Is this harmless?

I'm running ZoneAlarm on my PC. Usually I see a ping here and there and the occasional port scan. Today I saw this for the first time.

The firewall has blocked Internet access to jennyb6107.homestead.com (209.157.71.37) (HTTP) from your computer [TCP Flags: S].

User:
Program: Internet Explorer
Time: 2/20/02 2:52:58 PM

It also said it was going from port 2003 on my system to port 80 at the other location.

I did click "more info" on ZA, but none of their suggestions seemed to apply (like ZA not starting at startup). Would one of you gurus care to give some more insight on this?

Thanks,
Moody

Inform Homestead.com about this... Someone is trying to gain access to your computer through a trojan port... Did you do a virus scan recently?

Was this inbound? In other words, started by the other side? If so, they're being pretty sneaky, using 80 as a source port. By default, 80 is the port HTTP servers run on. Ever seen an url like "http://blah.com:80/"? The ":80" bit specifies a port for your browser. If it's not there, the browser assumes it is port 80 anyway.

I did a virus scan the other day. I also look and see if I've had any files created or modified in the last 24 hours pretty much every day.

This was an outbound thing.....going from port 2003 to port 80 at that Homestead site.

Am I correct in assuming that anything using such a high port is most likely trojan related?

Thanks again
Moody

were you doing at the time this happened?

your computer will normally make an http request using a local port in the 3k range, (just do a netstat and see for yourself.) to port 80 remote.

that ip address is in a block belonging to verio net. let me guess, where you reading your email?