Fake Googlebot Impersonation (Mediapartners-Google UA) for 2026-07-09

Last Updated: 00:00 UTC

Hosts sending a Mediapartners-Google / Googlebot user-agent from IP ranges that do not belong to Google. Impersonating a search crawler is used to bypass bot filtering and rate limits while scraping or probing. Genuine Google crawler ranges (66.249.0.0/16) are excluded from this list.

MITRE ATT&CK

Tactic: Defense Evasion (TA0005)
Technique: T1036 — Masquerading

Observed URIs

Attackers by Country

Vietnam: 9Brazil: 7Argentina: 5Mexico: 5Bangladesh: 4Pakistan: 3Congo Republic: 2Bolivia: 2Iraq: 2Guatemala: 2Morocco: 2Angola: 1Romania: 1Brunei: 1Egypt: 1United Arab Emirates: 1Türkiye: 1Peru: 1Paraguay: 1Panama: 1Croatia: 1Jamaica: 1Belarus: 1Syria: 1Slovenia: 1Kyrgyzstan: 1
Vietnam915.5%
Brazil712.1%
Argentina58.6%
Mexico58.6%
Bangladesh46.9%
Pakistan35.2%
Congo Republic23.4%
Bolivia23.4%
Iraq23.4%
Guatemala23.4%
Morocco23.4%
Angola11.7%
Romania11.7%
Brunei11.7%
Egypt11.7%
United Arab Emirates11.7%
Türkiye11.7%
Peru11.7%
Paraguay11.7%
Panama11.7%
Croatia11.7%
Jamaica11.7%
Belarus11.7%
Syria11.7%
Slovenia11.7%
Kyrgyzstan11.7%

IP Address : ASN : City/Provider

Share on: