The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

What is this?

Discussion in 'General Discussion' started by petfut, Mar 15, 2005.

  1. petfut

    petfut Well-Known Member

    Joined:
    Feb 14, 2005
    Messages:
    60
    Likes Received:
    0
    Trophy Points:
    156
    After this my Apache had to be restarted couple of times:

    194.109.21.230 - - [15/Mar/2005:22:19:58 +0200] "POST http://194.109.153.2:6667/ HTTP/1.0" 405 228
    194.109.21.230 - - [15/Mar/2005:22:19:58 +0200] "CONNECT 194.109.153.2:6667 HTTP/1.0" 405 231
    194.109.21.230 - - [15/Mar/2005:22:19:58 +0200] "CONNECT 194.109.153.2:6667 HTTP/1.0" 405 231
    194.109.21.230 - - [15/Mar/2005:22:20:09 +0200] "\x04\x01\x1a\v\xc2m\x99\x02" 400 -
    194.109.21.230 - - [15/Mar/2005:22:20:09 +0200] "\x04\x01\x1a\v\xc2m\x99\x02" 400 -
    194.109.21.230 - - [15/Mar/2005:22:20:09 +0200] "\x05\x01" 501 -
     
    #1 petfut, Mar 15, 2005
  2. sleuth1

    sleuth1 Well-Known Member

    Joined:
    Mar 16, 2003
    Messages:
    75
    Likes Received:
    0
    Trophy Points:
    156
    Not to alarm you unnessacerily but it looks like you have a connection to a server in Amsterdam ( Holland) on port 6667

    quote

    Re: TCP port 6667
    ... >Does anyone know which service running on TCP port 6667? > >regards, >apisit.
    > At least the trojan WinSatan uses TCP port 6667 by default, ...


    If this isnt something you know about and are allowing , do a thorough check ,now ( it may also be harmless ) but you should find out . or get a pro to look at it.
     
    #2 sleuth1, Mar 16, 2005
(You must log in or sign up to post here.)

Share This Page