{"id":3651,"date":"2025-09-25T11:13:30","date_gmt":"2025-09-25T11:13:30","guid":{"rendered":"https:\/\/cheapsslweb.com\/blog\/?p=3651"},"modified":"2025-09-25T11:30:53","modified_gmt":"2025-09-25T11:30:53","slug":"what-is-port-23-everything-to-know-about","status":"publish","type":"post","link":"https:\/\/cheapsslweb.com\/blog\/what-is-port-23-everything-to-know-about\/","title":{"rendered":"What is Port 23? Everything to Know About"},"content":{"rendered":"\n

Did you know most of the cyber attacks are due to open ports<\/strong>? One of the most frequently targeted is Port 23, which runs the telnet service and is most exploited in the wild by threat actors or cyber criminals.<\/p>\n\n\n\n

\n

According to security researchers, millions of routers, IoT devices, and outdated servers still run services on this port, leaving them vulnerable to cybercriminals.<\/p>\n<\/blockquote>\n\n\n\n

So, if you don\u2019t get it, stay with this blog, and at the end of this post, what are port 23 and telnet? Why is it exploited by hackers in the wild, how does it work, what security vulnerabilities?  Let\u2019s begin!<\/p>\n\n\n\n

What is Port 23?<\/h2>\n\n\n\n

Before understanding port 23<\/strong>, let\u2019s understand what exactly ports?<\/strong>. The port is a logical endpoint used for communication between devices over a network. It is a port is a 16-bit <\/strong>number (ranging from 0 to 65535<\/strong>) that identifies a specific process or service on a device within a network. There are two types of ports, TCP<\/strong> (Reliable, connection-oriented) and UDP<\/strong> (Faster but connectionless)<\/a>.<\/p>\n\n\n\n

Understand Ports with This Analogy. The network is like a society where many people (devices) communicate. Your device is like a house in this society. The IP address is like your house address, identifying your location. <\/p>\n\n\n\n

A port is like a specific door in your house leading to different rooms (applications\/services). Just like different doors serve different purposes (e.g., the front door for guests, the garage for cars, and the back door for deliveries), different applications, servers, services, and processes use different ports to send and receive data.<\/p>\n\n\n\n

What Port is 23 used for?<\/h2>\n\n\n\n

Port 23 is assigned to Telnet<\/strong>, a protocol used for remote communication with servers and networking devices. It’s often used for troubleshooting and testing network services. Think of it as a remote control for computers, allowing users to execute commands on a system from anywhere in the world.<\/p>\n\n\n\n

Back in the early days of the internet, Telnet was a game-changer and mostly used by IT professionals. It enables IT admins to configure systems remotely. But there\u2019s one big problem, i.e., \u201cit sends data in plain text\u201d<\/strong>. <\/p>\n\n\n\n

That means passwords and sensitive information are exposed to anyone who can access your network traffic, and it can be done easily with the help of tools like Wireshark and other network packet analyser tools.<\/p>\n\n\n\n

What is Telnet Port 23 Used For?<\/h2>\n\n\n\n

The Telnet is outdated, but some organisations still use it. If we look at the Shodan<\/strong> (a search engine that indexes and allows users to search for internet-connected devices) report, which shows a downtrend in the use of port 23.<\/p>\n\n\n\n

\"Telnet<\/figure>\n\n\n\n
\n

The Shodan report also shows that currently, \u201c221122<\/strong>\u201d telnet devices have been running across the world. <\/p>\n<\/blockquote>\n\n\n\n

The telnet Port 23 is used for the following purposes:<\/strong><\/p>\n\n\n\n

Remote Administration<\/h3>\n\n\n\n

IT teams use the telnet to access network devices, such as routers, switches, and servers, to configure settings or troubleshoot issues remotely. <\/p>\n\n\n\n

Example: <\/strong>An administrator logs into a router via Telnet to modify network settings from another location. Since Telnet does not encrypt data, attackers can intercept login credentials and gain unauthorized access.<\/p>\n\n\n\n

Debugging & Testing<\/h3>\n\n\n\n

Developers and network engineers use Telnet to test network connectivity, diagnose issues, and interact with services running on specific ports. <\/p>\n\n\n\n

For Example<\/strong>, A developer checks if a web server is responding by running this telnet command “telnet example.com 80”<\/em>. <\/strong>It tests if Port 80 (HTTP)<\/a> is open and responding. Debugging over Telnet can expose sensitive system details to potential attackers.<\/p>\n\n\n\n

Read Also:<\/strong> What is Port 80? Common Security Risks associated with Port 80 (HTTP)?<\/a><\/p>\n\n\n\n

