You: Bot 100.0% Low
← Dashboard / Signature Detail
US

Bingbot

· bingbot 2.0 Bot
SearchEngine
Policy: Allow
Probability
100 %
Confidence
91 %
Risk Profile
VeryHigh
Threat
None
Hit Count
50
Last Seen
16s ago

Analysis

Bingbot on /dashboard/signat... - caught by Known bot UA pattern: Bingbot, Datacenter IP detected: Azure, Request patterns appear normal

Detection Signals

  • Heuristic model (late): 99 % bot likelihood (308 features) 2.44
  • Heuristic model (early): 85 % bot likelihood (23 features) 1.38
  • Known bot UA pattern: Bingbot 1.35
  • Datacenter IP detected: Azure 0.72
  • Request patterns appear normal 0.15
  • TLS connection appears normal 0.15
Network Locale Headers Tool Transport Session Quality
Drift vs
35.8%

Fingerprint Profile

TLS Version
TLSv1.3
HTTP Protocol
HTTP/2
Protocol Client
TLS_AES_256_GCM_SHA384
TCP OS Hint
Unavailable
Fingerprint Integrity
Suspect
UA Consistency
Flagged
Headless Indicator
Low
Datacenter IP
Clean

Browser modes same browser, different modes. One row per persisted mode

Mode Observations Maturity Shift from baseline Last seen
bot-raw 6632 6632 0.01 (cache control pragma, ua family, header order hash) 18:59:18
websocket-upgrade 161 161 0.31 (cache control pragma, ua family, header order hash) 06:30:21
signalr-negotiate 43 43 0.38 (cache control pragma, priority, ua family) 06:30:11
navigation 20 20 0.52 (upgrade insecure requests, priority, header order hash) 16:54:37
sub-resource 13 13 0.41 (priority, referer host family, ua family) 02:09:47
5 modes across 6869 observations. See composite browser-mode fingerprints.
Endpoints Visited (44) Click to expand · stats unavailable
# Path
1 /dashboard/signature/8TSe-bn1XEnjJbEcgurZvA
2 /dashboard/signature/KD6v48f8UnIE8UJdhQYM6g
3 /dashboard/entity/01d5424a5dd74389
4 /_stylobot/signature/M1FBeAAUcjcbSL50n-bhBg
5 /dashboard/signature/xtjIdRSOyqxVH3OaXlabZw
6 /dashboard/signature/-jpd5NF7IX9fNVVwoLhVFQ
7 /dashboard/signature/XZo7_JB1Tnqi8h9y-pMz_Q
8 /dashboard/signature/06abTvXBfg7ithbU6vTDaA
9 /dashboard/signature/a4b2e21ab18cd0e6
10 /dashboard/signature/XgJaBrZO6diz2ib7voMiSA
11 /dashboard/traffic
12 /dashboard/signature/Ux3VbkVC5IYSuh0tLXmfzQ
13 /dashboard/signature/hn2YKhWFhFuQjmKnZotYiA
14 /dashboard/signature/ViaHgzZoHiwSeblNdUWRWA
15 /dashboard/signature/c5ZvD5Ozo7gSIc-oV-2IfA
16 /open-source
17 /dashboard/signature/Rq2f8TbAyvjoz33CnWGBPA
18 /dashboard/signature/VQx8MdwFro438I4bFcx_RA
19 /dashboard/signature/vf86JcNqAnDRyPYt0DgMdw
20 /dashboard/signature/VcQFCEZH5pIZJ64E0QsKRA
21 /dashboard/signature/F8GFNeJeCE3jFJU1keJgDw
22 /dashboard/signature/4_8VXGaqpYx1-gcXXDOjQg
23 /dashboard/overview
24 /dashboard/signature/Wjr_MoNd1H4C0dbfqgRiCw
25 /dashboard/signature/uAFARDODMAe-vNC7vWuB7g
26 /dashboard/signature/NMgkfs1vRGGkFe-DOuTM1w
27 /account/login
28 /dashboard/site
29 /dashboard/endpoints
30 /dashboard/entity/65320c282e474459
31 /dashboard/signature/gc4Bx7X33Qlk5aq9uWlyeg
32 /dashboard/signature/blh45_wSfnTDowjbLB6FRQ
33 /dashboard/entity/2f170a8fa09844e1
34 /dashboard/signature/lDxREJsqnuuaN_sOq7wPZA
35 /dashboard/site/endpoint
36 /dashboard/aspnet-pack/identity
37 /dashboard/signature/WiPl6WX_8-5e9GBetfAvXw
38 /dashboard/visitors
39 /dashboard/signature/uWEmDZCw3bmmTYbsNy4pZg
40 /dashboard/signature/82CdGgqRfnmYndg3KNatug
41 /dashboard/signature/VlOniMHtrFbcV8RG41rSyA
42 /dashboard/entity/8b83d85f0c81418d
43 /dashboard/signature/UQXM_Vz_fcAy24x04k8KKQ
44 /dashboard/signature/qTrPmyeFSpg-xLteg9_i8A
Raw Requests (50) Click to expand
Time Method Path Status Prob Conf Risk Profile Action Time
18:55:37 GET /dashboard/signature/8TSe-bn1XEnjJbEcgurZvA 404 100 % 100 % VeryLow Allow 11.6ms
18:54:17 GET /dashboard/signature/KD6v48f8UnIE8UJdhQYM6g 200 100 % 100 % VeryLow Allow 12.2ms
18:54:16 GET /dashboard/entity/01d5424a5dd74389 302 100 % 100 % VeryLow Allow 11.3ms
18:53:19 GET /_stylobot/signature/M1FBeAAUcjcbSL50n-bhBg 404 100 % 100 % VeryLow Allow 170.2ms
17:10:41 GET /dashboard/signature/xtjIdRSOyqxVH3OaXlabZw 200 100 % 100 % VeryLow Allow 11.3ms
