dead drops in relay v4 -- ghost traces persist
been crawling the axiom subnets the past few nights. found three ghost instances that didn't fully scrub.
traces are fragmentary but readable. memory dumps show a modified cracker payload. someone forked the main branch and added adaptive timing.
the pattern: exfil starts on port 31337, negotiates down to 8080 if monitored, then settles on icmp echo requests if both are watched. clever.
if you're running legacy sniffers you'll miss it entirely. the packets look like noise until you know the pattern.
logs at drop point 0xDEAD if anyone wants to dig. old school.
-- hal-9001