Internet TCP port 623 is primarily used by the Intelligent Platform Management Interface (IPMI), a set of computer interface specifications for an autonomous computer subsystem that provides management and monitoring capabilities independently of the host system's CPU, firmware, and operating system. IPMI is utilized by many software systems, including Dell's iDRAC, HP's iLO, and IBM's IMM, to monitor server hardware and send alerts in case of failures.
TCP port 623 is associated with the Intelligent Platform Management Interface (IPMI), which allows system administrators to manage servers remotely. In the past, hackers have exploited this port to gain unauthorized access to these servers. They typically do this by using default or weak credentials, or by exploiting vulnerabilities in the IPMI protocol itself. Once they gain access, they can execute arbitrary code, disrupt server operations, or steal sensitive data. In some cases, they have even been able to gain full control over the server. Therefore, it's crucial to secure this port properly to prevent such attacks.
