Storebot-Google

Its full user-agent string, exactly as it arrives at the gate:

To check a visitor really is Storebot-Google, run a reverse DNS lookup on its IP address and confirm the hostname ends in .googlebot.com, .google.com, .googleusercontent.com. Then run a forward lookup on that hostname and check it returns the same IP. Anything that fails is an impostor; the zoo checks every visit this way and files the failures in the Trap Room.

Add these two lines to the robots.txt file at the root of your site. Well-behaved crawlers read it before they crawl, so the change applies from Storebot-Google's next visit. Nothing else on your site needs to change.

# Block Storebot-Google from the whole site
User-agent: Storebot-Google
Disallow: /

If you sell things, blocking it can keep your products out of Google Shopping.

Or let it visit but keep it away from part of the site:

# Let it in, but keep it out of one room
User-agent: Storebot-Google
Allow: /
Disallow: /members/

Requests that use Storebot-Google's name but fail Google's network check are filed separately, as impostors. These are the visits that passed, or that could not be checked at the time:

Nothing on record in the last 30 days.

Networks and countries come from the visitor's IP address, looked up in a local copy of the DB-IP database. The addresses themselves are never stored.