Sign in
← Dashboard / Signature Detail
Overview Activity Visitors Countries Endpoints Sessions Threats Investigate
BG

Unknown

 Human
Unknown
Policy: Silent Throttle
Probability
0 %
Confidence
95 %
Risk Profile
VeryLow
Threat
None
Hit Count
50
Last Seen
27s ago
Network Locale Headers Tool Transport Session Quality
Drifted
python-requests → curl
Drift vs
44.5%

Fingerprint Profile

TLS Version
Unavailable
HTTP Protocol
HTTP/1.1
Protocol Client
Unavailable
TCP OS Hint
Unavailable
Fingerprint Integrity
Consistent
UA Consistency
Flagged
Headless Indicator
Clean
Datacenter IP
Clean

Browser modes same browser, different modes. One row per persisted mode

Mode Observations Maturity Shift from baseline Last seen
bot-raw 1337 1337 0.05 (ua family, sec gpc, dnt) 01:49:12
signalr-negotiate 89 89 0.38 (ua family, header order hash, sec gpc) 20:44:13
sub-resource 139 139 0.58 (sec gpc, dnt, priority) 20:43:38
navigation 12 12 0.62 (upgrade insecure requests, priority, sec gpc) 20:43:22
4 modes across 1577 observations. See composite browser-mode fingerprints.
Endpoints Visited (46) Click to expand · stats unavailable
# Path
1 /api/experimental/dags/example_dag_decorator/dag_runs
2 /cgi-bin/cgi_command
3 /controllers/metric.php
4 /ms_service
5 /public/index.php
6 /api/experimental/dags/example_bash_operator/dag_runs
7 /api/v1/build_public_tmp/testflow/flow
8 /api/v1/validate/code
9 /beyondtrust/api/v1/sites
10 /api/license/sendlicense/
11 /cgi-bin/snserv
12 /cgi-bin/mail_test.cgi
13 /run
14 /run_command
15 /goform/mp
16 /Reporter/reporter.php
17 /cgi-bin/luci
18 /html/configuracao/debug_info.php
19 /start_upgrade.php
20 /goform/fast_setting_internet_set
21 /index.php
22 /cacti/cmd.php
23 /ajax/php/login.php
24 /_internal/pc/vpro.php
25 /wp-comments-post.php
26 /loader.php
27 /admin/ajax/ping.php
28 /admin/ajax/gen_graphs.php
29 /cgi-bin/viewcert
30 /cgi-bin/extensionsettings
31 /cgi-bin/diagnostics
32 /cgi-bin/ping.cgi
33 /cgi-bin/diag.cgi
34 /cgi-bin/cstecgi.cgi
35 /goform/BehaviorManager
36 /cgi-bin/netgear_svc.cgi
37 /cgi-bin/traceroute.cgi
38 /legal_information
39 /uapi-cgi/ddns.cgi
40 /cgi-bin/hi3510/param.cgi
41 /set_ftp.cgi
42 /mail.htm
43 /cgi-bin/admin/testserver.cgi
44 /cgi-bin/admin/upload_map.cgi
45 /cgi-bin/cgi_cmd
46 /HNAP1/
Raw Requests (50) Click to expand
Time Method Path Status Prob Conf Risk Profile Action Time
16:10:08 GET /api/experimental/dags/example_dag_decorator/dag_runs 200 90 % 68 % VeryHigh Silent Throttle 11.5ms
16:10:06 POST /cgi-bin/cgi_command 200 90 % 68 % VeryHigh Silent Throttle 11.6ms
16:10:02 GET /controllers/metric.php 200 90 % 68 % VeryHigh Silent Throttle 12.1ms
16:10:00 GET /ms_service 200 90 % 68 % VeryHigh Silent Throttle 12.2ms
16:09:58 POST /public/index.php 200 90 % 68 % VeryHigh Silent Throttle 12.2ms
16:09:57 GET /api/experimental/dags/example_bash_operator/dag_runs 200 90 % 68 % VeryHigh Silent Throttle 12.0ms
16:09:54 POST /api/v1/build_public_tmp/testflow/flow 200 90 % 68 % VeryHigh Silent Throttle 12.2ms
16:09:50 POST /api/v1/validate/code 200 90 % 68 % VeryHigh Silent Throttle 11.9ms
16:09:47 POST /beyondtrust/api/v1/sites 200 90 % 68 % VeryHigh Silent Throttle 11.5ms
16:09:45 POST /api/license/sendlicense/ 200 90 % 68 % VeryHigh Silent Throttle 12.0ms
