stylobot Signature Detail
← Dashboard / Signature Detail
FR

curl

Bot
Scraper
Policy: Allow
Probability
100 %
Confidence
100 %
Risk
VeryHigh
Threat
None
Hit Count
2,872
Last Seen
24d ago

Recent Detections (50)

Time Method Path Status Prob Conf Risk Action Time
03:11:35 POST /form/api/media 404 100 % 100 % VeryHigh Block 0.5ms
03:11:35 POST /form/api/media 404 100 % 100 % VeryHigh Allow 0.5ms
03:11:33 POST /form/api/documents 404 100 % 100 % VeryHigh Block 0.5ms
03:11:33 POST /form/api/documents 404 100 % 100 % VeryHigh Allow 0.5ms
03:11:30 POST /form/api/document 404 100 % 100 % VeryHigh Block 0.5ms
03:11:30 POST /form/api/document 404 100 % 100 % VeryHigh Allow 0.5ms
03:11:26 POST /form/api/files 404 100 % 100 % VeryHigh Block 0.5ms
03:11:26 POST /form/api/files 404 100 % 100 % VeryHigh Allow 0.5ms
03:11:23 POST /form/api/file 404 100 % 100 % VeryHigh Block 0.5ms
03:11:23 POST /form/api/file 404 100 % 100 % VeryHigh Allow 0.5ms
03:11:21 POST /form/api/uploads 404 100 % 100 % VeryHigh Block 0.3ms
03:11:21 POST /form/api/uploads 404 100 % 100 % VeryHigh Allow 0.3ms
03:11:18 POST /form/api/upload 404 100 % 100 % VeryHigh Block 0.6ms
03:11:18 POST /form/api/upload 404 100 % 100 % VeryHigh Allow 0.6ms
03:11:15 POST /form/export 404 100 % 100 % VeryHigh Block 0.5ms
03:11:15 POST /form/export 404 100 % 100 % VeryHigh Allow 0.5ms
03:11:12 POST /form/backup 404 100 % 100 % VeryHigh Block 0.6ms
03:11:12 POST /form/backup 404 100 % 100 % VeryHigh Allow 0.6ms
03:11:09 POST /form/drive 404 100 % 100 % VeryHigh Block 0.5ms
03:11:09 POST /form/drive 404 100 % 100 % VeryHigh Allow 0.5ms
03:11:04 POST /form/blob 404 100 % 100 % VeryHigh Block 0.5ms
03:11:04 POST /form/blob 404 100 % 100 % VeryHigh Allow 0.5ms
03:11:01 POST /form/storage 404 100 % 100 % VeryHigh Block 0.5ms
03:11:01 POST /form/storage 404 100 % 100 % VeryHigh Allow 0.5ms
03:10:57 POST /form/resources 404 100 % 100 % VeryHigh Block 0.6ms
03:10:57 POST /form/resources 404 100 % 100 % VeryHigh Allow 0.6ms
03:10:55 POST /form/resource 404 100 % 100 % VeryHigh Block 0.5ms
03:10:54 POST /form/resource 404 100 % 100 % VeryHigh Allow 0.6ms
03:10:50 POST /form/assets 404 100 % 100 % VeryHigh Block 0.5ms
03:10:50 POST /form/assets 404 100 % 100 % VeryHigh Allow 0.5ms
03:10:45 POST /form/asset 404 100 % 100 % VeryHigh Block 0.5ms
03:10:45 POST /form/asset 404 100 % 100 % VeryHigh Allow 0.5ms
03:10:41 POST /form/content 404 100 % 100 % VeryHigh Block 0.5ms
03:10:41 POST /form/content 404 100 % 100 % VeryHigh Allow 0.5ms
03:10:38 POST /upload 404 100 % 100 % VeryHigh Block 0.5ms
03:10:38 POST /upload 404 100 % 100 % VeryHigh Allow 0.5ms
03:10:38 POST /form/data 404 100 % 100 % VeryHigh Block 0.5ms
03:10:38 POST /form/data 404 100 % 100 % VeryHigh Allow 0.5ms
03:10:36 POST /uploads 404 100 % 100 % VeryHigh Block 0.5ms
03:10:36 POST /uploads 404 100 % 100 % VeryHigh Allow 0.5ms
03:10:34 POST /form/submit 404 100 % 100 % VeryHigh Block 0.5ms
03:10:34 POST /form/submit 404 100 % 100 % VeryHigh Allow 0.5ms
03:10:34 POST /api/v1/media 404 100 % 100 % VeryHigh Block 0.5ms
03:10:34 POST /api/v1/media 404 100 % 100 % VeryHigh Allow 0.5ms
03:10:32 POST /form/import 404 100 % 100 % VeryHigh Block 0.5ms
03:10:32 POST /form/import 404 100 % 100 % VeryHigh Allow 0.5ms
03:10:31 POST /api/v1/files 404 100 % 100 % VeryHigh Block 0.4ms
03:10:31 POST /api/v1/files 404 100 % 100 % VeryHigh Allow 0.4ms
03:10:30 POST /form/attachments 404 100 % 100 % VeryHigh Block 0.5ms
03:10:30 POST /form/attachments 404 100 % 100 % VeryHigh Allow 0.5ms

