Customers server is acting very odd and tends to go down each day. Netstat -an shows many connections from 127.0.0.1 to 127.0.0.1 owned by java.exe

 

Resolution The netstat traffic looks like : 

[java.exe] 

TCP 127.0.0.1:58163 127.0.0.1:58162 ESTABLISHED 

[java.exe] 

TCP 127.0.0.1:58164 127.0.0.1:58165 ESTABLISHED 

[java.exe] 

TCP 127.0.0.1:58165 127.0.0.1:58164 ESTABLISHED 

[java.exe] 

TCP 127.0.0.1:58166 127.0.0.1:58167 ESTABLISHED 

[java.exe] 

TCP 127.0.0.1:58167 127.0.0.1:58166 ESTABLISHED 

This tends to mean that someone created a webapp / host object that points to itself. 

The host object was using the virtual dns name of the webapp and once someone clicked on that link, the server would loop back to itself causing many connections to open on the relay and eventually run the server out of resources.