Scanning Activity Include Netcat Listener, (Sat, Aug 8th)

Read the original article: Scanning Activity Include Netcat Listener, (Sat, Aug 8th)

This activity started on the 5 July 2020 and has been active to this day only scanning against TCP port 81. The GET command is always the same except for the Netcat listener IP which has changed a few times since it started. If you have a webserver or a honeypot listening on TCP 81, this activity might be contained in your logs. I have included the URL to the IPDetails reported to ISC that shows similar activity from the same source IP address listed in this diary.xd;

Read the original article: Scanning Activity Include Netcat Listener, (Sat, Aug 8th)