Re: See a lot of Hits on Port 80 TCP

From: kevin (NoSpam_at_Invalid.Address.Com)
Date: 08/23/05

  • Next message: reli: "Unknown ID and I even didn't add him or her...." 
    Date: Tue, 23 Aug 2005 17:04:35 -0400

    Steven L Umbach wrote:

    > I tend to doubt it had anything to do with your web browser, probably just a
    > coincidence. Those port 80 scans are for trying to connect to a computer
    > running a web server on it. If your does not have such enabled then you have
    > nothing to worry about anyhow for those attempts. It is possible for Windows
    > 2000/XP to have the personal web server enabled. You can run the command
    > netstat -an on your computer to see if your computer is listening or
    > connected on port 80 TCP for "local address". There are free tools such as
    > TCPView from SysInternals that are great for showing port usage on your
    > computer and the associated executable. --- Steve
    >
    > http://www.sysinternals.com/Utilities/TcpView.html --- TCPView
    >
    > "kevin" <NoSpam@Invalid.Address.Com> wrote in message
    > news:%23MF$LT$pFHA.3572@TK2MSFTNGP09.phx.gbl...
    >

    Hi Steve,

    I think your right, just so many of them and mostly AOL IP's.
    Then again that don't surprise me as the average AOL Users aren't
    Computer literate.
    But I guess if I were going to have my Kid Online with AOL because it
    has some protection built in, just not my cup of Tea.

    Makes me wonder if they are connected to the Zombie DNS Servers trying
    to find and pointing to Zombie Web Servers somehow ?

    Ever trace those Web Links in Spams with a long list of IP's for one
    site that constantly changed the listing each time you traced it and
    gave you a whole different list of IP's each time ?

    Had a big problem tracing the Web Links in Spam for awhile until I
    figured out how to find the Real Corrupted DNS that was running them.

    Hadn't seen them do that in awhile but then again I haven't had Spam in
    quite awhile too.
    Guess my other addresses are poison for having their Web Sites pulled.

    Kevin

  • Next message: reli: "Unknown ID and I even didn't add him or her...."

    Relevant Pages

    • Re: Remote Access
      ... Please rerun CEICW, this helps up configure network and websites ... On the Web Server Certificate page shows. ... http://ipaddress/remote to access RWW, type the public IP address in the ... that if SBS is behind a router, I need to configure the port forwarding ...
      (microsoft.public.windows.server.sbs)
    • Re: disconnect a hacker
      ... My Web server station is right next ... my attention divided by security concerns... ... see an IP connected to port 80, ... I've been forwarding my firewall logs to my ISP, ...
      (alt.computer.security)
    • Re: disconnect a hacker
      ... My Web server station is right next ... ]see an IP connected to port 80, ... ]I notice a significant number of probes on my firewall console window ... that the attacks on you are simply attacks on you amongst millions of ...
      (alt.computer.security)
    • Re: how to universally source files
      ... Port 80 is blocked (I used to have Apache on my machine and pointed it ... between running a script via wish and via a web server. ... I would think the difference is that running a script via Wish is to do ...
      (comp.lang.tcl)
    • Re: [fw-wiz] Port 37628....Is it just another port or out of the extra ordinary???
      ... > I have setup an apache web server in my small home ... > redirection using a non standard port other than port ... IRC to usable configuration files.) ... This is Apache, serving http ...
      (Firewall-Wizards)