And I meant you're not violating GDPR by letting apache2 run with default config, as the GDPR allows you to capture these IP adresses for 2 different reasons.