ISA Server 2006
Users connect through VPN and get assigned a 10.10.10.x IP address.
Looking through the logs, under "C_IP" (IP of requesting client) I see some IP addresses of the host (for updates and such, makes sense) and some private IP addresses of clients connecting through the VPN (10.10.10.x) but then I also see some random IP addresses. WHAT ARE THESE??
A whois does not give me much information at all... It shows they are are using HTTP to access websites... and they are being provided the service by my host IP address.
No one else should be connecting other than the host connections and the vpn users with the private IPs, so where are these coming from????
THANKS.