Are you able to see what domains were blocked? Other posters have suggested that these attempts are blocked by DNS. If we could see the domains that were queried, we could have a better understanding of what’s being attempted here.

My speculation would be that we would see google owned domains, but I don’t know