RE: [squid-users] Log entries

> > > > 1073097048.974 1 213.200.246.227 TCP_DENIED/403 1407 GET
> > > > http://213.200.246.227//DISKUZE/list.php - NONE/- text/html
> > > > 1073097048.977 5 80.129.219.56 TCP_MISS/403 1440 GET
> > > > http://213.200.246.227//DISKUZE/list.php -
> DIRECT/213.200.246.227
> > t
> > > >
> > > > Can somebody please tell me how I have to interprete this?
> > >
> > > Is 213.200.246.227 the IP address of your proxy?
> >
> > Yes, this is my reverse proxy ip address. I never would make such
a
> > nonsense request from my own ip address. Seems to me like a
> spoofed ip
> > address. The rest of the url is czech language.
>
>
> Is 80.129.219.56 your IP address? This was the client who
> made the request.

No, that's one belonging to a German ISP.

Regards,
Philipp
Received on Sat Jan 03 2004 - 05:56:37 MST