Strange TCP syn/ack behavior

Strange
retag add tags

Hello everyone. I have a web server that is initiating weird traffic. Essentially here is the jist: Source : 10.10.50.80:443 Dest : (a few external IPs):22

There isn’t a lot of traffic between them, but it all looks like this:

SYN/ACK Retransmission of SYN/ACK Retransmission of SYN/ACK RST

in that order. Bear in mind, this is from my server TO the random ext IPs.

What are your thoughts on this?

Nyar1ath0t3p

asked 2021-12-07 21:45:28 +0000

edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

Be the first one to answer this question!

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Strange TCP syn/ack behavior edit

Comments

Be the first one to answer this question!

Strange TCP syn/ack behavior