TCP 3333
Synopsis
- TCP 3333 is registered by IANA for DEC Notes (Digital/Compaq/HP OpenVMS Notes), and legacy OpenVMS Notes servers ran the DEC Notes conferencing service on this port.
- Cryptocurrency miners commonly use 3333 for local/remote control APIs: Claymore’s Dual Ethereum GPU Miner and PhoenixMiner expose a remote manager on TCP 3333 by default.
- Ethminer’s HTTP/JSON API is often configured on 127.0.0.1:3333 (via the --api-port option).
- Several mining pools run Stratum on port 3333; for example, NiceHash’s Scrypt stratum endpoints and litecoinpool.org accept stratum+tcp connections on 3333.
- Because of these mining uses, port 3333 is frequently seen in illicit cryptomining: malware deploys miners that listen on 3333 or connects to pools on 3333 to mine without authorization.
Observed activity
Last 30 days
Detailed chart