• You: Bot 100.0% Low
    ← Dashboard / Signature Detail
    US

    Bingbot

     · bingbot 2.0 Bot
    SearchEngine
    Policy: Allow
    Probability
    100 %
    Confidence
    92 %
    Risk Profile
    VeryHigh
    Threat
    None
    Hit Count
    30
    Last Seen
    8s ago

    Analysis

    Bingbot on /dashboard/signat... - caught by Known bot UA pattern: Bingbot, Datacenter IP detected: Azure, Request patterns appear normal

    Detection Signals

    • ↑ Heuristic model (late): 99 % bot likelihood (307 features) 2.44
    • ↑ Heuristic model (early): 85 % bot likelihood (23 features) 1.38
    • ↑ Known bot UA pattern: Bingbot 1.35
    • ↑ Datacenter IP detected: Azure 0.72
    • ↓ Request patterns appear normal 0.15
    • ↓ TLS connection appears normal 0.15
    Network Locale Headers Tool Transport Session Quality
    Drift vs
    35.5%

    Fingerprint Profile

    TLS Version
    TLSv1.3
    HTTP Protocol
    HTTP/2
    Protocol Client
    TLS_AES_256_GCM_SHA384
    TCP OS Hint
    Unavailable
    Fingerprint Integrity
    Suspect
    UA Consistency
    Flagged
    Headless Indicator
    Low
    Datacenter IP
    Clean

