Skip to content

Public service exposure

Telnet and FTP open to the internet

Whether the Telnet (23) or FTP (21) port accepts a connection from the internet.

Part of the External Security Check. Free during the preview.

What it checks

Whether the Telnet (23) or FTP (21) port accepts a connection from the internet.

A pass means: No Telnet or FTP services accept connections from the internet.

Possible findings

Unencrypted remote service reachable

Severity: HighConfidence: Medium confidenceKind: Security issue

What we found

A Telnet or FTP service accepted a connection from the internet.

Why it matters

Telnet and FTP send passwords and data unencrypted, so anyone on the network path can read them.

How to fix it

Replace Telnet with SSH and FTP with SFTP or FTPS, and close the old ports.

References