← Dashboard / Signature Detail

Overview Activity Visitors Countries Endpoints Sessions Threats Investigate

Bingbot

· bingbot 2.0 Bot

SearchEngine

Policy: Allow

Probability

100 %

Confidence

99 %

Risk Profile

VeryHigh

Threat

None

Hit Count

Last Seen

7s ago

Analysis

Bingbot on /dashboard/signat... - caught by Known bot UA pattern: Bingbot, claimed Bingbot but source IP not in Bingbot's published ..., Request patterns appear normal

Detection Signals

↑ Heuristic model (late): 99 % bot likelihood (319 features) 2.44
↑ Heuristic model (early): 85 % bot likelihood (23 features) 1.38
↑ Known bot UA pattern: Bingbot 1.35
↑ claimed Bingbot but source IP not in Bingbot's published range 0.47
↓ IP appears normal: 52.167.144.xxx 0.15
↓ Request patterns appear normal 0.15

Drift vs

35.4%

Fingerprint Profile

TLS Version

TLSv1.3

HTTP Protocol

HTTP/2

Protocol Client

TLS_AES_256_GCM_SHA384

TCP OS Hint

Unavailable

Fingerprint Integrity

Suspect

UA Consistency

Flagged

Headless Indicator

Low

Datacenter IP

Clean

Browser modes same browser, different modes. One row per persisted mode

Mode	Observations	Maturity	Shift from baseline	Last seen
bot-raw	5990	5990	0.01 (cache control pragma, ua family, header case pattern)	17:28:19
websocket-upgrade	149	149	0.32 (cache control pragma, ua family, header order hash)	16:54:44
navigation	20	20	0.52 (upgrade insecure requests, priority, header order hash)	16:54:37
signalr-negotiate	31	31	0.37 (cache control pragma, ua family, priority)	03:01:50
sub-resource	13	13	0.42 (priority, referer host family, ua family)	02:09:47

5 modes across 6203 observations. See composite browser-mode fingerprints.

Endpoints Visited (46) Click to expand · stats unavailable

#	Path
1	/dashboard/signature/h0Dx2wS-DEABfXnucPznDg
2	/dashboard/signature/dq7vIcCM68667P52vZ1q6w
3	/dashboard/entity/35f54b9d12ca4818
4	/dashboard/signature/jV9UU1YxgwEKomPgR-i8OQ
5	/dashboard/signature/fecc9927069e8745
6	/dashboard/signature/qsHhSpwP1om5I8bZ8wXpFA
7	/dashboard/entity/d06883c918274402
8	/dashboard/signature/Wjr_MoNd1H4C0dbfqgRiCw
9	/dashboard/traffic
10	/dashboard/overview
11	/dashboard/entity/6843031bf2104602
12	/dashboard/signature/MiU6BMBJGo9-Xl7CFV4g7g
13	/dashboard/signature/42OT9ucfoSnhijqVbD4j4A
14	/dashboard/signature/rYlfb6c2t2WJr-62vY-0sw
15	/dashboard/signature/1gLUroyBaY0IE33XRMOE5g
16	/dashboard/signature/0L7tTRMHmYTHTulbutFoEw
17	/dashboard/signature/jPr1MaqyjDBaQ6v8mMdG_w
18	/dashboard/signature/tmB0pJGAd4E1-9-dHmcbtg
19	/dashboard/signature/4xeZpA15XZBmvKQXOux2CA
20	/dashboard/entity/7d59e27ca6b9446f
21	/dashboard/signature/NMgkfs1vRGGkFe-DOuTM1w
22	/dashboard/signature/uAFARDODMAe-vNC7vWuB7g
23	/dashboard/signature/DvXoVWj7FM6ahf806CibLA
24	/dashboard/entity/550420f8126e4b0c
25	/dashboard/signature/Ux3VbkVC5IYSuh0tLXmfzQ
26	/dashboard/signature/tteKhYJ8ebF7EIdJ4ILL-g
27	/dashboard/signature/9Hqr5CS6616E7MHpG2xS7A
28	/dashboard/entity/5152a6eaafa546d4
29	/dashboard/signature/WHxkaD-xsUEn...
30	/dashboard/endpoints
31	/dashboard/signature/McSz35j0bb0tFTGk-Cp3Gg
32	/dashboard/entity/5adaa7e98de74999
33	/dashboard/signature/aYyhGC16gaqJHNCUvuDDGA
34	/dashboard/signature/pLlxyI6SWEkwvM7Jd_B_5w
35	/dashboard/signature/j6ZIye44IdrZX3LNTAxu2Q
36	/dashboard/signature/CDTLxLndU3p-DkXxnteMGQ
37	/dashboard/signature/Xa-HPjqwp5OvPCXDJIwrGA
38	/dashboard/signature/LNG1-98i9IalA1rYIEZiyg
39	/dashboard/signature/g9HkxPSqzwKsAAm8tX985Q
40	/dashboard/signature/WLNTw9Kf2ei-ACFy1ixWNA
41	/dashboard/signature/LUCOYJAcng6M8a3BKVeRXg
42	/dashboard/signature/GOTAQN5Iem-KTaAVouzBVw
43	/dashboard/signature/vIXJkTUfu4Z660_IYZ9pEg
44	/dashboard/signature/KL1LmLVobV2ouUtzxH3laQ
45	/dashboard/signature/1DrEkWADRGQg5OuGHoWGtA
46	/dashboard/entity/fd336f0202d64c84

