☰

¿Busca Google en mis registros de acceso a Apache?

tag-icon • tag-icon apache-2.2 security
¿Busca Google en mis registros de acceso a Apache?

Estoy bastante familiarizado con la idea de que los bots están investigando mi servidor en busca de vulnerabilidades, pero hoy, cuando revisé mis registros de acceso, noté que aparecían un montón de búsquedas en Google en los registros. ¿Cuál es exactamente el punto de esto?

91.188.124.225 - - [22/Dec/2013:22:15:03 +0000] "GET http://www.google.pl/search?q=onet.pl HTTP/1.1" 301 325 "-" "-"
91.188.124.225 - - [22/Dec/2013:22:46:02 +0000] "GET http://www.google.pl/search?q=wp.pl HTTP/1.1" 301 323 "-" "-"
91.188.124.225 - - [22/Dec/2013:23:16:59 +0000] "GET http://www.google.pl/search?q=wczasy HTTP/1.1" 301 324 "-" "-"
91.188.124.225 - - [22/Dec/2013:23:48:01 +0000] "GET http://www.google.pl/search?q=polska+najlepsza HTTP/1.1" 301 334 "-" "-"
91.188.124.225 - - [23/Dec/2013:00:19:00 +0000] "GET http://www.google.pl/search?q=polska+najlepsza HTTP/1.1" 301 334 "-" "-"
91.188.124.225 - - [23/Dec/2013:00:50:01 +0000] "GET http://www.google.pl/search?q=wczasy HTTP/1.1" 301 324 "-" "-"
91.188.124.225 - - [23/Dec/2013:01:21:01 +0000] "GET http://www.google.pl/search?q=google HTTP/1.1" 301 324 "-" "-"
91.188.124.225 - - [23/Dec/2013:01:52:01 +0000] "GET http://www.google.pl/search?q=google HTTP/1.1" 301 324 "-" "-"
91.188.124.225 - - [23/Dec/2013:02:23:00 +0000] "GET http://www.google.pl/search?q=onet.pl HTTP/1.1" 301 325 "-" "-"
91.188.124.225 - - [23/Dec/2013:02:54:00 +0000] "GET http://www.google.pl/search?q=wakacje HTTP/1.1" 301 325 "-" "-"
91.188.124.225 - - [23/Dec/2013:03:25:01 +0000] "GET http://www.google.pl/search?q=ostro%C5%82%C4%99ka HTTP/1.1" 301 345 "-" "-"
91.188.124.225 - - [23/Dec/2013:03:55:58 +0000] "GET http://www.google.pl/search?q=polska+najlepsza HTTP/1.1" 301 334 "-" "-"
91.188.124.225 - - [23/Dec/2013:04:26:54 +0000] "GET http://www.google.pl/search?q=wczasy HTTP/1.1" 301 324 "-" "-"
91.188.124.225 - - [23/Dec/2013:04:58:01 +0000] "GET http://www.google.pl/search?q=wczasy HTTP/1.1" 301 324 "-" "-"
91.188.124.225 - - [23/Dec/2013:05:29:01 +0000] "GET http://www.google.pl/search?q=google HTTP/1.1" 301 324 "-" "-"
91.188.124.225 - - [23/Dec/2013:06:00:00 +0000] "GET http://www.google.pl/search?q=onet.pl HTTP/1.1" 301 325 "-" "-"
91.188.124.225 - - [23/Dec/2013:06:31:01 +0000] "GET http://www.google.pl/search?q=wczasy HTTP/1.1" 301 324 "-" "-"
91.188.124.225 - - [23/Dec/2013:07:01:59 +0000] "GET http://www.google.pl/search?q=wp.pl HTTP/1.1" 301 323 "-" "-"
91.188.124.225 - - [23/Dec/2013:07:33:01 +0000] "GET http://www.google.pl/search?q=wakacje HTTP/1.1" 301 325 "-" "-"
91.188.124.225 - - [23/Dec/2013:08:04:01 +0000] "GET http://www.google.pl/search?q=onet.pl HTTP/1.1" 301 325 "-" "-"
91.188.124.225 - - [23/Dec/2013:08:35:00 +0000] "GET http://www.google.pl/search?q=ostro%C5%82%C4%99ka HTTP/1.1" 301 345 "-" "-"
