OK
reachable
Bingbot
· bingbot 2.0 Human
SearchEngine
Policy:
Allow
Probability
0 %
Confidence
99 %
Risk Profile
VeryLow
Threat
None
Hit Count
14
Last Seen
20s ago
Drifted
Bingbot
→
HTTrack
Drift vs
46.0%
Fingerprint Profile
TLS Version
TLSv1.3
HTTP Protocol
HTTP/2
Protocol Client
TLS_AES_256_GCM_SHA384
TCP OS Hint
Unavailable
Fingerprint Integrity
Suspect
UA Consistency
Flagged
Headless Indicator
Low
Datacenter IP
Clean
Browser modes same browser, different modes. One row per persisted mode
| Mode | Observations | Maturity | Shift from baseline | Last seen |
|---|---|---|---|---|
| bot-raw | 1104 | 1104 | 0.09 (ua family, priority, header case pattern) | 08:00:46 |
| websocket-upgrade | 36 | 36 | 0.32 (cache control pragma, header order hash, header case pattern) | 05:49:50 |
| navigation | 32 | 32 | 0.62 (ua family, upgrade insecure requests, priority) | 05:33:32 |
| signalr-negotiate | 38 | 38 | 0.51 (ua family, priority, header order hash) | 05:26:05 |
| sub-resource | 141 | 141 | 0.49 (ua family, priority, header case pattern) | 05:25:35 |
5 modes across 1351 observations. See composite browser-mode fingerprints.
Endpoints Visited (13) Click to expand · stats unavailable
| # | Path |
|---|---|
| 1 | /dashboard/signature/83f69e5bd66b3142 |
| 2 | /dashboard/signature/Z1UuStZJCji5LSiqpm19Nw |
| 3 | /dashboard/signature/e2S3SRwIJAmWMbsgTWkOAg |
| 4 | /dashboard/entity/fa1801f6669849a5 |
| 5 | /dashboard/signature/0i7vEiJO-LySNvaWDjoelA |
| 6 | /dashboard/signature/5977d90678acf923 |
| 7 | /dashboard/signature/mZHqjDrBxABBFeh1chVz-A |
| 8 | /dashboard/signature/43d410a8d3ee8d1c |
| 9 | /dashboard/signature/K_dRMaKN-HhWEhbsU0om-Q |
| 10 | /dashboard/traffic |
| 11 | /dashboard/overview |
| 12 | /dashboard/signature/3xo011cHuvyP2qm0gin4Sg |
| 13 | /dashboard/signature/9GctrEP2QsyPlhncKAvpwQ |
Raw Requests (14) Click to expand
| Time | Method | Path | Status | Prob | Conf | Risk Profile | Action | Time |
|---|---|---|---|---|---|---|---|---|
| 06:53:24 | GET | /dashboard/signature/83f69e5bd66b3142 | 200 | 100 % | 100 % | VeryLow | Allow | 29.7ms |
| 06:44:13 | GET | /dashboard/signature/Z1UuStZJCji5LSiqpm19Nw | 200 | 100 % | 100 % | VeryLow | Allow | 13.6ms |
| 06:30:24 | GET | /dashboard/signature/e2S3SRwIJAmWMbsgTWkOAg | 200 | 100 % | 100 % | VeryLow | Allow | 12.4ms |
| 06:30:23 | GET | /dashboard/entity/fa1801f6669849a5 | 200 | 100 % | 100 % | VeryLow | Allow | 11.5ms |
| 06:29:44 | GET | /dashboard/signature/0i7vEiJO-LySNvaWDjoelA | 200 | 100 % | 100 % | VeryLow | Allow | 20.9ms |
| 00:37:28 | GET | /dashboard/signature/5977d90678acf923 | 200 | 100 % | 100 % | VeryLow | Allow | 13.9ms |
| 04:55:00 | GET | /dashboard/signature/mZHqjDrBxABBFeh1chVz-A | 200 | 100 % | 100 % | VeryLow | Allow | 13.2ms |
| 21:09:11 | GET | /dashboard/signature/43d410a8d3ee8d1c | 200 | 100 % | 100 % | VeryLow | Allow | 21.8ms |
| 15:50:43 | GET | /dashboard/signature/K_dRMaKN-HhWEhbsU0om-Q | 200 | 100 % | 100 % | VeryLow | Allow | 12.0ms |
| 15:48:35 | GET | /dashboard/signature/0i7vEiJO-LySNvaWDjoelA | 200 | 100 % | 100 % | VeryLow | Allow | 11.8ms |
| 15:48:33 | GET | /dashboard/traffic | 200 | 100 % | 100 % | VeryLow | Allow | 11.5ms |
| 15:48:32 | GET | /dashboard/overview | 200 | 100 % | 100 % | VeryLow | Allow | 11.0ms |
