Linux Tunneling Tool and Port Scanner Co-occurrence

Kaung Khant Ko@kaungkhantko

•updated yesterday•2•0•2

Detects the execution of known tunneling tools (frpc, chisel) and the ASimplePortScanner Python utility on the same Linux host within a 24-hour window, indicating potential reconnaissance and network tunneling activity.