• You: Bot 100.0% Low
    ← Dashboard / Signature Detail
    US

    SemrushBot semrush.com

     · SemrushBot 7 Bot
    GoodBot
    Policy: rate-limit-search
    Probability
    100 %
    Confidence
    93 %
    Risk Profile
    VeryHigh
    Threat
    None
    Hit Count
    25
    Last Seen
    now

    Analysis

    SemrushBot semrush.com on /account/login - caught by Known bot pattern: SemrushBot, TLS connection appears normal, Request patterns appear normal

    Detection Signals

    • ↑ Heuristic model (late): 97 % bot likelihood (307 features) 2.36
    • ↑ Known bot pattern: SemrushBot 1.35
    • ↑ Heuristic model (early): 73 % bot likelihood (19 features) 0.93
    • ↓ IP appears normal: 85.208.96.xxx 0.15
    • ↓ Headers appear normal 0.15
    • ↓ Request patterns appear normal 0.15
    Network Locale Headers Tool Transport Session Quality
    Drift vs
    40.5%

    Fingerprint Profile

    TLS Version
    TLSv1.3
    HTTP Protocol
    HTTP/1.1
    Protocol Client
    TLS_AES_256_GCM_SHA384
    TCP OS Hint
    Unavailable
    Fingerprint Integrity
    Suspect
    UA Consistency
    Flagged
    Headless Indicator
    Low
    Datacenter IP
    Clean

    Browser modes same browser, different modes. One row per persisted mode

    Mode Observations Maturity Shift from baseline Last seen
    bot-raw 3079 3079 0.00 (ua family, ip subnet, header order hash) 21:40:23
    1 mode across 3079 observations. See composite browser-mode fingerprints.
    Endpoints Visited (15) Click to expand · stats unavailable
    # Path
    1 /account/login
    2 /dashboard/signature/HIssvMCplJo1I4j9d39rCw
    3 /dashboard/traffic
    4 /dashboard/entity/1b28031d64ff47ab
    5 /dashboard/signature/qGT9vgoQ-f0D-dWB7BwTgA
    6 /benchmarks
    7 /dashboard/signature/2QRwElPySBkbPvNK7-2iJw
    8 /dashboard/signature/N6AjWZhSxK5jwA-eI_XYug
    9 /dashboard/entity/c71d049ccd464247
    10 /dashboard/entity/91aac6028b96414c
    11 /dashboard/entity/4249cb3d4ca744e7
    12 /dashboard/entity/c87ddae860e94976
    13 /dashboard/entity/147f86dfbe6f4c03
    14 /dashboard/entity/a426792b0a154590
    15 /dashboard/insights/aspnet_pack_log_sink_queue_depth
    Raw Requests (25) Click to expand
    Time Method Path Status Prob Conf Risk Profile Action Time
    11:13:06 GET /account/login 500 100 % 50 % VeryHigh rate-limit-search 122.1ms
    07:44:58 GET /dashboard/signature/HIssvMCplJo1I4j9d39rCw 200 100 % 50 % VeryHigh rate-limit-search 176.8ms
    06:41:58 GET /account/login 500 100 % 50 % VeryHigh rate-limit-search 123.2ms
    04:37:30 GET /dashboard/traffic 200 100 % 50 % VeryHigh rate-limit-search 160.7ms
    03:36:51 GET /dashboard/entity/1b28031d64ff47ab 302 100 % 50 % VeryHigh rate-limit-search 172.6ms
    22:27:26 GET /account/login 500 100 % 50 % VeryHigh rate-limit-search 148.9ms
    17:06:55 GET /dashboard/signature/qGT9vgoQ-f0D-dWB7BwTgA 200 100 % 50 % VeryHigh rate-limit-search 103.3ms
    14:52:02 GET /benchmarks 200 100 % 50 % VeryHigh rate-limit-search 103.4ms
    09:57:05 GET /dashboard/signature/2QRwElPySBkbPvNK7-2iJw 200 100 % 50 % VeryHigh rate-limit-search 67.4ms
    01:46:43 GET /dashboard/signature/N6AjWZhSxK5jwA-eI_XYug 200 100 % 50 % VeryHigh rate-limit-search 64.7ms
    09:58:49 GET /account/login 500 100 % 50 % VeryHigh rate-limit-search 193.4ms
    22:25:31 GET /account/login 500 100 % 50 % VeryHigh rate-limit-search 185.3ms
    21:44:37 GET /account/login 500 100 % 50 % VeryHigh rate-limit-search 103.9ms
    15:39:34 GET /account/login 500 100 % 50 % VeryHigh rate-limit-search 127.1ms
    11:25:28 GET /account/login 500 100 % 50 % VeryHigh rate-limit-search 97.3ms
    20:11:22 GET /dashboard/entity/c71d049ccd464247 302 100 % 50 % VeryHigh rate-limit-search 156.0ms
    19:06:21 GET /dashboard/traffic 200 100 % 50 % VeryHigh rate-limit-search 13.8ms
    18:58:18 GET /dashboard/entity/91aac6028b96414c 302 100 % 50 % VeryHigh rate-limit-search 183.7ms
    18:14:08 GET /dashboard/entity/4249cb3d4ca744e7 302 100 % 50 % VeryHigh rate-limit-search 100.1ms
    16:21:35 GET /dashboard/entity/c87ddae860e94976 302 100 % 50 % VeryHigh rate-limit-search 93.5ms
    13:12:59 GET /dashboard/entity/147f86dfbe6f4c03 302 100 % 50 % VeryHigh rate-limit-search 68.2ms
    10:23:52 GET /dashboard/entity/a426792b0a154590 302 100 % 50 % VeryHigh rate-limit-search 68.5ms
    20:58:31 GET /dashboard/insights/aspnet_pack_log_sink_queue_depth 200 100 % 50 % VeryHigh rate-limit-search 117.8ms
    13:05:46 GET /account/login 200 100 % 50 % VeryHigh rate-limit-search 128.5ms
    07:03:43 GET /account/login 200 100 % 50 % VeryHigh rate-limit-search 121.2ms

    Bot Probability & Confidence History

    StyloBot Detection Overhead (ms)

    User Agent

    Mozilla/5.0 (compatible; SemrushBot/7~bl; +http://www.semrush.com/bot.html)

    Detector Contributions (19 detectors)

    Detector Confidence Delta Timing (ms)
    HeuristicLate
    Heuristic model (late): 97 % bot likelihood (307 features)
    		 +0.945 0.2
    UserAgent
    Known bot pattern: SemrushBot
    		 +0.900 0.1
    Heuristic
    Heuristic model (early): 73 % bot likelihood (19 features)
    		 +0.467 0.1
    Ip
    IP appears normal: 85.208.96.xxx
    		 -0.150 1.5
    Header
    Headers appear normal
    		 -0.150 0.0
    Behavioral
    Request patterns appear normal
    		 -0.150 0.1
    TlsFingerprint
    TLS connection appears normal
    		 -0.150 0.0
    VerifiedBot
    rDNS mismatch: UA claims www.semrush.com but rDNS is 206.bl.bot.semrush.com
    		 +0.250 109.7
    TcpIpFingerprint
    Client closes connection after each request (bots often avoid persistent connections)
    		 +0.100 0.0
    Http2Fingerprint
    Using HTTP/1.1 instead of HTTP/2 (HTTP/2 rate: 0 % over 13 samples)
    		 +0.050 0.0
    AI
    AI analysis: borderline case, monitoring
    		 +0.000 10.2
    AiScraper
    No AI scraper signals detected
    		 +0.000 0.0
    SecurityTool
    No security tools detected in User-Agent
    		 +0.000 0.0
    ContentSequence
    Document hit; sequence reset at /account/login
    		 +0.000 0.1
    RequestHydrator
    Request signals hydrated to sink
    		 +0.000 0.0
    Http3Fingerprint
    Connection uses HTTP/1.1 (not HTTP/3)
    		 +0.000 0.0
    HeaderCorrelation
    Single signature per header profile
    		 +0.000 0.0
    TransportProtocol
    Transport protocol analysis complete
    		 +0.000 0.0
    FastPathReputation
    No known patterns in reputation cache
    		 +0.000 0.0

    Signal Intelligence

    request

    protocol HTTP/1.1
    accept_encoding gzip,deflate

    risk

    justification Classified GoodBot (probability 1.00, confidence 0.50)
    friendly_pin_trace skipped:no_corroboration (UA claims SemrushBot semrush.com as GoodBot)

    tls

    cipher TLS_AES_256_GCM_SHA384
    Version TLSv1.3
    version TLSv1.3

    Policy applied

    Hit history

    No sessions recorded yet.

    Sessions are created when a visitor's activity gap exceeds 30 minutes.

    Effective policy
    Loading effective policy…
    ASP.NET Pack — Auth health
    JWKS health
    OK

    reachable

    Auth pipeline
    JWKS reachable
    License
    Licensed

    ASP.NET pack enabled

    OTel Mesh — Traces

    Fingerprint timeline

    c0ac70741c6c4d2aa4af0f5649fd8b18 0 observations

    Span + log activity for this fingerprint, ordered by timestamp.

    No timeline observations

    OTel Mesh receiver online, but no observations seen for this fingerprint id (check W3C baggage propagation)

    Operator actions

    Operator actions

    Block/Allow writes a scoped policy rule for this fingerprint — a policy action, applied via the live policy pipe. It is never a skip-detection bypass.

    Signature: v5siEtWFJYaDewUhh_jjmw | Processing: 122ms | Country: US | UA: Mozilla/5.0 (compatible; SemrushBot/7~bl; +http://www.semrush.com/bot.html) | First seen: 2026-07-17 07:03:43 UTC

    Apply Bot Policy

    GET /path 
    
            
    
            

            
    
                
                    FOSS: restart required after config changes