Re: See a lot of Hits on Port 80 TCP

From: kevin (NoSpam_at_Invalid.Address.Com)
Date: 08/23/05

  • Next message: chupper: "determine process space" 
    Date: Tue, 23 Aug 2005 11:15:31 -0400

    Steven L Umbach wrote:
    > Zombie computers will perpetually by trying to connect to port 80 by
    > scanning public IP addresses and the number of attempts is constantly
    > fluctuating. I still see my firewall blocking the red code worm. I would not
    > worry about it if your firewall is doing its job. You are not being singled
    > out. --- Steve
    >
    >
    > "kevin" <NoSpam@Invalid.Address.Com> wrote in message
    > news:OJ3uwC0pFHA.3004@TK2MSFTNGP15.phx.gbl...
    >
    >>Hello,
    >>
    >>I have Netscape for my ISP and they use AOL Servers.
    >>(They are owned by AOL)
    >>Using Netscape 7.2 Browser Email Client, Netscape ISP Dial-up.
    >>I switched ISP's several Months ago.
    >>
    >>I see a large number of Hits on Port 80, some are Web Sites, most are
    >>users and never Seen so many hits on that Port before.
    >>Most of the IP's are AOL IP Blocks but not all.
    >>
    >>Rule "Default Block HTTP Port 80 TCP" blocked (compaq,http). Details:
    >>Inbound TCP connection
    >>Local address,service is (compaq,http)
    >>Remote address,service is (172.134.0.64,3837)
    >>Process name is "N/A"
    >>
    >>They hit no matter if I have a Browser\Email Client up or not.
    >>I have been seeing this for several Months now.
    >>
    >>The Firewall stops them and I'm not Worried about them but wondered what
    >>they all were.
    >>
    >>
    >>Kevin
    >
    >
    >

    Hi Steve,

    And thank you for your reply.

    I'm running a new Browser and ISP that I thought might be part of the
    Problem.
    But getting hit without the Browser up threw me a bit.

    The thing that got me was there were so many AOL IP's and only a handful
    of others hitting Port 80 that made me question if it might be something
    else.

    I tried to put the IP's in the Browser to see if they were Web Sites and
    a small number came back Under Construction that tried to set a Cookie.
    Most don't do that but found 4 that did.

    Thanks again.

    Kevin

  • Next message: chupper: "determine process space"

    Relevant Pages

    • Re: See a lot of Hits on Port 80 TCP
      ... Zombie computers will perpetually by trying to connect to port 80 by ... > I have Netscape for my ISP and they use AOL Servers. ... > Using Netscape 7.2 Browser Email Client, ... > users and never Seen so many hits on that Port before. ...
      (microsoft.public.security)
    • Re: Almost able to broadcast
      ... >Thanks for the reply Neil - still on a steep learning curve with this stuff. ... never miss an opportunity to knock AOL;-) ... >about why the WME Live Broadcast wizard offers to find a free port each ... Cheers - Neil ...
      (microsoft.public.windowsmedia.encoder)
    • Re: Exchange 5.5 Port 587
      ... That's the port SMTP uses by default, ... to access an SMTP server over an alternate port, ... This misguidance is not atypical of AOL support, ...
      (microsoft.public.exchange.connectivity)
    • Re: Blocking AOL for Broadband and NOT AIM
      ... I checked and the AOL client ... > uses the same port as AIM. ... We want to allow people to use AIM ... TCP port 5190 it can be easily configured to use something else. ...
      (comp.security.firewalls)
    • Ex2k, OWA und Proxy-Einstellungen
      ... Genauer gesagt handelt es sich um einen SBS2000 mit einem ISA im ... Es geht von außen aber nur dann, wenn ich im Browser den SBS als Proxy ... Servers und Port 8080) - oder ich verwende den Firewall-Client. ... SBS2000 mit ISA im integrierten Modus, ...
      (microsoft.public.de.german.exchange2000.general)