AI agents · Training crawler

CCBot

CCBot is Common Crawl's training crawler: it collects content to train AI models.

Operator
Common Crawl
User agent
CCBot
Verified by
Published IP ranges, Reverse DNS

What CCBot does

A training crawler collects pages to train its operator's AI models. Its visits answer no one's question in the moment: what it reads goes into the data the models learn from.

How to recognize it

CCBot names itself in its user agent with the token CCBot. That's what Ethogram matches, as a whole word in any case.

A user agent is only a claim, though: anyone can send CCBot. Scrapers borrow well-known names to get past rules meant for the real agent, so before you trust a visit, or block one, check where it came from.

How to tell it's really CCBot

Common Crawl publishes the IP ranges CCBot uses, as JSON: index.commoncrawl.org/ccbot.json. A request from inside those ranges is the real CCBot. One from outside them is an impostor.

It can also be checked by reverse DNS: the request's IP resolves to a hostname ending in .crawl.commoncrawl.org, and that hostname resolves back to the same IP. Check both directions: whoever controls an IP can point its reverse record at any name.

Ethogram runs these checks on every request and gives each visit a verdict: verified, unverified or spoofed. Spoofed visits are counted apart and never added to CCBot's numbers. How verdicts work.

Allow or block CCBot in robots.txt

robots.txt groups its rules by user-agent token. To ask CCBot to stay off your whole site, add this group:

robots.txt
# Keep CCBot out of the whole siteUser-agent: CCBotDisallow: /

To let it read everything, name it with an allow rule. A group that names CCBot replaces the User-agent: * group for it, so it follows only these rules:

robots.txt
# Let CCBot read the whole siteUser-agent: CCBotAllow: /

robots.txt is a request, not a lock: it's up to CCBot to read it and follow it. Ethogram reads your robots.txt every day and shows whether CCBot respects it, with the disallowed paths it asked for. To actually keep it out, use your firewall or bot protection, and check the visit's verdict first so you block impostors, not the real CCBot.

See what CCBot does on your site

Most analytics filter CCBot out as a bot. Ethogram records it on your server, where every request lands, with no script to load, and shows:

  • Every visit from CCBot, with a verdict on whether it's really CCBot.
  • Each visit step by step: the pages it read, what it searched for, and where it was blocked, looped or hit an error.
  • Whether it respects your robots.txt, with the disallowed paths it asked for.
  • How much of your bandwidth it takes, next to its share of requests.
  • Impostors that use its name, caught and counted apart from the real CCBot.
  • New versions of its user agent as they appear, and what changed in its behavior with each.
  • A heads-up when its visits spike or stop, or when it starts getting blocked.