Estou vendo o site que não é meu em access.log

Question

Só estou me perguntando por que há algum site no meu access.log que não é meu.

Alguém pode me dizer se meu site é usado como proxy?

Aqui está o log:

121.54.66.50 - - [22/Jul/2013:08:23:56 +0800] "GET / HTTP/1.1" 200 7722 "http://www.spin.ph/sports/basketball/news/import-lowhorn-gets-high-marks-from-teammates-after-week-with-ginebra" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)"
121.54.66.50 - - [22/Jul/2013:08:23:57 +0800] "GET / HTTP/1.1" 200 7722 "http://www.starmometer.com/2013/07/21/ina-kapatid-anak-shoes-now-available-in-cln-stores/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/28.0.1500.72 Safari/537.36"
121.54.66.50 - - [22/Jul/2013:08:23:57 +0800] "GET / HTTP/1.1" 200 7722 "http://www.spin.ph/sports/basketball/news/import-lowhorn-gets-high-marks-from-teammates-after-week-with-ginebra" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)"
121.54.66.50 - - [22/Jul/2013:08:23:57 +0800] "GET / HTTP/1.1" 200 7722 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)"
121.54.66.50 - - [22/Jul/2013:08:23:58 +0800] "GET / HTTP/1.1" 200 7722 "-" "Mozilla/4.0 (compatible; MSIE 9.0.8112.16421; Windows NT 6.1)"
121.54.66.50 - - [22/Jul/2013:08:23:58 +0800] "GET / HTTP/1.1" 200 7722 "http://www.spin.ph/sports/basketball/news/import-lowhorn-gets-high-marks-from-teammates-after-week-with-ginebra" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)"
121.54.66.50 - - [22/Jul/2013:08:23:58 +0800] "GET / HTTP/1.1" 200 7722 "http://www.spin.ph/sports/basketball/news/import-lowhorn-gets-high-marks-from-teammates-after-week-with-ginebra" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)"
121.54.66.50 - - [22/Jul/2013:08:23:59 +0800] "GET / HTTP/1.1" 200 7722 "http://www.spin.ph/sports/basketball/news/import-lowhorn-gets-high-marks-from-teammates-after-week-with-ginebra" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)"
121.54.66.50 - - [22/Jul/2013:08:24:11 +0800] "GET / HTTP/1.1" 200 7722 "http://www.spin.ph/sports/basketball/news/scuffle-after-feu-ust-game" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)"
121.54.66.50 - - [22/Jul/2013:08:24:11 +0800] "GET / HTTP/1.1" 200 7722 "http://www.inquirer.net/" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/28.0.1500.72 Safari/537.36"
121.54.66.50 - - [22/Jul/2013:08:24:11 +0800] "GET / HTTP/1.1" 200 7722 "http://www.spin.ph/sports/basketball/news/scuffle-after-feu-ust-game" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)"
121.54.66.50 - - [22/Jul/2013:08:24:12 +0800] "GET / HTTP/1.1" 200 7722 "http://www.spin.ph/sports/basketball/news/scuffle-after-feu-ust-game" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)"
121.54.66.50 - - [22/Jul/2013:08:24:14 +0800] "GET / HTTP/1.1" 200 7722 "http://www.spin.ph/sports/basketball/news/scuffle-after-feu-ust-game" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)"
121.54.66.50 - - [22/Jul/2013:08:24:15 +0800] "GET / HTTP/1.1" 200 7722 "http://www.spin.ph/sports/basketball/news/scuffle-after-feu-ust-game" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)"
121.54.66.50 - - [22/Jul/2013:08:24:15 +0800] "GET / HTTP/1.1" 200 7722 "http://www.spin.ph/sports/basketball/news/scuffle-after-feu-ust-game" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)"
121.54.66.50 - - [22/Jul/2013:08:24:18 +0800] "GET / HTTP/1.1" 200 7722 "http://www.spin.ph/sports/basketball/news/scuffle-after-feu-ust-game" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)"
121.54.66.50 - - [22/Jul/2013:08:24:18 +0800] "GET / HTTP/1.1" 200 7722 "http://www.spin.ph/sports/basketball/news/scuffle-after-feu-ust-game" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)"
121.54.66.50 - - [22/Jul/2013:08:24:19 +0800] "GET / HTTP/1.1" 200 7722 "http://edge.sharethis.com/share5x/index.e115b54ab48f7ff40187e46edec2497a.html" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/28.0.1500.72 Safari/537.36"
121.54.66.50 - - [22/Jul/2013:08:24:20 +0800] "GET / HTTP/1.1" 200 7722 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)"
121.54.66.50 - - [22/Jul/2013:08:24:24 +0800] "GET / HTTP/1.1" 200 7722 "http://www.spin.ph/sports/basketball/news/scuffle-after-feu-ust-game" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)"
121.54.66.50 - - [22/Jul/2013:08:24:24 +0800] "GET / HTTP/1.1" 200 7722 "http://www.spin.ph/sports/basketball/news/scuffle-after-feu-ust-game" "Mozilla/5.0 (compatible
121.54.66.50 - - [22/Jul/2013:08:26:10 +0800] "GET /sites/all/modules/lightbox2/images/next.gif HTTP/1.1" 200 305 "http://www.mysite.com.com/" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)"
121.54.66.50 - - [22/Jul/2013:08:26:10 +0800] "GET /sites/all/modules/lightbox2/images/blank.gif HTTP/1.1" 200 43 "http://www.mysite.com.com/" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)"
121.54.66.50 - - [22/Jul/2013:08:26:10 +0800] "GET /sites/all/modules/lightbox2/images/prev.gif HTTP/1.1" 200 307 "http://www.mysite.com.com/" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)"

As últimas 3 linhas são log legítimo. Basta saber por que existem sites como o spin.ph, o starmometer.com, o sharethis.com, o inquirer.net.

Preciso me preocupar com isso?

    

Answer 1

O oitavo campo é o campo de referência. Ele mostra de qual URL o visitante viajou para chegar ao seu site. No entanto, nesse caso, é provável que seja apenas uma tentativa de envenenar as estatísticas da Web que você está gerando (como o webalizer), com links para esses sites, para aumentar o tráfego. A página que todos pedem de você é apenas sua página raiz (o bit "GET /").

Você não precisa se preocupar, mas você não deve fazer relatórios Webalizer (ou similares) com links de referenciadores públicos, por isso mesmo (não tenho certeza se você está, apenas pensei em mencioná-lo).

Suponho que você esteja usando o Apache 2, aqui estão mais informações no log formatos.

NB: é sempre possível, claro, que eles sejam referências legítimas, nesses sites, depende do conteúdo do seu site.