AdsBot-Google

Its full user-agent string, exactly as it arrives at the gate:

To check a visitor really is AdsBot-Google, run a reverse DNS lookup on its IP address and confirm the hostname ends in .googlebot.com, .google.com, .googleusercontent.com. Then run a forward lookup on that hostname and check it returns the same IP. Anything that fails is an impostor; the zoo checks every visit this way and files the failures in the Trap Room. Read Google's documentation.

Add these two lines to the robots.txt file at the root of your site. Well-behaved crawlers read it before they crawl, so the change applies from AdsBot-Google's next visit. Nothing else on your site needs to change.

# Block AdsBot-Google from the whole site
User-agent: AdsBot-Google
Disallow: /

AdsBot ignores the "User-agent: *" group. You must name it to block it.

Or let it visit but keep it away from part of the site:

# Let it in, but keep it out of one room
User-agent: AdsBot-Google
Allow: /
Disallow: /members/

Requests that use AdsBot-Google's name but fail Google's network check are filed separately, as impostors. These are the visits that passed, or that could not be checked at the time:

Nothing on record in the last 30 days.

Networks and countries come from the visitor's IP address, looked up in a local copy of the DB-IP database. The addresses themselves are never stored.