Are your clients experiencing the issues? Or are the reports coming in with random IP addresses from places like Russia or China?
Also, we don't abort any threads in the ES, so it could be that your application pool is getting recycled. You might check the IIS logs and see if there are any messages about it there.