[unisog] KaZaA and Port 80?

Arnold, Jamie harnold at binghamton.edu
Wed Oct 16 15:27:31 GMT 2002


If they're sharing music, port 80 is open.

-----Original Message-----
From: Allen Chang [mailto:allen at rescomp.berkeley.edu] 
Sent: Wednesday, October 16, 2002 12:33 AM
To: unisog at sans.org
Subject: [unisog] KaZaA and Port 80?

I've been seeing a lot of computers with port 80 open that aren't running
webservers.

[allen at hal ~]$ HEAD aaa.bbb.ccc.ddd
501 Not Implemented
Client-Date: Wed, 16 Oct 2002 05:23:53 GMT
Client-Peer: aaa.bbb.ccc.ddd:80
X-Kazaa-IP: aaa.bbb.ccc.ddd:3143
X-Kazaa-Network: KaZaA
X-Kazaa-SupernodeIP: www.xxx.yyy.zzz:1349
X-Kazaa-Username: kazaaliteuser

It looks to be KaZaA. Anyone else seen this recently and know what's going
on? I haven't had a chance to run Vision/Active Ports on one of these
computers to see what's going on.

@llen
Network Security Coordinator
Residential Computing
UC Berkeley




More information about the unisog mailing list