Strange TCP syn/ack behavior

asked 2021-12-07 21:45:28 +0000

Hello everyone. I have a web server that is initiating weird traffic. Essentially here is the jist: Source : 10.10.50.80:443 Dest : (a few external IPs):22

There isn’t a lot of traffic between them, but it all looks like this:

SYN/ACK Retransmission of SYN/ACK Retransmission of SYN/ACK RST

in that order. Bear in mind, this is from my server TO the random ext IPs.

What are your thoughts on this?

edit retag flag offensive close merge delete