Sign in
← Dashboard / Signature Detail
Overview Activity Visitors Countries Endpoints Sessions Threats Investigate
SG

PetalBot

 · PetalBot / Other Human
Policy: Allow
Probability
0 %
Confidence
99 %
Risk Profile
VeryLow
Threat
None
Hit Count
25
Last Seen
1m ago
Network Locale Headers Tool Transport Session Quality
Drift vs
53.1%

Fingerprint Profile

TLS Version
TLSv1.3
HTTP Protocol
HTTP/2
Protocol Client
TLS_AES_256_GCM_SHA384
TCP OS Hint
Unavailable
Fingerprint Integrity
Suspect
UA Consistency
Suspect
Headless Indicator
Low
Datacenter IP
Clean

Browser modes same browser, different modes. One row per persisted mode

Mode Observations Maturity Shift from baseline Last seen
bot-raw 204 204 0.00 (ua family, header order hash, cache control pragma) 01:17:04
1 mode across 204 observations. See composite browser-mode fingerprints.
Endpoints Visited (22) Click to expand · stats unavailable
# Path
1 /dashboard/entity/0f420b5a098949c6
2 /dashboard/configuration
3 /dashboard/visitors
4 /dashboard/investigate
5 /dashboard
6 /dashboard/traffic
7 /dashboard/signature/nlaCscXqdPXMtXC78mVlQg
8 /dashboard/signature/1uufTKp7aJ-b5sHL78NFYA
9 /dashboard/threats
10 /dashboard/signature/be1d33ce77b2e9c1
11 /pricing
12 /dashboard/insights/aspnet_pack_log_sink_queue_depth
13 /dashboard/entity/cf3426a6413e410b
14 /dashboard/signature/e0eo7m8e1YlcHB3ZaUNCrQ
15 /dashboard/signature/K_dRMaKN-HhWEhbsU0om-Q
16 /dashboard/signature/24687a8fe6a1b8c4
17 /dashboard/signature/df01ca5ce3c304dd
18 /dashboard/signature/fa285ede5f2f4cd1
19 /dashboard/entity/151d764d88834299
20 /dashboard/entity/b744a20034484bf2
21 /refund
22 /dashboard/entity/79a0426ffccc48e5
Raw Requests (25) Click to expand
Time Method Path Status Prob Conf Risk Profile Action Time
01:17:05 GET /dashboard/entity/0f420b5a098949c6 200 30 % 86 % Low Allow 784.0ms
00:08:11 GET /dashboard/configuration 200 48 % 81 % Elevated Allow 816.4ms
21:04:50 GET /dashboard/visitors 200 31 % 85 % Low Allow 13.0ms
21:04:49 GET /dashboard/investigate 200 31 % 85 % Low Allow 13.1ms
21:04:48 GET /dashboard 200 30 % 86 % Low Allow 248.5ms
20:01:32 GET /dashboard/traffic 200 30 % 86 % Low Allow 421.9ms
17:44:17 GET /dashboard/signature/nlaCscXqdPXMtXC78mVlQg 200 30 % 86 % Low Allow 224.3ms
16:55:30 GET /dashboard/signature/1uufTKp7aJ-b5sHL78NFYA 200 30 % 86 % Low Allow 2592.3ms
13:43:34 GET /dashboard/visitors 200 31 % 85 % Low Allow 13.2ms
13:43:30 GET /dashboard/threats 200 30 % 86 % Low Allow 1411.2ms
12:09:18 GET /dashboard/signature/be1d33ce77b2e9c1 200 31 % 85 % Low Allow 12.5ms
12:07:56 GET /pricing 200 30 % 86 % Low Allow 762.8ms
05:49:46 GET /dashboard/insights/aspnet_pack_log_sink_queue_depth 200 30 % 86 % Low Allow 41.4ms
03:48:25 GET /dashboard/entity/cf3426a6413e410b 200 31 % 85 % Low Allow 17.0ms
03:38:39 GET /dashboard/signature/e0eo7m8e1YlcHB3ZaUNCrQ 200 31 % 85 % Low Allow 12.9ms
03:35:53 GET /dashboard/signature/K_dRMaKN-HhWEhbsU0om-Q 200 30 % 86 % Low Allow 259.5ms
03:01:58 GET /dashboard/signature/24687a8fe6a1b8c4 200 30 % 86 % Low Allow 223.0ms
00:44:01 GET /dashboard/signature/df01ca5ce3c304dd 200 31 % 85 % Low Allow 13.0ms
00:41:15 GET /dashboard/traffic 200 31 % 85 % Low Allow 12.8ms
00:41:14 GET /dashboard 200 30 % 86 % Low Allow 269.6ms
23:59:09 GET /dashboard/signature/fa285ede5f2f4cd1 200 31 % 85 % Low Allow 13.2ms
23:56:23 GET /dashboard/entity/151d764d88834299 200 30 % 86 % Low Allow 910.4ms
16:25:17 GET /dashboard/entity/b744a20034484bf2 200 35 % 84 % Elevated Allow 221.9ms
16:03:41 GET /refund 200 36 % 84 % Elevated Allow 24.5ms
15:52:34 GET /dashboard/entity/79a0426ffccc48e5 200 35 % 84 % Elevated Allow 725.5ms

