I have a blog hosted with Ghost CMS. I created a new blog post (say "My New Blog") and correspondingly there was a url generated (mysite.com/mynewblog/)
The weird part is that I saw an access to this post within 2 minutes of creating it. And ever weirder: the access IP was from China (IP to location).
Even if I assume that the CMS reports new blogs somewhere central, why would that be China? The access log looks like this:
126.96.36.199 - - [20/Jun/2015:14:32:32 +0000] "GET /mynewblog/ HTTP/1.0" 200 - "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)"
Is someone in my webserver?