PDA

View Full Version : [other] [SOLVED] tcp fin scan


melojo
December 17th, 2008, 03:34 AM
I am getting tcp fin scans on port 80 inbound and outbound.
I have a Belkin router.
The outbound is what concerns me, does this mean they have
compromised my router?

x3roconf
December 17th, 2008, 07:56 AM
It's very common to see portscans.. and your router is not compromised.
I'm sure. :)

gTinker
December 17th, 2008, 10:07 AM
I am getting tcp fin scans on port 80 inbound and outbound.
I have a Belkin router.
The outbound is what concerns me, does this mean they have
compromised my router?

A FIN scan is just a not very efficient way of identifing a port that has a service listening. If no service is listening at the port, the system will drop an error message. On the other hand, if a service is listening, the system will drop the incoming packet silently. So, silence probably indicates a service at the port. A closed port replies to a FIN with a RST, that's probably the outgoing you see as a listening port isn't supposed to reply.

melojo
December 17th, 2008, 03:09 PM
Makes sense you guys thanks