Sign in
← Dashboard / Signature Detail
Overview Activity Visitors Countries Endpoints Sessions Threats Investigate
BR

Unknown

 Bot
Unknown
Policy: Silent Throttle
Probability
90 %
Confidence
68 %
Risk Profile
High
Threat
None
Hit Count
50
Last Seen
1d ago
Network Locale Headers Tool Transport Session Quality
Closest to
AdGuard

Fingerprint Profile

TLS Version
Unavailable
HTTP Protocol
HTTP/1.1
Protocol Client
Unavailable
TCP OS Hint
Unavailable
Fingerprint Integrity
Consistent
UA Consistency
Flagged
Headless Indicator
Clean
Datacenter IP
Clean
Endpoints Visited (50) Click to expand · stats unavailable
# Path
1 /3wu.php
2 /1254xx.php
3 /pbck.php
4 /wp-includes/Requests/library/
5 /sh3ll.php
6 /gecko.php
7 /aaa.php
8 /wp-admin/network/plugins.php
9 /xstelth.php
10 /wp-admin/css/colors/sunrise/
11 //wp-includes/assets/
12 //xwpg.php
13 /wp-load.php
14 /f35.php
15 /jp.php
16 /file15.php
17 /a2.php
18 /file6.php
19 /akcc.php
20 /file25.php
21 /eee.php
22 /bless.php
23 /xamp.php
24 /dr.php
25 /ccou.php
26 /aa2.php
27 /admin.php
28 /cfile.php
29 /file.php
30 /4PJcpMFsD8B.php
31 /file5.php
32 /pol.php
33 /als.php
34 //wp-includes/block-bindings/
35 /chosen.php
36 /wp-admin/css/colors/blue/
37 /hypo.php
38 /xxx.php
39 /simple.php
40 /wp-content/
41 /gettest.php
42 //cgi-bin/admin.php
43 /wp-includes/Text/Diff/Engine/about.php
44 //a1.php
45 //abcd.php
46 /wp.php
47 /wp-content/uploads/
48 //wp-includes/l10n/
49 /BDKR28WP.php
50 //wp-includes/css/dist/
Raw Requests (50) Click to expand
Time Method Path Status Prob Conf Risk Profile Action Time
12:24:18 GET /3wu.php 200 90 % 68 % VeryHigh Silent Throttle 11.7ms
12:24:14 GET /1254xx.php 200 90 % 68 % VeryHigh Silent Throttle 12.0ms
12:24:12 GET /pbck.php 200 90 % 68 % VeryHigh Silent Throttle 11.5ms
12:24:09 GET /wp-includes/Requests/library/ 200 90 % 68 % VeryHigh Silent Throttle 12.2ms
12:24:07 GET /sh3ll.php 200 90 % 68 % VeryHigh Silent Throttle 12.0ms
12:24:05 GET /gecko.php 200 90 % 68 % VeryHigh Silent Throttle 11.8ms
12:24:04 GET /aaa.php 200 90 % 68 % VeryHigh Silent Throttle 11.7ms
12:24:00 GET /wp-admin/network/plugins.php 200 90 % 68 % VeryHigh Silent Throttle 11.6ms
12:23:59 GET /xstelth.php 200 90 % 68 % VeryHigh Silent Throttle 11.7ms
12:23:55 GET /wp-admin/css/colors/sunrise/ 200 90 % 68 % VeryHigh Silent Throttle 12.4ms
12:23:52 GET //wp-includes/assets/ 200 90 % 68 % VeryHigh Silent Throttle 10.9ms
12:23:50 GET //xwpg.php 200 90 % 68 % VeryHigh Silent Throttle 12.1ms
12:23:48 GET /wp-load.php 200 90 % 68 % VeryHigh Silent Throttle 11.5ms
12:23:45 GET /f35.php 200 90 % 68 % VeryHigh Silent Throttle 11.8ms
12:23:43 GET /jp.php 200 90 % 68 % VeryHigh Silent Throttle 12.2ms
12:23:41 GET /file15.php 200 90 % 68 % VeryHigh Silent Throttle 13.6ms
12:23:37 GET /a2.php 200 90 % 68 % VeryHigh Silent Throttle 12.1ms
12:23:35 GET /file6.php 200 90 % 68 % VeryHigh Silent Throttle 11.5ms
12:23:32 GET /akcc.php 200 90 % 68 % VeryHigh Silent Throttle 12.3ms
12:23:30 GET /file25.php 200 90 % 68 % VeryHigh Silent Throttle 12.0ms
12:23:27 GET /eee.php 200 90 % 68 % VeryHigh Silent Throttle 11.9ms
12:23:23 GET /bless.php 200 90 % 68 % VeryHigh Silent Throttle 12.2ms
12:23:21 GET /xamp.php 200 90 % 68 % VeryHigh Silent Throttle 12.2ms
12:23:17 GET /dr.php 200 90 % 68 % VeryHigh Silent Throttle 12.3ms
12:23:13 GET /ccou.php 200 90 % 68 % VeryHigh Silent Throttle 11.1ms
12:23:11 GET /aa2.php 200 90 % 68 % VeryHigh Silent Throttle 11.6ms
12:23:09 GET /admin.php 200 90 % 68 % VeryHigh Silent Throttle 12.4ms
12:23:07 GET /cfile.php 200 90 % 68 % VeryHigh Silent Throttle 12.8ms
12:23:05 GET /file.php 200 90 % 68 % VeryHigh Silent Throttle 12.2ms
12:23:03 GET /4PJcpMFsD8B.php 200 90 % 68 % VeryHigh Silent Throttle 12.4ms
12:23:01 GET /file5.php 200 90 % 68 % VeryHigh Silent Throttle 12.0ms
12:22:58 GET /pol.php 200 90 % 68 % VeryHigh Silent Throttle 11.8ms
12:22:56 GET /als.php 200 90 % 68 % VeryHigh Silent Throttle 11.6ms
12:22:52 GET //wp-includes/block-bindings/ 200 90 % 68 % VeryHigh Silent Throttle 11.5ms
12:22:50 GET /chosen.php 200 90 % 68 % VeryHigh Silent Throttle 10.5ms
12:22:47 GET /wp-admin/css/colors/blue/ 200 90 % 68 % VeryHigh Silent Throttle 12.8ms
12:22:44 GET /hypo.php 200 90 % 68 % VeryHigh Silent Throttle 12.2ms
12:22:42 GET /xxx.php 200 90 % 68 % VeryHigh Silent Throttle 11.7ms
12:22:40 GET /simple.php 200 90 % 68 % VeryHigh Silent Throttle 12.2ms
12:22:37 GET /wp-content/ 200 90 % 68 % VeryHigh Silent Throttle 12.0ms
12:22:34 GET /gettest.php 200 90 % 68 % VeryHigh Silent Throttle 11.6ms
12:22:30 GET //cgi-bin/admin.php 200 90 % 68 % VeryHigh Silent Throttle 12.3ms
12:22:27 GET /wp-includes/Text/Diff/Engine/about.php 200 90 % 68 % VeryHigh Silent Throttle 12.2ms
12:22:24 GET //a1.php 200 90 % 68 % VeryHigh Silent Throttle 11.7ms
12:22:22 GET //abcd.php 200 90 % 68 % VeryHigh Silent Throttle 11.6ms
12:22:18 GET /wp.php 200 90 % 68 % VeryHigh Silent Throttle 12.3ms
12:22:16 GET /wp-content/uploads/ 200 90 % 68 % VeryHigh Silent Throttle 12.1ms
12:22:14 GET //wp-includes/l10n/ 200 90 % 68 % VeryHigh Silent Throttle 11.8ms
12:22:10 GET /BDKR28WP.php 200 90 % 68 % VeryHigh Silent Throttle 12.4ms
12:22:07 GET //wp-includes/css/dist/ 200 90 % 68 % VeryHigh Silent Throttle 12.6ms

