What is happening when someone does this?

Forum Moderators: phranque

Message Too Old, No Replies

What is happening when someone does this?

diloretta

3:08 pm on Jan 12, 2011 (gmt 0)

I have been watching my stats this morning to see how a promotional idea is going.

Someone went to my site

[chemunghistory.com...]

and then went to

[chemunghistory.com:80...]

What does :80/ do?

I am assuming it's some sort of check up on the ownership of the domain?

diloretta

Demaestro

4:10 pm on Jan 12, 2011 (gmt 0)

when you put a : at the end of a URL it is to specify which port to connect to on the server.

For http web requests the default port is 80.

Technically there is no difference between http://example.com and http://example.com:80

I am not sure why someone would have added that, but I wouldn't be too concerned unless they tried a bunch of other ports as well.

Usually port 22 is SSH, port 110 is email.. If you see that someone is attempting to connect to several ports then I would be concerned they are trying to gain access to something you don't want them to have access to... but the :80 I wouldn't worry about.

jecasc

4:54 pm on Jan 12, 2011 (gmt 0)

If there are several hits with :80 this could point to an automated download tool. I remember using one of those years ago and I could specify the port.

phranque

1:07 am on Jan 13, 2011 (gmt 0)

a url specifying the default port is non-canonical and such requests should return a 301 redirect rather than a 200 OK response.