We'r using a Windows 2012 server for hosting (LeaseWeb) our Windows-application.
This server has now a lot of extra outgoing traffic (> 500 Gb / day).
We like to solve this, maybe by blocking internet-access, except :
- Customers accessing the server via a client-program (started in the browser) from GoGlobal.
- Some SOAP/REST - requests in the indows-application to fixed IP-addresses.
"Microsoft Network Monitor 3.4" is already installed.
It shows LDAP is causing a lot of traffic. Port 389.
Another quick Netflow shows the IP's that are mainly responsible for the generated traffic.
Other ports are also included in the Netflow, since it was not filtered exclusively on port 389.
Unfortunately blocking the port on the server does not prevent high bandwidth consumption. Since the traffic still passes the TOR switch before it is dropped at the server, it will still count as "legit" traffic to the metrics system, which unfortunately still results in high bandwidth consumption for the server.
Regarding the IP's who are responsible :
[login to view URL]:
OrgAbuseName: SHAW ABUSE
OrgAbuseEmail: [login to view URL]@[login to view URL]
OrgAbuseRef: [login to view URL]
Abuse contact for '18.104.22.168 - 22.214.171.124' is 'abuse@[login to view URL]'
To gain information on the Abuse contacts for the owners of these IP addresses, query the whois database.
Hello! I'm a highly skilled Microsoft and Information Security infrastructure expert with 10+ years of hands-on experience. All skills and experience in my Linkedin profile: [login to view URL] I'll f Plus
3 freelance font une offre moyenne de €194 pour ce travail
Hello, i'm an expert IT with more 15 years of experience in IT industry . i'm certified Cisco networking professional 300-100 and 300-115 and Linux professional lpi 101, 102 and RHCSA and VCP 4, 5,5.5 and Data Center a Plus
Hello! Seniors We are a strong development team. I saw your article and it was also good enough. I have been working in this field for five years now and have done a lot of work and have been well appreciated by our cu Plus