vraagje over log van Apache

[anoniem]

Dag allemaal, Een tijdje geleden heb ik apache+php+mysql geïnstalleerd. Alles werkt naar behoren. Nu en dan bekijk ik het log van apache om te kijken of niemand bij dingen komt waar men niet bij moet komen volgens mij. Nu zie ik alleen dit in mijn log: [quote:47872605b0] 82.139.78.163 - - [02/Feb/2007:11:51:05 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.78.163 - - [02/Feb/2007:11:55:40 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.29.246 - - [02/Feb/2007:13:10:03 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.29.246 - - [02/Feb/2007:13:11:19 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.29.246 - - [02/Feb/2007:13:16:12 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.78.163 - - [02/Feb/2007:13:23:22 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.29.246 - - [02/Feb/2007:13:41:47 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.78.163 - - [02/Feb/2007:14:21:47 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.29.246 - - [02/Feb/2007:14:25:29 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.29.246 - - [02/Feb/2007:14:38:16 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.78.163 - - [02/Feb/2007:14:51:18 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.29.246 - - [02/Feb/2007:14:55:28 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.29.246 - - [02/Feb/2007:15:16:09 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.29.246 - - [02/Feb/2007:15:16:53 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.78.163 - - [02/Feb/2007:15:44:56 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.29.246 - - [02/Feb/2007:15:47:12 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.29.246 - - [02/Feb/2007:15:48:41 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.78.163 - - [02/Feb/2007:16:15:12 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.29.246 - - [02/Feb/2007:16:59:09 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.29.246 - - [02/Feb/2007:17:22:16 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.78.163 - - [02/Feb/2007:18:06:15 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.29.246 - - [02/Feb/2007:18:14:57 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.29.246 - - [02/Feb/2007:18:34:34 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.29.246 - - [02/Feb/2007:18:41:55 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.78.163 - - [02/Feb/2007:18:56:42 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.78.163 - - [02/Feb/2007:20:15:51 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.78.163 - - [02/Feb/2007:20:33:58 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.78.163 - - [02/Feb/2007:20:53:31 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.78.163 - - [02/Feb/2007:21:44:49 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.78.163 - - [02/Feb/2007:22:30:35 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.78.163 - - [02/Feb/2007:22:30:53 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.29.246 - - [02/Feb/2007:22:40:52 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.29.246 - - [02/Feb/2007:22:45:02 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.78.163 - - [02/Feb/2007:23:17:26 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.78.163 - - [02/Feb/2007:23:25:39 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.78.163 - - [02/Feb/2007:23:43:42 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.29.246 - - [02/Feb/2007:23:53:57 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.29.246 - - [02/Feb/2007:23:56:10 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.29.246 - - [03/Feb/2007:00:07:16 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.78.163 - - [03/Feb/2007:00:25:05 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.78.163 - - [03/Feb/2007:00:42:07 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.78.163 - - [03/Feb/2007:00:58:11 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.78.163 - - [03/Feb/2007:01:01:27 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.78.163 - - [03/Feb/2007:01:19:39 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.78.163 - - [03/Feb/2007:02:33:13 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.78.163 - - [03/Feb/2007:02:33:54 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.78.163 - - [03/Feb/2007:05:42:47 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.78.163 - - [03/Feb/2007:06:30:09 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.78.163 - - [03/Feb/2007:06:30:31 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.78.163 - - [03/Feb/2007:06:31:12 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.78.163 - - [03/Feb/2007:07:22:33 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.78.163 - - [03/Feb/2007:08:39:11 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.29.246 - - [03/Feb/2007:09:17:17 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.78.163 - - [03/Feb/2007:10:05:14 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.78.163 - - [03/Feb/2007:10:06:46 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.29.246 - - [03/Feb/2007:10:20:32 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.29.246 - - [03/Feb/2007:10:23:45 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.29.246 - - [03/Feb/2007:10:24:14 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.78.163 - - [03/Feb/2007:11:01:16 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.29.246 - - [03/Feb/2007:11:23:23 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.29.246 - - [03/Feb/2007:11:26:47 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.29.246 - - [03/Feb/2007:11:29:14 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.29.246 - - [03/Feb/2007:11:55:48 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.78.163 - - [03/Feb/2007:11:56:07 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.78.163 - - [03/Feb/2007:12:14:08 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.78.163 - - [03/Feb/2007:12:17:38 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.29.246 - - [03/Feb/2007:12:28:11 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.78.163 - - [03/Feb/2007:12:31:46 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.29.246 - - [03/Feb/2007:12:59:26 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.78.163 - - [03/Feb/2007:13:02:50 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.29.246 - - [03/Feb/2007:13:21:24 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.29.246 - - [03/Feb/2007:13:25:36 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.29.246 - - [03/Feb/2007:14:02:46 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.78.163 - - [03/Feb/2007:14:56:50 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.78.163 - - [03/Feb/2007:14:57:44 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.78.163 - - [03/Feb/2007:15:03:31 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.29.246 - - [03/Feb/2007:15:34:30 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.29.246 - - [03/Feb/2007:15:36:06 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.78.163 - - [03/Feb/2007:15:37:39 +0100] "GET / HTTP/1.0" 200 490 "-" "-" 82.139.29.246 - - [03/Feb/2007:15:55:55 +0100] "GET / HTTP/1.0" 200 490 "-" "-" [/quote:47872605b0] Ik vraag me af waar het op duidt en of het gevaarlijk is. Het betreft hier mensen die volgens mij op hetzelfde netwerk zitten als ik (Lijbrandt, 82.139). Graag zou ik wat meer info willen over zulke berichten in mijn log en of het gevaarlijk is en wat ik er tegen kan doen. Ik heb al geprobeerd om in het apache-configuratiebestand deze IP's eruit te houden, maar ik weet niet of dat werkt. Op internet kon ik niet zoveel vinden over zulke berichten in het log. Misschien weet iemand van jullie iets. Groet, Joost

[anoniem]

Neu, dit is ongevaarlijk. Ik heb ze ook in mijn logs staan maar dan met http1.1 en een Ms-webDAV protocol bij client id. Maar voor meer informatie verwijs ik je toch door naar de handleiding van Apache over de [url=http://httpd.apache.org/docs/2.2/logs.html#accesslog]access_log[/url]

[anoniem]

Bedankt voor de reactie. Ik heb het eens even bekeken, maar ik word er nog niet echt veel wijzer van. Wel wordt uitgelegd hoe je het bestand moet interpreteren, maar niet wat die berichten waar ik het over had op duiden. Maar als het geen kwaad kan, slaap ik er in ieder geval niet slechter van. Groet, joost