Bot Probability & Confidence History

StyloBot Detection Overhead (ms)

User Agent

Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (HTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)

Analysis

Real browser user (verified) - Ancient OS detected: Android 7 (extremely rare in legitim..., No header/UA inconsistencies detected

Detection Signals

  • • Ancient OS detected: Android 7 (extremely rare in legitimate traffic)
  • • No header/UA inconsistencies detected
  • • Request patterns appear normal
  • • Headers appear normal
  • • User-Agent appears normal

Detector Contributions (32 detectors)

Detector Confidence Delta Timing (ms)
Heuristic
Heuristic model (early): 74 % human likelihood (19 features)
 -0.478 0.1
HeuristicLate
Heuristic model (late): 61 % bot likelihood (302 features)
 +0.213 0.4
VersionAge
Ancient OS detected: Android 7 (extremely rare in legitimate traffic)
 +0.300 0.0
Ip
IP appears normal: 114.119.140.xxx
 -0.150 2.0
Header
Headers appear normal
 -0.150 0.1
UserAgent
User-Agent appears normal
 -0.150 0.6
Behavioral
Request patterns appear normal
 -0.150 0.2
Inconsistency
No header/UA inconsistencies detected
 -0.150 0.1
TlsFingerprint
TLS connection appears normal
 -0.150 0.0
VerifiedBot
rDNS mismatch: UA claims webmaster.petalsearch.com but rDNS is petalbot-114-119-140-29.petalsearch.com
 +0.250 768.9
AI
AI analysis: borderline case, monitoring
 +0.000 10.1
Llm
LLM detection disabled or unavailable
 +0.000 0.0
Intent
Session intent: browsing (threat=0.05, band=None)
 +0.000 0.6
AiScraper
No AI scraper signals detected
 +0.000 0.1
Similarity
No prior visitor signatures to compare against yet
 +0.000 0.0
StreamAbuse
Stream abuse check - non-streaming request
 +0.000 0.0
SecurityTool
No security tools detected in User-Agent
 +0.000 0.1
CookieBehavior
Too few requests for cookie analysis
 +0.000 0.0
ReputationBias
No learned reputation patterns matched
 +0.000 0.1
ClaimedIdentity
No profile for UA family 'PetalBot'
 +0.000 0.0
ContentSequence
Document hit; sequence reset at /dashboard/entity/0f420b5a098949c6
 +0.000 0.1
ProjectHoneypot
Skipped: ProjectHoneypot is disabled in configuration
 +0.000 0.0
ReactivePattern
No prior error events to analyze
 +0.000 0.0
RequestHydrator
Request signals hydrated to sink
 +0.000 0.0
Http2Fingerprint
HTTP/2 analysis complete (no anomalies detected)
 +0.000 0.1
Http3Fingerprint
Connection uses HTTP/2 (not HTTP/3)
 +0.000 0.0
ResponseBehavior
Response coordinator not configured
 +0.000 0.0
TcpIpFingerprint
Network fingerprint analysis complete (no anomalies detected)
 +0.000 0.0
HeaderCorrelation
Single signature per header profile
 +0.000 0.0
TransportProtocol
Transport protocol analysis complete
 +0.000 0.0
FastPathReputation
No known patterns in reputation cache
 +0.000 0.0
MultiLayerCorrelation
Cross-signal consistency check complete (not enough data to compare)
 +0.000 0.2

Signal Intelligence

h2

protocol h2

referrer

domain stylobot.net

request

protocol HTTP/2
accept_encoding gzip, br

risk

justification Classified Unknown (probability 0.30, confidence 0.86)
friendly_pin_trace not-applicable:botType=Unknown,yamlType=null,botName=null

tls

cipher TLS_AES_256_GCM_SHA384
Version TLSv1.3
version TLSv1.3

Policy applied

Hit history

No sessions recorded yet.

Sessions are created when a visitor's activity gap exceeds 30 minutes.

Effective policy
Loading effective policy…
ASP.NET Pack — Auth events
JWKS health
OK

reachable

Auth pipeline
JWKS reachable
License
Licensed

ASP.NET pack enabled

OTel Mesh — Traces

Fingerprint timeline

c7892c908fc9463e9ec1f0692fed044b 0 observations

Span + log activity for this fingerprint, ordered by timestamp.

No timeline observations

OTel Mesh receiver online, but no observations seen for this fingerprint id (check W3C baggage propagation)

Signature: 1MknlfNQG9PXubpXDWik_Q | Processing: 784ms | Country: SG | UA: Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (HTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot) | First seen: 2026-07-13 15:52:34 UTC