Bingbot vs GPTBot: Which AI Crawler Should You Allow or Block?

Mistakes when writing rules for Bingbot and GPTBot together

Bingbot is named in 7.1% of the top-site robots.txt files in our study and blocked in 3.3%; GPTBot is named in 18.1% of the top-site robots.txt files in our study and blocked in 15.4%. Large sites block GPTBot more often, which usually reflects a decision about training rather than about Bingbot.

1. They are different kinds of agent (a search engine crawler versus a training crawler), so the usual error is giving them the same rule out of habit. Blocking both to stop training only needs the GPTBot line; the other one changes something else entirely.
2. They come from different operators (Microsoft and OpenAI), with different documentation and different update cycles. Do not assume a change one of them announces applies to the other.
3. Putting User-agent: bingbot and User-agent: GPTBot in separate groups and then editing only one. Two groups drift apart over time; keep a comment above each that says why it differs from the other.

Each crawler's own profile lists the mistakes that apply to it alone; this list is only about combining the two.

Spotting Bingbot and GPTBot in your logs

robots.txt says what Bingbot and GPTBot may do; your access logs show what they actually did.

Count requests

On a server with standard Nginx or Apache logs, this counts matching requests per day (adjust the log path for your host):

grep -iE "bingbot|GPTBot" /var/log/nginx/access.log \
  | awk '{print $4}' | cut -d: -f1 | sort | uniq -c

And this shows which paths it requested most, which is the quickest way to see whether your Disallow lines are being respected:

grep -iE "bingbot|GPTBot" /var/log/nginx/access.log \
  | awk '{print $7}' | sort | uniq -c | sort -rn | head -20

Check the requests are genuine

Anyone can send these user-agents, so confirm the source before acting on a match:

• bingbot: compare each address with the ranges at www.bing.com/toolbox/bingbot.json. A request claiming to be Bingbot from outside them is not genuine. Check it separately from GPTBot.
• GPTBot: compare each address with the ranges at openai.com/gptbot.json. A request claiming to be GPTBot from outside them is not genuine. Check it separately from Bingbot.

Related: writing content AI engines can cite

How Bingbot and GPTBot moved in our latest scans

Between our scans of October 17, 2026 and October 20, 2026, files naming bingbot went from 381 to 397 (+16) and files blocking it from 169 to 182 (+13), so more sites wrote a rule for bingbot and more of those rules block it. For comparison, 2026 and October 20, 2026, files naming GPTBot went from 941 to 1,008 (+67) and files blocking it from 789 to 859 (+70), so more sites wrote a rule for GPTBot and more of those rules block it.

Over the 3 days between those scans, blocking of bingbot moved +13 files and blocking of GPTBot moved +70. Owners are acting faster on GPTBot, which is the one to recheck first if you have not touched your file this month.

We first recorded bingbot on March 17, 2026. Microsoft documents it on bing.com, and we recheck that page before each release. We first recorded GPTBot on March 17, 2026. OpenAI documents it on developers.openai.com, and we recheck that page before each release.

Among the 63 search engines in our database, bingbot sits 13th by priority (Tier 3), level with AdIdxBot, Amzn-SearchBot, Applebot, baidu. 62 of the 63 share its safe rating. On the GPTBot side: Among the 104 AI and LLM crawlers in our database, GPTBot sits ninth by priority (Tier 1), level with ChatGPT Agent, ChatGPT Operator, ChatGPT-User, ChatGPT-User/2.0. 81 of the 104 share its safe rating.

How top sites treat Bingbot and GPTBot

From our robots.txt study of the Tranco top 10,000 (5,583 valid files, fetched October 20, 2026):

• GPTBot, the most blocked of the Bingbot and GPTBot tokens: blocked in 15.4% of files (663 with its own group, 196 through User-agent: *), more often by the top 1,000 (20.4%) than the long tail (14.5%).
• bingbot, second of the Bingbot and GPTBot tokens: blocked in 3.3% of files (21 with its own group, 161 through User-agent: *), more often by the top 1,000 (3.8%) than the long tail (3%).

For scale, 20.1% of all files block at least one AI training crawler. GPTBot is one of the tokens driving that figure.

More questions about Bingbot and GPTBot

Can I allow one and block the other?

Yes. Give each its own User-agent group with its own rules. Each crawler reads only the group that names it.

Which of the two visits more often?

It depends on your site, your audience and how often your content changes. Your access logs are the reliable answer; the commands above count both.

How long until a change applies?

Crawlers commonly cache robots.txt for up to a day, so allow about 24 hours and confirm in your logs.

Do I need to update my rules when either operator launches a new crawler?

Often, yes. A new token is not covered by rules written for the old ones. Check this comparison and both profiles periodically, or rerun the AI crawler checker after any announcement.