I have some problems with my two AD/DNS servers for my hosted Exchange setup, as they suddently began to consume large amounts of bandwidth (~10mbit each), which I think is really strange, as they are not really in use yet.
Heres are some screens from TCPView on the servers:
As you can see, the DNS process really consumes some bandwidth.
I checked the firewall logs, and it doesn't seem like someone from the outside is trying to make a lot of DNS requests.
How do I troubleshoot from here? Shutting down the DNS service brings the bandwidth usage down, but that is not an optimal solution.
EDIT
Running wireshark on the two servers gives me a load of DNS queries for ripe.net: type ANY, class IN
I have uploaded two capture files from my servers, each ran for ~20secs.
Server1.pcapng Server2.pcapng
(My servers IP's are 77.66.101.162/10.10.10.1 and 77.66.101.189/10.10.10.2)