[nsp-sec] 9001: New UDP amplification port?

[Dobbins, Roland]

> On Jul 1, 2021, at 4:17 PM, Borja Marcos <borjamar at sarenet.es> wrote:
> 
> Something seems to be going on with port 9001. There is a sudden interest on it, I have two /23 darknets and I see
> an odd scan with udp/9100 as destination.

I’ll ask my collegues to look into our UDP honeypot, as well, and will grovel through our DDoS attack data to see if we caught any of it.

------------------------------------------
Roland Dobbins <roland.dobbins at netscout.com>