[unisog] KaZaA and Port 80?

Mike Iglesias iglesias at draco.acs.uci.edu
Wed Oct 16 15:12:52 GMT 2002


> I've been seeing a lot of computers with port 80 open that aren't running
> webservers.
> 
> [allen at hal ~]$ HEAD aaa.bbb.ccc.ddd
> 501 Not Implemented
> Client-Date: Wed, 16 Oct 2002 05:23:53 GMT
> Client-Peer: aaa.bbb.ccc.ddd:80
> X-Kazaa-IP: aaa.bbb.ccc.ddd:3143
> X-Kazaa-Network: KaZaA
> X-Kazaa-SupernodeIP: www.xxx.yyy.zzz:1349
> X-Kazaa-Username: kazaaliteuser
> 
> It looks to be KaZaA. Anyone else seen this recently and know what's going
> on? I haven't had a chance to run Vision/Active Ports on one of these
> computers to see what's going on.

You're probably seeing a p2p proxy, which is setup to bypass controls
(throttling, blocking) on the usual p2p ports.  We're starting to see
this here too.


Mike Iglesias                          Internet:    iglesias at draco.acs.uci.edu
University of California, Irvine       phone:       949-824-6926
Network & Academic Computing Services  FAX:         949-824-2069



More information about the unisog mailing list