UDP traffic

Datagrams matching asn:24961 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

Other services

81 datagrams from 5 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

Redis 81

Latest Redis datagram, to 5085/udp

INFO sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5060;branch=z9hG4bKa64f5545 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=81203aaf Call-ID: c3445de276d8470b CSeq: 1 INFO Contact: <sip:a@127.0.0.1:5060> Content-Length: 0

Payload bytes withheld: they contain the sensor's address.

Destination ports

1020/udp Redis1
65090/udp Redis1
1022/udp Redis1
1023/udp Redis1
1024/udp Redis1
1025/udp Redis1
1026/udp Redis1
1027/udp Redis1
1028/udp Redis1
1029/udp Redis1
1060/udp Redis1
2060/udp Redis1

Networks

AS24961 WIIT AG from 5 sources81

Countries

DE Germany81

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
89.163.146.51	AS24961 WIIT AG	DE	Redis	17	2026-10-05 17:40
89.163.239.201	AS24961 WIIT AG	DE	Redis	16	2026-10-05 16:27
89.163.212.86	AS24961 WIIT AG	DE	Redis	16	2026-10-05 16:28
193.111.198.241	AS24961 WIIT AG	DE	Redis	16	2026-10-05 16:27
193.111.198.244	AS24961 WIIT AG	DE	Redis	16	2026-10-05 16:28

Latest datagrams

2026-10-05 17:40:4189.163.146.51to 1029/udpRedisDE
INFO sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5060;branch=z9hG4bK82e1072d To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=a186ae63 Call-ID: 38ecc7c4d3d11445 CSeq: 1 INFO Contact:
Payload bytes withheld: they contain the sensor's address.
2026-10-05 17:40:4189.163.146.51to 65090/udpRedisDE
INFO sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5060;branch=z9hG4bK564c4250 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=18124ed4 Call-ID: 90616cb968362c08 CSeq: 1 INFO Contact:
Payload bytes withheld: they contain the sensor's address.
2026-10-05 17:40:4189.163.146.51to 5085/udpRedisDE
INFO sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5060;branch=z9hG4bKa64f5545 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=81203aaf Call-ID: c3445de276d8470b CSeq: 1 INFO Contact:
Payload bytes withheld: they contain the sensor's address.
2026-10-05 17:40:4189.163.146.51to 1020/udpRedisDE
INFO sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5060;branch=z9hG4bK458a5fb7 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=31f046c8 Call-ID: 43b8da7f51f95f49 CSeq: 1 INFO Contact:
Payload bytes withheld: they contain the sensor's address.
2026-10-05 17:40:4189.163.146.51to 25080/udpRedisDE
INFO sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5060;branch=z9hG4bK7f3d78b To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=d830b2e4 Call-ID: 858cb469ed7e4e96 CSeq: 1 INFO Contact: <
Payload bytes withheld: they contain the sensor's address.
2026-10-05 17:40:4189.163.146.51to 45060/udpRedisDE
INFO sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5060;branch=z9hG4bK83ef43ec To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=c193e66b Call-ID: 5b0ca95de6b7a526 CSeq: 1 INFO Contact:
Payload bytes withheld: they contain the sensor's address.
2026-10-05 17:40:4189.163.146.51to 5065/udpRedisDE
INFO sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5060;branch=z9hG4bK78d31e5e To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=64eaefe2 Call-ID: 6fb368e01d16e7d1 CSeq: 1 INFO Contact:
Payload bytes withheld: they contain the sensor's address.
2026-10-05 17:40:4189.163.146.51to 35070/udpRedisDE
INFO sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5060;branch=z9hG4bK1b0bd6d1 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=856a553c Call-ID: 41bb88dd0ea3b67 CSeq: 1 INFO Contact: <
Payload bytes withheld: they contain the sensor's address.
2026-10-05 17:40:4189.163.146.51to 5060/udpRedisDE
INFO sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5060;branch=z9hG4bKcd79fcdb To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=cec359e2 Call-ID: 89d0f05f18747ca2 CSeq: 1 INFO Contact:
Payload bytes withheld: they contain the sensor's address.
2026-10-05 17:40:4189.163.146.51to 5090/udpRedisDE
INFO sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5060;branch=z9hG4bK5e78adf8 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=ec1622a3 Call-ID: d17b9092d54d311a CSeq: 1 INFO Contact:
Payload bytes withheld: they contain the sensor's address.
2026-10-05 17:40:4189.163.146.51to 1060/udpRedisDE
INFO sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5060;branch=z9hG4bKcc622af To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=7956e52a Call-ID: d6d184d65ee80e73 CSeq: 1 INFO Contact: <
Payload bytes withheld: they contain the sensor's address.
2026-10-05 17:40:4189.163.146.51to 5080/udpRedisDE
INFO sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5060;branch=z9hG4bK11481d4d To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=9eaa7e37 Call-ID: ede40ecfc0bad2e8 CSeq: 1 INFO Contact:
Payload bytes withheld: they contain the sensor's address.
2026-10-05 17:40:4189.163.146.51to 15090/udpRedisDE
INFO sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5060;branch=z9hG4bKb3858f14 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=c077c10a Call-ID: 57ab040b5af2ea81 CSeq: 1 INFO Contact:
Payload bytes withheld: they contain the sensor's address.
2026-10-05 17:40:4189.163.146.51to 7060/udpRedisDE
INFO sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5060;branch=z9hG4bK44bc2ae4 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=6b016bb1 Call-ID: 2382f9d7a8784260 CSeq: 1 INFO Contact:
Payload bytes withheld: they contain the sensor's address.
2026-10-05 17:40:4189.163.146.51to 5095/udpRedisDE
INFO sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5060;branch=z9hG4bK2bb3322a To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=a0f19ece Call-ID: 3ae078b3665ec626 CSeq: 1 INFO Contact:
Payload bytes withheld: they contain the sensor's address.