OK
reachable
Googlebot
· Googlebot 2.1 Bot
SearchEngine
Policy:
Allow
Probability
100 %
Confidence
96 %
Risk Profile
VeryHigh
Threat
None
Hit Count
5
Last Seen
57s ago
Analysis
Googlebot on /benchmarks - caught by Known bot UA pattern: Googlebot, Request patterns appear normal, IP appears normal: 66.249.70.xxx
Detection Signals
- ↑ Heuristic model (late): 98 % bot likelihood (308 features) 2.41
- ↑ Known bot UA pattern: Googlebot 1.35
- ↑ Heuristic model (early): 80 % bot likelihood (19 features) 1.21
- ↓ IP appears normal: 66.249.70.xxx 0.15
- ↓ Headers appear normal 0.15
- ↓ Request patterns appear normal 0.15
Closest to
Googlebot
Drift vs
28.4%
Fingerprint Profile
TLS Version
TLSv1.3
HTTP Protocol
HTTP/1.1
Protocol Client
TLS_AES_256_GCM_SHA384
TCP OS Hint
Unavailable
Fingerprint Integrity
Suspect
UA Consistency
Flagged
Headless Indicator
Low
Datacenter IP
Clean
Browser modes same browser, different modes. One row per persisted mode
| Mode | Observations | Maturity | Shift from baseline | Last seen |
|---|---|---|---|---|
| bot-raw | 3959 | 3959 | 0.01 (ua family, priority, sec fetch pattern) | 13:42:30 |
| signalr-negotiate | 20 | 20 | 0.53 (ua family, priority, sec ch ua brands ordered) | 17:21:20 |
| sub-resource | 38 | 38 | 0.50 (priority, ua family, ip subnet) | 14:26:09 |
| navigation | 27 | 27 | 0.62 (ua family, upgrade insecure requests, custom header signature) | 11:36:09 |
| websocket-upgrade | 3 | 3 | 0.48 (ua family, cache control pragma, header order hash) | 20:27:40 |
5 modes across 4047 observations. See composite browser-mode fingerprints.
Endpoints Visited (4) Click to expand · stats unavailable
| # | Path |
|---|---|
| 1 | /benchmarks |
| 2 | /dashboard/signature/WPamgdNWv_O38NANU6StOA |
| 3 | /robots.txt |
| 4 | /dashboard/otel-mesh/timeline |
Raw Requests (5) Click to expand
| Time | Method | Path | Status | Prob | Conf | Risk Profile | Action | Time |
|---|---|---|---|---|---|---|---|---|
| 12:00:34 | GET | /benchmarks | 200 | 100 % | 100 % | VeryLow | Allow | 10.9ms |
| 00:10:30 | GET | /dashboard/signature/WPamgdNWv_O38NANU6StOA | 200 | 100 % | 100 % | VeryLow | Allow | 20.9ms |
| 12:45:50 | GET | /robots.txt | 200 | 100 % | 100 % | VeryLow | Allow | 18.7ms |
| 12:32:15 | GET | /robots.txt | 200 | 100 % | 100 % | VeryLow | Allow | 12.9ms |
| 12:38:43 | GET | /dashboard/otel-mesh/timeline | 200 | 100 % | 100 % | VeryLow | Allow | 59.7ms |
Bot Probability & Confidence History
StyloBot Detection Overhead (ms)
User Agent
Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Detector Contributions (19 detectors)
| Detector | Confidence Delta | Timing (ms) |
|---|---|---|
|
HeuristicLate
Heuristic model (late): 98 % bot likelihood (308 features)
|
+0.962 | 0.3 |
|
UserAgent
Known bot UA pattern: Googlebot
|
+0.900 | 0.1 |
|
Heuristic
Heuristic model (early): 80 % bot likelihood (19 features)
|
+0.605 | 0.1 |
|
Ip
IP appears normal: 66.249.70.xxx
|
-0.150 | 0.0 |
|
Header
Headers appear normal
|
-0.150 | 0.0 |
|
Behavioral
Request patterns appear normal
|
-0.150 | 0.2 |
|
TlsFingerprint
TLS connection appears normal
|
-0.150 | 0.0 |
|
AI
AI analysis: borderline case, monitoring
|
+0.000 | 9.8 |
|
AiScraper
No AI scraper signals detected
|
+0.000 | 0.0 |
|
VerifiedBot
Verified Googlebot via ip_range
|
+0.000 | 0.1 |
|
SecurityTool
No security tools detected in User-Agent
|
+0.000 | 0.0 |
|
RequestHydrator
Request signals hydrated to sink
|
+0.000 | 0.0 |
|
Http2Fingerprint
Using HTTP/1.1; environment norm is HTTP/1.1 (45 % HTTP/2 over 247 samples)
|
+0.000 | 0.0 |
|
Http3Fingerprint
Connection uses HTTP/1.1 (not HTTP/3)
|
+0.000 | 0.0 |
|
TcpIpFingerprint
Network fingerprint analysis complete (no anomalies detected)
|
+0.000 | 0.0 |
|
HeaderCorrelation
Single signature per header profile
|
+0.000 | 0.0 |
|
TransportProtocol
Transport protocol analysis complete
|
+0.000 | 0.0 |
|
VerifiedBotInline
Verified Googlebot via published IP range
|
+0.000 | 0.1 |
|
FastPathReputation
No known patterns in reputation cache
|
+0.000 | 0.0 |
Signal Intelligence
request
protocol
HTTP/1.1
accept_encoding
gzip, deflate, br
risk
justification
Cryptographically verified good bot
tls
cipher
TLS_AES_256_GCM_SHA384
Version
TLSv1.3
version
TLSv1.3
Policy applied
Hit history
No sessions recorded yet.
Sessions are created when a visitor's activity gap exceeds 30 minutes.
Effective policy
Loading effective policy…
ASP.NET Pack — Auth events
JWKS reachable
Licensed
ASP.NET pack enabled
OTel Mesh — Traces
Fingerprint timeline
5a36b9e9b2994562b9871ac69b1d975f
0 observations
Span + log activity for this fingerprint, ordered by timestamp.
No timeline observations
OTel Mesh receiver online, but no observations seen for this fingerprint id (check W3C baggage propagation)
Signature:
gbLRWmyP_6u9QvlmUE2sEw
|
Processing: 11ms
|
Country: US
|
UA: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
|
First seen: 2026-07-18 12:38:43 UTC