Vnetus? Is this a bot?

[geekdogfl]

Something from a domain "vnetus.com" is hitting my site and not asking for robots.txt. Not sure if it's OK to post from raw logs but here goes and you can remove it if it's inappropriate. (Yes I read the posting guidelines and didn't notice anything about posting from raw logs?) Thanks.

Note that whatever it is, it is using google as a reference? I'm new to all this, but this doesn't look right. I have banned it. Anyone have info or ?

vnetus.com - - [26/Sep/2010:11:34:40 -0400] "GET /old/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
vnetus.com - - [26/Sep/2010:11:34:40 -0400] "GET /forum/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
vnetus.com - - [26/Sep/2010:11:34:41 -0400] "GET /forums/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
vnetus.com - - [26/Sep/2010:11:34:41 -0400] "GET /vb/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
vnetus.com - - [26/Sep/2010:11:34:41 -0400] "GET /vbulletin/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"

[Dijkgraaf]

Sure looks like a bot to me, and one that is falsely claiming to be Googlebot.

[Dijkgraaf]

I had one today as well, same behavior, different host
IP: 216.18.201.nnn
rDNS: hosted.static.webnx.com

URI's
/old/
/forum/
/forums/
/vb/
/vbulletin/

[Pfui]

@geekdogfl & Dijkgraaf, I've seen the same hits to the same set of filenames all too often in recent days, from Hosts/IPs all over the place, all faking Googlebot. It's just another exploit.

@geekdogfl: Fake Googlebot bot-runners are always block-worthy (I use 403 most of the time). Looks like you're using 301. Did intend to send them somewhere? (301 = Moved permanently)

[geekdogfl]

Thanks for the reply, yep blocked using 403 (Pfui, that redirect was from before, has to do with this particular site's log-in set-up; vnetus is getting a 403 now).

Also looked up vnetus domain and blocked anything else (vnetcorp) I could find associated with it. Zimbabwe? Uh huh.