Re: lots of connections to 64.40.117.19 port 80

["Joey Mengele" <joey.mengele () hushmail com>]

Dear Midget,

On Fri, 18 Apr 2008 13:20:18 -0400 mcwidget <mcwidget () gmail com> 
wrote:

> I think what he's saying is that the IP address listed belongs to 
> one of his
> clients and they are receiving connections to port 80 on that IP 
> from all
> over the internet; and asking why this would be happening.
>
> The obvious answer is because a process running on that IP is 
> listening on
> that port.  Really, any more detailed description than that, even 
> confirming
> it's serving a website, is gonna require some packet grabs or info 
> on the
> process listening on that port.  Or both.

This certainly would clear things up, but how do you propose that 
can be done?

J

--
Click to make millions by owning your own franchise.
http://tagline.hushmail.com/fc/Ioyw6h4eB8rLlbcehhEXmrdWfNLVAOgPq6z5J89OI2heYeNVzJG4yc/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/