Bot Probability & Confidence History

StyloBot Detection Overhead (ms)

Analysis

Unknown on /3wu.php - caught by Missing User-Agent header, Very few headers (1), Datacenter IP detected: Azure

Detection Signals

  • • Missing User-Agent header
  • • Very few headers (1)
  • • Datacenter IP detected: Azure
  • • Visiting many random URLs in no logical order (random scanning pattern)
  • • No cookies maintained across multiple requests

Detector Contributions (16 detectors)

Detector Confidence Delta Timing (ms)
HeuristicLate
Heuristic model (late): 98 % bot likelihood (284 features)
 +0.969 0.3
Behavioral
No referrer on subsequent request; No cookies maintained across multiple requests; Visiting many random URLs in no logical order (random scanning pattern); Timing anomaly: 0.0s vs 2.8±0.7s (z=3.8)
 +1.000 0.8
Heuristic
Heuristic model (early): 80 % bot likelihood (18 features)
 +0.600 0.0
UserAgent
Missing User-Agent header
 +0.800 0.0
Header
Missing Accept header; deployment norm is low Accept rate (25 % over 234 samples); Very few headers (1)
 +0.750 0.1
Ip
Datacenter IP detected: Azure
 +0.600 0.0
TlsFingerprint
Using HTTP instead of HTTPS (uncommon for modern browsers)
 +0.050 0.0
AI
AI analysis: borderline case, monitoring
 +0.000 10.2
AiScraper
No AI scraper signals detected
 +0.000 0.0
VerifiedBot
No known bot UA pattern
 +0.000 0.1
RequestHydrator
Request signals hydrated to sink
 +0.000 0.0
Http2Fingerprint
Using HTTP/1.1; environment norm is HTTP/1.1 (0 % HTTP/2 over 166 samples)
 +0.000 0.0
Http3Fingerprint
Connection uses HTTP/1.1 (not HTTP/3)
 +0.000 0.0
TcpIpFingerprint
Network fingerprint analysis complete (no anomalies detected)
 +0.000 0.0
TransportProtocol
Transport protocol analysis complete
 +0.000 0.0
FastPathReputation
No known patterns in reputation cache
 +0.000 0.0

Signal Intelligence

request

protocol HTTP/1.1

risk

justification Classified Unknown (probability 0.90, confidence 0.68)
friendly_pin_trace not-applicable:botType=Unknown,yamlType=null,botName=null

Policy applied

Hit history

No sessions recorded yet.

Sessions are created when a visitor's activity gap exceeds 30 minutes.

Effective policy
Loading effective policy…
ASP.NET Pack — Auth events
JWKS health
OK

reachable

Auth pipeline
JWKS reachable
License
Licensed

ASP.NET pack enabled

OTel Mesh — Traces

Fingerprint timeline

0 observations

Span + log activity for this fingerprint, ordered by timestamp.

No timeline observations

no fingerprint id supplied

Signature: e91adac5526fc9c5 | Processing: 12ms | Country: BR | First seen: 2026-07-13 12:22:07 UTC