About prashant.sharma

prashant.sharma · ‎09-09-2020

Found a lot of out-of-order and re-transmitted packets. For me, some of the traffic is going to Microsoft servers with unrecognized text in XML and some other traffic going to some hosted servers which are apparently similar to the line of business. Did not find anything too concerning.

prashant.sharma · ‎09-09-2020

Yes, see if you can get some captures. I would do that myself too but I do not have the approval to do the captures on the target machines. I am running some on FW though as the time of this writing. Will let you now if find something interesting.

prashant.sharma · ‎09-09-2020

Hello, I have been seeing the same and it is awful lot of traffic. I checked the destination IPs and most of them are Microsoft IPs in my case. However, I did notice some other IPs too which are flagged by some of the threat detection engines. The traffic has application 'not-applicable' which tells me there is no real data over the network but it more sort of probing with a packet or two. I noticed most traffic going out over ports 443/80. Have you done any packet captures? Thanks,

Member Since	‎10-07-2019 05:34 PM
Date Last Visited	‎09-14-2020 12:01 PM
Posts	3

Online Status	Offline
Date Last Visited	‎09-14-2020 12:01 PM

About prashant.sharma

Re: Help with Threat log SCAN: Host Sweep

Re: Help with Threat log SCAN: Host Sweep

Re: Help with Threat log SCAN: Host Sweep

Help with Threat log SCAN: Host Sweep

Re: Help with Threat log SCAN: Host Sweep

Re: Help with Threat log SCAN: Host Sweep

Re: Help with Threat log SCAN: Host Sweep