16:09:43 POST /cgi-bin/snserv 200 90 % 68 % VeryHigh Silent Throttle 12.1ms
16:09:41 POST /cgi-bin/mail_test.cgi 200 90 % 68 % VeryHigh Silent Throttle 12.0ms
16:09:38 POST /run 200 90 % 68 % VeryHigh Silent Throttle 12.1ms
16:09:34 POST /run_command 200 90 % 68 % VeryHigh Silent Throttle 11.7ms
16:09:31 POST /goform/mp 200 90 % 68 % VeryHigh Silent Throttle 12.0ms
16:09:28 GET /Reporter/reporter.php 200 90 % 68 % VeryHigh Silent Throttle 11.9ms
16:09:25 GET /cgi-bin/luci 200 90 % 68 % VeryHigh Silent Throttle 12.2ms
16:09:23 GET /html/configuracao/debug_info.php 200 90 % 68 % VeryHigh Silent Throttle 11.8ms
16:09:19 POST /start_upgrade.php 200 90 % 68 % VeryHigh Silent Throttle 11.7ms
16:09:15 POST /goform/fast_setting_internet_set 200 90 % 68 % VeryHigh Silent Throttle 12.5ms
16:09:13 GET /index.php 200 90 % 68 % VeryHigh Silent Throttle 11.9ms
16:09:09 GET /cacti/cmd.php 200 90 % 68 % VeryHigh Silent Throttle 11.4ms
16:09:06 POST /ajax/php/login.php 200 90 % 68 % VeryHigh Silent Throttle 11.8ms
16:09:03 GET /_internal/pc/vpro.php 200 90 % 68 % VeryHigh Silent Throttle 11.7ms
16:09:01 POST /wp-comments-post.php 200 90 % 68 % VeryHigh Silent Throttle 11.1ms
16:08:59 GET /loader.php 200 90 % 68 % VeryHigh Silent Throttle 12.0ms
16:08:55 GET /admin/ajax/ping.php 200 90 % 68 % VeryHigh Silent Throttle 12.0ms
16:08:53 GET /admin/ajax/gen_graphs.php 200 90 % 68 % VeryHigh Silent Throttle 11.7ms
16:08:50 POST /cgi-bin/viewcert 200 90 % 68 % VeryHigh Silent Throttle 11.7ms
16:08:47 POST /cgi-bin/extensionsettings 200 90 % 68 % VeryHigh Silent Throttle 12.4ms
16:08:43 POST /cgi-bin/diagnostics 200 90 % 68 % VeryHigh Silent Throttle 14.4ms
16:08:40 POST /cgi-bin/ping.cgi 200 90 % 68 % VeryHigh Silent Throttle 12.2ms
16:08:38 POST /cgi-bin/diag.cgi 200 90 % 68 % VeryHigh Silent Throttle 11.8ms
16:08:37 POST /cgi-bin/cstecgi.cgi 200 90 % 68 % VeryHigh Silent Throttle 12.7ms
16:08:34 POST /goform/BehaviorManager 200 90 % 68 % VeryHigh Silent Throttle 12.0ms
16:08:33 POST /cgi-bin/netgear_svc.cgi 200 90 % 68 % VeryHigh Silent Throttle 12.1ms
16:08:30 POST /cgi-bin/traceroute.cgi 200 90 % 68 % VeryHigh Silent Throttle 11.8ms
16:08:28 GET /legal_information 200 90 % 68 % VeryHigh Silent Throttle 12.3ms
16:08:25 POST /uapi-cgi/ddns.cgi 200 90 % 68 % VeryHigh Silent Throttle 11.8ms
16:08:22 GET /cgi-bin/hi3510/param.cgi 200 90 % 68 % VeryHigh Silent Throttle 12.4ms
16:08:18 GET /set_ftp.cgi 200 90 % 68 % VeryHigh Silent Throttle 12.2ms
16:08:16 POST /mail.htm 200 90 % 68 % VeryHigh Silent Throttle 12.7ms
16:08:13 GET /cgi-bin/admin/testserver.cgi 200 90 % 68 % VeryHigh Silent Throttle 12.6ms
16:08:12 GET /cgi-bin/admin/upload_map.cgi 200 90 % 68 % VeryHigh Silent Throttle 12.1ms
16:08:09 POST /cgi-bin/cgi_cmd 200 90 % 68 % VeryHigh Silent Throttle 12.2ms
16:08:06 POST /cgi-bin/cstecgi.cgi 200 90 % 68 % VeryHigh Silent Throttle 12.0ms
16:08:02 POST /cgi-bin/cstecgi.cgi 200 90 % 68 % VeryHigh Silent Throttle 11.2ms
16:08:01 POST /cgi-bin/cstecgi.cgi 200 90 % 68 % VeryHigh Silent Throttle 12.1ms
16:07:57 POST /cgi-bin/cstecgi.cgi 200 90 % 68 % VeryHigh Silent Throttle 12.1ms
16:07:54 POST /HNAP1/ 200 90 % 68 % VeryHigh Silent Throttle 11.9ms

