Re: See a lot of Hits on Port 80 TCP
From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 08/23/05
- Next message: kevin: "Re: See a lot of Hits on Port 80 TCP"
- Previous message: Steven L Umbach: "Re: Ip address VS DNS site navigation"
- In reply to: kevin: "Re: See a lot of Hits on Port 80 TCP"
- Next in thread: kevin: "Re: See a lot of Hits on Port 80 TCP"
- Reply: kevin: "Re: See a lot of Hits on Port 80 TCP"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Tue, 23 Aug 2005 15:33:01 -0500
I tend to doubt it had anything to do with your web browser, probably just a
coincidence. Those port 80 scans are for trying to connect to a computer
running a web server on it. If your does not have such enabled then you have
nothing to worry about anyhow for those attempts. It is possible for Windows
2000/XP to have the personal web server enabled. You can run the command
netstat -an on your computer to see if your computer is listening or
connected on port 80 TCP for "local address". There are free tools such as
TCPView from SysInternals that are great for showing port usage on your
computer and the associated executable. --- Steve
http://www.sysinternals.com/Utilities/TcpView.html --- TCPView
"kevin" <NoSpam@Invalid.Address.Com> wrote in message
news:%23MF$LT$pFHA.3572@TK2MSFTNGP09.phx.gbl...
> Steven L Umbach wrote:
>> Zombie computers will perpetually by trying to connect to port 80 by
>> scanning public IP addresses and the number of attempts is constantly
>> fluctuating. I still see my firewall blocking the red code worm. I would
>> not worry about it if your firewall is doing its job. You are not being
>> singled out. --- Steve
>>
>>
>> "kevin" <NoSpam@Invalid.Address.Com> wrote in message
>> news:OJ3uwC0pFHA.3004@TK2MSFTNGP15.phx.gbl...
>>
>>>Hello,
>>>
>>>I have Netscape for my ISP and they use AOL Servers.
>>>(They are owned by AOL)
>>>Using Netscape 7.2 Browser Email Client, Netscape ISP Dial-up.
>>>I switched ISP's several Months ago.
>>>
>>>I see a large number of Hits on Port 80, some are Web Sites, most are
>>>users and never Seen so many hits on that Port before.
>>>Most of the IP's are AOL IP Blocks but not all.
>>>
>>>Rule "Default Block HTTP Port 80 TCP" blocked (compaq,http). Details:
>>>Inbound TCP connection
>>>Local address,service is (compaq,http)
>>>Remote address,service is (172.134.0.64,3837)
>>>Process name is "N/A"
>>>
>>>They hit no matter if I have a Browser\Email Client up or not.
>>>I have been seeing this for several Months now.
>>>
>>>The Firewall stops them and I'm not Worried about them but wondered what
>>>they all were.
>>>
>>>
>>>Kevin
>>
>>
>>
>
> Hi Steve,
>
> And thank you for your reply.
>
> I'm running a new Browser and ISP that I thought might be part of the
> Problem.
> But getting hit without the Browser up threw me a bit.
>
> The thing that got me was there were so many AOL IP's and only a handful
> of others hitting Port 80 that made me question if it might be something
> else.
>
> I tried to put the IP's in the Browser to see if they were Web Sites and a
> small number came back Under Construction that tried to set a Cookie.
> Most don't do that but found 4 that did.
>
> Thanks again.
>
> Kevin
>
>
>
>
- Next message: kevin: "Re: See a lot of Hits on Port 80 TCP"
- Previous message: Steven L Umbach: "Re: Ip address VS DNS site navigation"
- In reply to: kevin: "Re: See a lot of Hits on Port 80 TCP"
- Next in thread: kevin: "Re: See a lot of Hits on Port 80 TCP"
- Reply: kevin: "Re: See a lot of Hits on Port 80 TCP"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
