← Dashboard / Signature Detail
Overview Activity Visitors Countries Endpoints Sessions Threats Investigate
GB

DeepseekBot deepseek.com

 · DeepSeekBot 1.0 Bot
AiBot
Policy: rate-limit-ai
Probability
100 %
Confidence
98 %
Risk Profile
VeryHigh
Threat
None
Hit Count
19
Last Seen
1m ago

Analysis

DeepseekBot deepseek.com on /dashboard/signat... - caught by Known AI training bot: DeepseekBot (DeepSeek), Known bot pattern: DeepseekBot, Missing Accept header

Detection Signals

  • ↑ Heuristic model (late): 97 % bot likelihood (301 features) 2.35
  • ↑ Known AI training bot: DeepseekBot (DeepSeek) 1.90
  • ↑ Known bot pattern: DeepseekBot 1.35
  • ↑ Heuristic model (early): 63 % bot likelihood (17 features) 0.52
  • ↑ Missing Accept header 0.43
  • ↓ IP appears normal: 23.161.169.xxx 0.15
Network Locale Headers Tool Transport Session Quality
Drift vs
28.3%

Fingerprint Profile

TLS Version
TLSv1.3
HTTP Protocol
HTTP/2
Protocol Client
TLS_AES_256_GCM_SHA384
TCP OS Hint
Unavailable
Fingerprint Integrity
Suspect
UA Consistency
Flagged
Headless Indicator
Low
Datacenter IP
Clean

Browser modes same browser, different modes. One row per persisted mode

Mode Observations Maturity Shift from baseline Last seen
bot-raw 4635 4635 0.01 (ua family, priority, sec fetch pattern) 16:30:15
signalr-negotiate 20 20 0.53 (ua family, priority, sec ch ua brands ordered) 17:21:20
sub-resource 38 38 0.50 (priority, ua family, ip subnet) 14:26:09
navigation 27 27 0.62 (ua family, upgrade insecure requests, custom header signature) 11:36:09
websocket-upgrade 3 3 0.48 (ua family, cache control pragma, header order hash) 20:27:40
5 modes across 4723 observations. See composite browser-mode fingerprints.
Endpoints Visited (18) Click to expand · stats unavailable
# Path
1 /dashboard/signature/QMzTKXgT7dqFJtc_XTTGpA
2 /dashboard/entity/23aaa88e7c84471c
3 /account.json
4 /actuator/env
5 /shared/.env
6 /resources/docker/.env
7 /api/.env
8 /root/.env
9 /dashboard/signature/idUpBrzzw5YJuYcsvsrhmA
10 /dashboard/entity/9df6c783fa534b7d
11 /docs
12 /dashboard
13 /server/config/.env
14 /restapi/.env
15 /.env.local
16 /.env
17 /.git/HEAD
18 /.git/config
Raw Requests (19) Click to expand
Time Method Path Status Prob Conf Risk Profile Action Time
23:16:40 GET /dashboard/signature/QMzTKXgT7dqFJtc_XTTGpA 200 100 % 50 % VeryHigh rate-limit-ai 11.1ms
23:16:40 GET /dashboard/entity/23aaa88e7c84471c 302 100 % 50 % VeryHigh rate-limit-ai 10.8ms
23:16:23 GET /account.json 404 100 % 50 % VeryHigh rate-limit-ai 10.9ms
23:16:23 GET /actuator/env 404 100 % 50 % VeryHigh rate-limit-ai 11.6ms
23:16:23 GET /shared/.env 404 100 % 100 % VeryHigh rate-limit-ai 11.0ms
23:16:23 GET /resources/docker/.env 404 100 % 100 % VeryHigh rate-limit-ai 13.0ms
23:16:23 GET /api/.env 404 100 % 100 % VeryHigh rate-limit-ai 12.7ms
23:16:23 GET /root/.env 404 100 % 100 % VeryHigh rate-limit-ai 11.9ms
21:34:04 GET /dashboard/signature/idUpBrzzw5YJuYcsvsrhmA 200 100 % 50 % VeryHigh rate-limit-ai 10.4ms
21:34:03 GET /dashboard/entity/9df6c783fa534b7d 302 100 % 50 % VeryHigh rate-limit-ai 11.1ms
21:34:02 GET /docs 200 100 % 50 % VeryHigh rate-limit-ai 11.8ms
21:34:02 GET /dashboard 302 100 % 50 % VeryHigh rate-limit-ai 11.1ms
21:33:53 GET /server/config/.env 404 100 % 100 % VeryHigh rate-limit-ai 11.6ms
21:33:53 GET /actuator/env 404 100 % 50 % VeryHigh rate-limit-ai 11.3ms
21:33:53 GET /restapi/.env 404 100 % 100 % VeryHigh rate-limit-ai 11.9ms
21:33:53 GET /.env.local 404 100 % 100 % VeryHigh rate-limit-ai 12.2ms
21:33:52 GET /.env 404 100 % 100 % VeryHigh rate-limit-ai 12.2ms
21:33:51 GET /.git/HEAD 404 100 % 100 % VeryHigh rate-limit-ai 242.4ms
21:33:51 GET /.git/config 404 100 % 100 % VeryHigh rate-limit-ai 243.5ms

Bot Probability & Confidence History

StyloBot Detection Overhead (ms)

User Agent

Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/bot)

Detector Contributions (18 detectors)

Detector Confidence Delta Timing (ms)
HeuristicLate
Heuristic model (late): 97 % bot likelihood (301 features)
 +0.942 0.3
AiScraper
Known AI training bot: DeepseekBot (DeepSeek)
 +0.950 0.0
UserAgent
Known bot pattern: DeepseekBot
 +0.900 0.1
Heuristic
Heuristic model (early): 63 % bot likelihood (17 features)
 +0.258 0.0
Header
Missing Accept header
 +0.429 0.0
Ip
IP appears normal: 23.161.169.xxx
 -0.150 0.0
Behavioral
Request patterns appear normal
 -0.150 0.1
TlsFingerprint
TLS connection appears normal
 -0.150 0.0
AI
AI analysis: borderline case, monitoring
 +0.000 10.2
VerifiedBot
No known bot UA pattern
 +0.000 0.0
SecurityTool
No security tools detected in User-Agent
 +0.000 0.0
RequestHydrator
Request signals hydrated to sink
 +0.000 0.0
Http2Fingerprint
HTTP/2 analysis complete (no anomalies detected)
 +0.000 0.0
Http3Fingerprint
Connection uses HTTP/2 (not HTTP/3)
 +0.000 0.0
TcpIpFingerprint
Network fingerprint analysis complete (no anomalies detected)
 +0.000 0.0
HeaderCorrelation
Single signature per header profile
 +0.000 0.0
TransportProtocol
Transport protocol analysis complete
 +0.000 0.0
FastPathReputation
No known patterns in reputation cache
 +0.000 0.0

Signal Intelligence

h2

protocol h2

referrer

domain www.stylobot.net

request

protocol HTTP/2
accept_encoding gzip, br

risk

justification Classified AiBot (probability 1.00, confidence 0.50)
friendly_pin_trace not-applicable:botType=AiBot,yamlType=AiBot,botName=DeepseekBot deepseek.com

tls

cipher TLS_AES_256_GCM_SHA384
Version TLSv1.3
version TLSv1.3

Policy applied

Hit history

No sessions recorded yet.

Sessions are created when a visitor's activity gap exceeds 30 minutes.

Effective policy
Loading effective policy…
ASP.NET Pack — Auth health
JWKS health
OK

reachable

Auth pipeline
JWKS reachable
License
Licensed

ASP.NET pack enabled

OTel Mesh — Traces

Fingerprint timeline

5a36b9e9b2994562b9871ac69b1d975f 0 observations

Span + log activity for this fingerprint, ordered by timestamp.

No timeline observations

OTel Mesh receiver online, but no observations seen for this fingerprint id (check W3C baggage propagation)

Operator actions

Operator actions

Block/Allow writes a scoped policy rule for this fingerprint — a policy action, applied via the live policy pipe. It is never a skip-detection bypass.

Signature: iQy7DMmAKqGbviTZC9RYfQ | Processing: 11ms | Country: GB | UA: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/bot) | First seen: 2026-07-22 21:33:51 UTC