We’ve seen a spike over the last day or so in reports of apparent scanning on UDP %%port:3333%%. I have serious doubts that anyone is actually looking for DEC Notes which is the registered IANA use for this port. While we’re getting our own honeypots set up, I figured I’d ask our readers, do you have packets and/or any idea what is going on here? Please let us know in the comments or via our contact page. Thanx in advance.
Article Link: https://isc.sans.edu/diary/rss/23215