TCP 60023

ProtocolTCP
Port60023
Labels

Synopsis

  • No standard service is officially assigned to TCP 60023, but it is used in the wild by certain ZTE routers/ONTs.
  • Specific examples include ZTE ZXHN H108N and ZTE GPON/FTTH ONTs such as F660, F609, and F620, which expose a Telnet-based management shell on TCP 60023 (often intended for ISP support).
  • In many ISP firmware builds, this service was accessible from the WAN and shipped with default or hardcoded credentials.
  • Because of this, attackers and IoT botnets have actively scanned and abused port 60023 to gain remote access to these routers, leading to compromises and DDoS botnet enrollment.
  • Outside of such router firmwares, there is no commonly recognized legitimate software that uses TCP 60023.

Observed activity

Last 30 days Detailed chart

More information