Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 8 Source: MSFTPSVC

FTP Server could not create a client worker thread for user at host <ip address>. The connection to this user is terminated. The data is the error.
In IIS6, when the FTP server is configured to accept connections only from specific addresses, and when a connection is attempted from a source IP not on that list, the connection is rejected, and event 8 is logged. This appears to be normal behavior.
As per Microsoft: "This problem can occur when the metabase flag for IP Security is not correctly removed from the metabase after changes are made to the IP Restrictions. Although the settings are changed so that everyone has access to the FTP site, the setting in the metabase is still flagged.". In certain conditions, this can be considered a sign of a denial of service attack. See the links below for more details.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.