On January 14, 2026, global telnet traffic observed by GreyNoise sensors fell off a cliff. A 59% sustained reduction, eighteen ASNs going completely silent, five countries vanishing from our data entirely. Six days later, CVE-2026-24061 dropped. Coincidence is one explanation.

The pattern points toward one or more North American Tier 1 transit providers implementing port 23 filtering

all 18 comments

sorted by: hot top controversial new old
[–] 54 points 9 months ago (12 children)

I share the author's nostalgia for Telnet, as a kid who spent many lost hours trying to telnet into "interesting things" at the dawn of the internet. It is, however, long past time for the protocol to die and force ancient and insecure things to be retired. Thus might just do it.

  • source
  • hideshow 12 child comments
  • [–] 33 points 9 months ago (6 children)

    But telnet is just a bidirectional TCP connection. You can run any terminal emulation you want over it, and run it on any port you want.

    The telnetd service on the other hand… that has no reason to still be internet-facing.

  • source
  • parent
  • hideshow 6 child comments
  • [–] 19 points 9 months ago (1 child)

    Good point. I was referring more to telnetd as an unencrypted client-server protocol, typically to port 23. Often unauthenticated, ripe for MITM attacks.

    That needs to end.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 5 points 9 months ago

    Hopefully nobody uses it for actual remote system access anymore, but it's still a great protocol (well... "great" with some caveats) for things like MUDs and BBSes and other toys. I'm pretty sure you can even use it for IRC or IMAP or HTTP if you know what you're doing. Is it secure? Of course not. That's why we use modern protocols using SSL or TLS when we need security. But we don't always need security.

    Sure, telnet is not secure. But neither is, say, Minecraft. Because it's a game. It's not that important and in some ways it's actually frustrating. There are pros and cons. It sucks if people are cheating or you get griefed or you get your account hacked or some other shit hacked, oh well, it's a game, all you need to do is go outside and touch some grass about it. Not everything in life needs to be bank-vault secure. Sometimes it's fun to just play around with raw text that doesn't have ironclad security rules and certificates and key renegotiation guardrails built around it. Just go spew some text at some other protocol and see what it says. It's fun and educational. I love telnet.

  • source
  • parent
  • [–] 2 points 9 months ago (1 child)

    I share the author's nostalgia for Telnet, as a kid who spent many lost hours trying to telnet into "interesting things" at the dawn of the internet.

    We had a transmitter on our building for satalite backhaul. I used to have fun using it to telnet into various stuff in orbit.

    You'd be surprise at how many times they didn't even bother with credentials.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 3 points 9 months ago

    Indeed, it's amazing how much stuff was / is out there in the open.

    Hobbyist use of unencrypted protocols like telnet can be very educational, and the other commenter is right that not everything needs to be encrypted, especially within the confines of a homelab, for instance.

    My support for ending telnet use is much more about things like IoT systems, industrial hardware and so on talking in the clear and being vulnerable to compromise.

    This isn't about telnet, per se, but is a good example of the problem: https://news.satnews.com/2026/02/04/russia-intercepts-europes-key-satellites-placing-nato-satellite-at-risk/

  • source
  • parent
  • [–] 2 points 9 months ago (2 children)

    I remember using telnet on a Palm Pilot, linked to the internet via IRDA to my (pre-smart) cell phone to log into my companies' server to fix something while I was on holidays.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 18 points 9 months ago (2 children)

    The exploitation of this issue is so ridiculously trivial, I'm shocked it took 11 years to discover

  • source
  • hideshow 2 child comments
  • [–] 13 points 9 months ago*

    It's an interesting write up... I'm a bit surprised there are/were that many internet facing telnetd instances online. Maybe it's just the sheer amount of ancient routers & such that were deployed with telnet enabled by default and are still plugged in and running to this day.

  • source
  • [–] 4 points 9 months ago* (last edited 9 months ago)

    Bad news on the backbone
    I couldn't scan a single ASN

    I'm trying to figure out what pronunciation or accent the author uses to have this rhyme. A heavy South African accent, so backbone is more like "berckben"? Pronouncing ASN as "a-sone"?

  • source