I first thought my server was crashing due to an issue on my end.. Then I noticed the message in our event's log that mentioned a rdp exploit on windows OS'es.. I also have noticed a bog in performance too. We normally run 12 servers at 87-95% CPU but now we achieve a 95-97% with just 10..
This have to do with this bug on rdp?
Relief
-
kolt
- A semi-regular
- Posts: 16
- https://www.youtube.com/channel/UC40BgXanDqOYoVCYFDSTfHA
- Joined: Mon Jul 18, 2011 7:20 am
Re: Relief
If you're noticing a large number of RDP connection attempts, that could reduce your performance -- it's separate from the exploit, but a problem that we've seen before. You could improve performance in this case by changing the RDP port or by blocking any IPs that are attempting to connect and guess the password.
Attacking IPs can be found through the system events log, or through software such as Wireshark or windump.
Attacking IPs can be found through the system events log, or through software such as Wireshark or windump.
Re: Relief
Didn't get to look.. I went ahead a did a format as one of the people that used to log into it before was using it to browse the internet.. 
..
I also love dealing with fresh installs.
Anywho, I will keep and eye out on it and do what you suggested if the problem persists.
..I also love dealing with fresh installs.
Anywho, I will keep and eye out on it and do what you suggested if the problem persists.