Threat Level: green Handler on Duty: Jan Kopriva

SANS ISC: Reports of Strange TCP Port 443 Behavior SANS ISC InfoSec Forums

Watch ISC TV. Great for NOCs, SOCs and Living Rooms: https://isctv.sans.edu

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Reports of Strange TCP Port 443 Behavior

A reader posted that they are observing strange TCP 443 behavior that looks like a fast flux [1] style pattern. They have a large snort sensor install base. Is anyone else seeing behavior like this? If so.... Got packets?

If you are seeing this behavior and are allowed pleaes report it!

 

[1] http://www.honeynet.org/papers/ff/

Richard Porter

--- ISC Handler on Duty

 Richard

167 Posts
ISC Handler
Subscribe Dec 7th 2012
7 years ago

Sign Up for Free or Log In to start participating in the conversation!