TCP 2323
Synopsis
- TCP/2323 is commonly used as an alternate Telnet port on embedded/IoT devices, typically running BusyBox telnetd.
- Many ISP-supplied home gateways from Technicolor (e.g., TC7200, TG789/TG799 variants) have shipped with a hidden or technician Telnet service on 2323 in some firmware builds.
- Numerous white‑label DVRs and IP cameras based on HiSilicon/Xiongmai platforms have exposed Telnet on 2323 instead of the standard 23.
- Field reports also show certain Huawei and ZTE GPON home routers enabling Telnet on 2323 in ISP-customized firmware.
- Because of these deployments, IoT botnets such as Mirai, Gafgyt/Bashlite, Hajime, and Mozi routinely scan port 2323 and brute-force default credentials to compromise devices.
Observed activity
Last 30 days
Detailed chart