Fake Googlebot Impersonation (Mediapartners-Google UA) for 2026-10-20

Last Updated: 00:00 UTC

Hosts sending a Mediapartners-Google / Googlebot user-agent from IP ranges that do not belong to Google. Impersonating a search crawler is used to bypass bot filtering and rate limits while scraping or probing. Genuine Google crawler ranges (66.249.0.0/16) are excluded from this list.

MITRE ATT&CK

Tactic: Defense Evasion (TA0005)
Technique: T1036 — Masquerading

Observed URIs

Attackers by Country

United States: 34Singapore: 2Brazil: 1Indonesia: 1The Netherlands: 1
United States3487.2%
Singapore25.1%
Brazil12.6%
Indonesia12.6%
The Netherlands12.6%

IP Address : ASN : City/Provider

Share on: