|
Posted by Charles Law on December 20, 2007, 9:02 am
Please log in for more thread options It was a few weeks ago, but I seem to remember that we disabled FTP on the
server, as we no longer require it, and the problem went away. Not a very
scientific solution, but it worked for us.
Charles
> Charles;
>
> Did you ever determine the source of these events? We're seeing them on
> our
> FTP server (windows 2000) located in our DMZ?
>
> Thanks
>
>
> "Charles Law" wrote:
>
>> Hi Newell
>>
>> Thanks for replying. The IP is all over the place; there was an event an
>> hour ago from 77.181.253.32.
>>
>> This is a hosted server using Windows Firewall. I have looked up some of
>> the
>> IP addresses, and so far they are all in Germany, but not the same place
>> each time. I haven't looked up the one above, but if I ping it I get
>>
>> dtmd-4db5fd20.pool.einsundeins.de
>>
>> Any other information?
>>
>> Charles
>>
>>
>> > It would help if you gave information as to your set-up.
>> >
>> > Is this a LAN server behind a firewall, or an accessible one in a DMZ?
>> >
>> > Which bits of the IP change? Not the 89 I would guess.
>> >
>> > FYI loader.com is a German site selling earth-moving equipment.
>> > --
>> > Newell White
>> >
>> >
>> > "Charles Law" wrote:
>> >
>> >> I have noticed that the system log on our Windows 2003 server contains
>> >> several event 10 warnings:
>> >>
>> >> User sft@loader.com at host 89.246.42.91 has timed-out after 120
>> >> seconds
>> >> of inactivity.
>> >>
>> >> Day-by-day the IP address changes, but the message is the same. Does
>> >> anyone
>> >> know what this is and, more to the point, how to stop it?
>> >>
>> >> TIA
>> >>
>> >> Charles
>> >>
>> >>
>> >>
>>
>>
>>
| 
XML Sitemap