Threat Level: green Handler on Duty: Johannes Ullrich

SANS ISC: Upswing in port 23/TCP scanning - SANS Internet Storm Center SANS ISC InfoSec Forums

Participate: Learn more about our honeypot network
https://isc.sans.edu/honeypot.html

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Upswing in port 23/TCP scanning

Reader Tom wrote in that he has noticed an upswing of scanning for port 23/TCP to a honeypot system. They are completing the 3 way handshake, then sending a FIN to shut it down. Dshield data confirms that others are seeing the same. Dshield port 23 graph Let us know if you are seeing anything interesting at our contact us page.

Cheers,
Adrien de Beaupré
Intru-shun.ca Inc.

 Adrien de Beaupre

353 Posts
ISC Handler
Jun 1st 2010
Thread locked Subscribe Jun 1st 2010
1 decade ago

Sign Up for Free or Log In to start participating in the conversation!