TCP Port 992 – telnets

About TCP Port 992

Port 992 carries the IANA assignment for telnets. The IANA description reads: ‘telnet protocol over TLS/SSL’. This port appears in 31 IDS rules and does not have notable malware activity indicators in our data.

IDS Rule References

31 IDS / security rules reference TCP port 992. Presence in IDS rules does not mean traffic on this port is malicious. These are patterns security tools monitor.

Rule categories (top 2): attempted-recon (26), bad-unknown (5).

Sample rule descriptions for TCP port 992:

• SERVER-OTHER OpenSSL SSLv3 heartbeat read overrun attempt
• SERVER-OTHER OpenSSL TLSv1 heartbeat read overrun attempt
• SERVER-OTHER OpenSSL TLSv1.1 heartbeat read overrun attempt
• SERVER-OTHER OpenSSL TLSv1.2 heartbeat read overrun attempt
• SERVER-OTHER OpenSSL SSLv3 large heartbeat response – possible ssl heartbleed attempt

Data Sources

This information is compiled from: IANA Service Name and Transport Protocol Port Number Registry, Emerging Threats Open Ruleset (BSD 2-Clause / GPLv2 per SID range), and Snort Community Rules (GPLv2).