Sign in
← Dashboard / Signature Detail
BR

Unknown

Bot
Unknown
Policy: Silent Throttle
Probability
90 %
Confidence
68 %
Risk Profile
High
Threat
None
Hit Count
50
Last Seen
1d ago
Network Locale Headers Tool Transport Session Quality
Closest to
AdGuard

Fingerprint Profile

TLS Version
Unavailable
HTTP Protocol
HTTP/1.1
Protocol Client
Unavailable
TCP OS Hint
Unavailable
Fingerprint Integrity
Consistent
UA Consistency
Flagged
Headless Indicator
Clean
Datacenter IP
Clean
Endpoints Visited (50) Click to expand · stats unavailable
# Path
1 /3wu.php
2 /1254xx.php
3 /pbck.php
4 /wp-includes/Requests/library/
5 /sh3ll.php
6 /gecko.php
7 /aaa.php
8 /wp-admin/network/plugins.php
9 /xstelth.php
10 /wp-admin/css/colors/sunrise/
11 //wp-includes/assets/
12 //xwpg.php
13 /wp-load.php
14 /f35.php
15 /jp.php
16 /file15.php
17 /a2.php
18 /file6.php
19 /akcc.php
20 /file25.php
21 /eee.php
22 /bless.php
23 /xamp.php
24 /dr.php
25 /ccou.php
26 /aa2.php
27 /admin.php
28 /cfile.php
29 /file.php
30 /4PJcpMFsD8B.php
31 /file5.php
32 /pol.php
33 /als.php
34 //wp-includes/block-bindings/
35 /chosen.php
36 /wp-admin/css/colors/blue/
37 /hypo.php
38 /xxx.php
39 /simple.php
40 /wp-content/
41 /gettest.php
42 //cgi-bin/admin.php
43 /wp-includes/Text/Diff/Engine/about.php
44 //a1.php
45 //abcd.php
46 /wp.php
47 /wp-content/uploads/
48 //wp-includes/l10n/
49 /BDKR28WP.php
50 //wp-includes/css/dist/
Raw Requests (50) Click to expand
Time Method Path Status Prob Conf Risk Profile Action Time
13:47:18 GET /3wu.php 200 90 % 68 % VeryHigh Silent Throttle 11.5ms
13:47:15 GET /1254xx.php 200 90 % 68 % VeryHigh Silent Throttle 12.0ms
13:47:13 GET /pbck.php 200 90 % 68 % VeryHigh Silent Throttle 11.5ms
13:47:10 GET /wp-includes/Requests/library/ 200 90 % 68 % VeryHigh Silent Throttle 12.1ms
13:47:07 GET /sh3ll.php 200 90 % 68 % VeryHigh Silent Throttle 12.1ms
13:47:05 GET /gecko.php 200 90 % 68 % VeryHigh Silent Throttle 12.1ms
13:47:01 GET /aaa.php 200 90 % 68 % VeryHigh Silent Throttle 11.4ms
13:47:00 GET /wp-admin/network/plugins.php 200 90 % 68 % VeryHigh Silent Throttle 13.7ms
13:46:56 GET /xstelth.php 200 90 % 68 % VeryHigh Silent Throttle 11.5ms
13:46:55 GET /wp-admin/css/colors/sunrise/ 200 90 % 68 % VeryHigh Silent Throttle 12.0ms
13:46:52 GET //wp-includes/assets/ 200 90 % 68 % VeryHigh Silent Throttle 12.1ms
13:46:49 GET //xwpg.php 200 90 % 68 % VeryHigh Silent Throttle 11.9ms
13:46:45 GET /wp-load.php 200 90 % 68 % VeryHigh Silent Throttle 11.9ms
13:46:42 GET /f35.php 200 90 % 68 % VeryHigh Silent Throttle 11.4ms
13:46:40 GET /jp.php 200 90 % 68 % VeryHigh Silent Throttle 11.7ms
13:46:38 GET /file15.php 200 90 % 68 % VeryHigh Silent Throttle 11.8ms
13:46:36 GET /a2.php 200 90 % 68 % VeryHigh Silent Throttle 11.6ms
13:46:35 GET /file6.php 200 90 % 68 % VeryHigh Silent Throttle 11.9ms
13:46:32 GET /akcc.php 200 90 % 68 % VeryHigh Silent Throttle 11.9ms
13:46:28 GET /file25.php 200 90 % 68 % VeryHigh Silent Throttle 13.2ms
13:46:25 GET /eee.php 200 90 % 68 % VeryHigh Silent Throttle 11.8ms
13:46:22 GET /bless.php 200 90 % 68 % VeryHigh Silent Throttle 11.8ms
13:46:19 GET /xamp.php 200 90 % 68 % VeryHigh Silent Throttle 11.4ms
13:46:16 GET /dr.php 200 90 % 68 % VeryHigh Silent Throttle 11.8ms
13:46:14 GET /ccou.php 200 90 % 68 % VeryHigh Silent Throttle 11.7ms
13:46:13 GET /aa2.php 200 90 % 68 % VeryHigh Silent Throttle 11.6ms
13:46:11 GET /admin.php 200 90 % 68 % VeryHigh Silent Throttle 11.7ms
13:46:08 GET /cfile.php 200 90 % 68 % VeryHigh Silent Throttle 11.4ms
13:46:05 GET /file.php 200 90 % 68 % VeryHigh Silent Throttle 10.7ms
13:46:01 GET /4PJcpMFsD8B.php 200 90 % 68 % VeryHigh Silent Throttle 11.4ms
13:45:59 GET /file5.php 200 90 % 68 % VeryHigh Silent Throttle 10.8ms
13:45:57 GET /pol.php 200 90 % 68 % VeryHigh Silent Throttle 11.8ms
13:45:53 GET /als.php 200 90 % 68 % VeryHigh Silent Throttle 12.2ms
13:45:50 GET //wp-includes/block-bindings/ 200 90 % 68 % VeryHigh Silent Throttle 12.0ms
13:45:46 GET /chosen.php 200 90 % 68 % VeryHigh Silent Throttle 12.1ms
13:45:43 GET /wp-admin/css/colors/blue/ 200 90 % 68 % VeryHigh Silent Throttle 12.5ms
13:45:39 GET /hypo.php 200 90 % 68 % VeryHigh Silent Throttle 11.7ms
13:45:38 GET /xxx.php 200 90 % 68 % VeryHigh Silent Throttle 11.8ms
13:45:34 GET /simple.php 200 90 % 68 % VeryHigh Silent Throttle 11.8ms
13:45:33 GET /wp-content/ 200 90 % 68 % VeryHigh Silent Throttle 11.5ms
13:45:30 GET /gettest.php 200 90 % 68 % VeryHigh Silent Throttle 11.7ms
13:45:27 GET //cgi-bin/admin.php 200 90 % 68 % VeryHigh Silent Throttle 11.9ms
13:45:25 GET /wp-includes/Text/Diff/Engine/about.php 200 90 % 68 % VeryHigh Silent Throttle 11.2ms
13:45:22 GET //a1.php 200 90 % 68 % VeryHigh Silent Throttle 12.0ms
13:45:20 GET //abcd.php 200 90 % 68 % VeryHigh Silent Throttle 11.1ms
13:45:17 GET /wp.php 200 90 % 68 % VeryHigh Silent Throttle 12.0ms
13:45:14 GET /wp-content/uploads/ 200 90 % 68 % VeryHigh Silent Throttle 12.2ms
13:45:11 GET //wp-includes/l10n/ 200 90 % 68 % VeryHigh Silent Throttle 12.3ms
13:45:08 GET /BDKR28WP.php 200 90 % 68 % VeryHigh Silent Throttle 11.8ms
13:45:05 GET //wp-includes/css/dist/ 200 90 % 68 % VeryHigh Silent Throttle 12.0ms

