System Log Entry

[Cliff]

I am seeing the sollowing in my system log hundreds of times.

FTP server could not create a client worker thread for user at host
65.89.60.238. The connection to this user is terminated.

It strikes me as a security issue and I wanted some feedback from some of
you.

Thanks

Cliff

 

[Guest]

When multiple passive connections are made at the same time to a single FTP server
it is possible to use up all available system threads for servicing clients
Any additional connection requests will result in errors until a client thread is available again.

Microsoft Knowledge Base Article - 18926
"FTP Passive Mode May Terminate Session
http://support.microsoft.com/default.aspx?scid=kb;[LN];18926

Austin M. Horst

 

[Cliff]

Actually, we have FTP turned off on this server.

 

[Austin M. Horst]

Turned off or not installed?
Obviously Internet Information Server is installed if you
are receiving those System event message.
If it's not needed, it should be uninstalled.
You could also get this message if IIS web services are
enabled.
This message may be from attempted web connections, not
FTP connections.

Austin M. Horst

 

[Cliff]

Got it...I think I understand now. It's installed but turned off.