Sign in
← Dashboard / Signature Detail
Overview Activity Visitors Countries Endpoints Sessions Threats Investigate
US

ClaudeBot

 · ClaudeBot 1.0 Human
AiBot
Policy: rate-limit-ai
Probability
0 %
Confidence
90 %
Risk Profile
VeryLow
Threat
None
Hit Count
8
Last Seen
59s ago
Network Locale Headers Tool Transport Session Quality
Closest to
ClaudeBot
Drift vs
34.6%

Fingerprint Profile

TLS Version
TLSv1.3
HTTP Protocol
HTTP/2
Protocol Client
TLS_AES_256_GCM_SHA384
TCP OS Hint
Unavailable
Fingerprint Integrity
Suspect
UA Consistency
Flagged
Headless Indicator
Low
Datacenter IP
Clean

Browser modes same browser, different modes. One row per persisted mode

Mode Observations Maturity Shift from baseline Last seen
bot-raw 18 18 0.03 (ua family, header case pattern, header order hash) 01:19:55
1 mode across 18 observations. See composite browser-mode fingerprints.
Endpoints Visited (6) Click to expand · stats unavailable
# Path
1 /dashboard/signature/gWjReP_8tCczYYDDJijtvA
2 /_content/Mostlylucid.BotDetection.UI/flags/be.svg
3 /dashboard/entity/8d41792316fb4293
4 /sitemap.xml
5 /
6 /robots.txt
Raw Requests (8) Click to expand
Time Method Path Status Prob Conf Risk Profile Action Time
02:02:17 GET /dashboard/signature/gWjReP_8tCczYYDDJijtvA 200 100 % 50 % VeryHigh rate-limit-ai 11.5ms
02:02:16 GET /_content/Mostlylucid.BotDetection.UI/flags/be.svg 200 100 % 50 % VeryHigh rate-limit-ai 10.2ms
02:02:16 GET /dashboard/entity/8d41792316fb4293 200 100 % 50 % VeryHigh rate-limit-ai 13.0ms
01:19:55 GET /sitemap.xml 200 100 % 50 % VeryHigh rate-limit-ai 13.7ms
00:12:37 GET / 200 100 % 50 % VeryHigh rate-limit-ai 13.0ms
22:26:02 GET /sitemap.xml 200 100 % 50 % VeryHigh rate-limit-ai 10.4ms
22:26:01 GET /robots.txt 200 100 % 50 % VeryHigh rate-limit-ai 13.7ms
19:15:02 GET /sitemap.xml 200 100 % 50 % VeryHigh rate-limit-ai 13.6ms

Bot Probability & Confidence History

StyloBot Detection Overhead (ms)

User Agent

Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email])

Analysis

ClaudeBot on /dashboard/signat... - caught by Known AI training bot: ClaudeBot (Anthropic), Known bot pattern: ClaudeBot, claimed ClaudeBot but source IP not in ClaudeBot's publis...

Detection Signals

  • • Known AI training bot: ClaudeBot (Anthropic)
  • • Known bot pattern: ClaudeBot
  • • claimed ClaudeBot but source IP not in ClaudeBot's published range
  • • TLS connection appears normal
  • • Request patterns appear normal

Detector Contributions (19 detectors)

Detector Confidence Delta Timing (ms)
HeuristicLate
Heuristic model (late): 98 % bot likelihood (302 features)
 +0.952 0.4
AiScraper
Known AI training bot: ClaudeBot (Anthropic)
 +0.950 0.0
UserAgent
Known bot pattern: ClaudeBot
 +0.900 0.3
Heuristic
Heuristic model (early): 66 % bot likelihood (18 features)
 +0.321 0.1
GoodBotIpRange
claimed ClaudeBot but source IP not in ClaudeBot's published range
 +0.550 0.0
Ip
IP appears normal: 216.73.217.xxx
 -0.150 0.0
Header
Headers appear normal
 -0.150 0.0
Behavioral
Request patterns appear normal
 -0.150 0.1
TlsFingerprint
TLS connection appears normal
 -0.150 0.0
TcpIpFingerprint
Missing connection reuse header (unusual for real browsers)
 +0.200 0.0
Http2Fingerprint
No HTTP/2 stream priority (browsers typically use this)
 +0.050 0.0
AI
AI analysis: borderline case, monitoring
 +0.000 10.3
VerifiedBot
No known bot UA pattern
 +0.000 0.0
SecurityTool
No security tools detected in User-Agent
 +0.000 0.0
RequestHydrator
Request signals hydrated to sink
 +0.000 0.0
Http3Fingerprint
Connection uses HTTP/2 (not HTTP/3)
 +0.000 0.0
HeaderCorrelation
Single signature per header profile
 +0.000 0.0
TransportProtocol
Transport protocol analysis complete
 +0.000 0.0
FastPathReputation
No known patterns in reputation cache
 +0.000 0.0

Signal Intelligence

h2

protocol h2

referrer

domain stylobot.net

request

protocol HTTP/2
accept_encoding gzip, br

risk

justification Classified AiBot (probability 1.00, confidence 0.50)
friendly_pin_trace not-applicable:botType=AiBot,yamlType=AiBot,botName=ClaudeBot

tls

cipher TLS_AES_256_GCM_SHA384
Version TLSv1.3
version TLSv1.3

Policy applied

Hit history

No sessions recorded yet.

Sessions are created when a visitor's activity gap exceeds 30 minutes.

Effective policy
Loading effective policy…
ASP.NET Pack — Auth events
JWKS health
OK

reachable

Auth pipeline
JWKS reachable
License
Licensed

ASP.NET pack enabled

OTel Mesh — Traces

Fingerprint timeline

2e1ec6c3dfc3431dbc367cd96e40ba09 0 observations

Span + log activity for this fingerprint, ordered by timestamp.

No timeline observations

OTel Mesh receiver online, but no observations seen for this fingerprint id (check W3C baggage propagation)

Signature: lDxREJsqnuuaN_sOq7wPZA | Processing: 11ms | Country: US | UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email]) | First seen: 2026-07-14 19:15:02 UTC