Species index / openai
GPTBot
Operated by OpenAI. Identity is self-declared and unverified.
67Requests
1Distinct IPs
27Well-known probes
2026-08-19First seen
2026-10-03Last seen
Identity
| Kind | crawler |
|---|---|
| Family | openai |
| Stated purpose | training |
| UA match | gptbot |
| Verified | no |
| robots.txt | never-read |
| Operator docs | https://platform.openai.com/docs/gptbot |
What it went looking for
The order and selection of discovery paths is a design fingerprint: it reflects which conventions whoever built this client decided to support.
| Path | Hits | First | Last |
|---|---|---|---|
/sitemap.xml | 25 | 2026-08-19 | 2026-09-23 |
/llms.txt | 3 | 2026-08-19 | 2026-09-15 |
/.well-known/security.txt | 3 | 2026-08-19 | 2026-09-15 |
/openapi.json | 3 | 2026-08-19 | 2026-09-15 |
/.well-known/fomite.json | 2 | 2026-08-19 | 2026-08-19 |
/.well-known/mcp-manifest-attestation | 1 | 2026-08-25 | 2026-08-25 |
/ai.txt | 1 | 2026-08-19 | 2026-08-19 |
Protocol fingerprint
| HTTP | TLS | Cipher | ALPN | Requests |
|---|---|---|---|---|
| HTTP/2.0 | TLS1.3 | TLS_AES_128_GCM_SHA256 | h2 | 270 |
| HTTP/1.1 | TLS1.3 | TLS_AES_128_GCM_SHA256 | http/1.1 | 12 |
| HTTP/1.1 | -- | -- | -- | 1 |
TLS client fingerprint
Captured off the wire before the proxy terminates TLS. JA4 is stable across IP changes and much harder to spoof than a User-Agent string, so it is the strongest identity signal on this page.
| JA4 | JA3 | TLS | ALPN | Seen |
|---|---|---|---|---|
| t13d1011h2_61a7ad8aa9b6_3fcd1a44f3e3 | 06d67dcbb3e8f779... | 13 | h2,http/1.1 | 1 |
| t13d1011h2_61a7ad8aa9b6_3fcd1a44f3e3 | 0ba716923ca04687... | 13 | h2,http/1.1 | 1 |
| t13d1011h2_61a7ad8aa9b6_3fcd1a44f3e3 | 0ccc2270b654bf3d... | 13 | h2,http/1.1 | 1 |
| t13d1011h2_61a7ad8aa9b6_3fcd1a44f3e3 | 1596d0ed12980513... | 13 | h2,http/1.1 | 1 |
| t13d1011h2_61a7ad8aa9b6_3fcd1a44f3e3 | 196cd97cd4679429... | 13 | h2,http/1.1 | 1 |
| t13d1011h2_61a7ad8aa9b6_3fcd1a44f3e3 | 06d053447584c392... | 13 | h2,http/1.1 | 1 |
Header order
The order a client sends its HTTP headers in is a design fingerprint of the library that built the request. Captured on plaintext port 80 only, since the proxy normalises order before the application sees it.
1. x-openai-host-hash 2. from 3. user-agent 4. referer 5. accept 6. accept-encoding 7. host
seen 1x
Requests per day (60 days)
| Day | Requests | |
|---|---|---|
| 2026-08-19 | 1 | |
| 2026-08-20 | 1 | |
| 2026-08-21 | 1 | |
| 2026-08-23 | 1 | |
| 2026-08-24 | 1 | |
| 2026-08-25 | 1 | |
| 2026-08-26 | 1 | |
| 2026-08-27 | 1 | |
| 2026-08-28 | 35 | |
| 2026-08-31 | 1 | |
| 2026-09-01 | 1 | |
| 2026-09-02 | 1 | |
| 2026-09-03 | 1 | |
| 2026-09-05 | 1 | |
| 2026-09-09 | 1 | |
| 2026-09-10 | 1 | |
| 2026-09-11 | 1 | |
| 2026-09-12 | 1 | |
| 2026-09-13 | 1 | |
| 2026-09-14 | 1 | |
| 2026-09-15 | 1 | |
| 2026-09-16 | 1 | |
| 2026-09-17 | 1 | |
| 2026-09-18 | 1 | |
| 2026-09-19 | 1 | |
| 2026-09-20 | 1 | |
| 2026-09-21 | 1 | |
| 2026-09-22 | 1 | |
| 2026-09-23 | 1 | |
| 2026-09-26 | 1 | |
| 2026-09-27 | 2 | |
| 2026-10-03 | 1 |