Is that really GPTBot?
User-agent strings are trivially faked - studies find 12-18% of "Googlebot" traffic is spoofed. Paste a visitor IP from your logs and we'll verify it against the operator's published IP ranges and reverse DNS.
How verification works
1. Published IP ranges: OpenAI, Google, Microsoft, and Perplexity publish machine-readable JSON feeds of their crawlers' IP prefixes. An IP inside the feed is genuine; outside it, spoofed.
2. Reverse DNS: For operators like Apple and Amazon, the IP's PTR record must match a documented hostname (e.g. *.applebot.apple.com) and forward-resolve back to the same IP.
Some operators (including Anthropic) publish neither - those bots are marked unverifiable, which is honest information in itself. Curious which bots can reach your site? Run the crawl check or browse the crawler directory.