how is it possible for a Linux Redhat server to run both IIS and Apache on port 80? The 2019 Stack Overflow Developer Survey Results Are InIIS 7: using IP address and port for different sitesHow to run a server on port 80 as a normal user on Linux?How do I run both Tomcat and PHP on Linux on port 80?How to check if a port is open for remote system(ubuntu)Run both sshd and httpd SSL on port 443Check if port is open or closed on a Linux server?how to run mysql v5.5 on redhat linuxLinux - TCP Source Port Reuse (and delay)Opening A Port In Redhat Enterprise Linux FailsUsing SFTP port 22 on both server and client
How come people say “Would of”?
Output the Arecibo Message
What is the closest word meaning "respect for time / mindful"
Why do we hear so much about the Trump administration deciding to impose and then remove tariffs?
Why is the maximum length of OpenWrt’s root password 8 characters?
Did Scotland spend $250,000 for the slogan "Welcome to Scotland"?
Are there incongruent pythagorean triangles with the same perimeter and same area?
What did it mean to "align" a radio?
Can a rogue use sneak attack with weapons that have the thrown property even if they are not thrown?
What is the motivation for a law requiring 2 parties to consent for recording a conversation
What to do when moving next to a bird sanctuary with a loosely-domesticated cat?
If I score a critical hit on an 18 or higher, what are my chances of getting a critical hit if I roll 3d20?
What does Linus Torvalds mean when he says that Git "never ever" tracks a file?
Can one be advised by a professor who is very far away?
What tool would a Roman-age civilization have for the breaking of silver and other metals into dust?
Is three citations per paragraph excessive for undergraduate research paper?
Why can Shazam fly?
If a Druid sees an animal’s corpse, can they Wild Shape into that animal?
Why isn't airport relocation done gradually?
Deal with toxic manager when you can't quit
What is the meaning of Triage in Cybersec world?
Pokemon Turn Based battle (Python)
Is a "Democratic" Oligarchy-Style System Possible?
How to answer pointed "are you quitting" questioning when I don't want them to suspect
how is it possible for a Linux Redhat server to run both IIS and Apache on port 80?
The 2019 Stack Overflow Developer Survey Results Are InIIS 7: using IP address and port for different sitesHow to run a server on port 80 as a normal user on Linux?How do I run both Tomcat and PHP on Linux on port 80?How to check if a port is open for remote system(ubuntu)Run both sshd and httpd SSL on port 443Check if port is open or closed on a Linux server?how to run mysql v5.5 on redhat linuxLinux - TCP Source Port Reuse (and delay)Opening A Port In Redhat Enterprise Linux FailsUsing SFTP port 22 on both server and client
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;
i recently got an assignment of pen-testing a remote server and upon Information Gathering i got the following
host1 ip 132.56.34.23 port 80 IIS 7.0
host2 ip 132.56.34.23 port 80 IIS 7.0
host3 ip 132.56.34.23 port 80 Apache 2.4.6 php 5.4
host4 ip 132.56.34.23 port 80 Apache 2.4.6 php 7.2
is it possible that 3 of the above are a diversion or its actually happen, i mean i understand that a machine can host more than one site but not all on port 80 plus different php version
please help me understand!
thank you
linux port
asked 13 hours ago
user358812user358812
133
New contributor
user358812 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
i recently got an assignment of pen-testing a remote server and upon Information Gathering i got the following
host1 ip 132.56.34.23 port 80 IIS 7.0
host2 ip 132.56.34.23 port 80 IIS 7.0
host3 ip 132.56.34.23 port 80 Apache 2.4.6 php 5.4
host4 ip 132.56.34.23 port 80 Apache 2.4.6 php 7.2
is it possible that 3 of the above are a diversion or its actually happen, i mean i understand that a machine can host more than one site but not all on port 80 plus different php version
please help me understand!
thank you
linux port
asked 13 hours ago
user358812user358812
133
New contributor
user358812 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
Could it be that ip 132.56.34.23 is a load balancer? which means that there could be more than one server behind that address...
– Itai Ganot
13 hours ago
2
The host may be running a reverse proxy and is the public front-end with specific sites / applications hosted on different back-end servers, or it randomizes the headers it sends.
– HBruijn
13 hours ago
@HBruijn no it does not randomize the header
– user358812
13 hours ago
add a comment |
i recently got an assignment of pen-testing a remote server and upon Information Gathering i got the following
host1 ip 132.56.34.23 port 80 IIS 7.0
host2 ip 132.56.34.23 port 80 IIS 7.0
host3 ip 132.56.34.23 port 80 Apache 2.4.6 php 5.4
host4 ip 132.56.34.23 port 80 Apache 2.4.6 php 7.2
is it possible that 3 of the above are a diversion or its actually happen, i mean i understand that a machine can host more than one site but not all on port 80 plus different php version
please help me understand!
thank you
linux port
asked 13 hours ago
user358812user358812
133
New contributor
user358812 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
i recently got an assignment of pen-testing a remote server and upon Information Gathering i got the following
host1 ip 132.56.34.23 port 80 IIS 7.0
host2 ip 132.56.34.23 port 80 IIS 7.0
host3 ip 132.56.34.23 port 80 Apache 2.4.6 php 5.4
host4 ip 132.56.34.23 port 80 Apache 2.4.6 php 7.2
is it possible that 3 of the above are a diversion or its actually happen, i mean i understand that a machine can host more than one site but not all on port 80 plus different php version
please help me understand!
thank you
linux port
linux port
asked 13 hours ago
user358812user358812
133
New contributor
user358812 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
asked 13 hours ago
user358812user358812
133
New contributor
user358812 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
asked 13 hours ago
user358812user358812
133
New contributor
user358812 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
asked 13 hours ago
user358812user358812
133
asked 13 hours ago
user358812user358812
133
133
New contributor
user358812 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
New contributor
user358812 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
user358812 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
Could it be that ip 132.56.34.23 is a load balancer? which means that there could be more than one server behind that address...
