SBS 2003 and outgoing Port 80
- From: "Anna Clark" <anna.clark(remove this)@verizon.net>
- Date: Sat, 5 Aug 2006 07:53:04 -0400
Hi Everyone:
Our SBS 2003 server is having some kind of a hickup. A scan of the traffic
(WallWatcher) shows that something from inside the network is sending tcp
port 80 requests to different ip addresses constantly, as many as dozens per
minute.
These take the form of:
Origin 192.168.16.2, (sbs server)
Remote ip address: allmost, but not all, in the class c space,
R Port 80,
L Port 6298x where x = 0, 1 ,2 5, 6 in the sequence I looked at.
Also some in the 6299x range.
On Thursday, they were constant until about 1630, then intermittant
until about 1830, then dropped off to almost nothing thru 2200.
Friday morning they started up again about 0630, and the lport changed to
626xx, for the most part.
Now on Saturday AM there are practically no such requests.
I am thinking that this might be user web surfing, based on the times, and
since all surfing goes thru the SBS server, but the destination sites I
tried do not respond to pings.
Anyone have thoughts about what might be going on?
Thanks for your help.
--
Anna Clark
.
- Follow-Ups:
- Re: SBS 2003 and outgoing Port 80
- From: Joe
- Re: SBS 2003 and outgoing Port 80
- From: Kevin Weilbacher [SBS-MVP]
- Re: SBS 2003 and outgoing Port 80
- Prev by Date: VSS errors logged ID 20 & ID 8 - vssadmin reports no writers
- Next by Date: Re: Does CEICW check DNS?
- Previous by thread: VSS errors logged ID 20 & ID 8 - vssadmin reports no writers
- Next by thread: Re: SBS 2003 and outgoing Port 80
- Index(es):
Relevant Pages
|
