← Dashboard / Signature Detail
Overview Activity Visitors Countries Endpoints Sessions Threats Investigate
GB

stylo.bot

 · stylo.bot Bot
Scraper
Policy: Silent Throttle
Probability
100 %
Confidence
94 %
Risk Profile
VeryHigh
Threat
None
Hit Count
50
Last Seen
20s ago

Analysis

stylo.bot on /wp-admin/install... - caught by Honeypot path matched: /wp-admin/install.php [wordpress-a..., Tier 2 honeypot hit: /wp-admin/install.php matched /wp-admin, Contains bot/crawler keyword

Detection Signals

  • ↑ Heuristic model (late): 98 % bot likelihood (336 features) 2.40
  • ↑ Honeypot path matched: /wp-admin/install.php [wordpress-admin] [pack: wordpress-5.9] 1.80
  • ↑ Tier 2 honeypot hit: /wp-admin/install.php matched /wp-admin 1.12
  • ↑ Contains bot/crawler keyword 0.90
  • ↑ Heuristic model (early): 69 % bot likelihood (20 features) 0.77
  • ↑ Datacenter IP detected: Cloud Provider 0.72
Network Locale Headers Tool Transport Session Quality
Drift vs
48.5%

Fingerprint Profile

TLS Version
Unavailable
HTTP Protocol
HTTP/1.1
Protocol Client
Unavailable
TCP OS Hint
Unavailable
Fingerprint Integrity
Consistent
UA Consistency
Flagged
Headless Indicator
Low
Datacenter IP
Clean

