Orbbot

[ryoko]

Not seen this one before. But has hit a couple of my sites today.

Mozilla/5.0 (compatible; Orbbot/1.1;)
From 34.21.92.249

It did ask for robots.txt

Having a quick search, it could be this bot (possibly):
Mozilla/5.0 (compatible; Orbbot/1.1; +http://orb-intelligence.com)

But, that website no longer exists.

[not2easy]

The botrunner may have copied from a list of older UAs(?)

That IP is one of Google's servers and Direct Allocation makes me think it is a hosted bot server.
range: 34.4.5.0 - 34.63.255.255
CIDRs: 34.4.32.0/19, 34.4.8.0/21, 34.16.0.0/12, 34.4.16.0/20, 34.4.6.0/23, 34.4.5.0/24, 34.6.0.0/15, 34.5.0.0/16, 34.8.0.0/13, 34.4.64.0/18, 34.32.0.0/11, 34.4.128.0/17

34.16.0.0 - 34.31.255.255
34.16.0.0/12 for the IP in question.

[lucy24]

:: detour to raw logs ::

Oh, goodness, that’s quite a lot of them. Weirdly, only on one site--and it happens to be one where I never check robots.txt requests. Everything else blocked, hence out of sight out of mind.

All seem to be from various 34 and 35 IPs, aka The Usual Suspects. I didn't check more closely.

:: wandering off to fix names of one month’s archived logs, which I would never otherwise have noticed ::