[sc_markt]

I use little snitch and all of a sudden, it keeps coming up saying that Safari
wants to connect to ev1s-207-44-240-113.ev1servers.net on TCP port 8888 ddi-tcp-1).

I just installed the new security and java updates and that is when this started happening.

Does anybody know if this is nothing to worry about?

Thanks to all who answer.

- Mark

[sieb]

Using my hosting tools, I traced this back to a hosting server at that IP address on EV1s network. That server is currently hosting 32 websites, a couple are 123bikini.us and AdpayClicks.com. This is probably managed hosting so who knows what else is one the server. Port 8888 is usually a proxy port IIRC. As to why Safari is trying to connect to it, check your network settings and make sure there isn't some proxy setup.

[sc_markt]

Thanks for answering...
I checked my proxy setup and it looks normal.

I used little snitch to permenantly block safari from connecting to that server. Still, I want to know why all of a sudden its trying to connect.

I wish I knew more about networking and how UNIX works and how to hunt down and find what is causing this.



- Mark

[CharlesS]

Are there any particular sites that you visit that cause that warning to pop up?

[CaptainHaddock]

Do you use any add-ons for Safari, like Pith Helmet or Safari Stand?

[tooki]

Perhaps you added an RSS feed that's hosted by that server? That would cause Safari to contact it regularly.

tooki

[sc_markt]

Originally Posted by CharlesS

Are there any particular sites that you visit that cause that warning to pop up?

Seems like it happens more often if I go to MacDailynews.

- Mark

[sc_markt]

Originally Posted by CaptainHaddock

Do you use any add-ons for Safari, like Pith Helmet or Safari Stand?

The only recent thing I added to Safare is LizardTech, Inc DjVu Plug-in 6.0. I installed this about 10 days ago. Maybe I'll remove it and see if it stops trying to connect to that server.

Can a safari plug-in try to direct safari to an ad sever site?

- Mark

[timmerk]

The real question is, you didn't allow all connections forever with Safari in Little Snitch? That means you have to accept a connection for every different website you visit????

[sc_markt]

Originally Posted by timmerk

The real question is, you didn't allow all connections forever with Safari in Little Snitch? That means you have to accept a connection for every different website you visit????

I left little snitch setup in its default install state: It allows safari to connect via ports 80 and 443.
I did setup little snitch to block safari from connect to ev1s servers.

- Mark

[Hal Itosis]

Originally Posted by CharlesS

Are there any particular sites that you visit that cause that warning to pop up?

How about the MacNN front page!

Using Safari's 'Activity' window...
the offender seems to be this link:

http://www.e-bannerx.com:8888/adrevo...mp;cpy=5256702

^