Not sure

but the wall works for now..

[blend27]

not sure what this was. more than 1200(yep) hits from this route within 6 minutes:

114.119.128.0/18
HUAWEI INTERNATIONAL PTE. LTD

Mozilla/5.0 (iPad; CPU OS 7_0 like Mac OS X) AppleWebKit/537.51.1 (KHTML, like Gecko) Version/7.0 Mobile/11A465 Safari/9537.53
Mozilla/5.0(Linux;Android 5.1.1;OPPO A33 Build/LMY47V;wv) AppleWebKit/537.36(KHTML,link Gecko) Version/4.0 Chrome/42.0.2311.138 Mobile Safari/537.36
Mozilla/5.0(Linux;Android 5.1.1;OPPO A33 Build/LMY47V;wv) AppleWebKit/537.36(KHTML,link Gecko) Version/4.0 Chrome/43.0.2357.121 Mobile Safari/537.36

Had to drop a line in web.config for now though.

....
<add input="{REMOTE_ADDR}" pattern="^114\.119\.1"/></conditions><action type="AbortRequest" />

[lucy24]

:: detour to raw logs ::

Oh, my, there they are. Searching generically for ^114.119.1[2-9]\d I find a blizzard of them starting in early January. All blocked except a handful of image requests--in fact using the same iPad UA you noted.

I do remember blocking the UA pattern
^Mozilla/5\.0\(
(no space) early in January, so it must have been used by other robots as well. Others from this neighborhood came in as QQBrowser, which I also block.

Gosh, I love it when a robot has been blocked and I don't even have to think about it. By the usual yawn-provoking coincidence, I have just this instant finished updating my At Home with the Robots pages, and was ecstatic to find that a lot of malign agents haven't been seen in a year or more. Tralala.

[Dimitri]

I block the whole AS136907 (HUAWEI CLOUDS).

Only get requests for images, and with "not recent" browser ua. So, too suspect = block.

[blend27]

I do remember blocking the UA pattern
^Mozilla/5\.0\(

Apparently there is a whole other world out there, I didn't even see that. Awesome catch!

I block the whole AS136907 (HUAWEI CLOUDS).

I do 2 now.

[blend27]

At Home with the Robots pages

Where, where? it has been almost a year since a good read!

[ClosedForLunch]

not sure what this was. more than 1200(yep) hits from this route within 6 minutes:

114.119.128.0/18
HUAWEI INTERNATIONAL PTE. LTD

Huawei also send bots from

159.138.0.0/16

[lucy24]

Where, where?

This year I'll be doing a summary of search engines and other robots that have been on my Ignore list for years. I started by pulling up my log-wrangling code and checking the entire "robotIgnore" function, at which point I discovered that quite a few of them are absent from my visible logs not only because I ignore them but because they genuinely haven't been around since 2018 or earlier.

Watch This Space, probably over the weekend. (The website version has already been updated, but obviously I can't go into detail.)

[not2easy]

This Huawei range was reported by keyplyr on Oct 31, 2018 here: [webmasterworld.com...]

hwclouds-dns.com (huawei.com)
114.115.128.0 - 114.115.255.255
114.115.128.0/17

[blend27]

@not2easy..

You are right, but for some reason did not come up on the Goog at the time.

Now it does: google.com/search?q=114.115.128.0&sitesearch=webmasterworld.com

@lucy24..probably over the weekend..

are we there yet?