We are also seeing the following two at restart:
Log Name: Application
Source: MSExchangeTransport
Date: 01/12/2020 12:23:06
Event ID: 7004
Task Category: Components
Level: Information
Keywords: Classic
User: N/A
Computer: server-EX1.server.local
Description:
The activation of all modules took longer than expected to complete. Total Load Time: 00:00:42.5891854 Total Start Time: 00:00:00.0623949 Load Time Breakdown:
Load AD Configuration Readers:00:00:42.2438973
>> Detailed breakdown begin:
Load Transport server and dependents:00:00:00.6853215
>> Detailed breakdown begin:
Load TransportServerLoader:00:00:00.2378423
Load TransportSettingsConfigLoader:00:00:00.0141167
Load OrganizationConfigLoader:00:00:00.0257253
Load ConfigurationLoader`2:00:00:00.0731960
Load ConfigurationLoader`2:00:00:00.0117568
Load DumpsterComponent:00:00:00.0060381
Load Orserverenerator:00:00:00.0105436
Load DsnGenerator:00:00:00.0401481
Load PerfCountersLoader:00:00:00.0020028
Load LoggingComponent:00:00:00.0027446
Load PoisonMessage:00:00:00.0006882
Load DirectTrustLoader:00:00:00.0227064
Load MicrosoftExchangeRecipientLoader:00:00:00.0300178
Load ClassificationConfigLoader:00:00:00.1869860
Load ConfigurationLoader`2:00:00:00.0196013
>> Detailed breakdown end.
Load ServicePrincipalNameRegistrar:00:00:00.0730822
Load CategorizerMExRuntimeLoader:00:00:00.3369958
Load Database and dependents:00:00:42.2422648
>> Detailed breakdown begin:
Load Database:00:00:30.9123751
Load ResourceManager:00:00:00.0383210
Load QueueManager:00:00:00.0212440
Load Database:00:00:11.2700723
>> Detailed breakdown end.
Load SmtpMExRuntimeLoader:00:00:28.0718998
Load CertificateCacheLoader:00:00:00.0403509
>> Detailed breakdown end.
Load RpcServerComponent:00:00:00.0050877
Load CategorizerComponent:00:00:00.2390596
Load SmtpInComponent:00:00:00.0051010
Load StoreDriverLoader:00:00:00.0792407
Load PickupComponent:00:00:00.0000323
Load BackgroundMailScanner:00:00:00.0000174
Load SmtpOutConnectionHandler:00:00:00.0157943
Load NonSmtpGatewayConnectionHandler:00:00:00.0000180
Load BackgroundProcessingThread:00:00:00.0000118 Start Time Breakdown:
Start AD Configuration Readers:00:00:00.0000597
>> Detailed breakdown begin:
Start Transport server and dependents:00:00:00.0000161
Start Database and dependents:00:00:00.0000009
>> Detailed breakdown end.
Start CategorizerComponent:00:00:00.0000127
Start SmtpInComponent:00:00:00.0217329
Start StoreDriverLoader:00:00:00.0397332
Start PickupComponent:00:00:00.0000379
Start BackgroundMailScanner:00:00:00.0000133
Start SmtpOutConnectionHandler:00:00:00.0001912
Start NonSmtpGatewayConnectionHandler:00:00:00.0000205
Start BackgroundProcessingThread:00:00:00.0003523
Event Xml:
7004
4
6
0x80000000000000
1142798
Application
server-EX1.server.local
00:00:42.5891854
00:00:00.0623949
Load AD Configuration Readers:00:00:42.2438973
>> Detailed breakdown begin:
Load Transport server and dependents:00:00:00.6853215
>> Detailed breakdown begin:
Load TransportServerLoader:00:00:00.2378423
Load TransportSettingsConfigLoader:00:00:00.0141167
Load OrganizationConfigLoader:00:00:00.0257253
Load ConfigurationLoader`2:00:00:00.0731960
Load ConfigurationLoader`2:00:00:00.0117568
Load DumpsterComponent:00:00:00.0060381
Load Orserverenerator:00:00:00.0105436
Load DsnGenerator:00:00:00.0401481
Load PerfCountersLoader:00:00:00.0020028
Load LoggingComponent:00:00:00.0027446
Load PoisonMessage:00:00:00.0006882
Load DirectTrustLoader:00:00:00.0227064
Load MicrosoftExchangeRecipientLoader:00:00:00.0300178
Load ClassificationConfigLoader:00:00:00.1869860
Load ConfigurationLoader`2:00:00:00.0196013
>> Detailed breakdown end.
Load ServicePrincipalNameRegistrar:00:00:00.0730822
Load CategorizerMExRuntimeLoader:00:00:00.3369958
Load Database and dependents:00:00:42.2422648
>> Detailed breakdown begin:
Load Database:00:00:30.9123751
Load ResourceManager:00:00:00.0383210
Load QueueManager:00:00:00.0212440
Load Database:00:00:11.2700723
>> Detailed breakdown end.
Load SmtpMExRuntimeLoader:00:00:28.0718998
Load CertificateCacheLoader:00:00:00.0403509
>> Detailed breakdown end.
Load RpcServerComponent:00:00:00.0050877
Load CategorizerComponent:00:00:00.2390596
Load SmtpInComponent:00:00:00.0051010
Load StoreDriverLoader:00:00:00.0792407
Load PickupComponent:00:00:00.0000323
Load BackgroundMailScanner:00:00:00.0000174
Load SmtpOutConnectionHandler:00:00:00.0157943
Load NonSmtpGatewayConnectionHandler:00:00:00.0000180
Load BackgroundProcessingThread:00:00:00.0000118
Start AD Configuration Readers:00:00:00.0000597
>> Detailed breakdown begin:
Start Transport server and dependents:00:00:00.0000161
Start Database and dependents:00:00:00.0000009
>> Detailed breakdown end.
Start CategorizerComponent:00:00:00.0000127
Start SmtpInComponent:00:00:00.0217329
Start StoreDriverLoader:00:00:00.0397332
Start PickupComponent:00:00:00.0000379
Start BackgroundMailScanner:00:00:00.0000133
Start SmtpOutConnectionHandler:00:00:00.0001912
Start NonSmtpGatewayConnectionHandler:00:00:00.0000205
Start BackgroundProcessingThread:00:00:00.0003523
And this:
Log Name: Application
Source: MSExchangeTransport
Date: 01/12/2020 12:24:37
Event ID: 1021
Task Category: SmtpReceive
Level: Warning
Keywords: Classic
User: N/A
Computer: server-EX1.server.local
Description:
Receive connector mail.server.co.uk rejected an incoming connection from IP address 167.89.98.188. The maximum number of connections per source (20) for this connector has been reached by this source IP address.
Event Xml:
1021
3
1
0x80000000000000
1142811
Application
server-EX1.server.local
mail.server.co.uk
20
167.89.98.188