Solved

A user’s machine is being chatty with IP

Posted on 2014-04-30
3
226 Views
Last Modified: 2014-05-08
A user’s machine is being chatty with IP 199.27.105.111., it looks like this IP is associated with rgbcolo.rgbnetworks.com,  or www.layer42.net  or possibly  amazon cloud player. Any thoughts would be great.
Thanks folks
0
Comment
Question by:kennethjk
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 95

Accepted Solution

by:
John Hurst earned 500 total points
ID: 40031941
I suggest you get a copy of Wireshark. Put it on a machine on the same subnet as the problem machine. See if you can see in the packets:

1. Excessive packets.
2. Undesirable traffic in the packets. You should be able to see packet contents. I use CommView for this.

It is a very detailed analysis and not always fruitful.

If the site is not in compliance with your company guidelines, have the employee's manager discuss the issue and ask the employee to stop.
0
 

Author Closing Comment

by:kennethjk
ID: 40049861
Thank you so much
0
 
LVL 95

Expert Comment

by:John Hurst
ID: 40050260
@kennethjk  - You are most welcome and I was happy to help.
0

Featured Post

NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

There is a question posted at http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Windows_Server_2008/Q_28324159.html (http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Windows_Server_2008/Q_28324159.html) and i…
BIND is the most widely used Name Server. A Name Server is the one that translates a site name to it's IP address. There is a new bug in BIND (https://kb.isc.org/article/AA-01272), affecting all versions of BIND 9 from BIND 9.1.0 (inclusive) thro…
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question