THE FOMITE

Species index / huawei

PetalBot

Operated by Huawei. Identity is self-declared and unverified.

903Requests
84Distinct IPs
28Well-known probes
2026-09-07First seen
2026-10-22Last seen

Identity

Kindcrawler
Familyhuawei
Stated purposesearch
UA matchpetalbot
Verifiedno
robots.txtcompliant

What it went looking for

The order and selection of discovery paths is a design fingerprint: it reflects which conventions whoever built this client decided to support.

PathHitsFirstLast
/sitemap.xml402026-09-082026-10-21
/robots.txt232026-09-072026-10-20
/llms.txt112026-09-102026-10-22
/.well-known/security.txt92026-09-102026-10-15
/.well-known/mcp-manifest-attestation82026-09-092026-10-22
/openapi.json82026-09-112026-10-18

Protocol fingerprint

HTTPTLSCipherALPNRequests
HTTP/1.1TLS1.3TLS_AES_128_GCM_SHA256--4,308
HTTP/2.0TLS1.3TLS_AES_128_GCM_SHA256h2348
HTTP/1.1TLS1.3TLS_AES_128_GCM_SHA256http/1.137

TLS client fingerprint

Captured off the wire before the proxy terminates TLS. JA4 is stable across IP changes and much harder to spoof than a User-Agent string, so it is the strongest identity signal on this page.

JA4JA3TLSALPNSeen
t13d131100_f57a46bbacb6_ab7e3b40a6779b7dcdf3f997f1fb...13--2,804
t13d1312h2_a44d0ee8b3cc_e381dae6da6b67560f98d68783bd...13h2,http/1.1285
t13d1812h1_85036bcba153_d41ae481755e304734bb1c086c34...13http/1.137

Requests per day (60 days)

DayRequests 
2026-09-071
2026-09-081
2026-09-093
2026-09-101
2026-09-1118
2026-09-121
2026-09-131
2026-09-141
2026-09-153
2026-09-1612
2026-09-171
2026-09-183
2026-09-191
2026-09-201
2026-09-212
2026-09-221
2026-09-231
2026-09-243
2026-09-252
2026-09-262
2026-09-2712
2026-09-282
2026-09-299
2026-09-301
2026-10-011
2026-10-0231
2026-10-032
2026-10-041
2026-10-051
2026-10-061
2026-10-071
2026-10-081
2026-10-093
2026-10-101
2026-10-111
2026-10-1231
2026-10-131
2026-10-1412
2026-10-1512
2026-10-16111
2026-10-17101
2026-10-1864
2026-10-19194
2026-10-2034
2026-10-21145
2026-10-2271