I'm no expert on this sort of problem but I notice that the first and last addresses logged both point to: name = voip-98-144-147-0.wi.rr.com. name = voip-98-144-141-0.wi.rr.com. Any chance someone is accessing your web site from a cell phone instant messaging service? Regards, John ========================================= On Monday 30 September 2013 18:50:59 Andrew Daviel wrote: > I'm investigating a problem on an older server, and something strange > is going on. Instead of the correct client address being logged in > /var/httpd/*log, an apparently random address is logged instead. E.g. > 98.144.147.0, 98.208.248.0, 98.144.141.0 > > Every client is logged as the same address. If I restart httpd, this > address changes. > > This is httpd-2.0.63 with php-4.3.9 running on CentOS 4.6. > The RPMs for httpd and PHP verify OK, with the exception of > httpd.conf and php.ini - i.e., the httpd server and libraries (and also > all the dynamic libraries httpd is linked with) appear to be intact. > > It looks like this has been going on for some considerable time (more > than a year). > > The address of open connections is returned correctly with netstat --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx