Greetings!
Running SBS 2000. There are IP addresses that appear under "Traffic by
users" in ISA daily summary reports that don't belong to any client in
the domain. My clients are all assigned 10.x.x.x ip addresses; the
foreign ip addresses vary from 68.x.x.x to 70.x.x.x. Logs and
performance counters don't show unusual activity such as spikes in
processor usage or long qeues of odd emails in Exchange. When I ping
these addresses, I get replies back.
What are some things I can do to find out what's going on? How can I
find whose ip addresses these belong to using command line? Have I been
hacked? Spam?
Thanks.
Techieluvr