Strange TCP syn/ack behavior
Hello everyone. I have a web server that is initiating weird traffic. Essentially here is the jist: Source : 10.10.50.80:443 Dest : (a few external IPs):22
There isn’t a lot of traffic between them, but it all looks like this:
SYN/ACK Retransmission of SYN/ACK Retransmission of SYN/ACK RST
in that order. Bear in mind, this is from my server TO the random ext IPs.
What are your thoughts on this?