Unknown Bot
Bot
Scraper
Threat Score:
0.050
Policy:
throttle-stealth
Probability
76 %
Confidence
88 %
Risk
VeryHigh
Threat
None
Hit Count
202
Last Seen
17d ago
Recent Detections (50)
| Time | Method | Path | Status | Prob | Conf | Risk | Action | Time |
|---|---|---|---|---|---|---|---|---|
| 02:20:45 | GET | /_stylobot/hub | 101 | 76 % | 88 % | VeryHigh | throttle-stealth | 1.1ms |
| 02:20:45 | GET | /_stylobot/hub | 101 | 76 % | 88 % | VeryHigh | throttle-stealth | 1.0ms |
| 02:20:45 | GET | /_stylobot/hub | 101 | 76 % | 88 % | VeryHigh | throttle-stealth | 1.1ms |
| 02:20:45 | GET | /_stylobot/hub | 101 | 76 % | 88 % | VeryHigh | throttle-stealth | 1.0ms |
| 02:20:20 | GET | /_stylobot/hub | 101 | 76 % | 88 % | VeryHigh | throttle-stealth | 1.2ms |
| 02:20:20 | GET | /_stylobot/hub | 101 | 76 % | 88 % | VeryHigh | throttle-stealth | 0.9ms |
| 02:20:20 | POST | /_stylobot/hub/negotiate | 200 | 70 % | 88 % | High | Allow | 1.3ms |
| 02:20:20 | POST | /_stylobot/hub/negotiate | 200 | 70 % | 88 % | High | Allow | 1.1ms |
| 02:20:20 | POST | /_stylobot/hub/negotiate | 200 | 70 % | 88 % | High | Allow | 1.1ms |
| 02:20:20 | POST | /_stylobot/hub/negotiate | 200 | 70 % | 88 % | High | Allow | 1.1ms |
| 02:20:19 | POST | /_stylobot/hub/negotiate | 200 | 70 % | 88 % | High | Allow | 1.1ms |
| 02:20:19 | POST | /_stylobot/hub/negotiate | 200 | 70 % | 88 % | High | Allow | 1.7ms |
| 02:20:19 | POST | /_stylobot/hub/negotiate | 200 | 70 % | 88 % | High | Allow | 1.2ms |
| 02:20:19 | POST | /_stylobot/hub/negotiate | 200 | 70 % | 88 % | High | Allow | 1.1ms |
| 02:20:18 | POST | /_stylobot/hub/negotiate | 200 | 70 % | 88 % | High | Allow | 1.4ms |
| 02:20:18 | POST | /_stylobot/hub/negotiate | 200 | 70 % | 88 % | High | Allow | 1.1ms |
| 02:20:18 | POST | /_stylobot/hub/negotiate | 200 | 70 % | 88 % | High | Allow | 1.1ms |
| 02:20:17 | POST | /_stylobot/hub/negotiate | 200 | 70 % | 88 % | High | Allow | 0.7ms |
| 02:20:17 | POST | /_stylobot/hub/negotiate | 200 | 70 % | 88 % | High | Allow | 0.9ms |
| 02:20:17 | POST | /_stylobot/hub/negotiate | 200 | 70 % | 88 % | High | Allow | 1.1ms |
| 02:20:17 | POST | /_stylobot/hub/negotiate | 200 | 70 % | 88 % | High | Allow | 1.4ms |
| 02:20:17 | GET | /_stylobot/hub | 101 | 76 % | 88 % | VeryHigh | throttle-stealth | 1.0ms |
| 02:20:17 | GET | /_stylobot/hub | 101 | 76 % | 88 % | VeryHigh | throttle-stealth | 1.1ms |
| 02:20:17 | GET | /_stylobot/hub | 101 | 76 % | 88 % | VeryHigh | throttle-stealth | 1.1ms |
| 02:20:11 | GET | /_stylobot/hub | 101 | 76 % | 88 % | VeryHigh | throttle-stealth | 0.8ms |
| 02:20:10 | GET | /_stylobot/hub | 101 | 76 % | 88 % | VeryHigh | throttle-stealth | 1.2ms |
| 02:20:09 | POST | /_stylobot/hub/negotiate | 200 | 70 % | 88 % | High | Allow | 1.0ms |
| 02:20:09 | POST | /_stylobot/hub/negotiate | 200 | 70 % | 88 % | High | Allow | 1.1ms |
| 02:20:09 | POST | /_stylobot/hub/negotiate | 200 | 70 % | 88 % | High | Allow | 1.0ms |
| 02:20:09 | POST | /_stylobot/hub/negotiate | 200 | 70 % | 88 % | High | Allow | 0.9ms |
| 02:20:09 | POST | /_stylobot/hub/negotiate | 200 | 70 % | 88 % | High | Allow | 1.0ms |
| 02:20:09 | POST | /_stylobot/hub/negotiate | 200 | 70 % | 88 % | High | Allow | 0.7ms |
| 02:20:09 | POST | /_stylobot/hub/negotiate | 200 | 70 % | 88 % | High | Allow | 0.5ms |
| 02:20:09 | POST | /_stylobot/hub/negotiate | 200 | 70 % | 88 % | High | Allow | 0.7ms |
| 02:20:09 | POST | /_stylobot/hub/negotiate | 200 | 70 % | 88 % | High | Allow | 0.8ms |
| 02:20:09 | POST | /_stylobot/hub/negotiate | 200 | 70 % | 88 % | High | Allow | 0.9ms |
| 02:20:09 | GET | /_stylobot/hub | 101 | 76 % | 88 % | VeryHigh | throttle-stealth | 0.9ms |
| 02:20:09 | GET | /_stylobot/hub | 101 | 76 % | 88 % | VeryHigh | throttle-stealth | 1.1ms |
| 02:20:09 | GET | /_stylobot/hub | 101 | 76 % | 88 % | VeryHigh | throttle-stealth | 1.0ms |
| 02:20:09 | GET | /_stylobot/hub | 101 | 76 % | 88 % | VeryHigh | throttle-stealth | 0.8ms |
| 02:20:09 | GET | /_stylobot/hub | 101 | 76 % | 88 % | VeryHigh | throttle-stealth | 0.8ms |
