IP address/search shows in Popular Pages

[m_factor]

When I look at my list of Popular Pages, is see mostly my own pages but then a bunch of pages that show as the IP address/search (123.456.65.432/search). If I click on those, I get to google.com but perhaps that's a default and not really "Google". Any idea why they would show up in my Popular Pages listing?

I don't do anything with google on my web site.

It's not hurting anything but I'm just curious.

Thanks,
Mara

[robinev]

That IP address doesn't belong to Google. It appears to be somebody called "MelbourneIT.com" that appears to be acting very much like a spammer. The URL you posted belongs to MelbourneIT, so if they're redirecting it to google, they're probably trying to hide who they are for some bizarre reason.

If anyone tried following the link, it might be worthwhile to do a scan for spyware, just in case, eh?

As to seeing your internal pages, note the option below the stats display that lets you specify a display of external referrers only.

[m_factor]

Sorry about that... the IP address I included in my original was just consecutive numbers to show the form entry in the Popular pages took. One of the actual addresses was 64.233.187.104 . I couldn't resolve it or the others to actual DNS entries. Perhaps you can?

Another address was 64.233.179.104. Note the similarities.

Ah... interesting... if I go to http://64.233.179.104/search, it resolves itself to http://64.233.179.104/webhp which looks almost the same as google.com but has slightly different options at the bottom including one that says to go to google.com. Weird.

In any case, I've got my machine fairly well protected with a firewall, spyware detector, etc. but I'll run the software by hand just in case, anyway.

Let me know if there's any other information I can provide to possibly help figure out what's going on.

Thanks again,
Mara

[m_factor]

I may have figured out the mystery:

In keyword analysis, I found the following landing page:
http://64.233.187.104/search?q=cache...tresupply.html reds meadow %2B PCT&hl=en

Another one was:

http://64.233.179.104/search?q=cache...factor/at.html KOA Campground/Harpers Ferry, WV&hl=en&ie=UTF-8

Note the initial IP addresses.

Going to those pages lands me on google cache pages of my web site pages.

Mystery solved?

Can you think of any other reason to feel suspicious?

Thanks for you help,

Mara