Browser modes same browser, different modes. One row per persisted mode

Mode Observations Maturity Shift from baseline Last seen
bot-raw 2448 2448 0.00 (upgrade insecure requests, ua family, header order hash) 17:13:51
sub-resource 2 2 0.54 (ua family, header order hash, header case pattern) 00:14:54
navigation 7 7 0.49 (upgrade insecure requests, ua family, header order hash) 00:14:28
3 modes across 2457 observations. See composite browser-mode fingerprints.
Endpoints Visited (1) Click to expand · stats unavailable
# Path
1 /wp-admin/install.php
Raw Requests (50) Click to expand
Time Method Path Status Prob Conf Risk Profile Action Time
14:33:15 GET /wp-admin/install.php 404 100 % 50 % VeryHigh Silent Throttle 329.4ms
12:49:24 GET /wp-admin/install.php 400 100 % 50 % VeryHigh Silent Throttle 34.4ms
11:03:29 GET /wp-admin/install.php 404 100 % 50 % VeryHigh Silent Throttle 41.7ms
09:19:49 GET /wp-admin/install.php 404 100 % 50 % VeryHigh Silent Throttle 37.7ms
05:32:31 GET /wp-admin/install.php 404 100 % 50 % VeryHigh Silent Throttle 26.5ms
03:46:50 GET /wp-admin/install.php 404 100 % 50 % VeryHigh Silent Throttle 25.2ms
02:04:50 GET /wp-admin/install.php 404 100 % 50 % VeryHigh Silent Throttle 36.2ms
00:23:13 GET /wp-admin/install.php 404 100 % 50 % VeryHigh Silent Throttle 37.1ms
22:38:04 GET /wp-admin/install.php 404 100 % 50 % VeryHigh Silent Throttle 38.0ms
15:38:05 GET /wp-admin/install.php 404 100 % 50 % VeryHigh Silent Throttle 37.3ms
07:32:11 GET /wp-admin/install.php 404 100 % 50 % VeryHigh Silent Throttle 11.7ms
07:31:41 GET /wp-admin/install.php 404 100 % 50 % VeryHigh Silent Throttle 11.6ms
07:29:50 GET /wp-admin/install.php 404 100 % 50 % VeryHigh Silent Throttle 25.4ms
02:19:07 GET /wp-admin/install.php 404 100 % 50 % VeryHigh Silent Throttle 47.1ms
01:07:01 GET /wp-admin/install.php 404 100 % 50 % VeryHigh Silent Throttle 47.2ms
23:21:15 GET /wp-admin/install.php 404 100 % 50 % VeryHigh Silent Throttle 47.6ms
21:38:39 GET /wp-admin/install.php 404 100 % 50 % VeryHigh Silent Throttle 39.4ms
19:51:46 GET /wp-admin/install.php 404 100 % 50 % VeryHigh Silent Throttle 44.0ms
17:57:28 GET /wp-admin/install.php 404 100 % 50 % VeryHigh Silent Throttle 37.3ms
16:10:08 GET /wp-admin/install.php 404 100 % 50 % VeryHigh Silent Throttle 38.8ms
14:30:11 GET /wp-admin/install.php 404 100 % 50 % VeryHigh Silent Throttle 45.1ms
12:45:56 GET /wp-admin/install.php 404 100 % 50 % VeryHigh Silent Throttle 36.6ms
09:19:43 GET /wp-admin/install.php 404 100 % 50 % VeryHigh Silent Throttle 13.1ms
08:19:57 GET /wp-admin/install.php 404 100 % 50 % VeryHigh Silent Throttle 39.6ms
06:35:39 GET /wp-admin/install.php 404 100 % 50 % VeryHigh Silent Throttle 36.1ms
04:54:38 GET /wp-admin/install.php 404 100 % 50 % VeryHigh Silent Throttle 40.9ms
03:17:43 GET /wp-admin/install.php 404 100 % 50 % VeryHigh Silent Throttle 37.4ms
01:35:22 GET /wp-admin/install.php 404 100 % 50 % VeryHigh Silent Throttle 35.2ms
23:54:36 GET /wp-admin/install.php 400 100 % 50 % VeryHigh Silent Throttle 37.0ms
22:09:36 GET /wp-admin/install.php 404 100 % 50 % VeryHigh Silent Throttle 44.3ms
20:29:50 GET /wp-admin/install.php 404 100 % 50 % VeryHigh Silent Throttle 40.5ms
18:45:36 GET /wp-admin/install.php 404 100 % 50 % VeryHigh Silent Throttle 36.2ms
17:02:40 GET /wp-admin/install.php 404 100 % 50 % VeryHigh Silent Throttle 40.0ms
15:18:12 GET /wp-admin/install.php 404 100 % 50 % VeryHigh Silent Throttle 38.0ms
10:04:35 GET /wp-admin/install.php 404 100 % 50 % VeryHigh Silent Throttle 227.8ms
08:22:10 GET /wp-admin/install.php 404 100 % 50 % VeryHigh Silent Throttle 37.9ms
06:39:25 GET /wp-admin/install.php 404 100 % 50 % VeryHigh Silent Throttle 38.1ms
04:24:21 GET /wp-admin/install.php 404 100 % 50 % VeryHigh Silent Throttle 35.3ms
02:43:28 GET /wp-admin/install.php 404 100 % 50 % VeryHigh Silent Throttle 35.0ms
23:18:38 GET /wp-admin/install.php 404 100 % 50 % VeryHigh Silent Throttle 38.1ms
21:38:43 GET /wp-admin/install.php 404 100 % 50 % VeryHigh Silent Throttle 43.7ms
19:57:04 GET /wp-admin/install.php 404 100 % 50 % VeryHigh Silent Throttle 37.9ms
18:06:36 GET /wp-admin/install.php 404 100 % 50 % VeryHigh Silent Throttle 44.8ms
16:25:06 GET /wp-admin/install.php 404 100 % 50 % VeryHigh Silent Throttle 40.0ms
14:40:00 GET /wp-admin/install.php 404 100 % 50 % VeryHigh Silent Throttle 41.6ms
12:48:20 GET /wp-admin/install.php 404 100 % 50 % VeryHigh Silent Throttle 38.7ms
11:04:03 GET /wp-admin/install.php 404 100 % 50 % VeryHigh Silent Throttle 42.0ms
09:20:09 GET /wp-admin/install.php 404 100 % 50 % VeryHigh Silent Throttle 25.5ms
07:38:59 GET /wp-admin/install.php 404 100 % 50 % VeryHigh Silent Throttle 26.0ms
04:15:30 GET /wp-admin/install.php 404 100 % 50 % VeryHigh Silent Throttle 25.8ms

