Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

Xinetd problem, please help :(

Discussion in 'General Discussion' started by sh4ka, Sep 18, 2005.

  1. sh4ka

    sh4ka Well-Known Member

    Joined:
    May 12, 2005
    Messages:
    444
    Likes Received:
    0
    Trophy Points:
    166
    Location:
    Uruguay
    cPanel Access Level:
    DataCenter Provider
    I saw the server report today and there is a new port open

    113/tcp open auth


    root@server [~]# fuser -v 113/tcp

    USER PID ACCESS COMMAND
    113/tcp root 1969 f.... xinetd

    root@server [~]# ps -aux | grep "xinetd"
    root 1969 0.0 0.0 2136 912 ? S 08:41 0:00 xinetd -stayalive -pidfile /var/run/xinetd.pid

    I kill all the xinetd process, restart xinetd, also rebooted the box and port still there..
    I have a few cPanel servers and I have never seen this port open, can anyone tell me what is that port ? and how to close it ? I am using RH Ent. 3 .

    thkz!

    pd: this rare port appear today after a kiddie using a script attacked one of the php-nuke websites I have hosted at the server.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #1 sh4ka, Sep 18, 2005
  2. dave9000

    dave9000 Well-Known Member

    Joined:
    Apr 7, 2003
    Messages:
    891
    Likes Received:
    1
    Trophy Points:
    168
    Location:
    arkansas
    cPanel Access Level:
    Root Administrator
    port 113 is the identd port that is used mostly for puter identification for irc servers.
    I would check your box over carefully for a running irc server and any more open ports that were not there before. Also run rkhunter and see if it reports any issues
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #2 dave9000, Sep 18, 2005
  3. chirpy

    chirpy Well-Known Member Verifed Vendor

    Joined:
    Jun 15, 2002
    Messages:
    13,460
    Likes Received:
    22
    Trophy Points:
    463
    Location:
    Go on, have a guess
    You need to edit /etc/xinetd.d/auth and change the disable line to:

    disable = yes

    then restart xinetd:

    service xinetd restart
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #3 chirpy, Sep 18, 2005
  4. sh4ka

    sh4ka Well-Known Member

    Joined:
    May 12, 2005
    Messages:
    444
    Likes Received:
    0
    Trophy Points:
    166
    Location:
    Uruguay
    cPanel Access Level:
    DataCenter Provider
    Thank you! ;)
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #4 sh4ka, Sep 18, 2005
(You must log in or sign up to post here.)
Loading...
Similar Threads - Xinetd problem please
  1. Fguerrero

    New Thread I have problem when exporting by horde

    Fguerrero, Mar 25, 2019 at 9:58 AM, in forum: General Discussion
    Replies:
    0
    Views:
    38
    Fguerrero
    Mar 25, 2019 at 9:58 AM
  2. Motamedi

    Problem with ModSecurity Vendors

    Motamedi, Mar 13, 2019, in forum: Security
    Replies:
    9
    Views:
    1,865
    fuzzylogic
    Mar 20, 2019 at 3:51 AM
  3. Christforums.com

    PHP 7.3 and OPcache problem

    Christforums.com, Mar 8, 2019, in forum: EasyApache
    Replies:
    4
    Views:
    1,258
    cPanelMichael
    Mar 11, 2019
  4. zuliyomi

    SOLVED Problem with SpamAssassin Update

    zuliyomi, Mar 5, 2019, in forum: E-mail Discussion
    Replies:
    3
    Views:
    1,257
    cPanelLauren
    Mar 8, 2019
  5. Nicola Urbinati

    SOLVED Perl problems with 78.0.13?

    Nicola Urbinati, Mar 5, 2019, in forum: General Discussion
    Replies:
    15
    Views:
    543
    cPanelLauren
    Mar 25, 2019 at 11:41 AM

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...
    Dismiss Notice