When this server is attached to our network, the 'upload' speed that every computer on the network drops from ~10mbps to 1 - 2mbps. Is this a DDOS attack, or probing for a vulnerability, or...?
Asked
Active
Viewed 233 times
0
Steven Graves
- 101
- 1
-
Based on the destination addresses, it looks like it could be a CLDAP Reflection DDoS attack outbound FROM your server. – joeqwerty May 11 '18 at 22:10
-
You're going to have to do some investigating. What's installed on the server? Have you scanned it with any AV software? Install and run Microsoft Network Monitor and find the process responsible for the traffic and investigate it. – joeqwerty May 11 '18 at 22:19