You: Bot 100.0% Low
← Dashboard / Signature Detail
US

Googlebot

 · Googlebot 2.1 / Android Bot
SearchEngine
Policy: Allow
Probability
100 %
Confidence
93 %
Risk Profile
VeryHigh
Threat
None
Hit Count
38
Last Seen
33s ago

Analysis

Googlebot on /dashboard/domain... - caught by Known bot UA pattern: Googlebot, Request patterns appear normal, IP appears normal: 66.249.69.xxx

Detection Signals

  • ↑ Heuristic model (late): 97 % bot likelihood (331 features) 2.36
  • ↑ Known bot UA pattern: Googlebot 1.35
  • ↑ Heuristic model (early): 73 % bot likelihood (23 features) 0.92
  • ↓ IP appears normal: 66.249.69.xxx 0.15
  • ↓ Request patterns appear normal 0.15
  • ↓ TLS connection appears normal 0.15
Network Locale Headers Tool Transport Session Quality
Closest to
Googlebot
Drift vs
28.3%

Fingerprint Profile

TLS Version
TLSv1.3
HTTP Protocol
HTTP/1.1
Protocol Client
TLS_AES_256_GCM_SHA384
TCP OS Hint
Unavailable
Fingerprint Integrity
Suspect
UA Consistency
Flagged
Headless Indicator
Low
Datacenter IP
Clean

