Threat Level: green Handler on Duty: Johannes Ullrich

SANS ISC: BitTorrent or Something Else? - SANS Internet Storm Center SANS ISC InfoSec Forums


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
BitTorrent or Something Else?

I was looking at a curious uptick in traffic to TCP port 6881.    What caught my eye was that it was a immediate uptick from almost nothing and it has been sustained over a couple of weeks. Also, the number of sources has risen significantly compared to the past year.  Here's what it looks like now:

Here's what it looked like over the past year.  Notice the number of sources/day, especially for the time frame above :

If anyone has any packets or ideas, please send them in! 

 

 

Lorna

150 Posts
ISC Handler
I ran a search from May of last year through to now and don't see anything out of the ordinary. This is my home network.

205 events (5/1/16 12:00:00.000 AM to 3/3/17 12:00:00.000 AM)
Anonymous

Posts

Sign Up for Free or Log In to start participating in the conversation!