Sign in
← Dashboard / Signature Detail
Overview Activity Visitors Countries Endpoints Sessions Threats Investigate
SG

PetalBot

 · PetalBot / Other Human
Policy: Allow
Probability
0 %
Confidence
99 %
Risk Profile
VeryLow
Threat
None
Hit Count
30
Last Seen
37s ago
Network Locale Headers Tool Transport Session Quality
Drift vs
53.1%

Fingerprint Profile

TLS Version
TLSv1.3
HTTP Protocol
HTTP/2
Protocol Client
TLS_AES_256_GCM_SHA384
TCP OS Hint
Unavailable
Fingerprint Integrity
Suspect
UA Consistency
Suspect
Headless Indicator
Low
Datacenter IP
Clean

Browser modes same browser, different modes. One row per persisted mode

Mode Observations Maturity Shift from baseline Last seen
bot-raw 206 206 0.00 (ua family, header order hash, cache control pragma) 03:11:07
1 mode across 206 observations. See composite browser-mode fingerprints.
Endpoints Visited (30) Click to expand · stats unavailable
# Path
1 /legal/security
2 /dashboard/signature/9MvYRV9uDxd_NEojiuUEtA
3 /dashboard/signature/FBf4qXvMVU1MlYeY3wMsWA
4 /dashboard/signature/iOiFRI2wb-k4X8maz1tzvw
5 /dashboard/insights/aspnet_pack_middleware_requests_total
6 /dashboard/signature/3efc2a211096a0ad
7 /about
8 /dashboard/entity/b287603dc61a407f
9 /dashboard/entity/57d7c965631d42f4
10 /dashboard/configuration
11 /dashboard/signature/OJWlQ86SBEgH6QMOG7dvog
12 /dashboard/entity/eb1bcdf0d8fc473d
13 /dashboard/traffic
14 /dashboard/entity/425dc0786dc14f6e
15 /dashboard/signature/8a777857a40deb5e
16 /dashboard/signature/555a7246bfb28ab7
17 /dashboard/signature/RToC6Fyfp9DeANtfcKt8_w
18 /dashboard/signature/f6dc99650bc86ecc
19 /dashboard/entity/a015e048e882468b
20 /dashboard/signature/Vv-Ig2mcnnqI4rCP1gX0jg
21 /dashboard/signature/b18594477c0b7f96
22 /dashboard/entity/1f382389b20b47d3
23 /dashboard/entity/31d14671a8344e82
24 /dashboard/entity/18c3876e44dc43a7
25 /fingerprint/curl
26 /dashboard/signature/bpIq9JV9FM391cwK1dK6Dg
27 /dashboard/signature/OJhFcxrW_fwgsrp3n7EQ4w
28 /_stylobot/signature/0Ib2lkAh2pJ_vz-SjixZFQ
29 /dashboard/entity/82e272cd628c44f2
30 /dashboard/signature/Xb52s-he6s72aRs_Hc4LFw
Raw Requests (30) Click to expand
Time Method Path Status Prob Conf Risk Profile Action Time
00:26:03 GET /legal/security 200 30 % 86 % Low Allow 615.7ms
23:46:30 GET /dashboard/signature/9MvYRV9uDxd_NEojiuUEtA 200 31 % 85 % Low Allow 13.4ms
23:45:07 GET /dashboard/signature/FBf4qXvMVU1MlYeY3wMsWA 200 31 % 85 % Low Allow 15.7ms
23:39:33 GET /dashboard/signature/iOiFRI2wb-k4X8maz1tzvw 200 31 % 85 % Low Allow 14.7ms
23:24:31 GET /dashboard/insights/aspnet_pack_middleware_requests_total 200 30 % 86 % Low Allow 883.6ms
22:26:31 GET /dashboard/signature/3efc2a211096a0ad 200 30 % 86 % Low Allow 230.9ms
21:48:13 GET /about 200 31 % 85 % Low Allow 15.3ms
21:46:49 GET /dashboard/entity/b287603dc61a407f 200 31 % 85 % Low Allow 13.1ms
21:45:26 GET /dashboard/entity/57d7c965631d42f4 200 31 % 85 % Low Allow 15.0ms
21:41:16 GET /dashboard/configuration 200 48 % 81 % Elevated Allow 838.6ms
17:37:49 GET /dashboard/signature/OJWlQ86SBEgH6QMOG7dvog 200 30 % 86 % Low Allow 1759.5ms
12:53:05 GET /dashboard/entity/eb1bcdf0d8fc473d 200 30 % 86 % Low Allow 247.2ms
12:34:37 GET /dashboard/traffic 200 31 % 85 % Low Allow 23.9ms
12:21:52 GET /dashboard/entity/425dc0786dc14f6e 200 31 % 85 % Low Allow 13.4ms
12:13:29 GET /dashboard/signature/8a777857a40deb5e 200 30 % 86 % Low Allow 223.8ms
12:03:44 GET /dashboard/signature/555a7246bfb28ab7 200 31 % 85 % Low Allow 13.5ms
12:02:21 GET /dashboard/signature/RToC6Fyfp9DeANtfcKt8_w 200 31 % 85 % Low Allow 15.4ms
11:42:21 GET /dashboard/signature/f6dc99650bc86ecc 200 30 % 86 % Low Allow 955.3ms
04:12:30 GET /dashboard/entity/a015e048e882468b 200 31 % 85 % Low Allow 14.2ms
04:11:07 GET /dashboard/signature/Vv-Ig2mcnnqI4rCP1gX0jg 200 30 % 86 % Low Allow 241.8ms
03:34:30 GET /dashboard/signature/b18594477c0b7f96 200 30 % 86 % Low Allow 319.3ms
01:35:48 GET /dashboard/entity/1f382389b20b47d3 200 30 % 86 % Low Allow 255.9ms
00:45:25 GET /dashboard/entity/31d14671a8344e82 200 30 % 86 % Low Allow 267.9ms
00:19:20 GET /dashboard/entity/18c3876e44dc43a7 200 31 % 85 % Low Allow 22.2ms
23:57:47 GET /fingerprint/curl 200 30 % 86 % Low Allow 758.2ms
18:00:22 GET /dashboard/signature/bpIq9JV9FM391cwK1dK6Dg 200 30 % 86 % Low Allow 358.1ms
17:02:43 GET /dashboard/signature/OJhFcxrW_fwgsrp3n7EQ4w 200 30 % 86 % Low Allow 59.2ms
15:25:19 GET /_stylobot/signature/0Ib2lkAh2pJ_vz-SjixZFQ 200 36 % 84 % Elevated Allow 15.5ms
15:10:53 GET /dashboard/entity/82e272cd628c44f2 200 36 % 84 % Elevated Allow 13.8ms
15:09:31 GET /dashboard/signature/Xb52s-he6s72aRs_Hc4LFw 200 35 % 84 % Elevated Allow 765.2ms

