Topic: Apache service randomly crashing after nmap security scans

[mikeatutsw]

We are experiencing a random issue where after our security group runs nmap (Nexspose) security scans sometimes it crashes the Windows Apache service and we get the following error when we try to restart the service.

The Apache service named reported the following error:
>>> (OS 10048)Only one usage of each socket address (protocol/network address/port) is normally permitted. : AH00072: make_sock: could not bind to address 0.0.0.0:80 .

So something about Windows or the Apache service is still binding to the listening port and won't release it.

This issue just started in July for us.

Any ideas?

Windows Server 2012 R2; Apache 2.4.29 and Apache 2.4.33

[James Blond]

Another application or service is listening on that port

run cmd.exe as Administrator

[mikeatutsw]

So IIS is not installed on this server. It's almost like Apache is still bound to 80 but the Windows Apache service is broken. So you can't restart/stop/start it.

This doesn't happen every time they scan but when they do and it breaks, just the scan items are in the Apache logs. The event logs are empty.

[Jan-E]

Try installing the optional 'Preview of Monthly Rollup' update:
https://www.apachelounge.com/viewtopic.php?p=37054#37054

[mikeatutsw]

I installed the update on the affected servers, and it seems it might have worked. No servers went down after this weekend's security scans.

Thank you for your help!