locked
W3WP Process trying to contact an external server RRS feed

  • Question

  • We are facing a strange issue on SharePoint 2010

    W3WP process is trying to contact an external server on Port 80(which is not used as in any configuration and code), there are no interfaces or relation between these two servers.

    Netstat is showing that W3WP process is trying to connect using a high range port at source to port 80 on an external destination server, unable to narrow down what is causing this attempt to connect to an external server.

    Below is the message shown in the netstat logs:

      TCP    X.X.X.X:61234    X.X.X.X:80       SYN_SENT        XXXX

    Searched for the whole source code, configuration, web config files, ULS Logs, Event Viewer logs and could not find the IP address which is shown in the net stat logs.

    This issue has started one week back, there were no custom code deployments/ sharepoint patching / windows patching / or any custom software installation recently. 

    Stopped SharePoint Admin service and timer service and still the server is trying to connect to the external server.

    Would appreciate any help on giving some pointers in narrowing down which component is initiating the w3wp process to attempt a connection to an external server.




    • Edited by Rsiripr Wednesday, September 25, 2019 12:58 PM Added more details
    Wednesday, September 25, 2019 12:47 PM

All replies

  • Hi

    Do you have any other websites on your SharePoint server? Please check the IIS for application pools.


    Justin Liu Office Apps & Services MVP, MCSE
    Senior Software Engineer
    Please Vote and Mark as Answer if it helps you.


    Thursday, September 26, 2019 1:51 AM
  • Hi Justin Liu,

    We have only one web application on the sharepoint server.

    Thanks 

    Thursday, September 26, 2019 4:00 AM
  • Hi Rsiripr,

    You could use a tool called TCPView that will show you all of the connections on your machine similar to netstat.

    It will also allow you to close the connection or kill the process hosting the connection.

    Best Regards,

    Julie

    Thursday, September 26, 2019 9:57 AM
  • Hi Julie, Thank you for your response.

    The TCPView tool is showing an active connection from W3WP process on source Share Point server to an external server, even after an App pool reset , this connection is triggering from a new high port (greater than 41K).

    Unable to narrow down on what is causing the W3WP to initiate a connection to a remote server.

    Monday, September 30, 2019 3:05 AM
  • Hi,

    Can you locate any remote service application via Central Administration > Application Management > Manage Service Applications?

    Best regards,

    Chelsea Wu


    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    SharePoint Server 2019 has been released, you can click here to download it.
    Click here to learn new features. Visit the dedicated forum to share, explore and talk to experts about SharePoint Server 2019.

    Tuesday, October 1, 2019 9:52 AM
  • Hi Chelsea,

    Apologies for the delayed response.

    There are no remote service applications are present in the CA.

    Thank you for your response

    Tuesday, November 5, 2019 3:17 AM