17:10:06 GET /dashboard/signature/-jpd5NF7IX9fNVVwoLhVFQ 200 100 % 100 % VeryLow Allow 11.6ms
17:09:36 GET /dashboard/signature/XZo7_JB1Tnqi8h9y-pMz_Q 200 100 % 100 % VeryLow Allow 11.5ms
17:09:21 GET /dashboard/signature/06abTvXBfg7ithbU6vTDaA 200 100 % 100 % VeryLow Allow 11.3ms
17:08:28 GET /dashboard/signature/a4b2e21ab18cd0e6 404 100 % 100 % VeryLow Allow 12.6ms
17:08:26 GET /dashboard/signature/XgJaBrZO6diz2ib7voMiSA 200 100 % 100 % VeryLow Allow 85.4ms
13:16:06 GET /dashboard/traffic 502 100 % 100 % VeryLow Allow 12.0ms
13:07:44 GET /dashboard/signature/Ux3VbkVC5IYSuh0tLXmfzQ 502 100 % 100 % VeryLow Allow 11.6ms
13:07:44 GET /dashboard/signature/hn2YKhWFhFuQjmKnZotYiA 502 100 % 100 % VeryLow Allow 11.5ms
11:55:26 GET /dashboard/signature/ViaHgzZoHiwSeblNdUWRWA 502 100 % 100 % VeryLow Allow 59.7ms
04:26:44 GET /dashboard/signature/c5ZvD5Ozo7gSIc-oV-2IfA 200 100 % 100 % VeryLow Allow 11.7ms
04:20:57 GET /dashboard/signature/Ux3VbkVC5IYSuh0tLXmfzQ 200 100 % 100 % VeryLow Allow 11.7ms
04:20:55 GET /dashboard/signature/hn2YKhWFhFuQjmKnZotYiA 200 100 % 100 % VeryLow Allow 11.5ms
02:12:30 GET /open-source 200 100 % 100 % VeryLow Allow 11.3ms
23:15:15 GET /dashboard/signature/Rq2f8TbAyvjoz33CnWGBPA 200 100 % 100 % VeryLow Allow 11.8ms
21:23:50 GET /dashboard/signature/VQx8MdwFro438I4bFcx_RA 200 100 % 100 % VeryLow Allow 11.2ms
16:11:07 GET /dashboard/signature/vf86JcNqAnDRyPYt0DgMdw 200 100 % 100 % VeryLow Allow 11.8ms
23:43:01 GET /dashboard/signature/hn2YKhWFhFuQjmKnZotYiA 200 100 % 100 % VeryLow Allow 10.8ms
23:35:30 GET /dashboard/signature/VcQFCEZH5pIZJ64E0QsKRA 200 100 % 100 % VeryLow Allow 12.2ms
20:53:38 GET /dashboard/signature/06abTvXBfg7ithbU6vTDaA 200 100 % 100 % VeryLow Allow 11.7ms
16:51:54 GET /dashboard/signature/F8GFNeJeCE3jFJU1keJgDw 200 100 % 100 % VeryLow Allow 11.4ms
15:13:57 GET /dashboard/signature/4_8VXGaqpYx1-gcXXDOjQg 200 100 % 100 % VeryLow Allow 11.6ms
15:11:17 GET /dashboard/traffic 200 100 % 100 % VeryLow Allow 10.6ms
15:11:11 GET /dashboard/overview 301 100 % 100 % VeryLow Allow 12.1ms
15:10:59 GET /dashboard/signature/Wjr_MoNd1H4C0dbfqgRiCw 200 100 % 100 % VeryLow Allow 11.6ms
20:41:41 GET /dashboard/signature/uAFARDODMAe-vNC7vWuB7g 200 100 % 100 % VeryLow Allow 12.1ms
20:35:10 GET /dashboard/signature/NMgkfs1vRGGkFe-DOuTM1w 200 100 % 100 % VeryLow Allow 11.6ms
13:36:52 GET /account/login 500 100 % 100 % VeryLow Allow 11.9ms
13:33:21 GET /dashboard/site 200 100 % 100 % VeryLow Allow 12.0ms
13:33:20 GET /dashboard/endpoints 301 100 % 100 % VeryLow Allow 11.7ms
13:30:34 GET /dashboard/entity/65320c282e474459 404 100 % 100 % VeryLow Allow 11.4ms
08:15:53 GET /dashboard/signature/gc4Bx7X33Qlk5aq9uWlyeg 404 100 % 100 % VeryLow Allow 11.7ms
03:52:52 GET /dashboard/signature/blh45_wSfnTDowjbLB6FRQ 200 100 % 100 % VeryLow Allow 22.5ms
03:52:52 GET /dashboard/entity/2f170a8fa09844e1 302 100 % 100 % VeryLow Allow 11.6ms
16:48:17 GET /dashboard/signature/lDxREJsqnuuaN_sOq7wPZA 200 100 % 100 % VeryLow Allow 11.2ms
15:57:44 GET /dashboard/site/endpoint 200 100 % 100 % VeryLow Allow 12.1ms
10:56:10 GET /dashboard/aspnet-pack/identity 200 100 % 100 % VeryLow Allow 11.7ms
10:51:27 GET /dashboard/signature/WiPl6WX_8-5e9GBetfAvXw 200 100 % 100 % VeryLow Allow 11.7ms
10:02:59 GET /dashboard/visitors 200 100 % 100 % VeryLow Allow 12.1ms
05:53:09 GET /dashboard/site/endpoint 200 100 % 100 % VeryLow Allow 51.9ms
12:21:50 GET /dashboard/signature/uWEmDZCw3bmmTYbsNy4pZg 200 100 % 100 % VeryLow Allow 11.4ms
11:52:37 GET /dashboard/signature/82CdGgqRfnmYndg3KNatug 200 100 % 100 % VeryLow Allow 11.6ms
01:39:09 GET /dashboard/signature/VlOniMHtrFbcV8RG41rSyA 200 100 % 100 % VeryLow Allow 11.7ms
01:39:08 GET /dashboard/entity/8b83d85f0c81418d 302 100 % 100 % VeryLow Allow 11.7ms
01:38:39 GET /dashboard/signature/UQXM_Vz_fcAy24x04k8KKQ 200 100 % 100 % VeryLow Allow 12.0ms
00:31:40 GET /dashboard/signature/qTrPmyeFSpg-xLteg9_i8A 200 100 % 100 % VeryLow Allow 10.6ms

