104.154.16.xxx

Strange access from Google IPs

[doc_z]

Is anyone else seeing some "strange" access from those IPs?

First I was thinking about quality raters. However, now I believe that it is a bot even though the user-agent telling me it isn't.

[doc_z]

In Addintion: For me it looks as if a sample of the website is taken. This seems to be done frequently.

[wilderness]

Not sure that I'd call it strange.
Google Cloud has two Class B's (154-155).

I've had 15 requests from various 104-154-Class C's thus far this month. Most are for root and favicon

I've 104.154.0.0/15 denied thus they all catch 403's

UA is same on all:

"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2292.0 Safari/537.36"

[doc_z]

Right, the user-agent is always "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2310.0 Safari/537.36".

And they are always looking for (almost) the same pages. Starting with the same and ending with the same page.

What is it good for? You're not having any negative impact blocking that IPs?

[wilderness]

doc,
I've all google ranges denied with the exception of the ranges their standard bots crawl from ( 66.249.(6[4-9]|[7][0-9]) )and have yet to have any negative impact, at least from a SE perspective.

My sites are quite different than most sites and my denials are more tailored to specific widget visitors.

[keyplyr]

As wilderness suggests, the Google Cloud is *not* related to Google Search. These are ranges for rent. Many agents not directly related to Google may come form here.


Google Cloud
104.154.0.0/15
104.154.0.0 - 104.155.255.255

There are other Google Cloud ranges listed in these forums as well.

[lucy24]

UA is same on all:

"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2292.0 Safari/537.36"

Right, the user-agent is always "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2310.0 Safari/537.36".

<quibble>
Those are not actually the same UA. Looks like their Chrome builds are, what, a few days apart?
</quibble>

:: idly wondering if I can delete 22 posts so I can take a screenshot of exceptionally nifty total that I overlooked ::

[doc_z]

Right, the user-agents changes when there is a new version of Chrome. I didn't saw that.

I saw this range of IPs frequently on all of my project. However, when it's not dangerous to block those IPs and there are not related to Google, I'll deny it by htaccess. Thanks.