Hackers Bringing Telnet Back

alphadogg writes "A new report from Akamai Technologies (CT: Requires login) shows that hackers appear to be increasingly using the Telnet remote access protocol to attack corporate servers over mobile networks. The report, which covers the third quarter of 2010, shows that 10 percent of attacks that came from mobile networks are directed at Port 23, which Telnet uses. That marks a somewhat unusual spike for the aging protocol used to log into remote servers but that has been gradually replaced by SSH."

Comments

Re:who still uses telnet?

[maotx]

I do whenever I need my Star Wars Fix. Just telnet to towel.blinkenlights.nl.

People stopped using Telnet?

[Raxxon]

I use telnet constantly. Port 110 to check for a broken email header, Port 25 to check for SMTP auth errors, Port 3200 to check for the present of a NetGen DSS unit, etc, etc... I love telnet. Simple 3-way handshake and boom, datastream.

Re:People stopped using Telnet?

[Notquitecajun]

You play a MUD still, too. Admit it.

Re:People stopped using Telnet?

[Ephemeriis]

I use telnet constantly. Port 110 to check for a broken email header, Port 25 to check for SMTP auth errors, Port 3200 to check for the present of a NetGen DSS unit, etc, etc... I love telnet. Simple 3-way handshake and boom, datastream.

Sure, the telnet client is useful. I use it all the time for those very same reasons.

But actually running a telnet server and allowing incoming connections on port 23? Nope. Stopped doing that for everything I could years ago, switched to SSH on everything that would support it. The things that wouldn't support it were all tucked away on our inside network. I've got nothing facing the world that'll accept connections on port 23.

Re:People stopped using Telnet?

[vagabond_gr]

I'm using telnet for ssh too. Doing RSA in your head is a bit tricky at first, but once you get used to it it's really convenient.

PS. For a real challenge try to PPP authenticate over dial-up using your voice.

Re:People stopped using Telnet?

[LordLimecat]

So you mean telnet the program, not telnet the protocol-- what the article was about?

Re:People stopped using Telnet?

[XorNand]

netcat ("nc" on most Linux distros) provides the same functionality. However, it's also more flexible in that it allows you to test UDP ports and you can easily set it up to listen for incoming connections on an arbitrary port. It's a great tool for troubleshooting firewall issues.

A tip for management

[goodmanj]

If you manage your company or institution's IT department, please do the following:

Step 1: Turn on "telnet" on your PC. (Of course you Windows, you're management, right?)
Step 2: Try to "telnet" to your company's website, or to any other machine or service names your underlings bandy about.
Step 3: If you don't see "Connection refused" every time, FIRE EVERYONE WHO REPORTS TO YOU.

Re:A tip for management

[dr2chase]

I think it would be ok if it said, "Hello, I am Eliza."

Misleading headline

[antifoidulus]

Um, the reason they are using telnet is because it's trivial to hack, in other words the headline should read "hackers hacking easiest to hack service on poorly configured machines, also water is wet, details at 11"

Hackers Bringing Telnet Back?

[crow_t_robot]

How can hackers bring telnet attacks back if admins don't run telnet? Should the headline say "Admins are bringing telnet back and getting bitten in the ass for it?"

Re:Good ole days

[John Hasler]

If telnet reminds you of when you were young you aren't old.

Get your hackin' on

[llManDrakell]

I'm bringin' telnet back.
Them other protocols don't know how to act.
I think it's special what's inside your rack.
So enable the service and I'll begin to hack.

They are forgetting something...

[CoolVibe]

Seeing traffic on port 23 does not mean telnet is involved. I know some people who run their SSH daemon on that port to lessen the stupid ssh scans.

Printers?

[Culture20]

I just realized; almost every network printer out there uses telnet for remote configuration. Maybe there was a new vulnerability found on a specific type of printer that allows forwarding of the printed pages back to the script kiddies?