IoT Devices and Industrial Devices<\/h3>\n\n\n\n

IoT (Internet of Things) devices and industrial control systems use Telnet for remote access and configuration. <\/p>\n\n\n\n

For example<\/strong>, smart home devices and security cameras use Telnet as their primary remote communication method. Hackers can easily scan for exposed Telnet services using tools like Shodan and exploit weak\/default passwords to take control of IoT devices.<\/p>\n\n\n\n

Read Also:<\/strong> What is Port 8080? HTTP Port 80 vs 8080 vs 443<\/a><\/p>\n\n\n\n

Legacy Systems<\/h3>\n\n\n\n

The old legacy systems, devices and applications use telnet for remote access. These devices and applications are very old and do not get future updates and support from vendors and developers, which causes many vulnerabilities and is easily exploited by hackers.<\/p>\n\n\n\n

What is Telnet Protocol? How Port 23 Telnet Works?<\/h2>\n\n\n\n

Telnet (short for Telecommunication Network) is a text-based protocol used for remote access to computers and network devices over the internet or a local network. <\/p>\n\n\n\n

It follows a client-server model, where the client initiates a connection to a remote system running a Telnet server:<\/strong><\/p>\n\n\n\n

1. Client Requests Connection<\/h3>\n\n\n\n

A user runs a command like this on their device.
\u201ctelnet 192.168.1.1 23\u201d<\/em><\/strong><\/p>\n\n\n\n

It tells the Telnet client to connect to IP 192.168.1.1 on Port 23.<\/p>\n\n\n\n

2. The Telnet Server Accepts the Connection<\/h3>\n\n\n\n

The Telnet server is running on the remote machine, it responds with a login prompt asking for a username<\/strong> and password<\/strong>. The user enters credentials (username & password) to authenticate.<\/p>\n\n\n\n

3. Interactive Session Begins<\/h3>\n\n\n\n

Once authenticated, the user gets a command-line interface of the remote system. Commands entered by the client are sent to the server and executed, and results are displayed back to the user.<\/p>\n\n\n\n

4. Connection Ends<\/h3>\n\n\n\n

When the user logs out or closes the session, Telnet disconnects.<\/p>\n\n\n\n

Security Risks and Vulnerabilities of Port 23 Telnet<\/h2>\n\n\n\n

Telnet is considered highly insecure because it lacks encryption, which means all the data is transferred in plain text between server and client through the network. That makes it an easy target for cyberattacks. <\/p>\n\n\n\n

The major security vulnerabilities associated with Port 23 (Telnet):<\/strong><\/p>\n\n\n\n

Unencrypted Data Transmission<\/h3>\n\n\n\n

Telnet sends everything in plain text, including passwords and sensitive commands. A hacker running a simple packet-sniffing tool like Wireshark can grab your credentials in seconds. An attacker running Wireshark captures network traffic and retrieves a user\u2019s Telnet login credentials.<\/p>\n\n\n\n

Man-in-the-Middle (MITM) Attacks<\/h3>\n\n\n\n

Telnet doesn\u2019t use encryption or digital certificates<\/a>, an attacker can intercept and modify Telnet traffic. The attacker can inject malicious commands into the session. <\/p>\n\n\n\n

Example:<\/strong> A hacker positions themselves between a Telnet client and server, capturing login credentials and modifying commands before they reach the server.<\/p>\n\n\n\n

Brute Force Attacks<\/h3>\n\n\n\n

Telnet-enabled devices use default or weak passwords, making them an easy target for brute-force attacks. Attackers use tools like Hydra or Medusa to try multiple username-password combinations until they gain access.<\/p>\n\n\n\n

IoT Botnet Exploitation<\/h3>\n\n\n\n

Many IoT devices (CCTV cameras, DVRs, routers, smart devices) still have Telnet enabled by default. Hackers scan the internet for these devices and use default credentials to take control. The Mirai botnet exploited IoT devices with Telnet access, infecting them and launching DDoS (Distributed Denial-of-Service) attacks.<\/p>\n\n\n\n

Lack of Multi-Factor Authentication (MFA)<\/h3>\n\n\n\n

Telnet does not support MFA<\/a>, meaning once an attacker has a valid password, they can log in without any additional security checks. A hacker steals Telnet credentials from a compromised database dump and MITM attack, then logs in without needing a second authentication factor.<\/p>\n\n\n\n

