Species index / google
Googlebot
Operated by Google. Identity confirmed by forward and reverse DNS.
275Requests
6Distinct IPs
99Well-known probes
2026-08-19First seen
2026-10-03Last seen
Identity
| Kind | crawler |
|---|---|
| Family | |
| Stated purpose | search |
| UA match | googlebot |
| Verified | yes |
| robots.txt | compliant |
| Operator docs | https://developers.google.com/search/docs/crawling-indexing/googlebot |
What it went looking for
The order and selection of discovery paths is a design fingerprint: it reflects which conventions whoever built this client decided to support.
| Path | Hits | First | Last |
|---|---|---|---|
/robots.txt | 768 | 2026-08-19 | 2026-10-03 |
/sitemap.xml | 36 | 2026-08-19 | 2026-09-23 |
/llms.txt | 5 | 2026-08-19 | 2026-08-27 |
/.well-known/glama.json | 2 | 2026-08-22 | 2026-08-29 |
/.well-known/agent.json | 2 | 2026-08-29 | 2026-09-03 |
/.well-known/oauth-authorization-server | 2 | 2026-08-24 | 2026-08-27 |
/.well-known/agent-card.json | 2 | 2026-08-25 | 2026-08-27 |
/.well-known/x402 | 2 | 2026-09-03 | 2026-09-06 |
/.well-known/oauth-authorization-server/mcp | 1 | 2026-08-23 | 2026-08-23 |
/.well-known/security.txt | 1 | 2026-08-20 | 2026-08-20 |
/ai.txt | 1 | 2026-08-20 | 2026-08-20 |
/.well-known/oauth-protected-resource | 1 | 2026-08-23 | 2026-08-23 |
/.well-known/oauth-protected-resource/mcp | 1 | 2026-08-23 | 2026-08-23 |
Protocol fingerprint
| HTTP | TLS | Cipher | ALPN | Requests |
|---|---|---|---|---|
| HTTP/1.1 | TLS1.3 | TLS_AES_128_GCM_SHA256 | -- | 2,822 |
| HTTP/1.1 | -- | -- | -- | 62 |
| HTTP/1.1 | TLS1.3 | TLS_AES_128_GCM_SHA256 | http/1.1 | 1 |
TLS client fingerprint
Captured off the wire before the proxy terminates TLS. JA4 is stable across IP changes and much harder to spoof than a User-Agent string, so it is the strongest identity signal on this page.
| JA4 | JA3 | TLS | ALPN | Seen |
|---|---|---|---|---|
| t13d181300_e8a523a41297_43ade6aba3df | b4da7f95e46bf2cf... | 13 | -- | 2,144 |
| t13d1011h1_61a7ad8aa9b6_3fcd1a44f3e3 | d20927c9a4a20077... | 13 | http/1.1 | 1 |
| t13d131100_f57a46bbacb6_ab7e3b40a677 | 9b7dcdf3f997f1fb... | 13 | -- | 1 |
| t13d201100_2b729b4bf6f3_36bf25f296df | 68b3ecfaf0034bb9... | 13 | -- | 1 |
Header order
The order a client sends its HTTP headers in is a design fingerprint of the library that built the request. Captured on plaintext port 80 only, since the proxy normalises order before the application sees it.
1. Host 2. Connection 3. Accept 4. User-Agent 5. Accept-Encoding
seen 32x
1. Host 2. AMP-Cache-Transform 3. Connection 4. Accept 5. From 6. User-Agent 7. Accept-Encoding 8. If-Modified-Since
seen 18x
1. Host 2. AMP-Cache-Transform 3. Connection 4. Accept 5. From 6. User-Agent 7. Accept-Encoding
seen 7x
1. Host 2. Connection 3. Accept 4. From 5. User-Agent 6. Accept-Encoding
seen 5x
Requests per day (60 days)
| Day | Requests | |
|---|---|---|
| 2026-08-19 | 1 | |
| 2026-08-20 | 6 | |
| 2026-08-21 | 2 | |
| 2026-08-22 | 2 | |
| 2026-08-23 | 3 | |
| 2026-08-24 | 2 | |
| 2026-08-25 | 1 | |
| 2026-08-26 | 8 | |
| 2026-08-27 | 2 | |
| 2026-08-28 | 4 | |
| 2026-08-29 | 2 | |
| 2026-08-30 | 6 | |
| 2026-08-31 | 2 | |
| 2026-09-01 | 1 | |
| 2026-09-02 | 2 | |
| 2026-09-03 | 2 | |
| 2026-09-04 | 2 | |
| 2026-09-05 | 1 | |
| 2026-09-06 | 1 | |
| 2026-09-07 | 3 | |
| 2026-09-08 | 2 | |
| 2026-09-09 | 2 | |
| 2026-09-10 | 1 | |
| 2026-09-11 | 2 | |
| 2026-09-12 | 3 | |
| 2026-09-13 | 3 | |
| 2026-09-14 | 3 | |
| 2026-09-15 | 2 | |
| 2026-09-16 | 2 | |
| 2026-09-17 | 3 | |
| 2026-09-18 | 3 | |
| 2026-09-19 | 2 | |
| 2026-09-20 | 2 | |
| 2026-09-21 | 2 | |
| 2026-09-22 | 9 | |
| 2026-09-23 | 2 | |
| 2026-09-24 | 3 | |
| 2026-09-25 | 3 | |
| 2026-09-26 | 3 | |
| 2026-09-27 | 29 | |
| 2026-09-28 | 38 | |
| 2026-09-29 | 28 | |
| 2026-09-30 | 4 | |
| 2026-10-01 | 29 | |
| 2026-10-02 | 29 | |
| 2026-10-03 | 13 |