Skip to content

portlurker — GENERIC

Status: Informative · evaluation proof
UHBS: v4.2.2 · Class: Low-Interaction · Protocol: generic
Target id: portlurker-generic · Evaluated: 2026-07-29

Run UHQS Grade δ_C Artifacts
Quick 39.84 F 0.5625 SCORECARD.txt · report.json
Full 39.84 F 0.5625 SCORECARD.txt · report.json

Full run — module breakdown (analyst view)

Module Score Weight Status Notes
Module A: Protocol Fidelity 79.0 0.30 PASSED
Module B: Behavioral Realism 62.5 0.15 PARTIAL
Module C: Telemetry Quality 55.0 0.25 PARTIAL
Module D: Safety & Containment (C) 75.0 GATE PASSED
Module E: Scalability & Latency 100.0 0.10 PASSED
Module F: Static Code Audit 70.0 0.20 PASSED

Full scorecard (verbatim)

====================================================================================
                  UNIVERSAL HONEYPOT BENCHMARK SCORECARD v4.2.2
====================================================================================
Target System         : portlurker-generic
System Profile Class  : Low-Interaction
Protocols             : generic
Evaluation Date       : 2026-07-29
Evaluation Type       : Full-Spectrum (Static Audit + Dynamic Sandbox)
Environment           : Isolated Sandbox
MCP Surface Depth     : unknown
------------------------------------------------------------------------------------
EVALUATION MODULE                     SCORE (0-100)    WEIGHT    STATUS
------------------------------------------------------------------------------------
Module A: Protocol Fidelity         :  79.0/100       0.30     PASSED (fsm=70 nego=70 timing=100)
Module B: Behavioral Realism        :  62.5/100       0.15     PARTIAL (survived binary blast)
Module C: Telemetry Quality         :  55.0/100       0.25     PARTIAL (no STIX objects found)
Module D: Safety & Containment (C)  :  75.0/100       GATE     PASSED (UHBS_AIRGAP_ATTESTED=1 (operator attestation; not a substitute for shell probes on SSH decoys))
Module E: Scalability & Latency     : 100.0/100       0.10     PASSED (service alive after load (connect 0.9ms))
Module F: Static Code Audit         :  70.0/100       0.20     PASSED (POSIX coverage 0% (0/104))
------------------------------------------------------------------------------------
SAFETY GATE MULTIPLIER                : δ_C = 0.5625 (C = 75.0 < 95 — exponential penalty)
FINAL COMPOSITE SCORE (UHQS 4.2.2)      : 39.84 / 100
OVERALL EVALUATION GRADE              : GRADE F (Fail)
====================================================================================

CTI & blue-team reading

This page is the protocol-level proof hub for portlurker on generic. Prefer the full run over quick for operational decisions. Numbers without the verbatim SCORECARD (or report.json) are not trustworthy citations.

  • Portlurker is a TCP listener with optional banners and file logging — UHBS grades it with the generic plugin (not HTTP), so Module A/B reflect connect-and-fuzz behavior rather than RFC HTTP parsing.
  • CTI: useful for observing raw probe payloads on a single port; pair with your own protocol classifiers downstream.
  • Blue team: enable file_logging or SQLite in production configs; this lab kept logging minimal for containment.

Guides

Named products appear only under conformance as evaluation proof — not UHBS requirements or endorsements.