Bot Probability & Confidence History

StyloBot Detection Overhead (ms)

Analysis

Unknown on /api/experimental... - caught by Missing User-Agent header, Missing Accept header, Visiting many random URLs in no logical order (random sca...

Detection Signals

  • • Missing User-Agent header
  • • Missing Accept header
  • • Visiting many random URLs in no logical order (random scanning pattern)
  • • No cookies maintained across multiple requests
  • • Timing anomaly: 0.0s vs 2.7±0.8s (z=3.3)

Detector Contributions (18 detectors)

Detector Confidence Delta Timing (ms)
HeuristicLate
Heuristic model (late): 98 % bot likelihood (301 features)
 +0.958 0.3
Heuristic
Heuristic model (early): 84 % bot likelihood (18 features)
 +0.679 0.0
Behavioral
No referrer on subsequent request; No cookies maintained across multiple requests; Visiting many random URLs in no logical order (random scanning pattern); Timing anomaly: 0.0s vs 2.7±0.8s (z=3.3)
 +1.000 0.7
UserAgent
Missing User-Agent header
 +0.800 0.0
Header
Missing Accept header
 +0.462 0.0
Ip
IP appears normal: 85.11.167.xxx
 -0.150 0.0
ThreatIntel
spamhaus-drop malicious (SuspiciousNetworkRange)
 +0.100 0.1
TcpIpFingerprint
Client closes connection after each request (bots often avoid persistent connections)
 +0.100 0.0
TlsFingerprint
Using HTTP instead of HTTPS (uncommon for modern browsers)
 +0.050 0.0
AI
AI analysis: borderline case, monitoring
 +0.000 10.2
AiScraper
No AI scraper signals detected
 +0.000 0.0
VerifiedBot
No known bot UA pattern
 +0.000 0.0
RequestHydrator
Request signals hydrated to sink
 +0.000 0.0
Http2Fingerprint
Using HTTP/1.1; environment norm is HTTP/1.1 (0 % HTTP/2 over 121 samples)
 +0.000 0.0
Http3Fingerprint
Connection uses HTTP/1.1 (not HTTP/3)
 +0.000 0.0
HeaderCorrelation
Single signature per header profile
 +0.000 0.0
TransportProtocol
Transport protocol analysis complete
 +0.000 0.0
FastPathReputation
No known patterns in reputation cache
 +0.000 0.0

Signal Intelligence

request

protocol HTTP/1.1

risk

justification Classified Unknown (probability 0.90, confidence 0.68)
friendly_pin_trace not-applicable:botType=Unknown,yamlType=null,botName=null

Policy applied

Hit history

No sessions recorded yet.

Sessions are created when a visitor's activity gap exceeds 30 minutes.

Effective policy
Loading effective policy…
ASP.NET Pack — Auth events
JWKS health
OK

reachable

Auth pipeline
JWKS reachable
License
Licensed

ASP.NET pack enabled

OTel Mesh — Traces

Fingerprint timeline

beec7db9e6b04fb8acc7f3f4b437f39c 0 observations

Span + log activity for this fingerprint, ordered by timestamp.

No timeline observations

OTel Mesh receiver online, but no observations seen for this fingerprint id (check W3C baggage propagation)

Signature: gWjReP_8tCczYYDDJijtvA | Processing: 12ms | Country: BG | First seen: 2026-07-14 16:07:54 UTC