Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: Upswing in port 23/TCP scanning SANS ISC InfoSec Forums

Watch ISC TV. Great for NOCs, SOCs and Living Rooms: https://isctv.sans.edu

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Upswing in port 23/TCP scanning

Reader Tom wrote in that he has noticed an upswing of scanning for port 23/TCP to a honeypot system. They are completing the 3 way handshake, then sending a FIN to shut it down. Dshield data confirms that others are seeing the same. Dshield port 23 graph Let us know if you are seeing anything interesting at our contact us page.

Cheers,
Adrien de Beaupré
Intru-shun.ca Inc.

I will be teaching next: Advanced Web App Penetration Testing, Ethical Hacking, and Exploitation Techniques - SANS London December 2020

 Adrien de Beaupre

353 Posts
ISC Handler
Jun 1st 2010
Thread locked Subscribe Jun 1st 2010
1 decade ago

Sign Up for Free or Log In to start participating in the conversation!