LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 05-17-2011, 07:44 AM   #1
robeich
Member
 
Registered: Aug 2010
Location: Millstreet, Co. Cork, Ireland
Distribution: Linux Mint
Posts: 37

Rep: Reputation: 0
port scanning possible to port 80


Hi LQ,
Got 3 computers connected by ethernet to a routermodem.
At this routermodem only port 80 is forwarded to a webserver ( one of
the 3 computers ) .
Now I realized several times a port scanning attack displayed
at interactive firewall of Webserver ( Apache at Mandriva LINUX ).
Actually the message is port scanning attempt of heanet.......
( actually this names are different mostly ).

I wonder how to figure out is this portscanning attack possible
through port 80 or is the modemrouter ( Draytek VIGOR )
misconfigured, compromised or one of the other 2 machines ( Windows )
are compromised and attacking the server inside intranet ?

thanks
robeich
 
Old 05-17-2011, 08:58 AM   #2
16pide
Member
 
Registered: Jan 2010
Posts: 418

Rep: Reputation: 83
look at your web server's access and error logs. you should find the actual requests in there.
One thing it will tell you is the address of the client. From this you should know if the atack comes from the outside world, or a virus infected pc inside your network
 
Old 05-18-2011, 06:46 AM   #3
robeich
Member
 
Registered: Aug 2010
Location: Millstreet, Co. Cork, Ireland
Distribution: Linux Mint
Posts: 37

Original Poster
Rep: Reputation: 0
hi 16pide
You will not find any entries in error or access logs from a portscan.
There are just http related entries.
anyway thanks and regards
robeich
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Port Scanning and my Firewall elliotfuller Linux - Security 1 04-28-2006 10:59 PM
IBM Port scanning? Pauli Linux - Security 7 12-09-2005 10:13 AM
Port scanning? muppski Linux - Security 6 07-01-2005 06:44 PM
port scanning johncla Linux - Networking 1 05-02-2001 04:09 AM
Port Scanning tfrye Linux - Security 2 03-24-2001 10:43 AM


All times are GMT -5. The time now is 11:47 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration