UDP traffic

Datagrams matching proto:redis sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Your plan searches up to 7d, so 30d was shortened. Plans

150

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

Other services

150 datagrams from 35 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

Redis 150

Latest Redis datagram, to 1604/udp

*·2·!·

payload bytes

00000000  2a 00 01 32 02 fd a8 e3  00 00 00 00 00 00 00 00  |*..2............|
00000010  00 00 00 00 00 00 00 00  00 00 00 00 21 00 02 00  |............!...|
00000020  00 00 00 00 00 00 00 00  00 00                    |..........|

Destination ports

1604/udp Redis16
5060/udp Redis12
5080/udp Redis6
8082/udp Redis3
1021/udp Redis2
65060/udp Redis2
1022/udp Redis2
1023/udp Redis2
1024/udp Redis2
1025/udp Redis2
1026/udp Redis2
1027/udp Redis2

Networks

AS24961 WIIT AG from 5 sources81
AS12876 Scaleway SAS from 5 sources39
AS20052 Arbor Networks, Inc. from 4 sources8
AS21859 Zenlayer Inc from 3 sources3
AS14061 DigitalOcean, LLC from 2 sources2
AS198545 Flex Network Sarl from 1 source2
AS34977 Procono S.A. from 1 source1
AS13999 Mega Cable, S.A. de C.V. from 1 source1
AS12989 Black HOST Ltd from 1 source1
AS28573 Claro NXT Telecomunicacoes Ltda from 1 source1

Countries

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
89.163.146.51	AS24961 WIIT AG	DE	Redis	17	2026-10-05 17:40
193.111.198.244	AS24961 WIIT AG	DE	Redis	16	2026-10-05 16:28
89.163.212.86	AS24961 WIIT AG	DE	Redis	16	2026-10-05 16:28
193.111.198.241	AS24961 WIIT AG	DE	Redis	16	2026-10-05 16:27
89.163.239.201	AS24961 WIIT AG	DE	Redis	16	2026-10-05 16:27
51.158.202.97	AS12876 Scaleway SAS	NL	Redis	9	2026-10-10 22:19
51.158.202.6	AS12876 Scaleway SAS	NL	Redis	9	2026-10-10 22:19
51.158.204.210	AS12876 Scaleway SAS	NL	Redis	7	2026-10-10 22:19
51.158.201.249	AS12876 Scaleway SAS	NL	Redis	7	2026-10-10 22:19
51.158.205.153	AS12876 Scaleway SAS	NL	Redis	7	2026-10-10 22:19
146.88.241.40	AS20052 Arbor Networks, Inc.	US	Redis	3	2026-10-10 06:16
146.88.241.150	AS20052 Arbor Networks, Inc.	US	Redis	2	2026-10-07 17:20
217.71.127.125	AS198545 Flex Network Sarl	FR	Redis	2	2026-10-10 23:27
146.88.241.70	AS20052 Arbor Networks, Inc.	US	Redis	2	2026-10-10 05:47
165.227.238.235	AS14061 DigitalOcean, LLC	GB	Redis	1	2026-10-07 01:27
47.164.76.54	AS5650 Frontier Communications of America, Inc.	US	Redis	1	2026-10-10 15:18
168.121.99.62	AS265317 TRIXNET SERVICOS DE TELEINFORMATICA LTDA	BR	Redis	1	2026-10-07 05:23
109.105.210.62	AS21859 Zenlayer Inc	PT	Redis	1	2026-10-09 08:14
179.235.56.96	AS28573 Claro NXT Telecomunicacoes Ltda	BR	Redis	1	2026-10-07 21:37
77.222.7.253	AS8585 Crnogorski Telekom a.d.Podgorica	ME	Redis	1	2026-10-06 13:38

Latest datagrams

2026-10-11 06:39:34176.65.149.188to 1604/udpRedisNL

*·2·!·

payload bytes

00000000  2a 00 01 32 02 fd a8 e3  00 00 00 00 00 00 00 00  |*..2............|
00000010  00 00 00 00 00 00 00 00  00 00 00 00 21 00 02 00  |............!...|
00000020  00 00 00 00 00 00 00 00  00 00                    |..........|

2026-10-11 06:09:1038.99.239.208to 8082/udpRedisUS
$.+Qd6(Q8E"·${·
payload bytes
```
00000000  24 2e 2b 51 64 36 28 51  38 45 22 0c 24 7b b6 99  |$.+Qd6(Q8E".${..|
```

2026-10-11 02:32:24207.241.172.146to 8082/udpRedisDE

$.I·X$·K·%·3}q·{QG·}=t$T·z`t~·/G·k·S·

payload bytes

00000000  24 2e 49 02 58 24 07 4b  06 25 17 0e 33 7d 71 02  |$.I.X$.K.%..3}q.|
00000010  7b 51 47 11 19 7d 3d 74  24 54 19 7a 60 74 7e 04  |{QG..}=t$T.z`t~.|
00000020  2f 47 07 08 6b 0e 53 1c  0c                       |/G..k.S..|

