UDP traffic

Datagrams matching port:65060 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Your plan searches up to 7d, so 30d was shortened. Plans

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

Other services

25 datagrams from 3 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

SIP 23 Redis 2

Latest SIP datagram, to 65060/udp

INVITE sip:10000@<HONEYPOT>:65060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t3002150695 Via: SIP/2.0/UDP 172.110.223.179:10008;branch=z9hG4bK-3002150695;rport Call-ID: c3002150695 CSeq: 3002150695 INVITE Contact: <sip:10000@172.110.223.179:10008> Max-Forwards: 70 Us

Payload bytes withheld: they contain the sensor's address.

Destination ports

65060/udp SIP25

Networks

AS23470 ReliableSite.Net LLC from 1 source20
AS12876 Scaleway SAS from 1 source4
AS24961 WIIT AG from 1 source1

Countries

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
172.110.223.179	AS23470 ReliableSite.Net LLC	HK	SIP	20	2026-10-11 08:30
51.158.202.97	AS12876 Scaleway SAS	NL	SIP	4	2026-10-10 22:19
89.163.239.201	AS24961 WIIT AG	DE	Redis	1	2026-10-05 16:27

Latest datagrams

2026-10-11 08:30:46172.110.223.179to 65060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:65060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t3002150695 Via: SIP/2.0/UDP 172.110.223.179:10008;branch=z9hG4bK-3002150695;rport Call-ID: c3
Payload bytes withheld: they contain the sensor's address.
2026-10-11 08:18:07172.110.223.179to 65060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:65060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t1165868102 Via: SIP/2.0/UDP 172.110.223.179:10063;branch=z9hG4bK-1165868102;rport Call-ID: c1
Payload bytes withheld: they contain the sensor's address.
2026-10-11 07:04:09172.110.223.179to 65060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:65060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t3743583860 Via: SIP/2.0/UDP 172.110.223.179:10051;branch=z9hG4bK-3743583860;rport Call-ID: c3
Payload bytes withheld: they contain the sensor's address.
2026-10-11 04:48:22172.110.223.179to 65060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:65060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t1794191211 Via: SIP/2.0/UDP 172.110.223.179:10015;branch=z9hG4bK-1794191211;rport Call-ID: c1
Payload bytes withheld: they contain the sensor's address.
2026-10-11 04:35:42172.110.223.179to 65060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:65060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t4252875817 Via: SIP/2.0/UDP 172.110.223.179:10016;branch=z9hG4bK-4252875817;rport Call-ID: c4
Payload bytes withheld: they contain the sensor's address.
2026-10-11 03:21:46172.110.223.179to 65060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:65060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t2535624303 Via: SIP/2.0/UDP 172.110.223.179:10008;branch=z9hG4bK-2535624303;rport Call-ID: c2
Payload bytes withheld: they contain the sensor's address.
2026-10-11 01:06:12172.110.223.179to 65060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:65060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t586231629 Via: SIP/2.0/UDP 172.110.223.179:10060;branch=z9hG4bK-586231629;rport Call-ID: c586
Payload bytes withheld: they contain the sensor's address.
2026-10-11 00:53:35172.110.223.179to 65060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:65060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t3044916267 Via: SIP/2.0/UDP 172.110.223.179:10046;branch=z9hG4bK-3044916267;rport Call-ID: c3
Payload bytes withheld: they contain the sensor's address.
2026-10-10 23:39:55172.110.223.179to 65060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:65060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t1327664784 Via: SIP/2.0/UDP 172.110.223.179:10004;branch=z9hG4bK-1327664784;rport Call-ID: c1
Payload bytes withheld: they contain the sensor's address.
2026-10-10 22:19:0451.158.202.97to 65060/udpRedisNL
INFO sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5062;branch=z9hG4bKac2dcda9 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=e157dc72 Call-ID: 2a7bec8a7c83ffd6 CSeq: 1 INFO Contact:
Payload bytes withheld: they contain the sensor's address.
2026-10-10 22:19:0451.158.202.97to 65060/udpSIPNL
OPTIONS sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5062;branch=z9hG4bK36fe4d94 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=b2ac540f Call-ID: 4adee78826782f4a CSeq: 1 OPTIONS Con
Payload bytes withheld: they contain the sensor's address.
2026-10-10 22:19:0451.158.202.97to 65060/udpSIPNL
REGISTER sip:<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5062;branch=z9hG4bK8bbbf179 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=efc9f8db Call-ID: 23e538eb6693ef67 CSeq: 1 REGISTER Conta
Payload bytes withheld: they contain the sensor's address.
2026-10-10 22:19:0451.158.202.97to 65060/udpSIPNL
INVITE sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5062;branch=z9hG4bKbb564911 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=951681c3 Call-ID: a16fc59bd0a73dea CSeq: 1 INVITE Conta
Payload bytes withheld: they contain the sensor's address.
2026-10-10 21:24:20172.110.223.179to 65060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:65060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t3673239393 Via: SIP/2.0/UDP 172.110.223.179:10008;branch=z9hG4bK-3673239393;rport Call-ID: c3
Payload bytes withheld: they contain the sensor's address.
2026-10-10 21:11:44172.110.223.179to 65060/udpSIPHK
INVITE sip:10000@<HONEYPOT>:65060 SIP/2.0 To: <sip:10000@<HONEYPOT>> From: <sip:10000@<HONEYPOT>>;tag=t1836956729 Via: SIP/2.0/UDP 172.110.223.179:10048;branch=z9hG4bK-1836956729;rport Call-ID: c1
Payload bytes withheld: they contain the sensor's address.