Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have a web site that uses a couple hundred domain aliases, including franchise-dallas.info, franchise-delaware.info, and detroitfranchise.info (see more below).

I have been getting ten to twenty hits per day via Google AdWords PPC. I set up a log file so that I could see the variables in the URL.

I was surprised to see that the page is getting hit about once per minute. I looked up the IPs and they are all in China.

My site has ZERO content that would be of use to anyone outside the U.S.A.

Can you tell me why my site would be getting this type of hit? Is this normal? Is this a bot?

TIME, IP, DOMAIN, PAGE
20:9, 66.249.71.138, franchise-st-petersburg.info, Why-Buy-a-Franchise
20:13, 66.249.71.21, franchise-ok.info, Frequently-Asked-Questions-About-Franchises
20:16, 66.249.71.44, franchise-dallas.info, Frequently-Asked-Questions-About-Franchises
20:20, 66.249.71.36, franchise-delaware.info, Frequently-Asked-Questions-About-Franchises
20:21, 66.249.71.136, detroitfranchise.info, What-We-Do-Free-Franchise-Advice
20:21, 66.249.71.10, philadelphiafranchise.info, Privacy-Policy
20:21, 66.249.71.144, denverfranchise.info, Franchise-Terminology
20:22, 66.249.71.59, franchise-tx.info, Get-Started-Ask-a-Franchise-Expert
20:24, 67.195.114.240, franchise-ky.info, Franchise-Terminology
20:27, 66.249.71.138, franchise-st-petersburg.info, Why-Buy-a-Franchise
share|improve this question
    
Are the above IPs the ones that have been hitting your website? If so, I believe you're incorrect stating that they're in China. whois is showing them as allocated to Google, and a ping shows latency way to low for a trans-pacific transit. –  EEAA Mar 2 '11 at 21:39
    
Erik, when I first looked up the IP adresses, the IP lookup site said they were all from China. I considered your answer and looked them up on ip-lookup.net/index.php. Now I see that they are from Yahoo and Google. Hmmmm. Maybe the first IP lookup site I used was wrong. Thanks so much for your info. –  Evik James Mar 4 '11 at 16:22
    
That's a very strange log. What generated it? –  Michael Hampton Mar 11 '13 at 23:12
add comment

4 Answers 4

up vote 3 down vote accepted

Welcome to hosting a website on its own IP address. You can put a host on a public IP nowadays and chances are you'll get hit with a scan before the end of the day, probably sooner. Often times they are just going up and down the IP ranges looking for running web, mail or shell servers to attack.

share|improve this answer
    
This is a reasonable explanation, but it doesn't answer the question of "why only China?" And why continuously? It seems like the bot or spider would move on to other sites and server. –  Evik James Mar 2 '11 at 21:17
add comment

Can you tell me why my site would be getting this type of hit? Is this normal? Is this a bot?

Because you're hosting a website, wait for it, on the World Wide Web. Not the United States Web.

Don't worry about it. If you really don't want China to hit your website then put appropriate firewall rules in place to block that traffic.

share|improve this answer
    
I am completely aware of the fact that the site is available to everyone, including those in China. While I appreciate your attempt at humor, you didn't even approach an answer. 1) The hits of coming from China and no other countries. Those other countries probably have more access to my site than China does. If the site was getting hits from many countries, your joke wouldn't have fallen so flat. 2) This is a web site. I am a web developer. I don't have access or control to the firewall. 3) I am looking for an explanation, not "don't worry about it". –  Evik James Mar 2 '11 at 21:15
    
@Evik James - Honestly, there's not much more to say. How can any of us know why this certain IP is hitting your website? Why does it matter? Like Tchalvak said, as long as it's not causing performance problems, it's really not worth even looking into. And yes, it's completely normal for IPs from anywhere to hit open webservers. –  EEAA Mar 2 '11 at 21:32
    
Additionally, since these hits are not appearing on Google Analytics, it's likely a bot or some other automated tool. GA relies on javascript, so if js isn't available, then the hit won't get counted. –  EEAA Mar 2 '11 at 21:35
add comment

Many chinese people also speak the lingua-franca of the web, which is essentially english. I'd set up google analytics to track who's referring links to your site.

As long as it isn't a Denial of service situation, it might be positive for your sites.

share|improve this answer
    
These hits do not appear anywhere on Google Analytics. These hits are not registering on GA. That was a good idea though. Thanks! –  Evik James Mar 2 '11 at 21:18
add comment

Evik - it's possible that franchoice or bison were trying to gain organic search dominance by purchasing up multiple keyword heavy domain names and pointing them to the same codebase. They might have even promoted some of these domains by purchasing links on affiliate websites which in turn get spidered by the search robots which then show up in your log files - It's not possible to know if it's robot traffic or user traffic with only log data. You might have better luck collecting user agent data.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.