Analysis

Suspicious automated client on /form/api/media - caught by ua:d245b2801e017f4f; ip:185.177.72.0/24, Previously identified as bot (UserAgent seen 39 times), Tool UA (curl) with 1 browser-only header(s) — likely spo...

Detection Signals

  • • ua:d245b2801e017f4f; ip:185.177.72.0/24
  • • Previously identified as bot (UserAgent seen 39 times)
  • • Tool UA (curl) with 1 browser-only header(s) — likely spoofed
  • • Heuristic model (early): 60 % bot likelihood (19 features)
  • • Request patterns appear normal

Detector Contributions (10 detectors)

ReputationBias
+1.587
0.0ms
ua:d245b2801e017f4f; ip:185.177.72.0/24
FastPathReputation
+0.600
0.0ms
Previously identified as bot (UserAgent seen 39 times)
UserAgent
+0.550
0.0ms
Tool UA (curl) with 1 browser-only header(s) — likely spoofed
Heuristic
+0.198
0.0ms
Heuristic model (early): 60 % bot likelihood (19 features)
Behavioral
-0.300
0.0ms
Request patterns appear normal
Ip
-0.250
0.0ms
IP appears normal: 185.177.72.xxx
Header
-0.150
0.0ms
Headers appear normal
Inconsistency
-0.100
0.0ms
No header/UA inconsistencies detected
VersionAge
-0.050
0.0ms
Browser/OS versions appear current
SecurityTool
+0.000
0.0ms
No security tools detected in User-Agent

Signal Intelligence

behavioral

anomaly False

header

count 20
has_accept True
sec_fetch_dest
sec_fetch_mode
sec_fetch_site
has_proxy_headers True
has_accept_encoding True
has_accept_language True
is_websocket_upgrade False
sec_fetch_same_origin False

heuristic

confidence 0.19810079953941995
prediction bot
early_completed True

ip

is_ipv6 False
is_local False
is_datacenter False

reputation

ip.score 0.7932852977924721
ip.state ConfirmedBad
can_abort True
bias_count 2
ip.support 39.03244609885142
bias_applied True
fastpath_hit True
useragent.score 0.7932852958337162
useragent.state ConfirmedBad
fast_abort_active True
useragent.support 39.032445968508995
fastpath.useragent.score 0.7932852958337162
fastpath.useragent.state ConfirmedBad
fastpath.useragent.support 39.032445968508995
fastpath.useragent.pattern_id ua:d245b2801e017f4f

request

protocol HTTP/1.1
accept_encoding gzip

ua

family curl
is_bot True
bot_name curl
bot_type Tool
family_version 8.7
Signature: 7YG6dNIWYIFaUESSDBB5DA | Processing: 0.5ms | Country: FR