I am sorry if i am posting this on wrong forum,

I have very wierd problem on my server 2008 R2, it is keep sending responder to IP 5.22.149.135 URL: forwarding.moniker.com. I have not place any script to do that, it does every 5 minute regularly.

I try trace it in Server IIS setting , but can't fing any trace. Please help, it is  annoying

Hi Mukesh,

Since this issue is related to network, I will move this thread to the Network forum.

Hope that you will get an answer there soon.

Best Regards,

Amy

Hi,

You can use netstat ano get the process ID, then use the Task manager determine which process are sending the package then for the next step troubleshooting.

The related KB:

How to determine which program uses or blocks specific transmission control protocol ports in Windows

http://support.microsoft.com/kb/281336

Hope this helps.