Share your knowledge at the LQ Wiki.
Go Back > Forums > Linux Forums > Linux - Newbie
User Name
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!


  Search this Thread
Old 05-17-2011, 07:44 AM   #1
Registered: Aug 2010
Location: Millstreet, Co. Cork, Ireland
Distribution: Linux Mint
Posts: 37

Rep: Reputation: 0
port scanning possible to port 80

Hi LQ,
Got 3 computers connected by ethernet to a routermodem.
At this routermodem only port 80 is forwarded to a webserver ( one of
the 3 computers ) .
Now I realized several times a port scanning attack displayed
at interactive firewall of Webserver ( Apache at Mandriva LINUX ).
Actually the message is port scanning attempt of heanet.......
( actually this names are different mostly ).

I wonder how to figure out is this portscanning attack possible
through port 80 or is the modemrouter ( Draytek VIGOR )
misconfigured, compromised or one of the other 2 machines ( Windows )
are compromised and attacking the server inside intranet ?

Old 05-17-2011, 08:58 AM   #2
Registered: Jan 2010
Posts: 418

Rep: Reputation: 83
look at your web server's access and error logs. you should find the actual requests in there.
One thing it will tell you is the address of the client. From this you should know if the atack comes from the outside world, or a virus infected pc inside your network
Old 05-18-2011, 06:46 AM   #3
Registered: Aug 2010
Location: Millstreet, Co. Cork, Ireland
Distribution: Linux Mint
Posts: 37

Original Poster
Rep: Reputation: 0
hi 16pide
You will not find any entries in error or access logs from a portscan.
There are just http related entries.
anyway thanks and regards


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
Port Scanning and my Firewall elliotfuller Linux - Security 1 04-28-2006 10:59 PM
IBM Port scanning? Pauli Linux - Security 7 12-09-2005 10:13 AM
Port scanning? muppski Linux - Security 6 07-01-2005 06:44 PM
port scanning johncla Linux - Networking 1 05-02-2001 04:09 AM
Port Scanning tfrye Linux - Security 2 03-24-2001 10:43 AM > Forums > Linux Forums > Linux - Newbie

All times are GMT -5. The time now is 10:00 PM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration