HPE Community
Operating System - Linux
1753371 Members
4785 Online
108792 Solutions
New Discussion

Request for CONNECT to denied

 
AZayed
Super Advisor

‎07-08-2015 01:10 AM

‎07-08-2015 01:10 AM

Request for CONNECT to denied

Dears, 

Good day, 

 

I have unkonwn process that logs the follwoing message to my messages file: 

 

Jul 7 17:01:05 SERVER xinetd: Request for CONNECT to 89.46.101.20:443 denied!
Jul 7 18:01:06 SERVER xinetd: Request for CONNECT to 89.46.101.20:443 denied!
Jul 7 19:01:06 SERVER xinetd: Request for CONNECT to 89.46.101.20:443 denied!
Jul 7 20:01:06 SERVER xinetd: Request for CONNECT to 89.46.101.20:443 denied!
Jul 7 21:01:06 SERVER xinetd: Request for CONNECT to 89.46.101.20:443 denied!
Jul 7 22:01:05 SERVER xinetd: Request for CONNECT to 89.46.101.20:443 denied!
Jul 7 23:01:05 SERVER xinetd: Request for CONNECT to 89.46.101.20:443 denied!
Jul 8 00:01:05 SERVER xinetd: Request for CONNECT to 89.46.101.20:443 denied!
Jul 8 01:01:06 SERVER xinetd: Request for CONNECT to 89.46.101.20:443 denied!
Jul 8 02:01:05 SERVER xinetd: Request for CONNECT to 89.46.101.20:443 denied!
Jul 8 03:01:05 SERVER xinetd: Request for CONNECT to 89.46.101.20:443 denied!
Jul 8 04:01:05 SERVER xinetd: Request for CONNECT to 89.46.101.20:443 denied!
Jul 8 05:01:06 SERVER xinetd: Request for CONNECT to 89.46.101.20:443 denied!
Jul 8 06:01:05 SERVER xinetd: Request for CONNECT to 89.46.101.20:443 denied!
Jul 8 07:01:06 SERVER xinetd: Request for CONNECT to 89.46.101.20:443 denied!
Jul 8 08:01:05 SERVER xinetd: Request for CONNECT to 89.46.101.20:443 denied!
Jul 8 09:01:05 SERVER xinetd: Request for CONNECT to 89.46.101.20:443 denied!
Jul 8 10:01:08 SERVER xinetd: Request for CONNECT to 89.46.101.20:443 denied!

 

 

I tried to disable unneeded xinetd processes and enabled omni & auth processes only. 

 

Also, on the same server I have unkown process trying to connect to specific port, how I can know which one? 

 

Jul 7 11:22:29 SERVER xinetd: Cannot bind port 12814: Address already in use!
Jul 7 11:48:01 SERVER xinetd: Cannot bind port 12814: Address already in use!
Jul 7 14:33:13 SERVER xinetd: Cannot bind port 12814: Address already in use!


[root@SERVER xinetd.d]# netstat -natp | grep 12814
tcp 0 0 127.0.0.1:12814 0.0.0.0:* LISTEN 30496/xinetd

 

How can I know which process trying to connect to 89.46.101.20:443? 

 

Thanks 

Success seems to be connected with action. Successful people keep moving. They make mistakes, but they don't quit.
0 Kudos
Reply
The opinions expressed above are the personal opinions of the authors, not of Hewlett Packard Enterprise. By using this site, you accept the Terms of Use and Rules of Participation.