Is this really Bingbot?
Paste an address from your logs and the User-Agent it sent. This checks the claim against the address list Microsoft publishes, and tells you whether the request really came from them.
Bingbot is allowed through by most sites for the same reason Googlebot is, which makes it the second most useful identity to borrow.
No account, and nothing is stored against you. We look the address up, we do not log who asked.
What the three answers mean
Verified
The address is inside the list Microsoft publishes for Bingbot, or it reverse resolves into their own zone and that hostname resolves back to the same address. This is a positive result, not an absence of evidence.
Forged
Microsoft publishes the complete list of addresses Bingbot crawls from, and this address is not in it. Something sent you the name without the infrastructure behind it.
Cannot tell
We hold no authoritative answer for this one, so we say so rather than guessing. A missing reverse DNS record is suspicious and it is not proof, and a checker that turns "I do not know" into "forged" is worse than useless: it is confidently wrong.
How Microsoft says to verify Bingbot
Microsoft publishes Bingbot address ranges as JSON, and supports reverse DNS with forward confirmation into search.msn.com.
We refresh our copy of that list every twelve hours. If ours goes stale, this tool returns "cannot tell" and says so, rather than condemning a crawler that added addresses since we last looked. Read the source: Microsoft's documentation.
Questions
How do I verify Bingbot?
Compare the address against the JSON list Microsoft publishes, or do a reverse DNS lookup and confirm the hostname ends in search.msn.com and resolves back to the same address.
Does Bingbot crawl for Copilot too?
Yes, and that is worth knowing if you are deciding what to allow. Microsoft fetches with Bingbot for both Bing search and Copilot, so there is no way from the traffic to tell which a given request served. Blocking Bingbot affects both.
One address is not the question
You came here with a log line. If something is forging Bingbot against your site, it is not doing it once, and checking them one at a time is not a plan. WebDecoy watches every request that claims a crawler identity, verifies each one the way this page just did, and links the ones that come back to the same actor even when the addresses keep changing.
See what is claiming to be a crawler on your site