Browser modes same browser, different modes. One row per persisted mode

Mode Observations Maturity Shift from baseline Last seen
bot-raw 5008 5008 0.01 (ua family, priority, sec fetch pattern) 19:59:55
signalr-negotiate 20 20 0.53 (ua family, priority, sec ch ua brands ordered) 17:21:20
sub-resource 38 38 0.50 (priority, ua family, ip subnet) 14:26:09
navigation 27 27 0.62 (ua family, upgrade insecure requests, custom header signature) 11:36:09
websocket-upgrade 3 3 0.48 (ua family, cache control pragma, header order hash) 20:27:40
5 modes across 5096 observations. See composite browser-mode fingerprints.
Endpoints Visited (36) Click to expand · stats unavailable
# Path
1 /dashboard/domains/shape
2 /dashboard/entity/94228dcf8a1f4c7e
3 /dashboard/entity/01fed2061265452a
4 /dashboard/signature/23j7S3186TWbidjKuUiiqg
5 /dashboard/entity/78090ae1e06543da
6 /dashboard/signature/QMzTKXgT7dqFJtc_XTTGpA
7 /trial
8 /account/login
9 /dashboard/entity/e15a5f6b4b064cc4
10 /dashboard/signature/fJW9pIxtpZgS1P-x30SXUw
11 /dashboard/site/endpoint
12 /dashboard/entity/599e198823da4701
13 /dashboard/entity/38da16f63b7b4d96
14 /dashboard/signature/PBRM8Gzrezo0GRfJbdSJBw
15 /dashboard/signature/HjMfqEU4BIQ-Zl4Y8TlaHw
16 /dashboard/site
17 /dashboard/signature/GLCevClHdat9l2iwWDYUZg
18 /_content/Mostlylucid.BotDetection.UI/js/vendor/chart.umd.min.js
19 /dashboard/signature/YCGYkb2MQf_hpLysZ7DoRA
20 /dashboard/entity/416f23416e06488e
21 /dashboard/signature/jn9jMEc77TGa95IVxNdnzQ
22 /dashboard/investigate
23 /dashboard/entity/4b79c0f217424cb9
24 /legal/dpa
25 /_content/Mostlylucid.BotDetection.UI/vendor/js/idiomorph-ext.min.js
26 /_content/Mostlylucid.BotDetection.UI/vendor/js/sb-live-updates.js
27 /_content/Mostlylucid.BotDetection.UI/vendor/js/policy-stack-tabs.js
28 /dashboard/signature/urFmhQI2RqyVbvmaAuXh0A
29 /dashboard/signature/9lfgpW-Ku1s7J4NfTDQ9RA
30 /_content/Mostlylucid.BotDetection.UI/vendor/js/signalr.min.js
31 /_content/Mostlylucid.BotDetection.UI/flags/lu.svg
32 /dashboard/signature/E8A6x36keGjTaKlqSKaBlw
33 /_content/Mostlylucid.BotDetection.UI/vendor/css/sb-live-updates.css
34 /dist/assets/index.js
35 /_content/Mostlylucid.BotDetection.UI/css/sb-policy-stack-card.css
36 /dashboard/signature/G91JV7Y2Q9nmh2rSM25oFQ
Raw Requests (38) Click to expand
Time Method Path Status Prob Conf Risk Profile Action Time
19:51:47 GET /dashboard/domains/shape 200 100 % 100 % VeryLow Allow 15.8ms
19:41:46 GET /dashboard/domains/shape 200 100 % 100 % VeryLow Allow 14.5ms
19:11:59 GET /dashboard/entity/94228dcf8a1f4c7e 302 100 % 100 % VeryLow Allow 12.8ms
19:01:56 GET /dashboard/entity/01fed2061265452a 302 100 % 100 % VeryLow Allow 13.6ms
18:41:48 GET /dashboard/signature/23j7S3186TWbidjKuUiiqg 200 100 % 100 % VeryLow Allow 12.3ms
18:41:48 GET /dashboard/entity/78090ae1e06543da 302 100 % 100 % VeryLow Allow 15.1ms
14:55:15 GET /dashboard/signature/QMzTKXgT7dqFJtc_XTTGpA 200 100 % 100 % VeryLow Allow 66.6ms
13:28:45 GET /trial 502 100 % 100 % VeryLow Allow 13.1ms
21:34:50 GET /account/login 500 100 % 100 % VeryLow Allow 14.4ms
20:50:29 GET /dashboard/entity/e15a5f6b4b064cc4 302 100 % 100 % VeryLow Allow 14.5ms
20:44:50 GET /dashboard/signature/fJW9pIxtpZgS1P-x30SXUw 200 100 % 100 % VeryLow Allow 22.1ms
19:34:28 GET /dashboard/site/endpoint 200 100 % 100 % VeryLow Allow 62.8ms
19:14:18 GET /dashboard/signature/fJW9pIxtpZgS1P-x30SXUw 200 100 % 100 % VeryLow Allow 11.6ms
19:14:15 GET /dashboard/entity/599e198823da4701 302 100 % 100 % VeryLow Allow 13.6ms
18:44:50 GET /dashboard/entity/38da16f63b7b4d96 302 100 % 100 % VeryLow Allow 14.0ms
18:05:33 GET /dashboard/signature/PBRM8Gzrezo0GRfJbdSJBw 200 100 % 100 % VeryLow Allow 11.5ms
15:14:21 GET /dashboard/signature/HjMfqEU4BIQ-Zl4Y8TlaHw 200 100 % 100 % VeryLow Allow 12.7ms
13:53:37 GET /dashboard/site 200 100 % 100 % VeryLow Allow 12.3ms
09:29:01 GET /dashboard/signature/GLCevClHdat9l2iwWDYUZg 200 100 % 100 % VeryLow Allow 13.0ms
22:12:20 GET /_content/Mostlylucid.BotDetection.UI/js/vendor/chart.umd.min.js 200 100 % 100 % VeryLow Allow 11.9ms
22:12:04 GET /dashboard/signature/YCGYkb2MQf_hpLysZ7DoRA 200 100 % 100 % VeryLow Allow 12.0ms
22:12:01 GET /dashboard/entity/416f23416e06488e 302 100 % 100 % VeryLow Allow 13.9ms
19:10:21 GET /dashboard/signature/jn9jMEc77TGa95IVxNdnzQ 200 100 % 100 % VeryLow Allow 14.1ms
17:34:13 GET /dashboard/investigate 301 100 % 100 % VeryLow Allow 14.3ms
17:29:49 GET /dashboard/entity/4b79c0f217424cb9 302 100 % 100 % VeryLow Allow 13.8ms
17:24:18 GET /legal/dpa 200 100 % 100 % VeryLow Allow 11.9ms
17:22:20 GET /_content/Mostlylucid.BotDetection.UI/vendor/js/idiomorph-ext.min.js 200 100 % 100 % VeryLow Allow 11.7ms
17:22:18 GET /_content/Mostlylucid.BotDetection.UI/vendor/js/sb-live-updates.js 200 100 % 100 % VeryLow Allow 10.9ms
17:22:16 GET /_content/Mostlylucid.BotDetection.UI/vendor/js/policy-stack-tabs.js 200 100 % 100 % VeryLow Allow 11.9ms
17:21:35 GET /dashboard/signature/urFmhQI2RqyVbvmaAuXh0A 200 100 % 100 % VeryLow Allow 13.1ms
17:03:09 GET /dashboard/signature/9lfgpW-Ku1s7J4NfTDQ9RA 200 100 % 100 % VeryLow Allow 14.2ms
17:01:17 GET /_content/Mostlylucid.BotDetection.UI/vendor/js/signalr.min.js 200 100 % 100 % VeryLow Allow 12.1ms
17:01:15 GET /_content/Mostlylucid.BotDetection.UI/flags/lu.svg 200 100 % 100 % VeryLow Allow 11.6ms
17:01:07 GET /dashboard/signature/E8A6x36keGjTaKlqSKaBlw 200 100 % 100 % VeryLow Allow 12.7ms
16:52:51 GET /_content/Mostlylucid.BotDetection.UI/vendor/css/sb-live-updates.css 200 100 % 100 % VeryLow Allow 11.9ms
16:52:50 GET /dist/assets/index.js 200 100 % 100 % VeryLow Allow 11.6ms
16:52:48 GET /_content/Mostlylucid.BotDetection.UI/css/sb-policy-stack-card.css 200 100 % 100 % VeryLow Allow 11.7ms
16:52:37 GET /dashboard/signature/G91JV7Y2Q9nmh2rSM25oFQ 200 100 % 100 % VeryLow Allow 13.6ms

