Over the past 24 hours I have been monitoring my exchange server and it has been pushing out alot of data to a remote IP.
EdgeTransport.exe:7304 TCP 172.20.10.189:23905 213.239.241.18:25 ESTABLISHED
This ip 213.239.241.18 translates to host18.sitepush.net and in the last 24 hours has pushed out about 2 GB of data.
I need to find out who is sending email out to that device through Exchange. Is there any way to find that info using Exchange Tools?
Start Free Trial