UDP traffic

Datagrams matching port:35060 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

Other services

32 datagrams from 4 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

SIP 30 Redis 2

Latest SIP datagram, to 35060/udp

INVITE sip:10000@<HONEYPOT>:35060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t656576076 Via: SIP/2.0/UDP 172.110.223.179:10023;branch=z9hG4bK-656576076;rport Call-ID: c656576076 CSeq: 656576076 INVITE Contact: <sip:10000@172.110.223.179:10023> Max-Forwards: 70 User-A

Payload bytes withheld: they contain the sensor's address.

Destination ports

35060/udp SIP32

Networks

AS23470 ReliableSite.Net LLC from 1 source21
AS49870 Alsycon B.V. from 1 source6
AS12876 Scaleway SAS from 1 source4
AS24961 WIIT AG from 1 source1

Countries

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
172.110.223.179	AS23470 ReliableSite.Net LLC	HK	SIP	21	2026-10-11 10:46
160.119.76.127	AS49870 Alsycon B.V.	SC	SIP	6	2026-10-10 03:34
51.158.202.6	AS12876 Scaleway SAS	NL	SIP	4	2026-10-10 22:19
193.111.198.244	AS24961 WIIT AG	DE	Redis	1	2026-10-05 16:28

Latest datagrams

2026-10-11 10:46:32172.110.223.179to 35060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:35060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t656576076 Via: SIP/2.0/UDP 172.110.223.179:10023;branch=z9hG4bK-656576076;rport Call-ID: c656
Payload bytes withheld: they contain the sensor's address.
2026-10-11 08:30:46172.110.223.179to 35060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:35060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t3002150685 Via: SIP/2.0/UDP 172.110.223.179:10008;branch=z9hG4bK-3002150685;rport Call-ID: c3
Payload bytes withheld: they contain the sensor's address.
2026-10-11 08:18:07172.110.223.179to 35060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:35060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t1165868069 Via: SIP/2.0/UDP 172.110.223.179:10063;branch=z9hG4bK-1165868069;rport Call-ID: c1
Payload bytes withheld: they contain the sensor's address.
2026-10-11 07:04:09172.110.223.179to 35060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:35060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t3743583813 Via: SIP/2.0/UDP 172.110.223.179:10051;branch=z9hG4bK-3743583813;rport Call-ID: c3
Payload bytes withheld: they contain the sensor's address.
2026-10-11 04:48:22172.110.223.179to 35060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:35060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t1794191128 Via: SIP/2.0/UDP 172.110.223.179:10015;branch=z9hG4bK-1794191128;rport Call-ID: c1
Payload bytes withheld: they contain the sensor's address.
2026-10-11 04:35:42172.110.223.179to 35060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:35060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t4252875794 Via: SIP/2.0/UDP 172.110.223.179:10016;branch=z9hG4bK-4252875794;rport Call-ID: c4
Payload bytes withheld: they contain the sensor's address.
2026-10-11 03:21:46172.110.223.179to 35060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:35060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t2535624278 Via: SIP/2.0/UDP 172.110.223.179:10008;branch=z9hG4bK-2535624278;rport Call-ID: c2
Payload bytes withheld: they contain the sensor's address.
2026-10-11 01:06:12172.110.223.179to 35060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:35060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t586231587 Via: SIP/2.0/UDP 172.110.223.179:10060;branch=z9hG4bK-586231587;rport Call-ID: c586
Payload bytes withheld: they contain the sensor's address.
2026-10-11 00:53:35172.110.223.179to 35060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:35060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t3044916255 Via: SIP/2.0/UDP 172.110.223.179:10046;branch=z9hG4bK-3044916255;rport Call-ID: c3
Payload bytes withheld: they contain the sensor's address.
2026-10-10 23:39:55172.110.223.179to 35060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:35060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t1327664747 Via: SIP/2.0/UDP 172.110.223.179:10004;branch=z9hG4bK-1327664747;rport Call-ID: c1
Payload bytes withheld: they contain the sensor's address.
2026-10-10 22:19:0751.158.202.6to 35060/udpRedisNL
INFO sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5063;branch=z9hG4bKe59a11a6 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=26eb8c05 Call-ID: 160d165a29782fb9 CSeq: 1 INFO Contact:
Payload bytes withheld: they contain the sensor's address.
2026-10-10 22:19:0751.158.202.6to 35060/udpSIPNL
OPTIONS sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5063;branch=z9hG4bK136232e9 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=2a0d6ccc Call-ID: 64425535bd7ffa5d CSeq: 1 OPTIONS Con
Payload bytes withheld: they contain the sensor's address.
2026-10-10 22:19:0751.158.202.6to 35060/udpSIPNL
REGISTER sip:<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5063;branch=z9hG4bK680543df To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=72ce5e98 Call-ID: 8ceb8b8becb1c515 CSeq: 1 REGISTER Conta
Payload bytes withheld: they contain the sensor's address.
2026-10-10 22:19:0751.158.202.6to 35060/udpSIPNL
INVITE sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5063;branch=z9hG4bKf14687ad To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=5e3441e2 Call-ID: 12bf8194f2256425 CSeq: 1 INVITE Conta
Payload bytes withheld: they contain the sensor's address.
2026-10-10 21:24:20172.110.223.179to 35060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:35060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t3673239320 Via: SIP/2.0/UDP 172.110.223.179:10008;branch=z9hG4bK-3673239320;rport Call-ID: c3
Payload bytes withheld: they contain the sensor's address.