Home page logo
/

fulldisclosure logo Full Disclosure mailing list archives

Re: lots of connections to 64.40.117.19 port 80
From: "Joey Mengele" <joey.mengele () hushmail com>
Date: Fri, 18 Apr 2008 13:33:55 -0400

Dear Midget,

On Fri, 18 Apr 2008 13:20:18 -0400 mcwidget <mcwidget () gmail com> 
wrote:

I think what he's saying is that the IP address listed belongs to 
one of his
clients and they are receiving connections to port 80 on that IP 
from all
over the internet; and asking why this would be happening.

The obvious answer is because a process running on that IP is 
listening on
that port.  Really, any more detailed description than that, even 
confirming
it's serving a website, is gonna require some packet grabs or info 
on the
process listening on that port.  Or both.

This certainly would clear things up, but how do you propose that 
can be done?

J

--
Click to make millions by owning your own franchise.
http://tagline.hushmail.com/fc/Ioyw6h4eB8rLlbcehhEXmrdWfNLVAOgPq6z5J89OI2heYeNVzJG4yc/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]