| 02:20:09 | GET | /_stylobot/hub | 101 | 76 % | 88 % | VeryHigh | throttle-stealth | 1.0ms |
| 02:20:08 | GET | /_stylobot/hub | 200 | 70 % | 88 % | High | throttle-stealth | 1.3ms |
| 02:20:08 | GET | /_stylobot/hub | 200 | 70 % | 88 % | High | throttle-stealth | 1.1ms |
| 02:20:08 | GET | /_stylobot/hub | 200 | 70 % | 88 % | High | throttle-stealth | 0.9ms |
| 02:20:06 | POST | /_stylobot/hub/negotiate | 200 | 70 % | 88 % | High | Allow | 1.0ms |
| 02:20:06 | POST | /_stylobot/hub/negotiate | 200 | 70 % | 88 % | High | Allow | 3.1ms |
| 02:19:55 | POST | /_stylobot/hub/negotiate | 200 | 70 % | 88 % | High | Allow | 1.0ms |
| 02:19:55 | POST | /_stylobot/hub/negotiate | 200 | 70 % | 88 % | High | Allow | 1.0ms |
| 02:19:52 | GET | /_stylobot/hub | 101 | 76 % | 88 % | VeryHigh | throttle-stealth | 1.1ms |
Analysis
Scraper on /_stylobot/hub - caught by Heuristic model (late): 100 % bot likelihood (139 features), Heuristic model (early): 87 % human likelihood (20 features), Request from hosting/datacenter IP in United Kingdom
Detection Signals
- • Heuristic model (late): 100 % bot likelihood (139 features)
- • Heuristic model (early): 87 % human likelihood (20 features)
- • Request from hosting/datacenter IP in United Kingdom
- • Consumer browser with locale 'en-GB' from datacenter in United Kingdom
- • User-Agent appears normal
Detector Contributions (13 detectors)
HeuristicLate
+0.998
0.0ms
Heuristic model (late): 100 % bot likelihood (139 features)
Heuristic
-0.739
0.0ms
Heuristic model (early): 87 % human likelihood (20 features)
Geo
+0.900
0.0ms
Location: Southampton, United Kingdom; Request from hosting/datacenter IP in United Kingdom; Consumer browser with locale 'en-GB' from datacenter in United Kingdom
UserAgent
-0.250
0.0ms
User-Agent appears normal
Behavioral
-0.300
0.0ms
Request patterns appear normal
Ip
-0.250
0.0ms
IP appears normal: 98.159.234.xxx
Header
-0.150
0.0ms
Same-origin browser fetch — Sec-Fetch-Site attestation present
Inconsistency
-0.100
0.0ms
No header/UA inconsistencies detected
FastPathReputation
+0.200
0.0ms
Reputation bias (UserAgent seen 242 times as bot, downgraded — browser attestation present)
ReputationBias
+0.300
0.0ms
UA pattern ConfirmedBad (score=1.00, support=242) (downgraded — browser attestation present); IP range ConfirmedBad (score=1.00, support=242) (downgraded — browser attestation present)
VersionAge
-0.050
0.0ms
Browser/OS versions appear current
SecurityTool
+0.000
0.0ms
No security tools detected in User-Agent
TimescaleReputation
+0.000
0.0ms
Seen 2 times over 1 days, 100 % classified as bot
Signal Intelligence
behavioral
anomaly
False
geo
city
Southampton
is_vpn
True
latitude
50.9097
timezone
Europe/London
longitude
-1.4043
is_hosting
True
region_code
ENG
country_code
GB
country_name
United Kingdom
continent_code
EU
inconsistency_type
datacenter-consumer
inconsistency_detected
True
header
count
24
has_accept
True
sec_fetch_dest
empty
sec_fetch_mode
websocket
sec_fetch_site
same-origin
has_proxy_headers
True
has_accept_encoding
True
has_accept_language
True
is_websocket_upgrade
True
sec_fetch_same_origin
True
heuristic
confidence
0.7388763291715672
prediction
human
early_completed
True
late_confidence
0.9984182947571913
late_prediction
bot
ip
is_ipv6
False
is_local
False
is_datacenter
False
reputation
ip.score
1
ip.state
ConfirmedBad
can_abort
True
bias_count
2
ip.support
241.9259259259244
bias_applied
True
fastpath_hit
True
useragent.score
0.9999999999949537
useragent.state
ConfirmedBad
fast_abort_active
True
useragent.support
241.9259259259244
fastpath.useragent.score
0.9999999999949537
fastpath.useragent.state
ConfirmedBad
fastpath.useragent.support
241.9259259259244
fastpath.useragent.pattern_id
ua:e4dd0fa03c5415c4
request
protocol
HTTP/1.1
accept_encoding
gzip, deflate, br, zstd
ua
family
Firefox
is_bot
False
family_version
148.0
Threat Assessment
Intent:
Scraper
Score:
0.050
Policy:
throttle-stealth
Signature:
1BZCb2_m0BV0O1rPKsC4rg
|
Processing: 1.0ms
|
Country: GB