Reader Tom wrote in that he has noticed an upswing of scanning for port 23/TCP to a honeypot system. They are completing the 3 way handshake, then sending a FIN to shut it down. Dshield data confirms that others are seeing the same. Let us know if you are seeing anything interesting at our contact us page.

Cheers,
Adrien de Beaupré
Intru-shun.ca Inc.