You: Bot 100.0% Low
← Dashboard / Signature Detail
US

Bingbot

 · bingbot 2.0 Bot
SearchEngine
Policy: Allow
Probability
100 %
Confidence
91 %
Risk Profile
VeryHigh
Threat
None
Hit Count
32
Last Seen
43s ago

Analysis

Bingbot on /dashboard/endpoi... - caught by Known bot UA pattern: Bingbot, Datacenter IP detected: Azure, No cookies maintained across multiple requests

Detection Signals

  • ↑ Heuristic model (late): 99 % bot likelihood (320 features) 2.44
  • ↑ Heuristic model (early): 85 % bot likelihood (23 features) 1.38
  • ↑ Known bot UA pattern: Bingbot 1.35
  • ↑ Datacenter IP detected: Azure 0.72
  • ↑ No referrer on subsequent request; No cookies maintained across multiple requests 0.60
  • ↓ TLS connection appears normal 0.15
Network Locale Headers Tool Transport Session Quality
Drift vs
35.8%

Fingerprint Profile

TLS Version
TLSv1.3
HTTP Protocol
HTTP/2
Protocol Client
TLS_AES_256_GCM_SHA384
TCP OS Hint
Unavailable
Fingerprint Integrity
Suspect
UA Consistency
Flagged
Headless Indicator
Low
Datacenter IP
Clean

