Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am setting up a production environment on my VPS for a Rails app I'm working on. I have not registered a domain name yet, so what I did was just edit my local hosts-file manually. This works fine for testing purposes.

Using Phusion Passenger I log all requests in [railsapp-folder]/log/access.log. Now here's the weird thing: I was using tail -f to monitor this file and suddenly the following line pops up: - - [30/Jun/2011:13:28:32 +0200] "GET HTTP/1.1" 500 728 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"

I looked up the IP address and it appears to have it's origin in Beijing.

Could someone explain how this is happening? I just set up this environment two hours ago and it seems someone is already accessing it from the outside, which should not be possible at all.


The URL it tries to request is also mentioned on this web page:

share|improve this question
up vote 1 down vote accepted

Why should this no be possible? Is your VPS firewalled so that only you can access it? The access log entry seems to show a request for some PHP site. Maybe their DNS is wrong and still has old information of the previous owner of your IP address in it?

share|improve this answer
Well, the thing I find weird is that it shows up in the log of this Rails app, which can only be accessed through the domain "" (and you have to set that up locally in your hosts file). This rails app is not the default of my server. – Bram Jetten Jun 30 '11 at 11:53

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.