Fake Googlebot Impersonation (Mediapartners-Google UA) for 2026-07-10

Jul 10, 2026 Exploitation

Last Updated: 00:00 UTC

Hosts sending a Mediapartners-Google / Googlebot user-agent from IP ranges that do not belong to Google. Impersonating a search crawler is used to bypass bot filtering and rate limits while scraping or probing. Genuine Google crawler ranges (66.249.0.0/16) are excluded from this list.

MITRE ATT&CK

Tactic: Defense Evasion (TA0005)
Technique: T1036 — Masquerading

Observed URIs

Attackers by Country

Vietnam: 18Brazil: 16Bangladesh: 10Pakistan: 7Mexico: 7Argentina: 6Iraq: 5Ukraine: 5Algeria: 4Uzbekistan: 3Ecuador: 3Chile: 3Colombia: 3Venezuela: 3Ethiopia: 3United Arab Emirates: 3Ivory Coast: 2India: 2Israel: 2Uruguay: 2Jordan: 2Paraguay: 2Azerbaijan: 2South Africa: 1Morocco: 1Belarus: 1Philippines: 1Nicaragua: 1Oman: 1Bolivia: 1Peru: 1Honduras: 1Bosnia and Herzegovina: 1El Salvador: 1Syria: 1Tunisia: 1Indonesia: 1Nepal: 1Bulgaria: 1Lebanon: 1Puerto Rico: 1Ireland: 1
Vietnam1813.6%
Brazil1612.1%
Bangladesh107.6%
Pakistan75.3%
Mexico75.3%
Argentina64.5%
Iraq53.8%
Ukraine53.8%
Algeria43.0%
Uzbekistan32.3%
Ecuador32.3%
Chile32.3%
Colombia32.3%
Venezuela32.3%
Ethiopia32.3%
United Arab Emirates32.3%
Ivory Coast21.5%
India21.5%
Israel21.5%
Uruguay21.5%
Jordan21.5%
Paraguay21.5%
Azerbaijan21.5%
South Africa10.8%
Morocco10.8%
Belarus10.8%
Philippines10.8%
Nicaragua10.8%
Oman10.8%
Bolivia10.8%
Peru10.8%
Honduras10.8%
Bosnia and Herzegovina10.8%
El Salvador10.8%
Syria10.8%
Tunisia10.8%
Indonesia10.8%
Nepal10.8%
Bulgaria10.8%
Lebanon10.8%
Puerto Rico10.8%
Ireland10.8%

IP Address : ASN : City/Provider

Share on: