Server Log Analysis Reveals How Major AI Crawlers Actually Behave on Websites

A detailed examination of server access logs shows that AI vendors operate multiple distinct bots with separate purposes rather than a single crawler. GPTBot performs scheduled training data collection while OAI-SearchBot builds search indexes and ChatGPT-User fetches pages in direct response to user queries. The same pattern appears with PerplexityBot and Perplexity-User at Perplexity as well as ClaudeBot and user agents at Anthropic. Blocking all AI-related user agents in robots.txt therefore prevents both training crawls and live user-driven visits. Analysis of 515 million AI bot events found only 408 requests for llms.txt, confirming the file sees negligible adoption. Verification of IP addresses against vendor-published ranges remains the reliable method for distinguishing genuine bots from spoofed traffic. Effective practices focus on clean HTML structure, fast response times, and selective robots.txt rules that allow user-agent traffic while restricting training crawlers.

HabrTranslated from Russian

Read at source

A detailed review of server access logs shows that most AI vendors operate several distinct bots rather than a single crawler. Each bot serves a different function, and treating them identically in configuration files leads to unintended consequences.

GPTBot performs scheduled crawls for model training, respects robots.txt, and systematically follows sitemaps. OAI-SearchBot builds the search index used for answers that include citations. ChatGPT-User makes on-demand requests triggered by an individual user query. The same separation exists at other providers: Perplexity runs PerplexityBot for indexing and a separate user agent for live queries, while Anthropic maintains ClaudeBot alongside its own user-triggered agents.

Log analysis reveals three consistent request patterns. Index bots traverse site maps and internal links at regular intervals without correlation to traffic spikes. User agents issue single, targeted requests for specific URLs, often carrying a referrer from the AI service. All bots request robots.txt regularly, request sitemap.xml less frequently, and almost never request llms.txt. Over 515 million recorded AI-bot events, only 408 requests targeted llms.txt.

User-Agent strings are easily forged, so verification relies on reverse DNS or, preferably, comparison against IP ranges published by each vendor. A simple script that extracts IPs from logs and checks them against known OpenAI ranges quickly identifies spoofed traffic from unrelated scrapers.

Because llms.txt receives negligible attention from actual crawlers, site owners achieve better results by ensuring content remains in static HTML, pages load quickly, and robots.txt selectively permits user-agent traffic while blocking training bots. Structured headings and self-contained sections also improve the quality of excerpts returned to users.

Meridian digestThe week's most consequential security stories, distilled into one briefing.See the digest

More in AI Security

Logical Argument Claims Full Alignment of Superintelligent AGI Is Fundamentally Impossible
Claude Account Bans Linked to IP Reputation, Device Environment and Payment Channels, But No Confirmed Formula
Local LLMs in AppSec: What Open Tools and Models Can Handle in Application Security