← AI crawler directory

// OpenAI

GPTBot

TrainingPublished CIDRsVerified July 2026

// Overview

What it is

GPTBot collects public web content that may be used to improve OpenAI's generative AI models. Aiola classifies it as training because it performs automated collection rather than a user-triggered fetch.

In Aiola's taxonomy, Training means scraped for model training or dataset development.

// Headers

User agent

Look for the match token inside the complete HTTP User-Agent header. Tokens can be spoofed, so use the network checks below for authentication.

Full example User-Agent
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.1; +https://openai.com/gptbot
Case-insensitive match token
GPTBot

// Network

Official IP ranges

OpenAI publishes an official JSON feed. This cached snapshot contains 21 CIDR prefixes, last fetched 2026-07-11. Open the live source ↗

GPTBot CIDRs — snapshot fetched 2026-07-11
132.196.86.0/24
172.182.202.0/25
172.182.204.0/24
172.182.207.0/25
172.182.214.0/24
172.182.215.0/24
20.125.66.80/28
20.171.206.0/24
20.171.207.0/24
4.227.36.0/25
52.230.152.0/24
74.7.175.128/25
74.7.227.0/25
74.7.227.128/25
74.7.228.0/25
74.7.230.0/25
74.7.241.0/25
74.7.241.128/25
74.7.242.0/25
74.7.243.128/25
74.7.244.0/25

// Verification

Verify authenticity

Start with the source IP recorded by your trusted edge or server, not an untrusted forwarded header.

Test one CIDR in Python (replace REQUEST_IP)
python3 -c 'import ipaddress; print(ipaddress.ip_address("REQUEST_IP") in ipaddress.ip_network("132.196.86.0/24"))'
Reverse- and forward-DNS double lookup
host REQUEST_IP
# Confirm the hostname ends in an official suffix
host RETURNED_HOSTNAME
# The forward lookup must return REQUEST_IP

For production checks, test against every current prefix in the vendor feed. Re-fetch feeds regularly: a July 2026 snapshot is evidence of publication, not a permanent firewall list.

// Robots.txt

Control it with robots.txt

OpenAI documents crawler controls for this bot family. Robots.txt can direct cooperative crawling, but it cannot prove that a request is authentic.

Allow GPTBot
User-agent: GPTBot
Allow: /
Block GPTBot
User-agent: GPTBot
Disallow: /

Read OpenAI's official crawler documentation ↗

// Analytics

Track it

Aiola tracks this crawler on your site — crawls, pages, trends. See when GPTBot arrives, which URLs it requests, and how activity changes over time.

// FAQ

FAQ

What is GPTBot?

GPTBot collects public web content that may be used to improve OpenAI's generative AI models. Aiola classifies it as training because it performs automated collection rather than a user-triggered fetch.

What user-agent token identifies GPTBot?

Match the case-insensitive token “GPTBot” in the User-Agent header. A matching header alone does not authenticate the sender.

Can I verify GPTBot by IP address?

OpenAI publishes a JSON feed, and this page snapshots 21 CIDR prefixes fetched on 2026-07-11. Match the source IP against the current vendor feed before trusting it.

Can robots.txt block GPTBot?

OpenAI documents crawler controls for this bot family. Robots.txt can direct cooperative crawling, but it cannot prove that a request is authentic. Use the specific “GPTBot” group when you want a rule for this identity without changing rules for every crawler.

// Related

Related