I'm investigating a problem on an older server, and something strange is going on. Instead of the correct client address being logged in /var/httpd/*log, an apparently random address is logged instead.
E.g. 126.96.36.199, 188.8.131.52, 184.108.40.206
Every client is logged as the same address. If I restart httpd, this address changes.
This is httpd-2.0.63 with php-4.3.9 running on CentOS 4.6. The RPMs for httpd and PHP verify OK, with the exception of httpd.conf and php.ini - i.e., the httpd server and libraries (and also all the dynamic libraries httpd is linked with) appear to be intact.
The address of open connections is returned correctly with netstat.