Remote Code Execution (RCE) and Privilege Escalation<\/h3>\n\n\n\n

Many legacy systems with Telnet have unpatched vulnerabilities, making them open to Remote Code Execution attacks<\/a>. A hacker exploits a buffer overflow vulnerability in a Telnet server to gain root access and take full control of system.<\/p>\n\n\n\n

What are the Potential Conflicts with Port 23?<\/h2>\n\n\n\n

Services that use Port 23 through Telnet can lead to security hazards and operational difficulties, as well as multiple conflicts in current network systems. <\/p>\n\n\n\n

The usage of Port 23 as a Telnet protocol leads to multiple security issues, which result in operational problems and conflicts:<\/strong><\/p>\n\n\n\n

Firewalls Block It<\/h3>\n\n\n\n

Many firewalls and Intrusion Detection Systems (IDS) block Port 23 by default due to its security risks. Firewalls deny connection to Telnet-based systems, which results in operational interference.<\/strong><\/p>\n\n\n\n

Security Conflicts with SSH (Port 22)<\/h3>\n\n\n\n

Remote access functions through Port 23 using Telnet, yet this protocol remains insecure as SSH (Port 22) offers secure encryption for the session. IT teams force the use of Secure Shell Protocol<\/a> instead of Telnet, leading to problems with accessing devices that need Telnet functionality.<\/p>\n\n\n\n

Network Conflicts<\/h3>\n\n\n\n

If multiple devices behind a NAT router need Telnet access, port forwarding conflicts may arise. Only one device can be directly accessed on Port 23 through the NAT.<\/p>\n\n\n\n

ISP Restrictions<\/h3>\n\n\n\n

Many ISPs block Port 23 to prevent cyberattacks. If an organisation relies on Telnet for remote access, ISP blocks can cause conflict.<\/p>\n\n\n\n

Conflicts with Other Services Using Port 23<\/h3>\n\n\n\n

Some applications or malware may incorrectly use Port 23, leading to service failures. If multiple services try to bind to Port 23, conflicts occur.<\/p>\n\n\n\n

Legacy Device Conflicts<\/h3>\n\n\n\n

Old IoT devices, together with routers and industrial systems, continue to use Telnet as their main method for remote system management. The blocking of Port 23 will prevent administrators from accessing their devices through a managed connection.<\/p>\n\n\n\n

How to Open Port 23?<\/h2>\n\n\n\n

To open Port 23 and use Telnet, follow the steps below. This method depends on your operating system (Windows, Linux, macOS).<\/p>\n\n\n\n

Step 1: Install and Enable Telnet Server<\/h3>\n\n\n\n

For Windows, <\/strong>Open PowerShell as administrator and run the following command:<\/p>\n\n\n\n

dism \/online \/Enable-Feature \/FeatureName:TelnetServer<\/code><\/pre>\n\n\n\n
Now Start the Telnet service with this command:<\/strong><\/p>\n\n\n\n
sc config tlntsvr start=auto<\/em>\nsc start tlntsvr<\/em><\/code><\/pre>\n\n\n\n
For Linux (Ubuntu\/Debian):<\/strong><\/p>\n\n\n\n
Open the terminal and Install the Telnet server by this command:<\/p>\n\n\n\n
sudo apt update && sudo apt install telnetd -y<\/code><\/pre>\n\n\n\n
Now Start the Telnet service by running this command:<\/strong><\/p>\n\n\n\n
sudo systemctl enable --now inetd                                <\/code><\/pre>\n\n\n\n
Step 2: Open Port 23 in the Firewall<\/h3>\n\n\n\n
If your firewall is blocking Port 23, you need to allow it manually.<\/p>\n\n\n\n
For Windows Firewall, <\/strong>Open Command Prompt as Administrator and run this command.<\/p>\n\n\n\n
netsh advfirewall firewall add rule name=\"Open Port 23\" dir=in action=allow protocol=TCP localport=23<\/code><\/pre>\n\n\n\n
For Linux:<\/strong><\/p>\n\n\n\n
with the UFW Firewall, Open the terminal and then run the following command.<\/p>\n\n\n\n
sudo ufw allow 23\/tcp\nsudo ufw reload<\/code><\/pre>\n\n\n\n
Alternatively, on Linux you can use \u201ciptables\u201d and run these commands:<\/strong><\/p>\n\n\n\n
sudo iptables -A INPUT -p tcp --dport 23 -j ACCEPT\nsudo iptables-save > \/etc\/iptables\/rules.v4<\/code><\/pre>\n\n\n\n
Step 3: Open Port 23 in the Router<\/h3>\n\n\n\n
If your router is blocking Telnet port 23, follow this step to open it.<\/p>\n\n\n\n