View Full Version : [other] [SOLVED] tcp fin scan
melojo
December 17th, 2008, 03:34 AM
I am getting tcp fin scans on port 80 inbound and outbound.
I have a Belkin router.
The outbound is what concerns me, does this mean they have
compromised my router?
x3roconf
December 17th, 2008, 07:56 AM
It's very common to see portscans.. and your router is not compromised.
I'm sure. :)
gTinker
December 17th, 2008, 10:07 AM
I am getting tcp fin scans on port 80 inbound and outbound.
I have a Belkin router.
The outbound is what concerns me, does this mean they have
compromised my router?
A FIN scan is just a not very efficient way of identifing a port that has a service listening. If no service is listening at the port, the system will drop an error message. On the other hand, if a service is listening, the system will drop the incoming packet silently. So, silence probably indicates a service at the port. A closed port replies to a FIN with a RST, that's probably the outgoing you see as a listening port isn't supposed to reply.
melojo
December 17th, 2008, 03:09 PM
Makes sense you guys thanks
vBulletin® v3.8.4, Copyright ©2000-2012, Jelsoft Enterprises Ltd.