Hardware FixRecommendedDevice not working? Your driver may be the problemCheck updates for common hardware issues.Fix DriversOctober DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsWindows FixRecommendedWindows errors stealing your time? Find the fix fastScan stability, cleanup and performance issues.Fix Now×
Skip to content
World desk10 min

How to Use the Telnet Command in Linux

A practical Linux telnet guide covering Ubuntu installation, command syntax, interactive controls, IPv4/IPv6 options, TCP port checks, troubleshooting, and the security limits that make SSH the proper choice for administration.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Use telnet in Linux either to open a TELNET session or to make a simple interactive TCP connection test. Install Ubuntu’s inetutils-telnet package, run telnet [options] [host [port]], and use the telnet> prompt for commands such as open, display, close, and quit. A connection to a non-TELNET port is useful for checking whether a TCP listener is reachable, but it does not prove that the application protocol is healthy.

What the telnet command does

telnet is a command-line client for the TELNET protocol. The Debian manual describes it as a user interface to TELNET: without a host argument it starts an interactive interpreter, and with a host argument it implicitly performs an open operation. TELNET itself was designed as a general, bidirectional, eight-bit, byte-oriented way to interface with terminal devices, as specified in RFC 854 (1983).

As an Amazon Associate I earn from qualifying purchases.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

In practice, Linux administrators use the command in two different ways:

  • Legacy session access: connect to an old device or service that actually speaks TELNET.
  • Basic TCP reachability testing: connect to a host and port to see whether DNS, routing, firewalls, and a listening socket allow a TCP handshake.

Only connect to systems and services for which you have authorization. TELNET does not provide the protection expected from modern administration, so it should not carry passwords, private keys, personal data, or other sensitive traffic.

#1 Best Overall
Sale
TOZO A1 Wireless Earbuds Bluetooth 5.3 Light Weight in Ear Headphones | IPX5 Waterproof,2 Mics for AI Calls,Immersive Premium Sound Bass Headset with Charging Case,32 EQ via App Black
  • [Ultra-Lightweight Ear Buds Designed for Small Ears] Each earbud weighs only 3.7g and features a compact, ergonomic in-ear design made especially for small ears. Secure, low-profile, and comfortable for workouts, all-day wear or overnight sleeping.The ultra-slim profile sits flush in your ear with no hard edges poking or rubbing, so you can even sleep on your side without discomfort.
  • [Immersive Stereo Sound with TOZO OrigX Technology] TOZO OrigX tuning delivers clear vocals, balanced mids, and natural stereo sound for music, podcasts, and videos.
  • [Long Battery Life for Daily Use] Get up to 7 hours of playtime on a single charge, with up to 32 hours total using the charging case—ideal for workdays, commuting, and extended listening sessions.
  • [Bluetooth 5.3 & Stable Connection] Bluetooth 5.3 provides fast pairing, stable wireless performance, and reduced dropouts as you move around home or office.
  • [Deep Bass with Clear Vocals] High-performance drivers produce punchy bass while keeping vocals clean and detailed for everyday listening.

Install telnet on Ubuntu and verify it

Ubuntu package and version

Ubuntu Noble supplies the executable through the inetutils-telnet package. The Noble documentation identifies version 2:2.5-3ubuntu4.2; package revisions can change as Ubuntu updates its repositories.

Installation steps

  1. Refresh the local package index:
sudo apt update
  1. Install the client package:
sudo apt install inetutils-telnet
  1. Confirm that the executable is available and read the local implementation’s documentation:
telnet --help
man telnet

If apt cannot locate the package, check that the system is running a supported Ubuntu release and that its configured repositories are reachable. Do not copy a binary from an unrelated system: option names and escape behavior can differ between implementations.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Check whether it is already installed

command -v telnet
telnet --help

A path such as /usr/bin/telnet from command -v confirms that the shell can find the client. The help output and the local man page are the authoritative references for the options on your distribution.

Telnet syntax and the first connection

The general form is:

telnet [options] [host [port]]
Command What it does Typical use
telnet Starts the interactive telnet> command prompt without opening a connection. Choose a host later with open.
telnet example.com Opens a TELNET connection to the host’s default TELNET service. Legacy terminal access where authorized.
telnet example.com 25 Attempts a TCP connection to port 25. Basic reachability check for an SMTP listener.
telnet -4 example.com 25 Restricts address selection to IPv4. Diagnose an IPv4-only path.
telnet -6 example.com 25 Restricts address selection to IPv6. Diagnose an IPv6-only path.

Replace example.com with a hostname or IP address that you are permitted to test. If you omit the port, the client uses the default TELNET service port. If you provide a port for another service, the client can still establish a TCP connection; it simply does not assume that the service speaks TELNET.

