|
it
newsgroups
|
|||||||||||||||||||||||
|
|||||||||||||||||||||||
Who/What is sft@loader.com in our IIS Logs? MSFTPSVC Event 10I have noticed that the system log on our Windows 2003 server contains
several event 10 warnings: User s**@loader.com at host 89.246.42.91 has timed-out after 120 seconds of inactivity. Day-by-day the IP address changes, but the message is the same. Does anyone know what this is and, more to the point, how to stop it? TIA Charles It would help if you gave information as to your set-up.
Is this a LAN server behind a firewall, or an accessible one in a DMZ? Which bits of the IP change? Not the 89 I would guess. FYI loader.com is a German site selling earth-moving equipment. -- Show quoteHide quoteNewell White "Charles Law" wrote: > I have noticed that the system log on our Windows 2003 server contains > several event 10 warnings: > > User s**@loader.com at host 89.246.42.91 has timed-out after 120 seconds > of inactivity. > > Day-by-day the IP address changes, but the message is the same. Does anyone > know what this is and, more to the point, how to stop it? > > TIA > > Charles > > > Hi Newell
Thanks for replying. The IP is all over the place; there was an event an hour ago from 77.181.253.32. This is a hosted server using Windows Firewall. I have looked up some of the IP addresses, and so far they are all in Germany, but not the same place each time. I haven't looked up the one above, but if I ping it I get dtmd-4db5fd20.pool.einsundeins.de Any other information? Charles Show quoteHide quote "Newell White" <NewellWh***@discussions.microsoft.com> wrote in message news:F720B191-AD8C-4FAD-B937-D829DE0CF4F7@microsoft.com... > It would help if you gave information as to your set-up. > > Is this a LAN server behind a firewall, or an accessible one in a DMZ? > > Which bits of the IP change? Not the 89 I would guess. > > FYI loader.com is a German site selling earth-moving equipment. > -- > Newell White > > > "Charles Law" wrote: > >> I have noticed that the system log on our Windows 2003 server contains >> several event 10 warnings: >> >> User s**@loader.com at host 89.246.42.91 has timed-out after 120 >> seconds >> of inactivity. >> >> Day-by-day the IP address changes, but the message is the same. Does >> anyone >> know what this is and, more to the point, how to stop it? >> >> TIA >> >> Charles >> >> >>  
Other interesting topics
Admin access denied to view roaming profiles
Domain Controller Configuration Insufficient privilege to remote shutdown a server Tool to email if server is up or down? Command line parameters not valid Upgrade to internert explorer 7 Replacing controller & disks SSL 2.0 Vulernability IPSec policy on servers connected to 2 networks Which of my servers is 2003 R2? |
|||||||||||||||||||||||
