Over the past month I noticed a resurgence of probe by Digitalocean looking for the Microsoft (MS) Secure Socket Tunneling Protocol (SSTP). This MS proprietary VPN protocol is used to establish a secure connection via the Transport Layer Security (TLS) between a client and a VPN gateway. Additional information on this protocol available here. Sample Log 20210710-062306: 192.168.25.9:443-138.68.249.116:50742 data Indicators [1] http://msdn.microsoft.com/en-us/library/cc247364.aspx ----------- |
Guy 522 Posts ISC Handler Jul 10th 2021 |
Thread locked Subscribe |
Jul 10th 2021 10 months ago |
Sign Up for Free or Log In to start participating in the conversation!