2026-10-10 23:27:10217.71.127.125to 8082/udpRedisFR

$.&"R·)jTiC]·@l58WI`·=S· +!·#-·Gd<i6M· !{d·$kD\B <YK·sX;·t^B &&G·\·"}6·a5,· pbc}·<H./!iD·H· n·

payload bytes

00000000  24 2e 26 22 52 11 29 6a  54 69 43 5d 13 40 6c 35  |$.&"R.)jTiC].@l5|
00000010  38 57 49 60 16 3d 53 1a  0d 2b 21 1c 23 2d 16 47  |8WI`.=S..+!.#-.G|
00000020  64 3c 69 36 4d 12 20 21  7b 64 7f 0e 24 6b 44 5c  |d<i6M. !{d..$kD\|
00000030  42 0d 3c 59 4b 10 73 58  3b 14 74 5e 42 0a 26 26  |B.<YK.sX;.t^B.&&|
00000040  47 0f 5c 14 22 7d 36 1d  61 35 2c 05 20 70 62 63  |G.\."}6.a5,. pbc|
00000050  7d 1e 3c 48 2e 2f 21 69  44 15 48 06 20 6e cb 1e  |}.<H./!iD.H. n..|

2026-10-10 22:19:1151.158.205.153to 5080/udpRedisNL
INFO sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5063;branch=z9hG4bK91b72881 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=116e4690 Call-ID: e20edf2c39a6478e CSeq: 1 INFO Contact:
Payload bytes withheld: they contain the sensor's address.
2026-10-10 22:19:1151.158.205.153to 5060/udpRedisNL
INFO sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5063;branch=z9hG4bKbc2c5483 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=5b054cea Call-ID: 10de2077bf9d146b CSeq: 1 INFO Contact:
Payload bytes withheld: they contain the sensor's address.
2026-10-10 22:19:1151.158.205.153to 5090/udpRedisNL
INFO sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5063;branch=z9hG4bKe7f25337 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=666d9a51 Call-ID: e94a5bb3730cbac2 CSeq: 1 INFO Contact:
Payload bytes withheld: they contain the sensor's address.
2026-10-10 22:19:1151.158.205.153to 5010/udpRedisNL
INFO sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5063;branch=z9hG4bKdde2291a To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=460ebc8 Call-ID: c553d873c43d1928 CSeq: 1 INFO Contact: <
Payload bytes withheld: they contain the sensor's address.
2026-10-10 22:19:1151.158.205.153to 5070/udpRedisNL
INFO sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5063;branch=z9hG4bKa9d526ee To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=7d54f723 Call-ID: 156e57905a701642 CSeq: 1 INFO Contact:
Payload bytes withheld: they contain the sensor's address.
2026-10-10 22:19:0951.158.204.210to 5030/udpRedisNL
INFO sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5061;branch=z9hG4bK83ae31da To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=c36c5b39 Call-ID: 240d02b1ac3119a9 CSeq: 1 INFO Contact:
Payload bytes withheld: they contain the sensor's address.
2026-10-10 22:19:0951.158.204.210to 1020/udpRedisNL
INFO sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5061;branch=z9hG4bK709f7085 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=33facf24 Call-ID: e85395538dd67629 CSeq: 1 INFO Contact:
Payload bytes withheld: they contain the sensor's address.
2026-10-10 22:19:0951.158.204.210to 5020/udpRedisNL
INFO sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5061;branch=z9hG4bK149b6772 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=dcfdcd3c Call-ID: 7bfc013f817bd79d CSeq: 1 INFO Contact:
Payload bytes withheld: they contain the sensor's address.
2026-10-10 22:19:0951.158.204.210to 1021/udpRedisNL
INFO sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5061;branch=z9hG4bK3d8b65f3 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=b0676ff8 Call-ID: 82927e7965418c2b CSeq: 1 INFO Contact:
Payload bytes withheld: they contain the sensor's address.
2026-10-10 22:19:0951.158.204.210to 5040/udpRedisNL
INFO sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5061;branch=z9hG4bK150690e7 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=f6984406 Call-ID: 667edbda0c1c5eda CSeq: 1 INFO Contact:
Payload bytes withheld: they contain the sensor's address.
2026-10-10 22:19:0851.158.201.249to 1024/udpRedisNL
INFO sip:100@<HONEYPOT> SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5060;branch=z9hG4bK7762de82 To: <sip:100@1.1.1.1> From: <sip:100@1.1.1.1>;tag=b95fbbf Call-ID: 4b8695d6b4cf0002 CSeq: 1 INFO Contact: <
Payload bytes withheld: they contain the sensor's address.