What a successful connection looks like

On success, the client reports that it is trying or connected to the destination and then leaves you at the remote service’s input stream. A true TELNET server may present a login banner or negotiation characters. A non-TELNET service may print a protocol banner, wait silently for input, or close immediately. Silence is not automatically failure: some services wait for a correctly formatted request.

What the common failures mean

  • Name or service not known: DNS resolution or the supplied name is wrong.
  • Connection refused: the host was reachable, but no process accepted the connection on that address and port, or an active device rejected it.
  • Connection timed out: the handshake did not complete before the timeout. Filtering, routing, an offline host, or a service that drops probes can all produce this result.
  • Network is unreachable: the local machine has no usable route for the selected address family.
  • Connected, then immediately closed: the listener accepted the TCP connection but rejected the protocol, required a different sequence, or ended an idle session.

These messages describe the connection attempt, not the health of the application behind the port. A successful handshake proves only that a network path and listener accepted TCP.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #2
Sale
Smart Watch for Men Women Compatible with iPhone Samsung Android Phone 1.69 inch Full Touch Screen IP68 Waterproof Bluetooh Fitness Tracker Heart Rate/Sleep Monitor (Black)
  • 【IP68 Waterproof Multifunctinal Smart Watch】Torjalph fitness activity tracker smart watch is IP68 waterproof technology ,you can wear it when swimming,handwashing,it's rain-proof which means that you perform multiple exercise modes outside without worrying about sweat or rain corroding your fitness smart watch,and this watch equipped with a 230 mAh large capacity battery magnetic charging ,and this sports activity tracker watch can be used 5-7 days If fully charged.
  • 【Larger 1.83'' Full Screen Watch & Multi-dial Selection】1.83 inch full HD color touch screen smart watch for men / women provides excellent 240*284 resolution image quality ,This Bluetooth smart watch offers a better touch experience and remarkable immersion and ,more than 200 watch faces for you to choose from App"Da Fit ", you can change the dial style according to your mood to wear keeping the world on your wrist
  • 【Accurate Activity Tracker Smart Watch 】sports watch activity tracker uses sweat and dust resistant breathable silicone strap, our Fitness Tracker Smart Watch for Android iOS Phones supports 12 sports modes,walking,running,bicycle,swimming,badminton,basketball,football,rope skipping. This bluetooth calls smart watch for men women is lightweight and stylish, bringing more convenient and relaxing sports experience while also providing more protection.
  • 【Your 24 Hour Personal Daily Health Monitor】Fitness watch for women men full touch screen IP67 waterproof bluetooth smartwatch for Android iOS Phones with heart rate blood pressure monitor multifunction Andriod smart watch with steps counter sleep monitor sports fitness watch, monitoring blood oxygen saturation allows you to understand your physical condition in real time to track fitness progress ,to know your health status in time.
  • 【More Functions Bluetooth Call Smart Watch】This fitness activity smart watch full screen for iPhone and Android phones includes a bunch of new features including:The bluetooth smart watch can hang up the phone, receive and display WhatsAPP /Text /Facebook /Twitter /Messenger reminder.Support sedentary reminder, alarm clock, stopwatch, timer,weather information,music control, remote camera control compatible with Android 5.0 and above or iOS 9.0 and above smartphones.

Use the interactive telnet prompt

Start in command mode

$ telnet
telnet>

At this prompt, enter a command and press Enter. The core commands documented by the Ubuntu and Debian implementations are:

Command Purpose Example
open Connect to a host and optional port. open example.com 23
close End the current connection but remain in the telnet> interpreter. close
display Show current client settings, including negotiated or configured modes. display
send Transmit a TELNET control sequence. send ? to see supported forms
? Display command help. ?
quit Exit the client. quit

Open, inspect, close, and reopen a service

telnet> open example.com 25
telnet> display
telnet> close
telnet> open example.net 80
telnet> quit

close is useful when you want to test several destinations without restarting the program. display helps explain unexpected behavior by showing the current mode and escape setting.

Return to the prompt from a live connection

The default escape character is commonly entered with Ctrl-]. Pressing that key combination does not necessarily close the network connection; it switches to the local telnet> prompt. You can then run display, close, or quit.

^]
telnet> quit

Terminal emulators and telnet implementations can handle the escape key differently. If Ctrl-] does not work, run telnet ? or consult man telnet for the configured escape character and a way to change it.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Test a TCP port without speaking TELNET

Why a non-TELNET port is useful

The Debian documentation states that when you specify a port other than the TELNET port, the client does not attempt TELNET protocol negotiation. That behavior makes the command a lightweight, interactive TCP check for services such as SMTP or an unencrypted HTTP listener. You are testing whether a socket can be opened, not whether the service has completed its own protocol handshake.

