UDP traffic

Datagrams matching country:LT sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Datagrams

Source addresses

Networks

Countries

Destination ports

Protocols

raw from 1 source2
dns from 1 source1

Destination ports

3702/udp from 1 source2
137/udp from 1 source1

DNS questions

1 queries and 0 unsolicited answers. An answer nobody asked for means a resolver was given a forged source address.

CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA SRV1

DNS record types

SRV1

Networks

AS209605 UAB Host Baltic from 2 sources3

Countries

LT Lithuania3

Source addresses (unverified)

Address	Network	Cc	Datagrams	Last seen (UTC)
141.98.11.129	AS209605 UAB Host Baltic	LT	2	2026-10-05 15:59
185.36.81.23	AS209605 UAB Host Baltic	LT	1	2026-10-05 11:54

Latest datagrams

2026-10-05 15:59:41141.98.11.129to 3702/udprawLT

<:>

payload bytes

00000000  3c 3a 3e                                          |<:>|

2026-10-05 14:54:47141.98.11.129to 3702/udprawLT

<:>

payload bytes

00000000  3c 3a 3e                                          |<:>|

2026-10-05 11:54:37185.36.81.23to 137/udpdnsLT

DNS query SRV CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

payload bytes

00000000  13 37 00 00 00 01 00 00  00 00 00 00 20 43 4b 41  |.7.......... CKA|
00000010  41 41 41 41 41 41 41 41  41 41 41 41 41 41 41 41  |AAAAAAAAAAAAAAAA|
00000020  41 41 41 41 41 41 41 41  41 41 41 41 41 00 00 21  |AAAAAAAAAAAAA..!|
00000030  00 01                                             |..|