Bot Probability & Confidence History

StyloBot Detection Overhead (ms)

Analysis

Unknown on /3wu.php - caught by Missing User-Agent header, Very few headers (1), Datacenter IP detected: Azure

Detection Signals

  • Missing User-Agent header
  • Very few headers (1)
  • Datacenter IP detected: Azure
  • Visiting many random URLs in no logical order (random scanning pattern)
  • No cookies maintained across multiple requests

Detector Contributions (16 detectors)

Detector Confidence Delta Timing (ms)
HeuristicLate
Heuristic model (late): 98 % bot likelihood (279 features)
+0.969 0.3
Behavioral
No referrer on subsequent request; No cookies maintained across multiple requests; Visiting many random URLs in no logical order (random scanning pattern); Timing anomaly: 0.0s vs 2.7±0.7s (z=3.7)
+1.000 0.7
Heuristic
Heuristic model (early): 80 % bot likelihood (18 features)
+0.600 0.0
UserAgent
Missing User-Agent header
+0.800 0.0
Header
Missing Accept header; deployment norm is low Accept rate (34 % over 307 samples); Very few headers (1)
+0.750 0.1
Ip
Datacenter IP detected: Azure
+0.600 0.0
TlsFingerprint
Using HTTP instead of HTTPS (uncommon for modern browsers)
+0.050 0.0
AI
AI analysis: borderline case, monitoring
+0.000 10.3
AiScraper
No AI scraper signals detected
+0.000 0.0
VerifiedBot
No known bot UA pattern
+0.000 0.0
RequestHydrator
Request signals hydrated to sink
+0.000 0.0
Http2Fingerprint
Using HTTP/1.1; environment norm is HTTP/1.1 (0 % HTTP/2 over 335 samples)
+0.000 0.0
Http3Fingerprint
Connection uses HTTP/1.1 (not HTTP/3)
+0.000 0.0
TcpIpFingerprint
Network fingerprint analysis complete (no anomalies detected)
+0.000 0.0
TransportProtocol
Transport protocol analysis complete
+0.000 0.0
FastPathReputation
No known patterns in reputation cache
+0.000 0.0

Signal Intelligence

request

protocol HTTP/1.1

risk

justification Classified Unknown (probability 0.90, confidence 0.68)
friendly_pin_trace not-applicable:botType=Unknown,yamlType=null,botName=null

Policy applied

Hit history

No sessions recorded yet.

Sessions are created when a visitor's activity gap exceeds 30 minutes.

Effective policy
Loading effective policy…
ASP.NET Pack — Auth events
JWKS health
OK

reachable

Auth pipeline
JWKS reachable
License
Licensed

ASP.NET pack enabled

OTel Mesh — Traces

Fingerprint timeline

0 observations

Span + log activity for this fingerprint, ordered by timestamp.

No timeline observations

no fingerprint id supplied

Signature: 1297f75e30353d86 | Processing: 12ms | Country: BR | First seen: 2026-07-13 13:45:05 UTC