Rank #3
New Bee Guitar Cable 10ft Electric Instrument Bass AMP Cord
  • [Low Noise High Fidelity] New bee guitar cord with 22AWG oxygen-free-copper center conductors provides enhanced signal transfer, the PVC insulation material and the high-density stranded copper double shield provide noise rejection for quiet operation
  • [Ideal for Choice] New bee 1/4 straight and right angle metal connectors, ensures a secure connection in any instrument, pedal, or amp jack. L shape great fro on stage guitar stands
  • [Wide Compatible] Suitable for mixer, power amplifier, microphone, effector, decoder, equalizer, electoronic organ, electric guitar, electric bass and other electronic equipments. Widely used in the installation of smart home, karaoke speaker, professional stage audio, etc
  • [Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable
  • [Dont Hesite to Order] 24 hours customer services and professional technology team are standing by
telnet mail.example.net 25
telnet web.example.net 80

Use the host’s actual service name or address and the port documented by its administrator. A connection that displays a banner is informative, but a connection that displays nothing can still be valid if the service waits for a request.

Send a minimal HTTP request

Port 80 commonly carries unencrypted HTTP. After connecting, type a complete request and leave a blank line after the headers:

telnet web.example.net 80
GET / HTTP/1.1
Host: web.example.net
Connection: close

The final empty line terminates the HTTP headers. A response status and headers show that an HTTP-speaking application answered. If the connection succeeds but no HTTP response arrives, the server may require a different host name, path, method, or protocol. For HTTPS, use a TLS-aware client such as openssl s_client; a plain telnet session cannot perform the TLS handshake.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Observe an SMTP greeting

SMTP servers often send a greeting immediately after a connection:

telnet mail.example.net 25

If a banner appears, you can issue harmless protocol commands only within your authorization and the service’s testing policy. For example, EHLO client.example requests the server’s capabilities. Do not submit credentials or send mail during an informal connectivity test. End the session with the protocol’s quit command if supported, or return to the telnet prompt with Ctrl-] and run quit.

Interpret the result correctly

Observation What it establishes What it does not establish
Connection succeeds DNS (if a name was used), routing, and a TCP listener allowed the handshake. That the application is healthy, authenticated, authorized, or correctly configured in both directions.
Connection refused The destination was reachable enough to reject the attempt. Whether a firewall would allow traffic from another network or interface.
Connection times out No completed handshake was observed before the client timed out. Which device dropped the traffic or whether the service is down rather than filtered.
Banner or protocol response The listener produced data recognizable as that protocol. That later requests, authentication, encryption, or application transactions will succeed.

Options for address families, data mode, and escape control

The Ubuntu man page lists these important options:

Option Long form Effect
-4 --ipv4 Use IPv4 addresses.
-6 --ipv6 Use IPv6 addresses.
-8 --binary Use an eight-bit data path.
-e character --escape character Set the escape character used to return to the local command prompt.

Use -4 and -6 to separate address-family problems. For example, if a hostname has both records, a successful IPv4 test and a failed IPv6 test point toward an IPv6 route, firewall, or listener issue rather than a general service outage.

The -8 option is relevant when the remote application requires an eight-bit data path. It does not add encryption or make an otherwise incompatible application speak TELNET.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #4
BSIMB 15.6" Digital Family Calendar & Chore Chart, No Subscription Fees
  • Digital Family Calendar: BSIMB digital calendar wall touch screen puts an end to your chaotic life. Designed for busy families, the digital calendar keeps you organised and in step with your family. Assign different colours and tasks to each family member to make family scheduling easier and more intuitive.
  • Easy Setup and Auto-Sync: Plug in, connect to WLAN and auto-syn your electric calendar in minutes. Digital wall calendar compatible with Google calendar, iCloud calendar, Outlook calendar, Cozi calendar and Yahoo calendar. Add events directly on the device or through the ecalendar app. Electronic calendar stays current whether you're at work or traveling—no manual updates needed.
  • All-In-One Home Assistant: Smart calendar builds habits and encourage independence with personalised chores. Display daily meal plan to reduce the daily ‘What's for dinner?’ stress. To-do lists keep track of everything you want. Turning chores into valuable achievements with stars and rewards, making life easier and more enjoyable.
  • Manage Anytime Anywhere: BSIMB electronic calendar for family stay connected with the powerful ecalendar app. Access and manage your digital wall calendar anytime, anywhere with free features like stars & rewards, photo screensaver, chore charts, meals plans, to-do lists etc. Electronic planner paid features like Magic Import tailor advanced tools for users with special needs.
  • Stay in Touch with Loved Ones: Share photos or videos from your phone to electronic wall calendar with app, instantly update your life moment, and keep in touch with your family, especially those who are far away; you can also surprise your smart calendar digital wall by sending him a wish card; it's also great for keeping tech-illiterate elders in touch with the youngsters.

