I am running a program called Active Ports. When I connect to a site port 80 becomes very active with connections coming and going it seems to quiet down after a period of inactivity. When I go to your site 3-4 IPs showed up on port 80, is this normal? For example I was on blackcode.com (I think) and one was for 18.104.22.168. Even with no additional input from me this activity comes and goes (as I said it quiets down after awhile). It stops when I close the browser ( I had opened multiple).