Ports scanned internally?

[olivier]

Hi,

(This is not a question about port scanning - impossible to correct the topic anymore.)

Here is some content from /tmp/syslog.log.
Which process is actually accessing the webserver every 10 s?
(How to find it with embedded commands?)
Is there any documentation about it?

Thanks
Olivier


Dec 13 23:51:50 kernel: ACCEPT IN=lo OUT= MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=19572 DF PROTO=TCP SPT=3628 DPT=80 SEQ=1553539567 ACK=0 WINDOW=16396 RES=0x00 SYN URGP=0 OPT (020440
Dec 13 23:52:00 kernel: ACCEPT IN=lo OUT= MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=62345 DF PROTO=TCP SPT=3629 DPT=80 SEQ=1549697546 ACK=0 WINDOW=16396 RES=0x00 SYN URGP=0 OPT (020440
Dec 13 23:52:10 kernel: ACCEPT IN=lo OUT= MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=52013 DF PROTO=TCP SPT=3630 DPT=80 SEQ=1561574982 ACK=0 WINDOW=16396 RES=0x00 SYN URGP=0 OPT (020440
Dec 13 23:52:20 kernel: ACCEPT IN=lo OUT= MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=15782 DF PROTO=TCP SPT=3631 DPT=80 SEQ=1574126837 ACK=0 WINDOW=16396 RES=0x00 SYN URGP=0 OPT (020440

[Tamadite]

http://wl500g.info/showthread.php?t=14908