNL
REGISTER sip:<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5063;branch=z9hG4bK6f8b9e21 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=becd215d Call-ID: 5f0553afbba2fd1b CSeq: 1 REGISTER Conta
Payload bytes withheld: they contain the sensor's address.
2026-10-10 22:19:0751.158.202.6to 25060/udpSIPNL
INVITE sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5063;branch=z9hG4bKcadf6107 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=b6b87e05 Call-ID: 3e4dc504326d4c5f CSeq: 1 INVITE Conta
Payload bytes withheld: they contain the sensor's address.
2026-10-10 21:24:20172.110.223.179to 25060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:25060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t3673239311 Via: SIP/2.0/UDP 172.110.223.179:10008;branch=z9hG4bK-3673239311;rport Call-ID: c3
Payload bytes withheld: they contain the sensor's address.
2026-10-10 21:11:44172.110.223.179to 25060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:25060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t1836956686 Via: SIP/2.0/UDP 172.110.223.179:10048;branch=z9hG4bK-1836956686;rport Call-ID: c1
Payload bytes withheld: they contain the sensor's address.