I am posting this to ask if there is anyone who has encountered any rootkits or viruses trying to talk on port 23. VSE didn't capture anything, the rootkit utility from mcafee didn't capture anything, our packet capture utility (infinistream) didn't capture anything, but our Firewall did stop the traffic on port 23. We got about 1000 hits within 1 hour. It was trying to hit IP address 18.104.22.168 which is registered with RIPE in Amsterdam.
Has anyone seen anything similar?