logo
Apache Lounge
Webmasters

 


About

Forum Index Downloads Search Register Log in  RSS Apache Lounge
 


Keep Server Online

If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.

or

Bitcoin

A donation makes a contribution towards the costs, the time and effort that's going in this site and building.

Thank You! Steffen

Apache Lounge is not sponsored.

Your donations will help to keep this site alive and well, and continuing building binaries.




Apache service randomly crashing after nmap security scans

 
Post new topic   Reply to topic    Apache Forum Index -> Apache



View previous topic :: View next topic  
Author Message
mikeatutsw



Joined: 15 Oct 2015
Posts: 5
Location: Dallas

PostPosted: Tue 07 Aug '18 17:44    Post subject: Apache service randomly crashing after nmap security scans Reply with quote

We are experiencing a random issue where after our security group runs nmap (Nexspose) security scans sometimes it crashes the Windows Apache service and we get the following error when we try to restart the service.

The Apache service named reported the following error:
>>> (OS 10048)Only one usage of each socket address (protocol/network address/port) is normally permitted. : AH00072: make_sock: could not bind to address 0.0.0.0:80 .

So something about Windows or the Apache service is still binding to the listening port and won't release it.

This issue just started in July for us.

Any ideas?

Windows Server 2012 R2; Apache 2.4.29 and Apache 2.4.33
Back to top
James Blond
Moderator


Joined: 19 Jan 2006
Posts: 6391
Location: Germany, Next to Hamburg

PostPosted: Wed 08 Aug '18 8:57    Post subject: Reply with quote

Another application or service is listening on that port

run cmd.exe as Administrator

Code:
netstat -ano | findstr /R 0.0:80


With the pid you can find that application in the taskmanager.

It might be W3SVC service. Set it to "manual" starting.

Code:
french name is: "Service de publication World Wide Web"
english name is: "World Wide Web Publishing Services"
german name is: "WWW-Publishingdienst"
Polish name is: "Usluga publikowania w sieci WWW"
Russian name is "Служба веб-публикаций"   
Back to top
mikeatutsw



Joined: 15 Oct 2015
Posts: 5
Location: Dallas

PostPosted: Wed 08 Aug '18 15:34    Post subject: Reply with quote

So IIS is not installed on this server. It's almost like Apache is still bound to 80 but the Windows Apache service is broken. So you can't restart/stop/start it.

This doesn't happen every time they scan but when they do and it breaks, just the scan items are in the Apache logs. The event logs are empty.
Back to top
Jan-E



Joined: 09 Mar 2012
Posts: 869
Location: Amsterdam, NL, EU

PostPosted: Thu 09 Aug '18 5:50    Post subject: Reply with quote

Try installing the optional 'Preview of Monthly Rollup' update:
https://www.apachelounge.com/viewtopic.php?p=37054#37054
Back to top
mikeatutsw



Joined: 15 Oct 2015
Posts: 5
Location: Dallas

PostPosted: Mon 13 Aug '18 17:39    Post subject: Reply with quote

I installed the update on the affected servers, and it seems it might have worked. No servers went down after this weekend's security scans.

Thank you for your help!
Back to top


Post new topic   Reply to topic    Apache Forum Index -> Apache
Page 1 of 1