Re: mailshell and other connections from httpd.exe

[Dominion Admin <admin@xxxxxxxxxxxxxxxxx>]

 Just to add to this, there is no mention of these IP addresses in the 
access log file.

thanks

Johannes

On 20/07/2010 10:05 AM, Dominion Admin wrote:
>  Good day
>
> I am running Apache 2.2.14
> PHP 5.2.11
>
> I have picked up via our firewall on machine that there is unknown 
> connections to /from the httpd.exe
> program to the following IP's
>
> 65.55.162.26
> 72.18.206.224
> 207.46.16.233
> 65.55.226.88
> 64.4.52.182
>
> some of them are mailshell other is datacenters, dont know where these 
> come from but they are all running under the httpd.exe process. Is 
> there anyway via the Apache to list all active connections or is there 
> know issue regarding weird connections to mailshell. I have not 
> antispam software installed thus it cannot be anything like that doing 
> the connections and also as I said they are all registered under the 
> httpd.exe process.
>
> Any info will be appreciated.
>
> PS : I tried searching about this issue, archives etc. but I dont 
> really see anything, will like to know if anybody else have
> this problem
>
> thanks
>
> Johannes
>
>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server 
> Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
>   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
> For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
  "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx