cancel
Showing results for 
Search instead for 
Did you mean: 

Request for CONNECT to denied

 
AZayed
Super Advisor

Request for CONNECT to denied

Dears, 

Good day, 

 

I have unkonwn process that logs the follwoing message to my messages file: 

 

Jul 7 17:01:05 SERVER xinetd: Request for CONNECT to 89.46.101.20:443 denied!
Jul 7 18:01:06 SERVER xinetd: Request for CONNECT to 89.46.101.20:443 denied!
Jul 7 19:01:06 SERVER xinetd: Request for CONNECT to 89.46.101.20:443 denied!
Jul 7 20:01:06 SERVER xinetd: Request for CONNECT to 89.46.101.20:443 denied!
Jul 7 21:01:06 SERVER xinetd: Request for CONNECT to 89.46.101.20:443 denied!
Jul 7 22:01:05 SERVER xinetd: Request for CONNECT to 89.46.101.20:443 denied!
Jul 7 23:01:05 SERVER xinetd: Request for CONNECT to 89.46.101.20:443 denied!
Jul 8 00:01:05 SERVER xinetd: Request for CONNECT to 89.46.101.20:443 denied!
Jul 8 01:01:06 SERVER xinetd: Request for CONNECT to 89.46.101.20:443 denied!
Jul 8 02:01:05 SERVER xinetd: Request for CONNECT to 89.46.101.20:443 denied!
Jul 8 03:01:05 SERVER xinetd: Request for CONNECT to 89.46.101.20:443 denied!
Jul 8 04:01:05 SERVER xinetd: Request for CONNECT to 89.46.101.20:443 denied!
Jul 8 05:01:06 SERVER xinetd: Request for CONNECT to 89.46.101.20:443 denied!
Jul 8 06:01:05 SERVER xinetd: Request for CONNECT to 89.46.101.20:443 denied!
Jul 8 07:01:06 SERVER xinetd: Request for CONNECT to 89.46.101.20:443 denied!
Jul 8 08:01:05 SERVER xinetd: Request for CONNECT to 89.46.101.20:443 denied!
Jul 8 09:01:05 SERVER xinetd: Request for CONNECT to 89.46.101.20:443 denied!
Jul 8 10:01:08 SERVER xinetd: Request for CONNECT to 89.46.101.20:443 denied!

 

 

I tried to disable unneeded xinetd processes and enabled omni & auth processes only. 

 

Also, on the same server I have unkown process trying to connect to specific port, how I can know which one? 

 

Jul 7 11:22:29 SERVER xinetd: Cannot bind port 12814: Address already in use!
Jul 7 11:48:01 SERVER xinetd: Cannot bind port 12814: Address already in use!
Jul 7 14:33:13 SERVER xinetd: Cannot bind port 12814: Address already in use!


[root@SERVER xinetd.d]# netstat -natp | grep 12814
tcp 0 0 127.0.0.1:12814 0.0.0.0:* LISTEN 30496/xinetd

 

How can I know which process trying to connect to 89.46.101.20:443? 

 

Thanks 

Success seems to be connected with action. Successful people keep moving. They make mistakes, but they don't quit.