Fake Googlebot Impersonation (Mediapartners-Google UA) for 2026-07-11

Last Updated: 00:00 UTC

Hosts sending a Mediapartners-Google / Googlebot user-agent from IP ranges that do not belong to Google. Impersonating a search crawler is used to bypass bot filtering and rate limits while scraping or probing. Genuine Google crawler ranges (66.249.0.0/16) are excluded from this list.

MITRE ATT&CK

Tactic: Defense Evasion (TA0005)
Technique: T1036 — Masquerading

Observed URIs

Attackers by Country

Brazil: 30Vietnam: 29Argentina: 18Bangladesh: 16Colombia: 10South Africa: 9Iraq: 9Pakistan: 7Chile: 7Nigeria: 6Ecuador: 6Mexico: 6Venezuela: 6Uzbekistan: 5Morocco: 4Lebanon: 4Ukraine: 4Peru: 4Palestine: 4Kenya: 3Jordan: 3Paraguay: 3Nepal: 2Dominican Republic: 2Bolivia: 2Uruguay: 2Jamaica: 2Angola: 1Cambodia: 1Philippines: 1Iran: 1Kazakhstan: 1Trinidad and Tobago: 1Nicaragua: 1Guyana: 1Ethiopia: 1Indonesia: 1Azerbaijan: 1Oman: 1Senegal: 1Syria: 1Albania: 1Romania: 1Israel: 1United Arab Emirates: 1
Brazil3013.6%
Vietnam2913.1%
Argentina188.1%
Bangladesh167.2%
Colombia104.5%
South Africa94.1%
Iraq94.1%
Pakistan73.2%
Chile73.2%
Nigeria62.7%
Ecuador62.7%
Mexico62.7%
Venezuela62.7%
Uzbekistan52.3%
Morocco41.8%
Lebanon41.8%
Ukraine41.8%
Peru41.8%
Palestine41.8%
Kenya31.4%
Jordan31.4%
Paraguay31.4%
Nepal20.9%
Dominican Republic20.9%
Bolivia20.9%
Uruguay20.9%
Jamaica20.9%
Angola10.5%
Cambodia10.5%
Philippines10.5%
Iran10.5%
Kazakhstan10.5%
Trinidad and Tobago10.5%
Nicaragua10.5%
Guyana10.5%
Ethiopia10.5%
Indonesia10.5%
Azerbaijan10.5%
Oman10.5%
Senegal10.5%
Syria10.5%
Albania10.5%
Romania10.5%
Israel10.5%
United Arab Emirates10.5%

IP Address : ASN : City/Provider

Share on: