Event ID - 1131

Event Id	1131
Source	Microsoft-Windows-IIS-W3SVC
Description	The World Wide Web Publishing Service (WWW Service) did not register the URL prefix %1 for site %2. HTTP.sys has been configured to listen to too many ports. The site has been disabled. The data field contains the error number.
Event Information	According to Microsoft : Cause : This event is logged when the World Wide Web Publishing Service (WWW Service) did not register the URL prefix for site. Resolution : Stop and restart the HTTP service Stopping the HTTP service will shut down the World Wide Web Publishing Service (W3SVC). All Web traffic to the server will stop while these services are down. To perform this procedure, you must have membership in Administrators , or you must have been delegated the appropriate authority. To stop and restart the HTTP service: Open an elevated Command Prompt window. Click Start , point to All Programs , click Accessories , right-click Command Prompt , and then click Run as administrator . Type net stop HTTP /y . Type net start w3svc . This will also start the HTTP service. Start any other services that were stopped when HTTP and W3SVC were shut down. Verify : To verify that a Web site is started, you can use either IIS Manager or the appcmd command line utility. To perform these procedures, you must have membership in Administrators , or you must have been delegated the appropriate authority. To verify that the Web site is started by using the appcmd command line utility: Open an elevated Command Prompt window. Click Start , point to All Programs , click Accessories , right-click Command Prompt , and then click Run as administrator . Change the directory to %SystemDrive%\Windows\System32\inetsrv . Run the following command: appcmd.exe list site -site.name:"Site Name" . If the Web site is started, the output will resemble the following: *SITE "Default Web Site" (id:1,bindings:http/:80:,state:Started) To verify that the Web site is started by using IIS Manager: Click Start , click Control Panel , and then click Administrative Tools . Right-click Internet Information Services (IIS) Manager and select Run as administrator . In the Connections pane, expand the computer name. In the Connections pane, click the Sites node. In Features View , look for the Web site name. The Web site status will be indicated under the Status column. If the Web site is started and is using the HTTP protocol, Started(http)** will appear.
Reference Links	Event ID 1131 from Source Microsoft-Windows-IIS-W3SVC

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught