Skip to content
Threat Feed
Subscribe

Tag

Elastic-Rule

1 brief RSS
high advisory

Detection of Accepted Default Telnet Port Connection

This brief details the detection of unencrypted Telnet traffic on its default port 23, a legacy protocol commonly used for remote administration but frequently exploited by threat actors for initial access or as a backdoor due to its plain-text nature, which exposes sensitive information and facilitates unauthorized access.

command-and-control lateral-movement initial-access telnet network-security detection elastic-rule
1r 4t