| 15:48:32 | GET | /dashboard/signature/3xo011cHuvyP2qm0gin4Sg | 200 | 100 % | 100 % | VeryLow | Allow | 56.3ms |
| 15:43:44 | GET | /dashboard/signature/9GctrEP2QsyPlhncKAvpwQ | 200 | 100 % | 100 % | VeryLow | Allow | 77.7ms |
Bot Probability & Confidence History
StyloBot Detection Overhead (ms)
User Agent
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/[phone] Safari/537.36
Analysis
Bingbot on /dashboard/signat... - caught by Known bot UA pattern: Bingbot, claimed Bingbot but source IP not in Bingbot's published ..., Request patterns appear normal
Detection Signals
- • Known bot UA pattern: Bingbot
- • claimed Bingbot but source IP not in Bingbot's published range
- • Request patterns appear normal
- • TLS connection appears normal
- • IP appears normal: 52.167.144.xxx
Detector Contributions (20 detectors)
| Detector | Confidence Delta | Timing (ms) |
|---|---|---|
|
HeuristicLate
Heuristic model (late): 99 % bot likelihood (307 features)
|
+0.975 | 0.4 |
|
Heuristic
Heuristic model (early): 85 % bot likelihood (23 features)
|
+0.692 | 0.1 |
|
UserAgent
Known bot UA pattern: Bingbot
|
+0.900 | 6.7 |
|
GoodBotIpRange
claimed Bingbot but source IP not in Bingbot's published range
|
+0.550 | 0.0 |
|
Ip
IP appears normal: 52.167.144.xxx
|
-0.150 | 9.8 |
|
Behavioral
Request patterns appear normal
|
-0.150 | 0.3 |
|
TlsFingerprint
TLS connection appears normal
|
-0.150 | 0.0 |
|
AI
AI analysis: borderline case, monitoring
|
+0.000 | 11.4 |
|
Header
Browser UA without Accept-Language; deployment norm is low language rate (48 % over 372 samples)
|
+0.000 | 0.1 |
|
AiScraper
No AI scraper signals detected
|
+0.000 | 0.1 |
|
VerifiedBot
Verified Bingbot via ip_range
|
+0.000 | 0.1 |
|
SecurityTool
No security tools detected in User-Agent
|
+0.000 | 0.2 |
|
RequestHydrator
Request signals hydrated to sink
|
+0.000 | 0.0 |
|
Http2Fingerprint
HTTP/2 analysis complete (no anomalies detected)
|
+0.000 | 0.1 |
|
Http3Fingerprint
Connection uses HTTP/2 (not HTTP/3)
|
+0.000 | 0.0 |
|
TcpIpFingerprint
Network fingerprint analysis complete (no anomalies detected)
|
+0.000 | 0.1 |
|
HeaderCorrelation
Single signature per header profile
|
+0.000 | 0.1 |
|
TransportProtocol
Transport protocol analysis complete
|
+0.000 | 0.0 |
|
VerifiedBotInline
Verified Bingbot via published IP range
|
+0.000 | 0.1 |
|
FastPathReputation
No known patterns in reputation cache
|
+0.000 | 0.0 |
Signal Intelligence
h2
protocol
h2
request
protocol
HTTP/2
accept_encoding
gzip, br
risk
justification
Cryptographically verified good bot
tls
cipher
TLS_AES_256_GCM_SHA384
Version
TLSv1.3
version
TLSv1.3
Policy applied
Hit history
No sessions recorded yet.
Sessions are created when a visitor's activity gap exceeds 30 minutes.
Effective policy
Loading effective policy…
ASP.NET Pack — Auth events
JWKS reachable
Licensed
ASP.NET pack enabled
OTel Mesh — Traces
Fingerprint timeline
55cd5a710c0c442d865d8604a99cbd6d
0 observations
Span + log activity for this fingerprint, ordered by timestamp.
No timeline observations
OTel Mesh receiver online, but no observations seen for this fingerprint id (check W3C baggage propagation)
Signature:
EC1horjc1NLPGrXFh4rrYA
|
Processing: 30ms
|
Country: US
|
UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/[phone] Safari/537.36
|
First seen: 2026-07-13 15:43:44 UTC