To force TELNET negotiation when connecting to a non-default port, the Debian documentation describes prefixing the port with a hyphen. Because the exact parsing is implementation-specific, verify the local syntax first:

man telnet
# Then use the documented form, for example:
telnet legacy.example  -23

Do not use a forced-negotiation form for an unrelated protocol unless you know the service expects TELNET controls; those bytes can confuse an HTTP, SMTP, or custom application.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Telnet versus SSH and protocol-aware diagnostics

Tool or mode Encryption and credential protection Protocol behavior Best fit
Telnet to a TELNET server None in the documented client; session data and credentials are exposed to anyone able to observe the path. Negotiates TELNET options with a TELNET service. Controlled legacy equipment or isolated labs.
Telnet to another TCP port None. Suppresses TELNET negotiation, allowing manual bytes or text to be sent. Quick TCP reachability checks and simple plaintext protocol probes.
SSH Provides an encrypted administrative session and stronger protection for authentication. Uses the SSH protocol rather than TELNET. Remote administration and any session carrying sensitive data.
openssl s_client Designed to establish and inspect TLS. Performs a TLS handshake before application data. HTTPS and other TLS-enabled services.

The Debian man page explicitly notes that the current telnet version does not support encryption. The cited CIS Red Hat Enterprise Linux benchmark recommends that the telnet client not be installed and identifies SSH as the encrypted alternative. Treat those recommendations as a security boundary: do not use telnet for routine server administration, network-device management across an untrusted network, or any login that transmits a reusable password.

When a legacy system leaves no alternative

If a device only supports TELNET, reduce exposure rather than treating telnet as secure:

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • Place the device on a management network or isolated laboratory segment.
  • Restrict source addresses and destination port access with firewalls.
  • Use temporary, least-privilege credentials and rotate them after the maintenance window.
  • Monitor the segment for unauthorized access and capture no more sensitive data than necessary.
  • Plan migration to an encrypted management protocol, normally SSH, as soon as the device supports it.

Troubleshoot a telnet test methodically

1. Confirm the client and syntax

command -v telnet
telnet --help
man telnet

Check that you installed the intended package and that the command is not an alias or wrapper. Read the local help for option spelling before copying examples between distributions.

2. Separate name resolution from connectivity

Try the service’s resolved address when your authorization permits it. If the name fails but a known address connects, investigate DNS. If both fail, continue with routing and firewall checks rather than changing TELNET settings.

3. Test each address family

telnet -4 service.example 443
telnet -6 service.example 443

Different results identify whether the problem is specific to IPv4 or IPv6. A service can listen on one family while being absent or filtered on the other.

4. Check the destination port and listener

Verify the port number with the service owner. “Refused” often means that no process is listening on that interface and port; “timed out” more often indicates filtering or a missing route, but the message alone cannot identify the exact device responsible.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

5. Match the diagnostic client to the protocol

  • For plaintext HTTP, type a correctly terminated request and inspect the status line.
  • For HTTPS or another TLS service, use openssl s_client so certificate and handshake behavior are tested.
  • For a TELNET service, use the interactive prompt, display, and the protocol’s own login sequence.

6. Exit cleanly

Use the service’s quit command when one exists. Otherwise press Ctrl-], confirm that the telnet> prompt appears, and enter close or quit. If the terminal appears stuck, the escape character configured by -e or shown by display may differ from Ctrl-].

A practical decision guide

Your objective Use telnet? Reason
Check whether a TCP port accepts connections Yes, for a quick authorized check. Connecting to a non-TELNET port avoids TELNET negotiation and gives immediate TCP feedback.
Read or send a plaintext protocol banner Sometimes. Manual input can reveal basic application responses, but it is not a complete protocol test.
Inspect an HTTPS or other TLS endpoint No. Use a TLS-aware client such as openssl s_client.
Administer a remote Linux host No. Use SSH for an encrypted session.
Operate an old TELNET-only device Only in a controlled environment. The protocol lacks encryption, so network isolation and access controls are required.

Quick reference checklist

  • Install Ubuntu’s inetutils-telnet package and verify with telnet --help.
  • Use telnet [options] [host [port]]; omit the host to enter command mode.
  • Use open, display, send, close, ?, and quit at the telnet> prompt.
  • Press Ctrl-] to return from a live session when that is the configured escape character.
  • For a non-TELNET port, interpret a successful connection as TCP reachability only.
  • Choose -4 or -6 when you need to isolate address-family behavior.
  • Use a protocol-aware client for HTTP over TLS and other encrypted services.
  • Never send sensitive credentials through telnet; use SSH for secure administration.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
Outdated Drivers Are Slowing You DownFree scan - exact matches
Windows Errors? Fix Them Before They SpreadFree repair scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.