Browser modes same browser, different modes. One row per persisted mode

Mode Observations Maturity Shift from baseline Last seen
bot-raw 6633 6633 0.01 (cache control pragma, ua family, header order hash) 19:06:05
websocket-upgrade 161 161 0.31 (cache control pragma, ua family, header order hash) 06:30:21
signalr-negotiate 43 43 0.38 (cache control pragma, priority, ua family) 06:30:11
navigation 20 20 0.52 (upgrade insecure requests, priority, header order hash) 16:54:37
sub-resource 13 13 0.41 (priority, referer host family, ua family) 02:09:47
5 modes across 6870 observations. See composite browser-mode fingerprints.
Endpoints Visited (30) Click to expand · stats unavailable
# Path
1 /dashboard/endpoint/POST/api/v1/compose-batch
2 /dashboard/signature/mgKmoP1dVop_9RcR_KBRcA
3 /dashboard/endpoint/GET/api/v1/otel-mesh/top-services
4 /dashboard/endpoint/GET/api/v1/packs/aspnet/summary
5 /dashboard/traffic
6 /dashboard/overview
7 /dashboard/signature/c1g3zXViLH8CCvr5HFRUTg
8 /dashboard/signature/gann_YfRWr4dMXSl98r5Hg
9 /dashboard/entity/85b91aedc0964d6b
10 /dashboard/signature/vC27QQkhONXxOCYaAdsF4A
11 /dashboard/entity/7fa505992a554b44
12 /dashboard/signature/Bpgt1Jgm0xrJnPXxXw8fjA
13 /dashboard/signature/a6ffRuGRRNsMiuS3Eior7w
14 /dashboard/entity/92f2eef44b4543bc
15 /dashboard/signature/tmB0pJGAd4E1-9-dHmcbtg
16 /dashboard/signature/kYhmizObTtRNfTtJB1FUtw
17 /dashboard/signature/jPr1MaqyjDBaQ6v8mMdG_w
18 /open-source
19 /dashboard/signature/CAwEpEfvmZfYbjYQEUtvZw
20 /dashboard/entity/1611e15213574644
21 /dashboard/signature/4xWozhnmEWJc_4Qk5mEY-Q
22 /dashboard/entity/23a1450cf60d4569
23 /dashboard/signature/M_Ok0tifc8v-NfHeykKqQg
24 /dashboard/signature/oVrwdxHJ2g9WkXiy7-PjMA
25 /dashboard/signature/NZye5wXn72pNrx6a8OUenw
26 /dashboard/signature/TCmL7BK3zcP80wDpsA-CYQ
27 /dashboard/signature/DOd6ASGQzw5ShAqsUFB_2Q
28 /dashboard/entity/c461af9cfa4647a3
29 /dashboard/signature/cZsr_cxxDlHSE2p2kJVt7Q
30 /dashboard/signature/pScFapV9SVuQ894fNJAuIw
Raw Requests (32) Click to expand
Time Method Path Status Prob Conf Risk Profile Action Time
14:00:29 GET /dashboard/endpoint/POST/api/v1/compose-batch 200 100 % 100 % VeryLow Allow 11.6ms
14:00:28 GET /dashboard/signature/mgKmoP1dVop_9RcR_KBRcA 200 100 % 100 % VeryLow Allow 11.5ms
14:00:06 GET /dashboard/endpoint/GET/api/v1/otel-mesh/top-services 200 100 % 100 % VeryLow Allow 12.5ms
13:59:45 GET /dashboard/endpoint/GET/api/v1/packs/aspnet/summary 200 100 % 100 % VeryLow Allow 11.7ms
13:58:07 GET /dashboard/traffic 200 100 % 100 % VeryLow Allow 11.6ms
13:58:06 GET /dashboard/overview 301 100 % 100 % VeryLow Allow 11.2ms
16:05:27 GET /dashboard/signature/c1g3zXViLH8CCvr5HFRUTg 404 100 % 100 % VeryLow Allow 10.6ms
06:41:24 GET /dashboard/signature/gann_YfRWr4dMXSl98r5Hg 200 100 % 100 % VeryLow Allow 11.5ms
06:41:19 GET /dashboard/entity/85b91aedc0964d6b 302 100 % 100 % VeryLow Allow 11.5ms
22:39:31 GET /dashboard/signature/vC27QQkhONXxOCYaAdsF4A 200 100 % 100 % VeryLow Allow 12.0ms
22:39:31 GET /dashboard/entity/7fa505992a554b44 302 100 % 100 % VeryLow Allow 11.5ms
22:30:51 GET /dashboard/signature/Bpgt1Jgm0xrJnPXxXw8fjA 200 100 % 100 % VeryLow Allow 11.8ms
22:30:50 GET /dashboard/signature/a6ffRuGRRNsMiuS3Eior7w 200 100 % 100 % VeryLow Allow 11.1ms
22:30:50 GET /dashboard/entity/92f2eef44b4543bc 302 100 % 100 % VeryLow Allow 11.4ms
22:29:51 GET /dashboard/signature/tmB0pJGAd4E1-9-dHmcbtg 200 100 % 100 % VeryLow Allow 12.0ms
22:29:49 GET /dashboard/signature/kYhmizObTtRNfTtJB1FUtw 200 100 % 100 % VeryLow Allow 11.9ms
22:29:40 GET /dashboard/signature/jPr1MaqyjDBaQ6v8mMdG_w 200 100 % 100 % VeryLow Allow 11.4ms
22:28:52 GET /dashboard/traffic 400 100 % 100 % VeryLow Allow 11.6ms
22:28:50 GET /dashboard/overview 301 100 % 100 % VeryLow Allow 11.8ms
22:27:20 GET /open-source 200 100 % 100 % VeryLow Allow 11.6ms
12:57:22 GET /dashboard/signature/CAwEpEfvmZfYbjYQEUtvZw 200 100 % 100 % VeryLow Allow 11.7ms
12:57:22 GET /dashboard/entity/1611e15213574644 302 100 % 100 % VeryLow Allow 11.6ms
11:53:08 GET /dashboard/signature/4xWozhnmEWJc_4Qk5mEY-Q 200 100 % 100 % VeryLow Allow 11.6ms
11:53:08 GET /dashboard/entity/23a1450cf60d4569 302 100 % 100 % VeryLow Allow 11.4ms
11:52:30 GET /dashboard/signature/M_Ok0tifc8v-NfHeykKqQg 200 100 % 100 % VeryLow Allow 11.5ms
11:49:58 GET /dashboard/signature/oVrwdxHJ2g9WkXiy7-PjMA 404 100 % 100 % VeryLow Allow 11.6ms
04:10:50 GET /dashboard/signature/NZye5wXn72pNrx6a8OUenw 200 100 % 100 % VeryLow Allow 12.0ms
04:10:49 GET /dashboard/signature/TCmL7BK3zcP80wDpsA-CYQ 200 100 % 100 % VeryLow Allow 12.0ms
04:10:29 GET /dashboard/signature/DOd6ASGQzw5ShAqsUFB_2Q 200 100 % 100 % VeryLow Allow 11.7ms
04:10:29 GET /dashboard/entity/c461af9cfa4647a3 302 100 % 100 % VeryLow Allow 11.4ms
06:55:52 GET /dashboard/signature/cZsr_cxxDlHSE2p2kJVt7Q 200 100 % 100 % VeryLow Allow 11.9ms
06:55:51 GET /dashboard/signature/pScFapV9SVuQ894fNJAuIw 200 100 % 100 % VeryLow Allow 10.8ms

