I've noticed that an IP (18.104.22.168) tried to access various sensitive pages on my website (phpmyadmin, wp, sqllite etc.) and received a lot of 404 errors. After doing some research on the IP:
ISP Google Inc. Usage Type Search Engine Spider Domain Name google.com
Also when doing an nslookup:
Name: 22.214.171.124.bc.googleusercontent.com Address: 126.96.36.199
There was also an interesting entry in the log:
Python-urllib/2.7 - -
Is Google known to be using urllib-python to access sensitive directories and URLs? If not, how to prove this is a spoofed bot being used for malicious intent?