Raw Requests (50) Click to expand

Time	Method	Path	Status	Prob	Conf	Risk Profile	Action	Time
16:27:47	GET	/dashboard/signature/h0Dx2wS-DEABfXnucPznDg	200	100 %	100 %	VeryLow	Allow	13.1ms
06:30:29	GET	/dashboard/signature/dq7vIcCM68667P52vZ1q6w	200	100 %	100 %	VeryLow	Allow	13.4ms
05:19:53	GET	/dashboard/entity/35f54b9d12ca4818	404	100 %	100 %	VeryLow	Allow	11.4ms
05:19:52	GET	/dashboard/signature/jV9UU1YxgwEKomPgR-i8OQ	200	100 %	100 %	VeryLow	Allow	12.8ms
05:17:20	GET	/dashboard/signature/fecc9927069e8745	404	100 %	100 %	VeryLow	Allow	13.4ms
23:00:33	GET	/dashboard/signature/qsHhSpwP1om5I8bZ8wXpFA	200	100 %	100 %	VeryLow	Allow	10.9ms
23:00:29	GET	/dashboard/entity/d06883c918274402	302	100 %	100 %	VeryLow	Allow	12.7ms
18:09:55	GET	/dashboard/signature/Wjr_MoNd1H4C0dbfqgRiCw	200	100 %	100 %	VeryLow	Allow	11.8ms
18:09:36	GET	/dashboard/traffic	200	100 %	100 %	VeryLow	Allow	11.0ms
18:09:35	GET	/dashboard/overview	301	100 %	100 %	VeryLow	Allow	12.8ms
04:37:05	GET	/dashboard/entity/6843031bf2104602	404	100 %	100 %	VeryLow	Allow	13.9ms
20:44:31	GET	/dashboard/signature/MiU6BMBJGo9-Xl7CFV4g7g	200	100 %	100 %	VeryLow	Allow	13.8ms
18:19:15	GET	/dashboard/signature/42OT9ucfoSnhijqVbD4j4A	404	100 %	100 %	VeryLow	Allow	13.1ms
18:11:24	GET	/dashboard/signature/rYlfb6c2t2WJr-62vY-0sw	200	100 %	100 %	VeryLow	Allow	13.7ms
11:35:15	GET	/dashboard/signature/1gLUroyBaY0IE33XRMOE5g	200	100 %	100 %	VeryLow	Allow	85.3ms
04:51:01	GET	/dashboard/signature/0L7tTRMHmYTHTulbutFoEw	404	100 %	100 %	VeryLow	Allow	11.8ms
04:50:42	GET	/dashboard/signature/jPr1MaqyjDBaQ6v8mMdG_w	200	100 %	100 %	VeryLow	Allow	11.5ms
04:50:41	GET	/dashboard/signature/tmB0pJGAd4E1-9-dHmcbtg	200	100 %	100 %	VeryLow	Allow	11.8ms
04:50:40	GET	/dashboard/signature/4xeZpA15XZBmvKQXOux2CA	200	100 %	100 %	VeryLow	Allow	14.2ms
02:25:37	GET	/dashboard/entity/7d59e27ca6b9446f	404	100 %	100 %	VeryLow	Allow	12.1ms
23:40:20	GET	/dashboard/signature/NMgkfs1vRGGkFe-DOuTM1w	200	100 %	100 %	VeryLow	Allow	13.7ms
23:38:41	GET	/dashboard/signature/uAFARDODMAe-vNC7vWuB7g	200	100 %	100 %	VeryLow	Allow	13.5ms
20:21:19	GET	/dashboard/signature/DvXoVWj7FM6ahf806CibLA	200	100 %	100 %	VeryLow	Allow	11.7ms
20:21:19	GET	/dashboard/entity/550420f8126e4b0c	302	100 %	100 %	VeryLow	Allow	19.5ms
17:36:03	GET	/dashboard/signature/Ux3VbkVC5IYSuh0tLXmfzQ	200	100 %	100 %	VeryLow	Allow	14.0ms
12:32:18	GET	/dashboard/signature/tteKhYJ8ebF7EIdJ4ILL-g	200	100 %	100 %	VeryLow	Allow	12.0ms
12:32:17	GET	/dashboard/signature/9Hqr5CS6616E7MHpG2xS7A	200	100 %	100 %	VeryLow	Allow	11.3ms
12:32:16	GET	/dashboard/entity/5152a6eaafa546d4	302	100 %	100 %	VeryLow	Allow	11.6ms
12:29:47	GET	/dashboard/traffic	200	100 %	100 %	VeryLow	Allow	11.8ms
12:29:46	GET	/dashboard/overview	301	100 %	100 %	VeryLow	Allow	22.5ms
04:14:23	GET	/dashboard/signature/WHxkaD-xsUEn...	400	100 %	100 %	VeryLow	Allow	13.8ms
02:58:03	GET	/dashboard/endpoints	301	100 %	100 %	VeryLow	Allow	11.6ms
02:55:22	GET	/dashboard/signature/McSz35j0bb0tFTGk-Cp3Gg	200	100 %	100 %	VeryLow	Allow	11.8ms
02:55:22	GET	/dashboard/entity/5adaa7e98de74999	302	100 %	100 %	VeryLow	Allow	13.5ms
08:50:58	GET	/dashboard/signature/aYyhGC16gaqJHNCUvuDDGA	200	100 %	100 %	VeryLow	Allow	11.7ms
08:43:09	GET	/dashboard/signature/pLlxyI6SWEkwvM7Jd_B_5w	200	100 %	100 %	VeryLow	Allow	13.5ms
01:22:17	GET	/dashboard/signature/j6ZIye44IdrZX3LNTAxu2Q	200	100 %	100 %	VeryLow	Allow	18.6ms
21:35:46	GET	/dashboard/signature/CDTLxLndU3p-DkXxnteMGQ	404	100 %	100 %	VeryLow	Allow	13.5ms
15:54:21	GET	/dashboard/signature/Xa-HPjqwp5OvPCXDJIwrGA	200	100 %	100 %	VeryLow	Allow	13.6ms
14:22:55	GET	/dashboard/signature/pLlxyI6SWEkwvM7Jd_B_5w	200	100 %	100 %	VeryLow	Allow	14.0ms
14:20:54	GET	/dashboard/signature/LNG1-98i9IalA1rYIEZiyg	200	100 %	100 %	VeryLow	Allow	14.3ms
00:56:06	GET	/dashboard/signature/g9HkxPSqzwKsAAm8tX985Q	404	100 %	100 %	VeryLow	Allow	14.0ms
20:07:51	GET	/dashboard/signature/WLNTw9Kf2ei-ACFy1ixWNA	200	100 %	100 %	VeryLow	Allow	13.8ms
18:55:11	GET	/dashboard/signature/LUCOYJAcng6M8a3BKVeRXg	200	100 %	100 %	VeryLow	Allow	11.7ms
18:50:08	GET	/dashboard/signature/GOTAQN5Iem-KTaAVouzBVw	200	100 %	100 %	VeryLow	Allow	11.1ms
18:50:07	GET	/dashboard/signature/vIXJkTUfu4Z660_IYZ9pEg	200	100 %	100 %	VeryLow	Allow	11.8ms
18:49:58	GET	/dashboard/signature/KL1LmLVobV2ouUtzxH3laQ	200	100 %	100 %	VeryLow	Allow	11.8ms
18:49:57	GET	/dashboard/signature/1DrEkWADRGQg5OuGHoWGtA	200	100 %	100 %	VeryLow	Allow	11.4ms
18:49:56	GET	/dashboard/entity/fd336f0202d64c84	200	100 %	100 %	VeryLow	Allow	11.1ms
18:49:55	GET	/dashboard/signature/vIXJkTUfu4Z660_IYZ9pEg	200	100 %	100 %	VeryLow	Allow	11.1ms

