UDP traffic

Datagrams matching port:55060 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

Other services

24 datagrams from 4 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

SIP 22 Redis 2

Latest SIP datagram, to 55060/udp

INVITE sip:10000@<HONEYPOT>:55060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t2535624295 Via: SIP/2.0/UDP 172.110.223.179:10008;branch=z9hG4bK-2535624295;rport Call-ID: c2535624295 CSeq: 2535624295 INVITE Contact: <sip:10000@172.110.223.179:10008> Max-Forwards: 70 Us

Payload bytes withheld: they contain the sensor's address.

Destination ports

55060/udp SIP24

Networks

AS23470 ReliableSite.Net LLC from 1 source15
AS12876 Scaleway SAS from 1 source4
AS49870 Alsycon B.V. from 1 source4
AS24961 WIIT AG from 1 source1

Countries

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
172.110.223.179	AS23470 ReliableSite.Net LLC	HK	SIP	15	2026-10-11 03:21
51.158.202.6	AS12876 Scaleway SAS	NL	SIP	4	2026-10-10 22:19
160.119.76.127	AS49870 Alsycon B.V.	SC	SIP	4	2026-10-08 14:56
193.111.198.241	AS24961 WIIT AG	DE	Redis	1	2026-10-05 16:27

Latest datagrams

2026-10-11 03:21:46172.110.223.179to 55060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:55060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t2535624295 Via: SIP/2.0/UDP 172.110.223.179:10008;branch=z9hG4bK-2535624295;rport Call-ID: c2
Payload bytes withheld: they contain the sensor's address.
2026-10-11 01:06:12172.110.223.179to 55060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:55060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t586231615 Via: SIP/2.0/UDP 172.110.223.179:10060;branch=z9hG4bK-586231615;rport Call-ID: c586
Payload bytes withheld: they contain the sensor's address.
2026-10-11 00:53:35172.110.223.179to 55060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:55060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t3044916264 Via: SIP/2.0/UDP 172.110.223.179:10046;branch=z9hG4bK-3044916264;rport Call-ID: c3
Payload bytes withheld: they contain the sensor's address.
2026-10-10 23:39:55172.110.223.179to 55060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:55060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t1327664772 Via: SIP/2.0/UDP 172.110.223.179:10004;branch=z9hG4bK-1327664772;rport Call-ID: c1
Payload bytes withheld: they contain the sensor's address.
2026-10-10 22:19:0751.158.202.6to 55060/udpRedisNL
INFO sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5063;branch=z9hG4bKce023bf2 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=94648305 Call-ID: 716f0f4f28d1d883 CSeq: 1 INFO Contact:
Payload bytes withheld: they contain the sensor's address.
2026-10-10 22:19:0751.158.202.6to 55060/udpSIPNL
OPTIONS sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5063;branch=z9hG4bK9c7b8fd5 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=454e2d8a Call-ID: 8fa1c7dc5c8a2b43 CSeq: 1 OPTIONS Con
Payload bytes withheld: they contain the sensor's address.
2026-10-10 22:19:0751.158.202.6to 55060/udpSIPNL
REGISTER sip:<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5063;branch=z9hG4bKcfc6de37 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=c6be3e4b Call-ID: e2a68bb5dd5c9351 CSeq: 1 REGISTER Conta
Payload bytes withheld: they contain the sensor's address.
2026-10-10 22:19:0751.158.202.6to 55060/udpSIPNL
INVITE sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5063;branch=z9hG4bK2f305a56 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=94f66f62 Call-ID: fec8ae58fa9bb0f7 CSeq: 1 INVITE Conta
Payload bytes withheld: they contain the sensor's address.
2026-10-10 21:24:20172.110.223.179to 55060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:55060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t3673239342 Via: SIP/2.0/UDP 172.110.223.179:10008;branch=z9hG4bK-3673239342;rport Call-ID: c3
Payload bytes withheld: they contain the sensor's address.
2026-10-10 21:11:44172.110.223.179to 55060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:55060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t1836956718 Via: SIP/2.0/UDP 172.110.223.179:10048;branch=z9hG4bK-1836956718;rport Call-ID: c1
Payload bytes withheld: they contain the sensor's address.
2026-10-10 18:11:31172.110.223.179to 55060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:55060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t2807687758 Via: SIP/2.0/UDP 172.110.223.179:10044;branch=z9hG4bK-2807687758;rport Call-ID: c2
Payload bytes withheld: they contain the sensor's address.
2026-10-10 13:23:53172.110.223.179to 55060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:55060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t1345643248 Via: SIP/2.0/UDP 172.110.223.179:10056;branch=z9hG4bK-1345643248;rport Call-ID: c1
Payload bytes withheld: they contain the sensor's address.
2026-10-10 12:56:16172.110.223.179to 55060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:55060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t4263398602 Via: SIP/2.0/UDP 172.110.223.179:10007;branch=z9hG4bK-4263398602;rport Call-ID: c4
Payload bytes withheld: they contain the sensor's address.
2026-10-10 10:21:10172.110.223.179to 55060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:55060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t827976263 Via: SIP/2.0/UDP 172.110.223.179:10012;branch=z9hG4bK-827976263;rport Call-ID: c827
Payload bytes withheld: they contain the sensor's address.
2026-10-10 05:33:31172.110.223.179to 55060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:55060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t3660899027 Via: SIP/2.0/UDP 172.110.223.179:10033;branch=z9hG4bK-3660899027;rport Call-ID: c3
Payload bytes withheld: they contain the sensor's address.