    Browser modes same browser, different modes. One row per persisted mode

    Mode Observations Maturity Shift from baseline Last seen
    bot-raw 8605 8605 0.01 (cache control pragma, ua family, header order hash) 11:59:49
    websocket-upgrade 182 182 0.31 (cache control pragma, ua family, header order hash) 17:51:52
    navigation 21 21 0.53 (upgrade insecure requests, priority, header order hash) 08:48:17
    signalr-negotiate 53 53 0.40 (cache control pragma, priority, ua family) 03:57:15
    sub-resource 26 26 0.42 (priority, referer host family, header order hash) 19:15:40
    5 modes across 8887 observations. See composite browser-mode fingerprints.
    Endpoints Visited (28) Click to expand · stats unavailable
    # Path
    1 /dashboard/signature/77Oy0cZd2CVo4m7ZcAySoQ
    2 /dashboard/endpoint/GET/api/v1/fingerprints/fbb975cff7f548979ac34955b2034d9a
    3 /dashboard/signature/ccJQ40MMJSb9lLl6jpQWsQ
    4 /dashboard/signature/6rXSiqfLM9nDrhZ5awuI8A
    5 /dashboard/signature/4aHlP4DtqBRTKI_HWuR1zA
    6 /dashboard/signature/Mu_BzhfNtzYvQzwg_HSmZA
    7 /_stylobot/signature/Mq5U5vF9dNV-EqFuDpXr0A
    8 /dashboard/traffic
    9 /dashboard/overview
    10 /dashboard/signature/2BCOfYzJD6qCtJ2bBohgbw
    11 /dashboard/signature/vc-PhNFpTNNLzaadTn6wOg
    12 /dashboard/signature/FGGc_0foqja71lNmTrGZiw
    13 /dashboard/signature/M_Ok0tifc8v-NfHeykKqQg
    14 /dashboard/signature/Wjr_MoNd1H4C0dbfqgRiCw
    15 /dashboard/signature/4S6QuujuDFYWBuc_K2tWNA
    16 /docs/github-docs-map
    17 /dashboard/signature/nSlIZgJGWwYaYgAHGodMAw
    18 /dashboard/entity/e14ed68d8aa944a3
    19 /dashboard/signature/XRB5YK4ehRHZ70V48fAIFw
    20 /dashboard/signature/-m7Y5EguM5ooFHe6Mg1pxw
    21 /dashboard/signature/ViaHgzZoHiwSeblNdUWRWA
    22 /dashboard/signature/7U8Df5gZeDad6WOmUX_6kQ
    23 /dashboard/signature/HthtnKj-A8kLolbu9axcqg
    24 /dashboard/signature/5Ek6KVgIo5IIolWfpLT0Ig
    25 /dashboard/site/endpoint
    26 /dashboard/signature/uEC-suu4NljZY35dW5j_ig
    27 /dashboard/signature/HAlUo6xLGnK7ZBsvhlGSXQ
    28 /dashboard/signature/DIysFBjvFHdVTLdGS0XIuQ
    Raw Requests (30) Click to expand
    Time Method Path Status Prob Conf Risk Profile Action Time
    02:20:54 GET /dashboard/signature/77Oy0cZd2CVo4m7ZcAySoQ 404 100 % 100 % VeryLow Allow 13.1ms
    02:16:43 GET /dashboard/endpoint/GET/api/v1/fingerprints/fbb975cff7f548979ac34955b2034d9a 200 100 % 100 % VeryLow Allow 53.6ms
    23:40:22 GET /dashboard/signature/ccJQ40MMJSb9lLl6jpQWsQ 404 100 % 100 % VeryLow Allow 10.9ms
    23:38:42 GET /dashboard/signature/6rXSiqfLM9nDrhZ5awuI8A 200 100 % 100 % VeryLow Allow 11.6ms
    11:49:53 GET /dashboard/signature/4aHlP4DtqBRTKI_HWuR1zA 404 100 % 100 % VeryLow Allow 12.1ms
    08:31:11 GET /dashboard/signature/Mu_BzhfNtzYvQzwg_HSmZA 200 100 % 100 % VeryLow Allow 11.3ms
    07:48:20 GET /_stylobot/signature/Mq5U5vF9dNV-EqFuDpXr0A 404 100 % 100 % VeryLow Allow 10.3ms
    04:34:39 GET /dashboard/traffic 200 100 % 100 % VeryLow Allow 11.4ms
    04:34:33 GET /dashboard/overview 301 100 % 100 % VeryLow Allow 11.3ms
    04:34:29 GET /dashboard/signature/2BCOfYzJD6qCtJ2bBohgbw 200 100 % 100 % VeryLow Allow 11.5ms
    15:11:27 GET /dashboard/signature/vc-PhNFpTNNLzaadTn6wOg 200 100 % 100 % VeryLow Allow 11.4ms
    23:03:00 GET /dashboard/signature/FGGc_0foqja71lNmTrGZiw 200 100 % 100 % VeryLow Allow 12.3ms
    22:57:20 GET /dashboard/signature/M_Ok0tifc8v-NfHeykKqQg 200 100 % 100 % VeryLow Allow 10.5ms
    22:56:30 GET /dashboard/traffic 200 100 % 100 % VeryLow Allow 11.4ms
    22:56:26 GET /dashboard/overview 301 100 % 100 % VeryLow Allow 11.7ms
    22:56:23 GET /dashboard/signature/Wjr_MoNd1H4C0dbfqgRiCw 200 100 % 100 % VeryLow Allow 11.2ms
    22:52:10 GET /dashboard/signature/4S6QuujuDFYWBuc_K2tWNA 200 100 % 100 % VeryLow Allow 57.4ms
    04:19:06 GET /docs/github-docs-map 404 100 % 100 % VeryLow Allow 11.8ms
    20:01:03 GET /dashboard/signature/nSlIZgJGWwYaYgAHGodMAw 200 100 % 100 % VeryLow Allow 12.2ms
    17:28:53 GET /dashboard/entity/e14ed68d8aa944a3 404 100 % 100 % VeryLow Allow 11.1ms
    16:07:21 GET /dashboard/signature/XRB5YK4ehRHZ70V48fAIFw 404 100 % 100 % VeryLow Allow 11.7ms
    16:04:49 GET /dashboard/signature/-m7Y5EguM5ooFHe6Mg1pxw 404 100 % 100 % VeryLow Allow 11.5ms
    13:44:20 GET /dashboard/signature/ViaHgzZoHiwSeblNdUWRWA 200 100 % 100 % VeryLow Allow 12.0ms
    12:53:54 GET /dashboard/signature/7U8Df5gZeDad6WOmUX_6kQ 200 100 % 100 % VeryLow Allow 11.7ms
    12:47:18 GET /dashboard/signature/HthtnKj-A8kLolbu9axcqg 404 100 % 100 % VeryLow Allow 11.7ms
    12:46:40 GET /dashboard/signature/5Ek6KVgIo5IIolWfpLT0Ig 404 100 % 100 % VeryLow Allow 11.7ms
    16:03:27 GET /dashboard/site/endpoint 200 100 % 100 % VeryLow Allow 11.7ms
    11:32:41 GET /dashboard/signature/uEC-suu4NljZY35dW5j_ig 200 100 % 100 % VeryLow Allow 11.5ms
    07:45:53 GET /dashboard/signature/HAlUo6xLGnK7ZBsvhlGSXQ 200 100 % 100 % VeryLow Allow 12.0ms
    07:39:22 GET /dashboard/signature/DIysFBjvFHdVTLdGS0XIuQ 200 100 % 100 % VeryLow Allow 10.8ms

