I was looking at a curious uptick in traffic to TCP port 6881. What caught my eye was that itwas a immediate uptick from almostnothingand it hasbeensustained over a couple of weeks.Also, the number of sources has risen significantly compared to the past year. Here width:600px” />
Heres what it looked like over the past year. Notice the number of sources/day, especially for the time frame above width:700px” />
If anyone has any packets or ideas, please send them in!
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.