Skip to main content

Boteraser | Website and Server Security Solutions

MistralAI-Training

Bot User-Agent: mistralai-training

🤖 Overview

MistralAI-Training is a web crawler tied to Mistral AI, the French artificial-intelligence company founded in 2023 that develops the Le Chat assistant and the Mistral and Mixtral families of large language models. The agent declares a training purpose, harvesting publicly reachable pages that feed Mistral's pre-training corpora and evaluation suites rather than a real-time search index.

🌐 Technical Behavior

Requests arrive over HTTPS as ordinary GET operations and follow server-rendered HTML links, so client-side-only single-page applications frequently return near-empty documents to this agent. Observed crawl patterns are breadth-first and shallow, prioritising text-dense material such as documentation, blogs, and knowledge bases instead of media archives. Header sets resemble a minimal Python HTTP client: no Sec-Fetch-* trio, no Accept-Language negotiation, and negligible cookie persistence across requests. Mistral does not publish a static, machine-readable CIDR list for its crawlers the way Google and Bing do, so verification relies on forward-confirmed reverse DNS against the hostname claimed in the User-Agent. TLS fingerprints stay stable across requests, which makes JA4-based grouping practical for defenders.

📋 robots.txt Compliance

Mistral AI maintains a public crawler policy that states its training agents honour robots.txt Disallow rules, matching the RFC 9309 model most reputable crawlers follow. Operators who want exclusion should name the token explicitly, since generic AI-bot wildcards may not match it and robots.txt is advisory, enforced by the crawler rather than the server. Many publishers therefore pair the directive with a server-side User-Agent rule.

🔍 Detection Indicators

The decisive fingerprint is the literal User-Agent token “MistralAI-Training”, sometimes suffixed with a version number or an informational URL such as “+https://mistral.ai/bot”. Absence of browser-only headers (Sec-CH-UA, Sec-Fetch-Site, Upgrade-Insecure-Requests) combined with an empty or missing Referer is strongly indicative. Repeated requests from the same reverse-DNS-verified hostname within a short window complete the pattern.

📊 Data Usage

Crawled pages become training data: pre-training text, supervised fine-tuning examples, and held-out evaluation sets for models distributed through Mistral's API, Le Chat, and open-weight releases on Hugging Face. No advertising, ranking, or search-results product consumes the crawl, and Mistral does not resell raw corpora.

⚙️ Rate Limiting Policy

Rate limiting rather than blocking is the proportionate response: the agent is legitimate, so operators allow normal crawl throughput and throttle only when a per-IP request rate exceeds a documented ceiling, escalating to a temporary 429 or connection drop on sustained abuse.

Free Traffic Analysis

What's Actually Crawling Your Website?

Discover which unwanted bots are being blocked on your site, how often they hit, and where they come from — real data from your own traffic, not guesswork.

🔍 Scan My Site Free

Powered by JA4 fingerprinting, honeypot traps & behavioral analysis

ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the bots listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.

✓