– Itai Ganot
13 hours ago
2
The host may be running a reverse proxy and is the public front-end with specific sites / applications hosted on different back-end servers, or it randomizes the headers it sends.
– HBruijn
13 hours ago
@HBruijn no it does not randomize the header
– user358812
13 hours ago
add a comment |
Could it be that ip 132.56.34.23 is a load balancer? which means that there could be more than one server behind that address...
– Itai Ganot
13 hours ago
2
The host may be running a reverse proxy and is the public front-end with specific sites / applications hosted on different back-end servers, or it randomizes the headers it sends.
– HBruijn
13 hours ago
@HBruijn no it does not randomize the header
– user358812
13 hours ago
Could it be that ip 132.56.34.23 is a load balancer? which means that there could be more than one server behind that address...
– Itai Ganot
13 hours ago
Could it be that ip 132.56.34.23 is a load balancer? which means that there could be more than one server behind that address...
– Itai Ganot
13 hours ago
2
2
The host may be running a reverse proxy and is the public front-end with specific sites / applications hosted on different back-end servers, or it randomizes the headers it sends.
– HBruijn
13 hours ago
The host may be running a reverse proxy and is the public front-end with specific sites / applications hosted on different back-end servers, or it randomizes the headers it sends.
– HBruijn
13 hours ago
@HBruijn no it does not randomize the header
– user358812
13 hours ago
@HBruijn no it does not randomize the header
– user358812
13 hours ago
add a comment |
1 Answer
1
active
oldest
votes
A few possibilities:
- That is a load balancer or proxy in front of many different web servers.
- The pen testers identification methodology is inaccurate.
- Server header is being spoofed.
If your organization controls this host, determine what it is. Find its owner or access it yourself.
answered 9 hours ago
John MahowaldJohn Mahowald
8,7031713
host3 is using the correct information and also they are 4 domains hosted on apache server, which means indeed it might be a proxy for host1,host2 and host3
– user358812
56 mins ago
add a comment |
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
user358812 is a new contributor. Be nice, and check out our Code of Conduct.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f962437%2fhow-is-it-possible-for-a-linux-redhat-server-to-run-both-iis-and-apache-on-port%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
A few possibilities:
- That is a load balancer or proxy in front of many different web servers.
- The pen testers identification methodology is inaccurate.
- Server header is being spoofed.
If your organization controls this host, determine what it is. Find its owner or access it yourself.
answered 9 hours ago
John MahowaldJohn Mahowald
8,7031713
host3 is using the correct information and also they are 4 domains hosted on apache server, which means indeed it might be a proxy for host1,host2 and host3
– user358812
56 mins ago
add a comment |
A few possibilities:
- That is a load balancer or proxy in front of many different web servers.
- The pen testers identification methodology is inaccurate.
- Server header is being spoofed.
If your organization controls this host, determine what it is. Find its owner or access it yourself.
answered 9 hours ago
John MahowaldJohn Mahowald
8,7031713
host3 is using the correct information and also they are 4 domains hosted on apache server, which means indeed it might be a proxy for host1,host2 and host3
– user358812
56 mins ago
add a comment |
A few possibilities:
- That is a load balancer or proxy in front of many different web servers.
- The pen testers identification methodology is inaccurate.
- Server header is being spoofed.
If your organization controls this host, determine what it is. Find its owner or access it yourself.
answered 9 hours ago
John MahowaldJohn Mahowald
8,7031713
A few possibilities:
- That is a load balancer or proxy in front of many different web servers.
- The pen testers identification methodology is inaccurate.
- Server header is being spoofed.
If your organization controls this host, determine what it is. Find its owner or access it yourself.
answered 9 hours ago
John MahowaldJohn Mahowald
8,7031713
answered 9 hours ago
John MahowaldJohn Mahowald
8,7031713
answered 9 hours ago
John MahowaldJohn Mahowald
8,7031713
answered 9 hours ago
John MahowaldJohn Mahowald
8,7031713
8,7031713
host3 is using the correct information and also they are 4 domains hosted on apache server, which means indeed it might be a proxy for host1,host2 and host3
– user358812
56 mins ago
add a comment |
host3 is using the correct information and also they are 4 domains hosted on apache server, which means indeed it might be a proxy for host1,host2 and host3
– user358812
56 mins ago
host3 is using the correct information and also they are 4 domains hosted on apache server, which means indeed it might be a proxy for host1,host2 and host3
– user358812
56 mins ago
host3 is using the correct information and also they are 4 domains hosted on apache server, which means indeed it might be a proxy for host1,host2 and host3
– user358812
56 mins ago
add a comment |
user358812 is a new contributor. Be nice, and check out our Code of Conduct.
user358812 is a new contributor. Be nice, and check out our Code of Conduct.
user358812 is a new contributor. Be nice, and check out our Code of Conduct.
user358812 is a new contributor. Be nice, and check out our Code of Conduct.
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f962437%2fhow-is-it-possible-for-a-linux-redhat-server-to-run-both-iis-and-apache-on-port%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Could it be that ip 132.56.34.23 is a load balancer? which means that there could be more than one server behind that address...
– Itai Ganot
13 hours ago
2
The host may be running a reverse proxy and is the public front-end with specific sites / applications hosted on different back-end servers, or it randomizes the headers it sends.
– HBruijn
13 hours ago
@HBruijn no it does not randomize the header
– user358812
13 hours ago