Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I am totally beginner in apache, but I've noticed that there is a line in my /var/log/apache2/access.log

GET http://www.freebiespro.co.uk/getip.php HTTP/1.0

from a Chinese IP 222.215.230.175

I live in Europe.

I've just started the server (in 15 minutes).

What is this doing in my log? Am I pwnd? Why are chinese people/bots accessing my server? How does he know that I exist?

share|improve this question
    
You host a public server, so you need to live with that. –  slhck Jun 3 '12 at 12:32
    
Somebody is just blindly scanning for proxies, nothing to be worried about (unless you have enabled forward proxy mode by setting ProxyRequests On). You however need to take good care when running a server on the internet. httpd.apache.org/docs/2.2/misc/security_tips.html is a good point to start reading. –  Gurken Papst Jun 3 '12 at 12:53
    
Is www.freebiespro.co.uk your web site? –  lgarzo Jun 4 '12 at 7:33
    
@lgarzo, no it's not! –  naxa Jun 5 '12 at 10:47
    
@GurkenPapst, very nice, thank you –  naxa Jun 5 '12 at 10:48
add comment

1 Answer

You will get all kinds of bots and scans from all over the Internet. That's what happens when you have your server exposed to the Internet. You can configure Apache to not allow access from certain countries based on IP addresses if you like, and you can configure it to tell nice bots to not scan you.

He knows you exist because he probably started scanning your IP block and found your server.

Google is your friend, putting a server on the Internet comes with a lot of security concerns outside the scope of this forum.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.