User-Agent

Googlebot

first seen 2026-06-20 09:28 · last seen 2026-07-02 19:33 · JSON

Bot verification

This User-Agent declares a bot or user-triggered fetcher. Each connection's IP is checked at ingest against the verification channels the operator publishes — its crawler IP ranges and, where documented, forward-confirmed reverse DNS. A claim either channel confirms is identified; one confirmed by neither — outside the ranges, inside a different operator's, or failing the DNS check — is an impersonation signal. Meta publishes its network rather than crawler ranges, so its identified claims are network-confirmed and its unconfirmed misses are unverified claims, not proven spoofs. bot-claim anomalies →

claims	identified	unconfirmed miss	wrong operator	unconfirmed rate
Googlebot	0	1	0	100.0%

Decomposed attributes

Browser / client	`Googlebot`
Device class	`bot`
Note	`inferred from the self-declared string — a claim, not a measurement; compare with the wire fingerprints above`

Co-observed signals

Signals from other families seen in the same observation. A fingerprint spread thinly across many lower-layer signatures is a classic inconsistency signal.

TLS ClientHello (JA4)

fingerprint	co-occurrences
`t13d1011h1_61a7ad8aa9b6_3fcd1a44f3e3`	2

HTTP request (JA4H)

fingerprint	co-occurrences
`ge11nr040000_8b1ed2202073_000000000000_000000000000`	1
`ge11nn040000_cf1edba2959c_000000000000_000000000000`	1

TCP SYN (p0f)

fingerprint	co-occurrences
`4:49+15:0:1460:65535,10:mss,sok,ts,nop,ws:df,id+:0`	1
`4:47+17:0:1460:65535,10:mss,sok,ts,nop,ws:df,id+:0`	1

TCP SYN (JA4T)

fingerprint	co-occurrences
`65535_2-4-8-1-3_1460_10`	1

Country

fingerprint	co-occurrences
`FR` · France	1
`LT` · Lithuania	1

Network (ASN)

fingerprint	co-occurrences
`AS59711` · HZ Hosting Ltd	1
`AS213772` · BK Customers	1