Fake Googlebot Impersonation (Mediapartners-Google UA) for 2026-07-20

Last Updated: 00:00 UTC

Hosts sending a Mediapartners-Google / Googlebot user-agent from IP ranges that do not belong to Google. Impersonating a search crawler is used to bypass bot filtering and rate limits while scraping or probing. Genuine Google crawler ranges (66.249.0.0/16) are excluded from this list.

MITRE ATT&CK

Tactic: Defense Evasion (TA0005)
Technique: T1036 — Masquerading

Observed URIs

Attackers by Country

Brazil: 1
Brazil1100.0%

IP Address : ASN : City/Provider

  • 177.81.79.250 : AS28573 Claro NXT Telecomunicacoes Ltda : São Paulo
Share on: