You: Bot 100.0% Low
← Dashboard / Signature Detail
US

ClaudeBot

 · ClaudeBot 1.0 Bot
AiBot
Policy: rate-limit-ai
Probability
100 %
Confidence
91 %
Risk Profile
VeryHigh
Threat
None
Hit Count
50
Last Seen
now

Analysis

ClaudeBot on /dashboard/signat... - caught by Known AI training bot: ClaudeBot (Anthropic), Known bot pattern: ClaudeBot, claimed ClaudeBot but source IP not in ClaudeBot's publis...

Detection Signals

  • ↑ Heuristic model (late): 98 % bot likelihood (308 features) 2.39
  • ↑ Known AI training bot: ClaudeBot (Anthropic) 1.90
  • ↑ Known bot pattern: ClaudeBot 1.35
  • ↑ Heuristic model (early): 66 % bot likelihood (18 features) 0.64
  • ↑ claimed ClaudeBot but source IP not in ClaudeBot's published range 0.47
  • ↑ Request patterns appear normal; Visiting many random URLs in no logical order (random scanning pattern) 0.30
Network Locale Headers Tool Transport Session Quality
Drifted
OAI-SearchBot → ClaudeBot
Drift vs
39.8%

Fingerprint Profile

TLS Version
TLSv1.3
HTTP Protocol
HTTP/2
Protocol Client
TLS_AES_256_GCM_SHA384
TCP OS Hint
Unavailable
Fingerprint Integrity
Suspect
UA Consistency
Flagged
Headless Indicator
Low
Datacenter IP
Clean

Browser modes same browser, different modes. One row per persisted mode

Mode Observations Maturity Shift from baseline Last seen
bot-raw 1997 1997 0.00 (ua family, ip subnet, header order hash) 19:09:58
1 mode across 1997 observations. See composite browser-mode fingerprints.
Endpoints Visited (49) Click to expand · stats unavailable
# Path
1 /dashboard/signature/j9VPBfydor21ACV4UgGfWQ
2 /dashboard/entity/bcbcfdfaaece4ed6
3 /dashboard/domains/shape
4 /_content/Mostlylucid.BotDetection.UI/js/sb-chartlet.js
5 /_content/Mostlylucid.BotDetection.UI/flags/ch.svg
6 /dashboard/signature/GSbNMbUbYFJRP9mBbJ90Mg
7 /dashboard/entity/3f045f8ff84f4a0e
8 /dashboard/traffic
9 /_content/Mostlylucid.BotDetection.UI/css/sb-policy-stack-card.css
10 /dashboard/settings/config
11 /dashboard/endpoint/GET/
12 /dashboard/site
13 /docs/feedback-feature
14 /docs/why-startup
15 /docs/why-enterprise
16 /docs/why-single-site
17 /_content/Mostlylucid.BotDetection.UI/css/sb-chartlet.css
18 /cookies
19 /docs/running-locally
20 /legal/sub-processors
21 /legal/dpa
22 /docs/how-stylobot-works
23 /site.webmanifest
24 /enterprise
25 /detectors
26 /contact
27 /privacy
28 /pricing
29 /dashboard
30 /about
31 /refund
32 /open-source
33 /get-started
34 /getting-started
35 /terms
36 /docs
37 /features
38 /dashboard/signature/znS9cJdBOpIMp_NvXPrmvg
39 /dashboard/signature/7X54mTAxcUg9tEpqqRAd6w
40 /dashboard/entity/8bff5a757af6412e
41 /dashboard/entity/909a7721c3f043fc
42 /dashboard/signature/aB4WzX1MtE1g9xG0lTt1aw
43 /dashboard/entity/22e98c1e158c4469
44 /dashboard/signature/v5siEtWFJYaDewUhh_jjmw
45 /dashboard/entity/567ce0e51f824e5f
46 /dashboard/signature/AuXH-LYs_9_IigjBbwpR5A
47 /dashboard/signature/_K_HAoRNz5_gzyHyYy2o0w
48 /dashboard/entity/b640b3897eac408a
49 /dashboard/entity/b21296d87dd84f44
Raw Requests (50) Click to expand
Time Method Path Status Prob Conf Risk Profile Action Time
19:05:59 GET /dashboard/signature/j9VPBfydor21ACV4UgGfWQ 200 100 % 50 % VeryHigh rate-limit-ai 11.8ms
19:05:58 GET /dashboard/entity/bcbcfdfaaece4ed6 302 100 % 50 % VeryHigh rate-limit-ai 11.4ms
19:05:57 GET /dashboard/domains/shape 200 100 % 50 % VeryHigh rate-limit-ai 12.0ms
19:05:57 GET /_content/Mostlylucid.BotDetection.UI/js/sb-chartlet.js 200 100 % 50 % VeryHigh rate-limit-ai 11.3ms
19:05:56 GET /_content/Mostlylucid.BotDetection.UI/flags/ch.svg 200 100 % 50 % VeryHigh rate-limit-ai 10.4ms
19:05:56 GET /dashboard/signature/GSbNMbUbYFJRP9mBbJ90Mg 200 100 % 50 % VeryHigh rate-limit-ai 11.5ms
19:05:55 GET /dashboard/entity/3f045f8ff84f4a0e 302 100 % 50 % VeryHigh rate-limit-ai 12.2ms
19:05:52 GET /dashboard/traffic 200 100 % 50 % VeryHigh rate-limit-ai 11.5ms
19:05:52 GET /_content/Mostlylucid.BotDetection.UI/css/sb-policy-stack-card.css 200 100 % 50 % VeryHigh rate-limit-ai 13.4ms
19:05:51 GET /dashboard/settings/config 200 100 % 50 % VeryHigh rate-limit-ai 13.4ms
19:05:49 GET /dashboard/endpoint/GET/ 200 100 % 50 % VeryHigh rate-limit-ai 12.2ms
19:05:49 GET /dashboard/site 200 100 % 50 % VeryHigh rate-limit-ai 11.5ms
19:04:59 GET /docs/feedback-feature 200 100 % 50 % VeryHigh rate-limit-ai 11.0ms
19:04:59 GET /docs/why-startup 200 100 % 50 % VeryHigh rate-limit-ai 10.8ms
19:04:59 GET /docs/why-enterprise 200 100 % 50 % VeryHigh rate-limit-ai 11.1ms
19:04:58 GET /docs/why-single-site 200 100 % 50 % VeryHigh rate-limit-ai 11.1ms
19:04:58 GET /_content/Mostlylucid.BotDetection.UI/css/sb-chartlet.css 200 100 % 50 % VeryHigh rate-limit-ai 12.7ms
18:08:57 GET /cookies 200 100 % 50 % VeryHigh rate-limit-ai 11.9ms
18:08:56 GET /docs/running-locally 200 100 % 50 % VeryHigh rate-limit-ai 11.6ms
18:08:53 GET /legal/sub-processors 200 100 % 50 % VeryHigh rate-limit-ai 11.5ms
18:08:53 GET /legal/dpa 200 100 % 50 % VeryHigh rate-limit-ai 10.7ms
18:08:28 GET /docs/how-stylobot-works 200 100 % 50 % VeryHigh rate-limit-ai 13.5ms
18:08:28 GET /site.webmanifest 200 100 % 50 % VeryHigh rate-limit-ai 12.6ms
18:08:19 GET /enterprise 200 100 % 50 % VeryHigh rate-limit-ai 11.8ms
18:08:19 GET /detectors 200 100 % 50 % VeryHigh rate-limit-ai 13.3ms
18:08:08 GET /contact 200 100 % 50 % VeryHigh rate-limit-ai 11.7ms
18:08:08 GET /privacy 200 100 % 50 % VeryHigh rate-limit-ai 13.4ms
18:07:21 GET /pricing 200 100 % 50 % VeryHigh rate-limit-ai 11.6ms
18:07:21 GET /dashboard/traffic 200 100 % 50 % VeryHigh rate-limit-ai 11.2ms
18:07:20 GET /dashboard 302 100 % 50 % VeryHigh rate-limit-ai 11.6ms
18:07:03 GET /about 200 100 % 50 % VeryHigh rate-limit-ai 11.8ms
18:07:02 GET /refund 200 100 % 50 % VeryHigh rate-limit-ai 12.7ms
18:06:38 GET /open-source 200 100 % 50 % VeryHigh rate-limit-ai 10.8ms
18:06:38 GET /get-started 200 100 % 50 % VeryHigh rate-limit-ai 10.8ms
18:06:25 GET /getting-started 200 100 % 50 % VeryHigh rate-limit-ai 11.3ms
18:06:24 GET /terms 200 100 % 50 % VeryHigh rate-limit-ai 11.9ms
18:06:16 GET /docs 200 100 % 50 % VeryHigh rate-limit-ai 11.6ms
18:06:15 GET /features 200 100 % 50 % VeryHigh rate-limit-ai 11.3ms
18:06:10 GET /dashboard/signature/znS9cJdBOpIMp_NvXPrmvg 200 100 % 50 % VeryHigh rate-limit-ai 11.5ms
18:06:10 GET /dashboard/signature/7X54mTAxcUg9tEpqqRAd6w 200 100 % 50 % VeryHigh rate-limit-ai 11.3ms
18:06:10 GET /dashboard/entity/8bff5a757af6412e 302 100 % 50 % VeryHigh rate-limit-ai 11.8ms
18:06:10 GET /dashboard/entity/909a7721c3f043fc 302 100 % 50 % VeryHigh rate-limit-ai 12.6ms
18:05:27 GET /dashboard/signature/aB4WzX1MtE1g9xG0lTt1aw 200 100 % 50 % VeryHigh rate-limit-ai 10.9ms
18:05:27 GET /dashboard/entity/22e98c1e158c4469 302 100 % 50 % VeryHigh rate-limit-ai 11.8ms
18:05:27 GET /dashboard/signature/v5siEtWFJYaDewUhh_jjmw 200 100 % 50 % VeryHigh rate-limit-ai 11.6ms
18:05:26 GET /dashboard/entity/567ce0e51f824e5f 302 100 % 50 % VeryHigh rate-limit-ai 11.6ms
18:05:21 GET /dashboard/signature/AuXH-LYs_9_IigjBbwpR5A 200 100 % 50 % VeryHigh rate-limit-ai 11.3ms
18:05:21 GET /dashboard/signature/_K_HAoRNz5_gzyHyYy2o0w 200 100 % 50 % VeryHigh rate-limit-ai 10.6ms
18:05:20 GET /dashboard/entity/b640b3897eac408a 302 100 % 50 % VeryHigh rate-limit-ai 11.4ms
18:05:20 GET /dashboard/entity/b21296d87dd84f44 302 100 % 50 % VeryHigh rate-limit-ai 11.2ms