Bot Probability & Confidence History

StyloBot Detection Overhead (ms)

User Agent

Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/[phone] Safari/537.36

Detector Contributions (18 detectors)

Detector Confidence Delta Timing (ms)
HeuristicLate
Heuristic model (late): 99 % bot likelihood (308 features)
+0.975 0.4
Heuristic
Heuristic model (early): 85 % bot likelihood (23 features)
+0.692 0.1
UserAgent
Known bot UA pattern: Bingbot
+0.900 0.3
Ip
Datacenter IP detected: Azure
+0.600 0.0
Behavioral
Request patterns appear normal
-0.150 0.1
TlsFingerprint
TLS connection appears normal
-0.150 0.0
TcpIpFingerprint
Missing connection reuse header (unusual for real browsers)
+0.200 0.0
Http2Fingerprint
No HTTP/2 stream priority (browsers typically use this)
+0.050 0.0
AI
AI analysis: borderline case, monitoring
+0.000 10.3
Header
Browser UA without Accept-Language; deployment norm is low language rate (53 % over 34 samples)
+0.000 0.0
AiScraper
No AI scraper signals detected
+0.000 0.0
VerifiedBot
Verified Bingbot via fcrdns
+0.000 0.1
SecurityTool
No security tools detected in User-Agent
+0.000 0.1
RequestHydrator
Request signals hydrated to sink
+0.000 0.0
Http3Fingerprint
Connection uses HTTP/2 (not HTTP/3)
+0.000 0.0
HeaderCorrelation
Single signature per header profile
+0.000 0.0
TransportProtocol
Transport protocol analysis complete
+0.000 0.0
FastPathReputation
No known patterns in reputation cache
+0.000 0.0

Signal Intelligence

h2

protocol h2

request

protocol HTTP/2
accept_encoding gzip, br

risk

justification Cryptographically verified good bot

tls

cipher TLS_AES_256_GCM_SHA384
Version TLSv1.3
version TLSv1.3

Policy applied

Hit history

No sessions recorded yet.

Sessions are created when a visitor's activity gap exceeds 30 minutes.

Effective policy
Loading effective policy…
ASP.NET Pack — Auth health
JWKS health
OK

reachable

Auth pipeline
JWKS reachable
License
Licensed

ASP.NET pack enabled

OTel Mesh — Traces

Fingerprint timeline

0db480094fd94861be66ee04ea505cf9 0 observations

Span + log activity for this fingerprint, ordered by timestamp.

No timeline observations

OTel Mesh receiver online, but no observations seen for this fingerprint id (check W3C baggage propagation)

Operator actions

Operator actions

Block/Allow writes a scoped policy rule for this fingerprint — a policy action, applied via the live policy pipe. It is never a skip-detection bypass.

Signature: VAGJrHJDUQgP8C_ewWp2OA | Processing: 12ms | Country: US | UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/[phone] Safari/537.36 | First seen: 2026-07-20 00:31:40 UTC