I'm at my wits end. I have a sbs 2003 with exchange and the queue seem to be constantly filling up. I scanned pcs and servers with Malware Bytes, combofix, and Symantec. Under the default virtual server I see some connections under the [current status]. These ips are known to be bad. I terminate them but them come back after a while. I need some program to trace where these are coming from. I even shutdown every pc except the server and a couple other critical pcs.