Bot Probability & Confidence History

StyloBot Detection Overhead (ms)

User Agent

http://stylo.bot/wp-admin/install.php?step=1

Detector Contributions (21 detectors)

Detector Confidence Delta Timing (ms)
HeuristicLate
Heuristic model (late): 98 % bot likelihood (336 features)
 +0.959 0.3
CveProbe
Honeypot path matched: /wp-admin/install.php [wordpress-admin] [pack: wordpress-5.9]
 +0.900 0.0
HoneypotLink
Tier 2 honeypot hit: /wp-admin/install.php matched /wp-admin
 +0.750 0.1
UserAgent
Contains bot/crawler keyword
 +0.600 0.4
Heuristic
Heuristic model (early): 69 % bot likelihood (20 features)
 +0.384 0.1
Ip
Datacenter IP detected: Cloud Provider
 +0.600 1.3
Header
Headers appear normal
 -0.150 0.1
Behavioral
Request patterns appear normal
 -0.150 0.2
Http2Fingerprint
Using HTTP/1.1 instead of HTTP/2 (HTTP/2 rate: 0 % over 14 samples)
 +0.050 0.0
TlsFingerprint
Using HTTP instead of HTTPS (uncommon for modern browsers)
 +0.050 0.0
AI
AI analysis: borderline case, monitoring
 +0.000 10.2
AiScraper
No AI scraper signals detected
 +0.000 0.1
VerifiedBot
No known bot UA pattern
 +0.000 316.5
SecurityTool
No security tools detected in User-Agent
 +0.000 0.1
ContentSequence
Document hit; sequence reset at /wp-admin/install.php
 +0.000 0.1
RequestHydrator
Request signals hydrated to sink
 +0.000 0.0
Http3Fingerprint
Connection uses HTTP/1.1 (not HTTP/3)
 +0.000 0.0
TcpIpFingerprint
Network fingerprint analysis complete (no anomalies detected)
 +0.000 0.0
HeaderCorrelation
Single signature per header profile
 +0.000 0.0
TransportProtocol
Transport protocol analysis complete
 +0.000 0.0
FastPathReputation
No known patterns in reputation cache
 +0.000 0.0

Signal Intelligence

request

protocol HTTP/1.1
accept_encoding gzip

risk

justification Classified Scraper (probability 1.00, confidence 0.50)
friendly_pin_trace not-applicable:botType=Scraper,yamlType=null,botName=null

Policy applied

Hit history

No sessions recorded yet.

Sessions are created when a visitor's activity gap exceeds 30 minutes.

Effective policy
Loading effective policy…
ASP.NET Pack — Auth health
JWKS health
OK

reachable

Auth pipeline
JWKS reachable
License
Licensed

ASP.NET pack enabled

OTel Mesh — Traces

Fingerprint timeline

fbb975cff7f548979ac34955b2034d9a 0 observations

Span + log activity for this fingerprint, ordered by timestamp.

No timeline observations

OTel Mesh receiver online, but no observations seen for this fingerprint id (check W3C baggage propagation)

Operator actions

Operator actions

Block/Allow writes a scoped policy rule for this fingerprint — a policy action, applied via the live policy pipe. It is never a skip-detection bypass.

Signature: -xN4CM9_AWLfucM5aLjkeg | Processing: 329ms | Country: GB | UA: http://stylo.bot/wp-admin/install.php?step=1 | First seen: 2026-07-20 04:15:30 UTC