Telnet — unencrypted remote shell, superseded by SSH decades ago.
Telnet gives a raw bidirectional character stream to a login process, with in-band option negotiation for things like terminal type and echo. There is no encryption and no server authentication, so credentials and session content are readable by anyone on the path. It still shows up on switches, PDUs, serial console servers, and embedded devices, and the telnet client itself survives as a generic TCP poking tool. Finding 23 open on a scan is normally an unpatched appliance rather than a deliberate choice.
Do not expose
Cleartext credentials with no server authentication; there is no configuration that makes an internet-facing telnet server acceptable.
$ sudo lsof -nP -iTCP:23 -sTCP:LISTENSeen this on your network? Beige Box scans your Wi-Fi and shows every open port on every device — and its Ports tool links straight back here.
Get Beige Box →also available as JSON · Markdown
Corrections or a missing port? Reply @rimrocksystems.