Yes, but my Gnutella client could never have been resident on port 80, my web server was already using it. Neither are these "attackers" trying to contact my machine on the standard Gnutella port and then falling back on some sort of default on port 80 (there is not traffic on the normal Guntella port).