Sign in
← Dashboard / Signature Detail
US

Bingbot

· bingbot 2.0 Human
SearchEngine
Policy: Allow
Probability
0 %
Confidence
99 %
Risk Profile
VeryLow
Threat
None
Hit Count
3
Last Seen
31s ago
Network Locale Headers Tool Transport Session Quality
Drifted
Bingbot HTTrack
Drift vs
46.0%

Fingerprint Profile

TLS Version
TLSv1.3
HTTP Protocol
HTTP/2
Protocol Client
TLS_AES_256_GCM_SHA384
TCP OS Hint
Unavailable
Fingerprint Integrity
Suspect
UA Consistency
Flagged
Headless Indicator
Low
Datacenter IP
Clean

Browser modes same browser, different modes. One row per persisted mode

Mode Observations Maturity Shift from baseline Last seen
bot-raw 1104 1104 0.09 (ua family, priority, header case pattern) 08:00:46
websocket-upgrade 36 36 0.32 (cache control pragma, header order hash, header case pattern) 05:49:50
navigation 32 32 0.62 (ua family, upgrade insecure requests, priority) 05:33:32
signalr-negotiate 38 38 0.51 (ua family, priority, header order hash) 05:26:05
sub-resource 141 141 0.49 (ua family, priority, header case pattern) 05:25:35
5 modes across 1351 observations. See composite browser-mode fingerprints.
Endpoints Visited (3) Click to expand · stats unavailable
# Path
1 /dashboard/signature/f262c87bbe77e185
2 /dashboard/signature/101f44209dba6cd0
3 /dashboard/signature/YKmorvOhIa5E9r4QG4HRXw
Raw Requests (3) Click to expand
Time Method Path Status Prob Conf Risk Profile Action Time
06:56:25 GET /dashboard/signature/f262c87bbe77e185 200 100 % 100 % VeryLow Allow 14.0ms
06:45:18 GET /dashboard/signature/101f44209dba6cd0 200 100 % 100 % VeryLow Allow 11.6ms
06:44:18 GET /dashboard/signature/YKmorvOhIa5E9r4QG4HRXw 200 100 % 100 % VeryLow Allow 13.4ms

Bot Probability & Confidence History

StyloBot Detection Overhead (ms)

User Agent

Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/[phone] Safari/537.36

Analysis

Bingbot on /dashboard/signat... - caught by Known bot UA pattern: Bingbot, claimed Bingbot but source IP not in Bingbot's published ..., Request patterns appear normal

Detection Signals

  • Known bot UA pattern: Bingbot
  • claimed Bingbot but source IP not in Bingbot's published range
  • Request patterns appear normal
  • IP appears normal: 52.167.144.xxx
  • TLS connection appears normal

Detector Contributions (20 detectors)

Detector Confidence Delta Timing (ms)
HeuristicLate
Heuristic model (late): 99 % bot likelihood (315 features)
+0.975 0.4
Heuristic
Heuristic model (early): 85 % bot likelihood (23 features)
+0.692 0.1
UserAgent
Known bot UA pattern: Bingbot
+0.900 0.3
GoodBotIpRange
claimed Bingbot but source IP not in Bingbot's published range
+0.550 0.0
Ip
IP appears normal: 52.167.144.xxx
-0.150 2.0
Behavioral
Request patterns appear normal
-0.150 0.2
TlsFingerprint
TLS connection appears normal
-0.150 0.0
AI
AI analysis: borderline case, monitoring
+0.000 10.4
Header
Browser UA without Accept-Language; deployment norm is low language rate (48 % over 374 samples)
+0.000 0.1
AiScraper
No AI scraper signals detected
+0.000 0.1
VerifiedBot
Verified Bingbot via ip_range
+0.000 0.1
SecurityTool
No security tools detected in User-Agent
+0.000 0.1
RequestHydrator
Request signals hydrated to sink
+0.000 0.0
Http2Fingerprint
HTTP/2 analysis complete (no anomalies detected)
+0.000 0.1
Http3Fingerprint
Connection uses HTTP/2 (not HTTP/3)
+0.000 0.0
TcpIpFingerprint
Network fingerprint analysis complete (no anomalies detected)
+0.000 0.0
HeaderCorrelation
Single signature per header profile
+0.000 0.0
TransportProtocol
Transport protocol analysis complete
+0.000 0.0
VerifiedBotInline
Verified Bingbot via published IP range
+0.000 0.2
FastPathReputation
No known patterns in reputation cache
+0.000 0.0

Signal Intelligence

h2

protocol h2

request

protocol HTTP/2
accept_encoding gzip, br

risk

justification Cryptographically verified good bot

tls

cipher TLS_AES_256_GCM_SHA384
Version TLSv1.3
version TLSv1.3

Policy applied

Hit history

No sessions recorded yet.

Sessions are created when a visitor's activity gap exceeds 30 minutes.

Effective policy
Loading effective policy…
ASP.NET Pack — Auth events
JWKS health
OK

reachable

Auth pipeline
JWKS reachable
License
Licensed

ASP.NET pack enabled

OTel Mesh — Traces

Fingerprint timeline

55cd5a710c0c442d865d8604a99cbd6d 0 observations

Span + log activity for this fingerprint, ordered by timestamp.

No timeline observations

OTel Mesh receiver online, but no observations seen for this fingerprint id (check W3C baggage propagation)

Signature: pWahV-vqtk5WSgTGyFxe8Q | Processing: 14ms | Country: US | UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/[phone] Safari/537.36 | First seen: 2026-07-15 06:44:18 UTC