Mirai Botnet SYN Scanning on Telnet and SSH Ports

Ankit Mehta@Secvyn

•updated Jun 30, 2026•0•0•1

Detects high-frequency TCP SYN scanning behavior targeting Telnet (port 23) and SSH (port 22) ports, characteristic of Mirai botnet propagation and reconnaissance activities.