TCP 60023
Synopsis
- No standard service is officially assigned to TCP 60023, but it is used in the wild by certain ZTE routers/ONTs.
- Specific examples include ZTE ZXHN H108N and ZTE GPON/FTTH ONTs such as F660, F609, and F620, which expose a Telnet-based management shell on TCP 60023 (often intended for ISP support).
- In many ISP firmware builds, this service was accessible from the WAN and shipped with default or hardcoded credentials.
- Because of this, attackers and IoT botnets have actively scanned and abused port 60023 to gain remote access to these routers, leading to compromises and DDoS botnet enrollment.
- Outside of such router firmwares, there is no commonly recognized legitimate software that uses TCP 60023.
Observed activity
Last 30 days
Detailed chart