Bot Probability & Confidence History

StyloBot Detection Overhead (ms)

User Agent

Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/[phone] Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)

Detector Contributions (20 detectors)

Detector Confidence Delta Timing (ms)
HeuristicLate
Heuristic model (late): 97 % bot likelihood (331 features)
 +0.943 0.7
UserAgent
Known bot UA pattern: Googlebot
 +0.900 0.3
Heuristic
Heuristic model (early): 73 % bot likelihood (23 features)
 +0.460 0.1
Ip
IP appears normal: 66.249.69.xxx
 -0.150 3.0
Behavioral
Request patterns appear normal
 -0.150 0.1
TlsFingerprint
TLS connection appears normal
 -0.150 0.0
AI
AI analysis: borderline case, monitoring
 +0.000 10.9
Header
Browser UA without Accept-Language; deployment norm is low language rate (52 % over 193 samples)
 +0.000 0.0
AiScraper
No AI scraper signals detected
 +0.000 0.1
VerifiedBot
Verified Googlebot via ip_range
 +0.000 0.0
SecurityTool
No security tools detected in User-Agent
 +0.000 0.1
ContentSequence
Document hit; sequence reset at /dashboard/domains/shape
 +0.000 0.1
RequestHydrator
Request signals hydrated to sink
 +0.000 0.0
Http2Fingerprint
Using HTTP/1.1; environment norm is HTTP/1.1 (38 % HTTP/2 over 53 samples)
 +0.000 0.1
Http3Fingerprint
Connection uses HTTP/1.1 (not HTTP/3)
 +0.000 0.0
TcpIpFingerprint
Network fingerprint analysis complete (no anomalies detected)
 +0.000 0.0
HeaderCorrelation
Single signature per header profile
 +0.000 0.0
TransportProtocol
Transport protocol analysis complete
 +0.000 0.0
VerifiedBotInline
Verified Googlebot via published IP range
 +0.000 0.1
FastPathReputation
No known patterns in reputation cache
 +0.000 0.0

Signal Intelligence

request

protocol HTTP/1.1
accept_encoding gzip, deflate, br

risk

justification Cryptographically verified good bot

tls

cipher TLS_AES_256_GCM_SHA384
Version TLSv1.3
version TLSv1.3

Policy applied

Hit history

No sessions recorded yet.

Sessions are created when a visitor's activity gap exceeds 30 minutes.

Effective policy
Loading effective policy…
ASP.NET Pack — Auth health
JWKS health
OK

reachable

Auth pipeline
JWKS reachable
License
Licensed

ASP.NET pack enabled

OTel Mesh — Traces

Fingerprint timeline

5a36b9e9b2994562b9871ac69b1d975f 0 observations

Span + log activity for this fingerprint, ordered by timestamp.

No timeline observations

OTel Mesh receiver online, but no observations seen for this fingerprint id (check W3C baggage propagation)

Operator actions

Operator actions

Block/Allow writes a scoped policy rule for this fingerprint — a policy action, applied via the live policy pipe. It is never a skip-detection bypass.

Signature: 6v8V0VGOWZrQNZ43M7efUQ | Processing: 16ms | Country: US | UA: Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/[phone] Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) | First seen: 2026-07-23 16:52:37 UTC

Apply Bot Policy

GET /path 

            

            

            

                
                    FOSS: restart required after config changes