After this my Apache had to be restarted couple of times: 194.109.21.230 - - [15/Mar/2005:22:19:58 +0200] "POST http://194.109.153.2:6667/ HTTP/1.0" 405 228 194.109.21.230 - - [15/Mar/2005:22:19:58 +0200] "CONNECT 194.109.153.2:6667 HTTP/1.0" 405 231 194.109.21.230 - - [15/Mar/2005:22:19:58 +0200] "CONNECT 194.109.153.2:6667 HTTP/1.0" 405 231 194.109.21.230 - - [15/Mar/2005:22:20:09 +0200] "\x04\x01\x1a\v\xc2m\x99\x02" 400 - 194.109.21.230 - - [15/Mar/2005:22:20:09 +0200] "\x04\x01\x1a\v\xc2m\x99\x02" 400 - 194.109.21.230 - - [15/Mar/2005:22:20:09 +0200] "\x05\x01" 501 -
Not to alarm you unnessacerily but it looks like you have a connection to a server in Amsterdam ( Holland) on port 6667 quote Re: TCP port 6667 ... >Does anyone know which service running on TCP port 6667? > >regards, >apisit. > At least the trojan WinSatan uses TCP port 6667 by default, ... If this isnt something you know about and are allowing , do a thorough check ,now ( it may also be harmless ) but you should find out . or get a pro to look at it.