Trusted Design

Port 81 proxy probes and vuln scans

概要

IOCs are confirmed proxy probes (e.g. GET http://www.google.com/) or vulnerability scans (e.g. GET /login.cgi) detected by an SSH server running on port 81. No rocket science here, just simple outing. UPDATE: Seems this isn't just simple probes but also a new Mirai-style botnet performing scans and sweeps.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• A new IoT Botnet is Spreading over HTTP 81 on a Large Scale (score: 0.62)
• Mirai Bot IP Addresses (Port 7547) - February 2017 (score: 0.62)
• Satori:Mirai-like malware botnet infected via Port 37215 and 52869 (score: 0.57)
• Mirai Botnet Controller (and/or infected device) IPs (score: 0.57)
• Mirai Botnet Indicators (score: 0.56)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る