You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Kyle Hamilton <wi...@sbcglobal.net> on 2003/04/29 07:59:03 UTC

[users@httpd] *opss* Questions about logs and my firewall

sorry sent last email before i was finsihed :-(
-Kyle


> Hey out there I got a question for everyone
> My Name is Kyle and a few months ago I started a web hosting comapny *im
not
> quite out of high school* and I had some log questiosn with apache and my
> firewall if you can please help me that would make my life so much easyer
> between work and school and finals and dateing and linux and and and
> and...... so you get the picture I have added some logs that consern me
> please try to explain them to me so I can learn as much as I can
> Thank you for Reading this and putting up with me
> -Kyle
>
*Quesiton about firewall*
I know what I did to set all this up and such but why is someone doing this
and how do I stop it or prevent it or what ever

> what does this mean?
> 80.50.140.26 - - [28/Apr/2003:12:13:38 -0700] "HEAD
http://www.lolitas-camp.com/members/ HTTP/1.0" 404 0 "-" "Mozilla/3.0
(compatible)" '

and this?
24.85.104.152 - - [28/Apr/2003:14:21:38 -0700] "HEAD http://www.sun.com/
HTTP/1.0" 200 0 "-" "Mozilla/3.0 (compatible)"
67.115.7.185 - - [28/Apr/2003:16:51:09 -0700] "GET /default.ida?

and all of this.....

      Time Action Protocol From To Length Interface Option
      Apr 28 04:43:33 DENY icmp(1) 172.20.148.54:3 67.114.97.110:13 56 eth1
      Apr 28 04:43:36 DENY icmp(1) 172.20.148.54:3 67.114.97.110:13 56 eth1
      Apr 28 08:18:27 DENY tcp(6) 210.6.171.114:2604 67.114.97.110:17300 48
eth1 SYN
      Apr 28 08:18:30 DENY tcp(6) 210.6.171.114:2604 67.114.97.110:17300 48
eth1 SYN
      Apr 28 08:18:36 DENY tcp(6) 210.6.171.114:2604 67.114.97.110:17300 48
eth1 SYN
      Apr 28 08:48:54 DENY tcp(6) 200.63.217.139:3453 67.114.97.110:1433 44
eth1 SYN
      Apr 28 08:48:57 DENY tcp(6) 200.63.217.139:3453 67.114.97.110:1433 44
eth1 SYN
      Apr 28 10:15:14 DENY icmp(1) 172.20.148.54:3 67.114.97.110:13 56 eth1
      Apr 28 12:15:59 DENY icmp(1) 172.20.148.54:3 67.114.97.110:13 56 eth1
      Apr 28 12:16:02 DENY icmp(1) 172.20.148.54:3 67.114.97.110:13 56 eth1
      Apr 28 18:17:20 DENY icmp(1) 172.20.148.54:3 67.114.97.110:13 56 eth1
      Apr 28 18:19:40 DENY tcp(6) 67.117.110.11:3132 67.114.97.110:8888 48
eth1 SYN
      Apr 28 18:19:43 DENY tcp(6) 67.117.110.11:3132 67.114.97.110:8888 48
eth1 SYN
      Apr 28 18:19:49 DENY tcp(6) 67.117.110.11:3132 67.114.97.110:8888 48
eth1 SYN
      Apr 28 18:33:38 DENY tcp(6) 67.117.110.11:3304 67.114.97.110:8888 48
eth1 SYN
      Apr 28 18:33:41 DENY tcp(6) 67.117.110.11:3304 67.114.97.110:8888 48
eth1 SYN
      Apr 28 18:33:47 DENY tcp(6) 67.117.110.11:3304 67.114.97.110:8888 48
eth1 SYN
      Apr 28 19:23:27 DENY tcp(6) 81.114.57.186:3103 67.114.97.110:1433 44
eth1 SYN
      Apr 28 19:23:30 DENY tcp(6) 81.114.57.186:3103 67.114.97.110:1433 44
eth1 SYN
      Apr 28 21:10:35 DENY icmp(1) 24.127.138.248:14 67.114.97.110:0 48 eth1
      Apr 28 21:11:14 DENY icmp(1) 24.127.138.248:14 67.114.97.110:0 48 eth1
      Apr 28 21:29:17 DENY icmp(1) 68.63.160.242:14 67.114.97.110:0 40 eth1
      Apr 28 21:35:58 DENY icmp(1) 80.50.140.26:14 67.114.97.110:0 40 eth1





---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org