Event Viewer Question

I was looking through some Account Logon success and failure audits and I noticed that in the properties of one of the audits it referred to my server as FTP and it puts a little square after it…like something out of wingdings. Other times it just calls it FTP (without the square symbol next to it). Any idea what that’s all about? It may mean nothing, but I’m trying to get to the bottom of something and would like to rule that out.