Attempted Form Attack from Google IP?

Or probably, what I don't know . . .

[rocknbil]

I go through my form logs often and have some email alerts informing me of attempts.

Today I got an attempt from an IP address that resolves as a Google IP. I couldn't believe my eyes, so I checked it on three different lookup tools.

These were obvious manual form submits, with even more obvious phony form data input, so I suppose the question is . . . . how is this IP address resolving as a Google IP? Are they hacked?

The relevant, and anonymous, log entries:

[form process] [my company] - Time: January 10, 2009 17:40:12
REMOTE HOST: [my site address] Yeah I know, this will always be the same lol
REMOTE ADDRESS: [google IP]
... [all the form input data]

I'm not concerned about the attempt. No email goes through, and the "receipt" is a no-reply receipt, so they're not getting my address. What's weird is . . . it's a Google IP.

[tedster]

Some possbilities:

1. It was googlebot. See Googlebot Now Crawls via HTML Forms [webmasterworld.com]

2. A hack attempt that is spoofing a Google IP address. See IP Spoofing [webmasterworld.com].

3. Someone at Google was checking out your site's form security as a "favor" to you.