Bot Probability & Confidence History

StyloBot Detection Overhead (ms)

User Agent

Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (HTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)

Analysis

Real browser user (verified) - Ancient OS detected: Android 7 (extremely rare in legitim..., No header/UA inconsistencies detected

Detection Signals

  • • Ancient OS detected: Android 7 (extremely rare in legitimate traffic)
  • • No header/UA inconsistencies detected
  • • Request patterns appear normal
  • • Headers appear normal
  • • User-Agent appears normal

Detector Contributions (32 detectors)

Detector Confidence Delta Timing (ms)
Heuristic
Heuristic model (early): 74 % human likelihood (19 features)
 -0.478 0.1
HeuristicLate
Heuristic model (late): 61 % bot likelihood (302 features)
 +0.213 0.3
VersionAge
Ancient OS detected: Android 7 (extremely rare in legitimate traffic)
 +0.300 0.0
Ip
IP appears normal: 114.119.156.xxx
 -0.150 1.4
Header
Headers appear normal
 -0.150 0.1
UserAgent
User-Agent appears normal
 -0.150 0.5
Behavioral
Request patterns appear normal
 -0.150 0.1
Inconsistency
No header/UA inconsistencies detected
 -0.150 0.0
TlsFingerprint
TLS connection appears normal
 -0.150 0.0
VerifiedBot
rDNS mismatch: UA claims webmaster.petalsearch.com but rDNS is petalbot-114-119-156-223.petalsearch.com
 +0.250 601.8
AI
AI analysis: borderline case, monitoring
 +0.000 10.3
Llm
LLM detection disabled or unavailable
 +0.000 0.0
Intent
Session intent: browsing (threat=0.05, band=None)
 +0.000 0.4
AiScraper
No AI scraper signals detected
 +0.000 0.1
Similarity
No prior visitor signatures to compare against yet
 +0.000 0.0
StreamAbuse
Stream abuse check - non-streaming request
 +0.000 0.0
SecurityTool
No security tools detected in User-Agent
 +0.000 0.1
CookieBehavior
Too few requests for cookie analysis
 +0.000 0.0
ReputationBias
No learned reputation patterns matched
 +0.000 0.0
ClaimedIdentity
No profile for UA family 'PetalBot'
 +0.000 0.0
ContentSequence
Document hit; sequence reset at /legal/security
 +0.000 0.1
ProjectHoneypot
Skipped: ProjectHoneypot is disabled in configuration
 +0.000 0.0
ReactivePattern
No prior error events to analyze
 +0.000 0.0
RequestHydrator
Request signals hydrated to sink
 +0.000 0.0
Http2Fingerprint
HTTP/2 analysis complete (no anomalies detected)
 +0.000 0.0
Http3Fingerprint
Connection uses HTTP/2 (not HTTP/3)
 +0.000 0.0
ResponseBehavior
Response coordinator not configured
 +0.000 0.0
TcpIpFingerprint
Network fingerprint analysis complete (no anomalies detected)
 +0.000 0.0
HeaderCorrelation
Single signature per header profile
 +0.000 0.0
TransportProtocol
Transport protocol analysis complete
 +0.000 0.0
FastPathReputation
No known patterns in reputation cache
 +0.000 0.0
MultiLayerCorrelation
Cross-signal consistency check complete (not enough data to compare)
 +0.000 0.1

Signal Intelligence

h2

protocol h2

referrer

domain www.stylobot.net

request

protocol HTTP/2
accept_encoding gzip, br

risk

justification Classified Unknown (probability 0.30, confidence 0.86)
friendly_pin_trace not-applicable:botType=Unknown,yamlType=null,botName=null

tls

cipher TLS_AES_256_GCM_SHA384
Version TLSv1.3
version TLSv1.3

Policy applied

Hit history

No sessions recorded yet.

Sessions are created when a visitor's activity gap exceeds 30 minutes.

Effective policy
Loading effective policy…
ASP.NET Pack — Auth events
JWKS health
OK

reachable

Auth pipeline
JWKS reachable
License
Licensed

ASP.NET pack enabled

OTel Mesh — Traces

Fingerprint timeline

c7892c908fc9463e9ec1f0692fed044b 0 observations

Span + log activity for this fingerprint, ordered by timestamp.

No timeline observations

OTel Mesh receiver online, but no observations seen for this fingerprint id (check W3C baggage propagation)

Signature: abFzg2W7FqcX9_1W31e3IA | Processing: 616ms | Country: SG | UA: Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (HTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot) | First seen: 2026-07-13 15:09:31 UTC