    Bot Probability & Confidence History

    StyloBot Detection Overhead (ms)

    User Agent

    Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/[phone] Safari/537.36

    Detector Contributions (18 detectors)

    Detector Confidence Delta Timing (ms)
    HeuristicLate
    Heuristic model (late): 99 % bot likelihood (307 features)
    		 +0.975 0.4
    Heuristic
    Heuristic model (early): 85 % bot likelihood (23 features)
    		 +0.692 0.1
    UserAgent
    Known bot UA pattern: Bingbot
    		 +0.900 1.2
    Ip
    Datacenter IP detected: Azure
    		 +0.600 0.0
    Behavioral
    Request patterns appear normal
    		 -0.150 0.1
    TlsFingerprint
    TLS connection appears normal
    		 -0.150 0.0
    TcpIpFingerprint
    Missing connection reuse header (unusual for real browsers)
    		 +0.200 0.1
    Http2Fingerprint
    No HTTP/2 stream priority (browsers typically use this)
    		 +0.050 0.0
    AI
    AI analysis: borderline case, monitoring
    		 +0.000 10.4
    Header
    Browser UA without Accept-Language; deployment norm is low language rate (58 % over 31 samples)
    		 +0.000 0.1
    AiScraper
    No AI scraper signals detected
    		 +0.000 0.1
    VerifiedBot
    Verified Bingbot via fcrdns
    		 +0.000 0.3
    SecurityTool
    No security tools detected in User-Agent
    		 +0.000 0.1
    RequestHydrator
    Request signals hydrated to sink
    		 +0.000 0.0
    Http3Fingerprint
    Connection uses HTTP/2 (not HTTP/3)
    		 +0.000 0.0
    HeaderCorrelation
    Single signature per header profile
    		 +0.000 0.0
    TransportProtocol
    Transport protocol analysis complete
    		 +0.000 0.0
    FastPathReputation
    No known patterns in reputation cache
    		 +0.000 0.1

    Signal Intelligence

    h2

    protocol h2

    request

    protocol HTTP/2
    accept_encoding gzip, br

    risk

    justification Cryptographically verified good bot

    tls

    cipher TLS_AES_256_GCM_SHA384
    Version TLSv1.3
    version TLSv1.3

    Policy applied

    Hit history

    No sessions recorded yet.

    Sessions are created when a visitor's activity gap exceeds 30 minutes.

    Effective policy
    Loading effective policy…
    ASP.NET Pack — Auth health
    JWKS health
    OK

    reachable

    Auth pipeline
    JWKS reachable
    License
    Licensed

    ASP.NET pack enabled

    OTel Mesh — Traces

    Fingerprint timeline

    0db480094fd94861be66ee04ea505cf9 0 observations

    Span + log activity for this fingerprint, ordered by timestamp.

    No timeline observations

    OTel Mesh receiver online, but no observations seen for this fingerprint id (check W3C baggage propagation)

    Operator actions

    Operator actions

    Block/Allow writes a scoped policy rule for this fingerprint — a policy action, applied via the live policy pipe. It is never a skip-detection bypass.

    Signature: h1tG_e-KLg94j4tyYDx_RQ | Processing: 13ms | Country: US | UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/[phone] Safari/537.36 | First seen: 2026-07-17 07:39:22 UTC

    Apply Bot Policy

    GET /path 
    
            
    
            

            
    
                
                    FOSS: restart required after config changes