You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by "JPN. Sumarno" <ma...@ai3.itb.ac.id> on 2003/10/02 09:11:37 UTC
Re: [users@httpd] Re: what happen in access_log
Dear Pak Luqman (Mr. Luqman),
I think that's show a normal log. If the erver have any error, in this
file will show error statement too.
On Thu, 2 Oct 2003, Luqman wrote:
> -----------------------------
> ProxyRequests Off
>
> <Directory proxy:*>
> Order deny,allow
> Deny from all
> Allow from unhas.ac.id
> </Directory>
>
That's good pak Luqman, it's mean you allow all pc in UNHAs to access this
server, and pc from out of UNHAS will be deny to access your proxy server.
> but i still get this on access_log:
> ------------------------------
> 62.65.218.200 - - [02/Oct/2003:14:43:44 +0800] "CONNECT login.icq.com:443 HTTP/1.0" 200 16163
> 62.65.218.200 - - [02/Oct/2003:14:43:55 +0800] "CONNECT login.icq.com:443 HTTP/1.0" 200 16163
> 202.102.142.48 - - [02/Oct/2003:14:44:07 +0800] "GET http://www.sina.com.cn/ HTTP/1.1" 200 16273
> 66.171.94.240 - - [02/Oct/2003:14:45:36 +0800] "GET http://edit.europe.yahoo.com/?.redir_from=REGISTRATION?.&login=&.chkP=Y&.done=http://jpager.yahoo.com/jpager/pager2.shtml&login=sa.do&passwd=420 HTTP/1.0" 200 13555
> 200.193.85.115 - - [02/Oct/2003:14:46:49 +0800] "CONNECT 204.127.134.23:25 HTTP/1.0" 200 16171
> 38.117.18.135 - - [02/Oct/2003:14:47:06 +0800] "CONNECT 149.174.40.3:25 HTTP/1.0" 200 16147
> 200.193.85.115 - - [02/Oct/2003:14:47:36 +0800] "CONNECT 143.166.224.193:25 HTTP/1.0" 200 16179
>
>From this data, I see that your network have IP address as follow :
62.65.218.200, 202.102.142.40, 66.171.94.240, 200.193.85.115,
38.117.18.135
although maybe it was not show all of your network (I don't know how much
IP address do you have) , but this file show us the
IP address from pc which access a kind of url which show in right side.
Thank you.
Regards,
Marno
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: Re[2]: [users@httpd] Re: what happen in access_log
Posted by ma...@ai3.itb.ac.id.
> Thursday, October 2, 2003, 3:11:37 PM, you wrote:
> the problem is, none of those IP is on my network.
> like this:
> -------------------
> 216.138.199.73 - - [23/Sep/2003:12:09:39 +0800] "CONNECT 205.188.158.25:25
> HTTP/1.0" 200 16171
>
> 216.138.199.73 and 205.188.158.25 is not on my internal network...
> what these ip doing in apache log
>
Pak Luqman, I think your server setting up as web server. Therefore
someone from that IP trying to looking for information from your server
:-). Probably they are interesting to your content :-).
Ussualy, everybody who try access using their browser to your server,
their IP address recorded by log file of your server.
Except your server is not a kind of web server, just proxy only. You
better trying to secure it.
Regards,
Marno
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re[2]: [users@httpd] Re: what happen in access_log
Posted by Luqman <lu...@unhas.ac.id>.
Thursday, October 2, 2003, 3:11:37 PM, you wrote:
>> but i still get this on access_log:
>> ------------------------------
>> 62.65.218.200 - - [02/Oct/2003:14:43:44 +0800] "CONNECT login.icq.com:443 HTTP/1.0" 200 16163
>> 62.65.218.200 - - [02/Oct/2003:14:43:55 +0800] "CONNECT login.icq.com:443 HTTP/1.0" 200 16163
>> 202.102.142.48 - - [02/Oct/2003:14:44:07 +0800] "GET http://www.sina.com.cn/ HTTP/1.1" 200 16273
JS> From this data, I see that your network have IP address as follow :
JS> 62.65.218.200, 202.102.142.40, 66.171.94.240, 200.193.85.115,
JS> 38.117.18.135
JS> although maybe it was not show all of your network (I don't know how much
JS> IP address do you have) , but this file show us the
JS> IP address from pc which access a kind of url which show in right side.
the problem is, none of those IP is on my network.
like this:
-------------------
216.138.199.73 - - [23/Sep/2003:12:09:39 +0800] "CONNECT 205.188.158.25:25 HTTP/1.0" 200 16171
216.138.199.73 and 205.188.158.25 is not on my internal network...
what these ip doing in apache log
--
Best regards,
Luqman >> luqe@unhas.ac.id
http://www.unhas.ac.id/luqe
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org