Bot Probability & Confidence History

StyloBot Detection Overhead (ms)

User Agent

Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email])

Detector Contributions (19 detectors)

Detector Confidence Delta Timing (ms)
HeuristicLate
Heuristic model (late): 98 % bot likelihood (308 features)
 +0.956 0.4
AiScraper
Known AI training bot: ClaudeBot (Anthropic)
 +0.950 0.0
UserAgent
Known bot pattern: ClaudeBot
 +0.900 0.3
Heuristic
Heuristic model (early): 66 % bot likelihood (18 features)
 +0.321 0.1
GoodBotIpRange
claimed ClaudeBot but source IP not in ClaudeBot's published range
 +0.550 0.0
Behavioral
Request patterns appear normal; Visiting many random URLs in no logical order (random scanning pattern)
 +0.200 0.3
Ip
IP appears normal: 216.73.216.xxx
 -0.150 0.0
Header
Headers appear normal
 -0.150 0.0
TlsFingerprint
TLS connection appears normal
 -0.150 0.0
TcpIpFingerprint
Missing connection reuse header (unusual for real browsers)
 +0.200 0.0
Http2Fingerprint
No HTTP/2 stream priority (browsers typically use this)
 +0.050 0.0
AI
AI analysis: borderline case, monitoring
 +0.000 10.3
VerifiedBot
No known bot UA pattern
 +0.000 0.0
SecurityTool
No security tools detected in User-Agent
 +0.000 0.1
RequestHydrator
Request signals hydrated to sink
 +0.000 0.0
Http3Fingerprint
Connection uses HTTP/2 (not HTTP/3)
 +0.000 0.0
HeaderCorrelation
Single signature per header profile
 +0.000 0.0
TransportProtocol
Transport protocol analysis complete
 +0.000 0.0
FastPathReputation
No known patterns in reputation cache
 +0.000 0.0

Signal Intelligence

h2

protocol h2

referrer

domain www.stylobot.net

request

protocol HTTP/2
accept_encoding gzip, br

risk

justification Classified AiBot (probability 1.00, confidence 0.50)
friendly_pin_trace not-applicable:botType=AiBot,yamlType=AiBot,botName=ClaudeBot

tls

cipher TLS_AES_256_GCM_SHA384
Version TLSv1.3
version TLSv1.3

Policy applied

Hit history

No sessions recorded yet.

Sessions are created when a visitor's activity gap exceeds 30 minutes.

Effective policy
Loading effective policy…
ASP.NET Pack — Auth health
JWKS health
OK

reachable

Auth pipeline
JWKS reachable
License
Licensed

ASP.NET pack enabled

OTel Mesh — Traces

Fingerprint timeline

c0ac70741c6c4d2aa4af0f5649fd8b18 0 observations

Span + log activity for this fingerprint, ordered by timestamp.

No timeline observations

OTel Mesh receiver online, but no observations seen for this fingerprint id (check W3C baggage propagation)

Operator actions

Operator actions

Block/Allow writes a scoped policy rule for this fingerprint — a policy action, applied via the live policy pipe. It is never a skip-detection bypass.

Signature: EEi3FQOZSD6h5avJYJonKA | Processing: 12ms | Country: US | UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email]) | First seen: 2026-07-25 18:05:20 UTC

Apply Bot Policy

GET /path 

            

            

            

                
                    FOSS: restart required after config changes