Telnet attacks & scanning (port 23)
Legacy remote login, ubiquitous on IoT/embedded — default-credential and Mirai-style probes.
Observed by OffSeq honeypot sensors · last 30 days · #13 most-attacked service · last seen 30 minutes ago
51,700
Attacks
1,467
Distinct source IPs
23
Port · tcp
The #13 most-attacked service across the fleet in the last 30 days.
OffSeq honeypots emulating Telnet recorded 51,700 attacks from 1,467 distinct source IPs over the last 30 days. Legacy remote login, ubiquitous on IoT/embedded — default-credential and Mirai-style probes.
Top CVEs exploited across the fleet (last 30 days)
Fleet-wide, not scoped to Telnet.
- CVE-2017-01442,731
- CVE-2019-07082,655
- CVE-2024-45771,702
- CVE-2021-268551,673
- CVE-2017-9841542
- CVE-2025-5777269
- CVE-2023-3519150
- CVE-2012-212283