Bot Probability & Confidence History

StyloBot Detection Overhead (ms)

User Agent

Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/[phone] Safari/537.36

Detector Contributions (20 detectors)

Detector	Confidence Delta	Timing (ms)
HeuristicLate Heuristic model (late): 99 % bot likelihood (319 features)	+0.975	0.3
Heuristic Heuristic model (early): 85 % bot likelihood (23 features)	+0.692	0.1
UserAgent Known bot UA pattern: Bingbot	+0.900	0.2
GoodBotIpRange claimed Bingbot but source IP not in Bingbot's published range	+0.550	0.0
Ip IP appears normal: 52.167.144.xxx	-0.150	1.6
Behavioral Request patterns appear normal	-0.150	0.2
TlsFingerprint TLS connection appears normal	-0.150	0.0
AI AI analysis: borderline case, monitoring	+0.000	10.2
Header Browser UA without Accept-Language; deployment norm is low language rate (52 % over 406 samples)	+0.000	0.1
AiScraper No AI scraper signals detected	+0.000	0.1
VerifiedBot Verified Bingbot via ip_range	+0.000	0.1
SecurityTool No security tools detected in User-Agent	+0.000	0.1
RequestHydrator Request signals hydrated to sink	+0.000	0.0
Http2Fingerprint HTTP/2 analysis complete (no anomalies detected)	+0.000	0.1
Http3Fingerprint Connection uses HTTP/2 (not HTTP/3)	+0.000	0.0
TcpIpFingerprint Network fingerprint analysis complete (no anomalies detected)	+0.000	0.0
HeaderCorrelation Single signature per header profile	+0.000	0.0
TransportProtocol Transport protocol analysis complete	+0.000	0.0
VerifiedBotInline Verified Bingbot via published IP range	+0.000	0.1
FastPathReputation No known patterns in reputation cache	+0.000	0.0

Signal Intelligence

h2

protocol h2

request

protocol HTTP/2

accept_encoding gzip, br

risk

justification Cryptographically verified good bot

tls

cipher TLS_AES_256_GCM_SHA384

Version TLSv1.3

version TLSv1.3

Policy applied

Hit history

No sessions recorded yet.

Sessions are created when a visitor's activity gap exceeds 30 minutes.

Effective policy

Loading effective policy…

ASP.NET Pack — Auth health

JWKS health

reachable

Auth pipeline

JWKS reachable

License

Licensed

ASP.NET pack enabled

OTel Mesh — Traces

Fingerprint timeline

0db480094fd94861be66ee04ea505cf9 0 observations

Span + log activity for this fingerprint, ordered by timestamp.

No timeline observations

OTel Mesh receiver online, but no observations seen for this fingerprint id (check W3C baggage propagation)

Operator actions

Block Allow

Block/Allow writes a scoped policy rule for this fingerprint — a policy action, applied via the live policy pipe. It is never a skip-detection bypass.

Signature: nuqIX8L6F1yAkpxKEJyQfA | Processing: 13ms | Country: US | UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/[phone] Safari/537.36 | First seen: 2026-07-17 18:49:55 UTC