91.188.124.225 - - [23/Dec/2013:09:05:58 +0000] "GET http://www.google.pl/search?q=praca HTTP/1.1" 301 323 "-" "-"
91.188.124.225 - - [23/Dec/2013:09:36:59 +0000] "GET http://www.google.pl/search?q=google HTTP/1.1" 301 324 "-" "-"
91.188.124.225 - - [23/Dec/2013:10:08:01 +0000] "GET http://www.google.pl/search?q=wp.pl HTTP/1.1" 301 323 "-" "-"
91.188.124.225 - - [23/Dec/2013:10:38:59 +0000] "GET http://www.google.pl/search?q=google HTTP/1.1" 301 324 "-" "-"
91.188.124.225 - - [23/Dec/2013:11:10:01 +0000] "GET http://www.google.pl/search?q=google HTTP/1.1" 301 324 "-" "-"
91.188.124.225 - - [23/Dec/2013:11:41:02 +0000] "GET http://www.google.pl/search?q=polska+najlepsza HTTP/1.1" 301 334 "-" "-"
91.188.124.225 - - [23/Dec/2013:12:12:01 +0000] "GET http://www.google.pl/search?q=ostro%C5%82%C4%99ka HTTP/1.1" 301 345 "-" "-"
91.188.124.225 - - [23/Dec/2013:12:43:00 +0000] "GET http://www.google.pl/search?q=wakacje HTTP/1.1" 301 325 "-" "-"
91.188.124.225 - - [23/Dec/2013:13:13:59 +0000] "GET http://www.google.pl/search?q=polska+najlepsza HTTP/1.1" 301 334 "-" "-"
91.188.124.225 - - [23/Dec/2013:13:44:59 +0000] "GET http://www.google.pl/search?q=praca HTTP/1.1" 301 323 "-" "-"
91.188.124.225 - - [23/Dec/2013:14:15:59 +0000] "GET http://www.google.pl/search?q=praca HTTP/1.1" 301 323 "-" "-"
91.188.124.225 - - [23/Dec/2013:14:47:01 +0000] "GET http://www.google.pl/search?q=onet.pl HTTP/1.1" 301 325 "-" "-"
91.188.124.225 - - [23/Dec/2013:15:18:00 +0000] "GET http://www.google.pl/search?q=google HTTP/1.1" 301 324 "-" "-"
91.188.124.225 - - [23/Dec/2013:15:48:59 +0000] "GET http://www.google.pl/search?q=wczasy HTTP/1.1" 301 324 "-" "-"
91.188.124.225 - - [23/Dec/2013:16:20:00 +0000] "GET http://www.google.pl/search?q=wp.pl HTTP/1.1" 301 323 "-" "-"
91.188.124.225 - - [23/Dec/2013:16:50:56 +0000] "GET http://www.google.pl/search?q=wakacje HTTP/1.1" 301 325 "-" "-"
91.188.124.225 - - [23/Dec/2013:17:22:00 +0000] "GET http://www.google.pl/search?q=wczasy HTTP/1.1" 301 324 "-" "-"
91.188.124.225 - - [23/Dec/2013:17:53:00 +0000] "GET http://www.google.pl/search?q=ostro%C5%82%C4%99ka HTTP/1.1" 301 345 "-" "-"
91.188.124.225 - - [23/Dec/2013:18:24:00 +0000] "GET http://www.google.pl/search?q=praca HTTP/1.1" 301 323 "-" "-"

Respuesta1

Terminé encontrando la respuesta a esta pregunta al ver varias otras preguntas sobre fallas del servidor que eran de naturaleza similar y luego, buscando en Google, encontré esto:

http://wiki.apache.org/httpd/ProxyAbuse

Respuesta2

Eso no es google. Lo que sea que acceda a su sitio está solicitando la página llamadahttp://www.google.pl/search?q=some-query

Ejecute un whois en la ip solicitante y obtendrá esto:

inetnum:        91.188.124.0 - 91.188.125.255
netname:        KrynskiNET
descr:          Hosting Company
descr:          Krynski NET MichaÅ KryÅski
descr:          ul. SÅawinkowska 96
descr:          20-810 Lublin

información relacionada