• CommunityEnterprisePlans
  • Intel Exchange
    Intel ExchangeDetections
  • Resources
  • About
  • Leaderboard
Join CommunitySign In
    All Detections

    Openclaw Default Gateway Port Usage

    avatar
    GlassDiceBearhttps://www.dicebear.comhttps://creativecommons.org/publicdomain/zero/1.0/„Glass” (https://www.dicebear.com) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)
    nomit vyas@xoxo
    •updated Feb 8, 2026•2•0•83

    Detects network traffic on TCP port 18789, the default gateway port for OpenClaw. Monitoring for unauthorized external access to this port helps identify exposed admin dashboards or exploitation.

    YARA-L

    Tags

    TA0001 - Initial AccessT1190 - Exploit Public-Facing ApplicationT1133 - External Remote ServicesTA0003 - PersistenceNetwork Connection InboundNetwork Connection OutboundExploit AttemptNetwork GenericGeneric Network LogOPENCLAWCLAWDBOTNETWORKINITIAL_ACCESS

    Community Inspired.
    AI Enhanced.
    Better Detections.

    Follow Us

    Company

    • About
    • Leaderboard

    Product

    • Community
    • Enterprise
    • Plans

    © 2026 Copyright. All Rights Reserved.

    Privacy PolicyTerms of Service

    Sign up to view this detection

    or

    Already have an account?