Hello,
Yes, i also see 200 statuses, the most recent:34.83.190.242 - - [19/Sep/2020:13:20:12 -0700] "GET /robots.txt HTTP/2.0" 200 300 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
And if I check the IP with host, it shows this:
242.190.83.34.in-addr.arpa domain name pointer 242.190.83.34.bc.googleusercontent.com.
I dont know if googleusercontent.com is really a Googlebot or not.
I see other Googlebot agents in the log(IP: 66.249.64.213), trying to access robots.txt which seem to be real ones, because host shows
213.64.249.66.in-addr.arpa domain name pointer crawl-66-249-64-213.googlebot.com.
But these always get redirected with 301, though other search engines get 200 for robots.txt.
I think there is no firewall that i can access, i dont see anything after logging in to Dreamhost. I can ssh into the server, i see it has fail2ban installed, but it doesnt allow me to see details about it, because im not root, probably only Dreamhost support can do that.
Plugins that are relevant to security:
-Akismet Anti-Spam (stops spam posts)
-All in one SEO Pack (seems to do a lot of SEO related things, also manages robots.txt)
-Jetpack (this seems to have CDN, but only for images)
Other plugins are not related to security, they are about statistics, health check and ad management.
Maybe i can try to disable these plugins and see if it makes any change.