Bot Probability & Confidence History

StyloBot Detection Overhead (ms)

User Agent

Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/[phone] Safari/537.36

Detector Contributions (19 detectors)

Detector Confidence Delta Timing (ms)
HeuristicLate
Heuristic model (late): 99 % bot likelihood (320 features)
 +0.975 0.3
Heuristic
Heuristic model (early): 85 % bot likelihood (23 features)
 +0.692 0.0
UserAgent
Known bot UA pattern: Bingbot
 +0.900 0.2
Ip
Datacenter IP detected: Azure
 +0.600 0.0
Behavioral
No referrer on subsequent request; No cookies maintained across multiple requests
 +0.400 0.2
TlsFingerprint
TLS connection appears normal
 -0.150 0.0
AI
AI analysis: borderline case, monitoring
 +0.000 10.4
Header
Browser UA without Accept-Language; deployment norm is low language rate (39 % over 165 samples)
 +0.000 0.0
AiScraper
No AI scraper signals detected
 +0.000 0.1
VerifiedBot
Verified Bingbot via ip_range
 +0.000 0.1
SecurityTool
No security tools detected in User-Agent
 +0.000 0.1
RequestHydrator
Request signals hydrated to sink
 +0.000 0.0
Http2Fingerprint
HTTP/2 analysis complete (no anomalies detected)
 +0.000 0.0
Http3Fingerprint
Connection uses HTTP/2 (not HTTP/3)
 +0.000 0.0
TcpIpFingerprint
Network fingerprint analysis complete (no anomalies detected)
 +0.000 0.0
HeaderCorrelation
Single signature per header profile
 +0.000 0.0
TransportProtocol
Transport protocol analysis complete
 +0.000 0.0
VerifiedBotInline
Verified Bingbot via published IP range
 +0.000 0.1
FastPathReputation
No known patterns in reputation cache
 +0.000 0.0

Signal Intelligence

h2

protocol h2

request

protocol HTTP/2
accept_encoding gzip, br

risk

justification Cryptographically verified good bot

tls

cipher TLS_AES_256_GCM_SHA384
Version TLSv1.3
version TLSv1.3

Policy applied

Hit history

No sessions recorded yet.

Sessions are created when a visitor's activity gap exceeds 30 minutes.

Effective policy
Loading effective policy…
ASP.NET Pack — Auth health
JWKS health
OK

reachable

Auth pipeline
JWKS reachable
License
Licensed

ASP.NET pack enabled

OTel Mesh — Traces

Fingerprint timeline

0db480094fd94861be66ee04ea505cf9 0 observations

Span + log activity for this fingerprint, ordered by timestamp.

No timeline observations

OTel Mesh receiver online, but no observations seen for this fingerprint id (check W3C baggage propagation)

Operator actions

Operator actions

Block/Allow writes a scoped policy rule for this fingerprint — a policy action, applied via the live policy pipe. It is never a skip-detection bypass.

Signature: a6ffRuGRRNsMiuS3Eior7w | Processing: 12ms | Country: US | UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/[phone] Safari/537.36 | First seen: 2026-07-19 06:55:51 UTC

Apply Bot Policy

GET /path 

            

            

            

                
                    FOSS: restart required after config changes