REQUEST DETAILS - COMPREHENSIVE ANALYSIS
REQUEST ID: 37ae1d94-4c54-4fd3-88fc-54c4c09f9fb0
2026-10-04T20:56:09.489Z
109.107.178.102
MAYBE BOT
BOT DETECTION RESULT
STATUS: MAYBE BOT
CONFIDENCE: 45%
OPERATOR: Amsterdam, Netherlands
WHY MAYBE BOT:
- No cookies
- Browser UA missing client hints
- Browser UA with API-style headers
REQUEST INFO
ID: 37ae1d94-4c54-4fd3-88fc-54c4c09f9fb0
TIME: 2026-10-04T20:56:09.489Z
METHOD: GET
URL: https://header-analyzer.franzai.com/wp-content/plugins/wpmudev-updates/changelog.txt
PATH: /wp-content/plugins/wpmudev-updates/changelog.txt
HEADERS (13)
accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.3
accept-charset: utf-8,windows-1251;q=0.7,*;q=0.6
accept-encoding: gzip, br
accept-language: en-us,en;q=0.5
cf-connecting-ip: 109.107.178.102
cf-ipcountry: NL
cf-ray: a4571770fbfa0eb4
cf-visitor: {"scheme":"https"}
connection: Keep-Alive
host: header-analyzer.franzai.com
user-agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:51.0) Gecko/20100101 Firefox/51.0
x-forwarded-proto: https
x-real-ip: 109.107.178.102
NETWORK
IP: 109.107.178.102
TLS: TLSv1.3
PROTOCOL: HTTP/1.1
LOCATION
COUNTRY: NL
CITY: Amsterdam
ASN: 216071
JAVASCRIPT DETECTION
Status: NO JS SUPPORTED
JavaScript was not executed for this request
- Likely a bot, crawler, or API client
- JavaScript disabled in browser
- Server-side request (curl, wget, etc)
DETECTIVE ANALYSIS
Referrer Analysis
Source: Direct Visit
Full Referrer: Direct
Bot Detection Summary
Bot Probability: 55%
Confidence: 45%
Status: Probable Bot
Suspicious Indicators
- No cookies
- Browser UA missing client hints
- Browser UA with API-style headers
User Agent
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:51.0) Gecko/20100101 Firefox/51.0
Raw JSON Data
{
"id": "37ae1d94-4c54-4fd3-88fc-54c4c09f9fb0",
"timestamp": "2026-10-04T20:56:09.489Z",
"timestampMs": 1791147369489,
"request": {
"method": "GET",
"url": "https://header-analyzer.franzai.com/wp-content/plugins/wpmudev-updates/changelog.txt",
"path": "/wp-content/plugins/wpmudev-updates/changelog.txt",
"host": "header-analyzer.franzai.com"
},
"headers": {
"accept": "text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.3",
"accept-charset": "utf-8,windows-1251;q=0.7,*;q=0.6",
"accept-encoding": "gzip, br",
"accept-language": "en-us,en;q=0.5",
"cf-connecting-ip": "109.107.178.102",
"cf-ipcountry": "NL",
"cf-ray": "a4571770fbfa0eb4",
"cf-visitor": "{\"scheme\":\"https\"}",
"connection": "Keep-Alive",
"host": "header-analyzer.franzai.com",
"user-agent": "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:51.0) Gecko/20100101 Firefox/51.0",
"x-forwarded-proto": "https",
"x-real-ip": "109.107.178.102"
},
"cookies": {},
"query": {},
"network": {
"ip": "109.107.178.102",
"country": "NL",
"city": "Amsterdam",
"asn": 216071
},
"geo": {
"country": "NL",
"city": "Amsterdam",
"asn": 216071,
"colo": "AMS"
},
"bot": {
"isBot": false,
"spoofed": false,
"uaVerified": false,
"uaClaim": null,
"botName": null,
"operator": "Amsterdam, Netherlands",
"operatorSource": "cf-as-org",
"type": null,
"confidence": 45,
"suspiciousScore": 55,
"probableBot": true,
"reasons": [
"No cookies",
"Browser UA missing client hints",
"Browser UA with API-style headers"
],
"rulesVersion": "d5662f0e0a20"
},
"cf": {
"httpProtocol": "HTTP/1.1",
"clientAcceptEncoding": "gzip",
"requestPriority": "",
"edgeRequestKeepAliveStatus": 1,
"requestHeaderNames": [
"Host",
"User-Agent",
"Accept-Encoding",
"Accept-Charset",
"Accept-Language",
"Keep-Alive",
"Accept"
],
"clientTcpRtt": 14,
"clientQuicRtt": 0,
"colo": "AMS",
"asn": 216071,
"asOrganization": "Amsterdam, Netherlands",
"country": "NL",
"isEUCountry": "1",
"city": "Amsterdam",
"continent": "EU",
"region": "North Holland",
"regionCode": "NH",
"timezone": "Europe/Amsterdam",
"longitude": "4.88969",
"latitude": "52.37403",
"postalCode": "1012",
"tlsVersion": "TLSv1.3",
"tlsCipher": "AEAD-AES256-GCM-SHA384",
"tlsClientRandom": "siUAp4cKmy1643kQWozi5ctXDJQuDnJmKG06hiamzH4=",
"tlsClientCiphersSha1": "GXSPDLP4G3X+prK73a4wBuOaHRc=",
"tlsClientExtensionsSha1": "tlH5gnoC5Z1HF45J5OgHEi338V0=",
"tlsClientExtensionsSha1Le": "mRCkyUCRFDTLCNHGQsZNFhkU1/4=",
"tlsExportedAuthenticator": {
"clientHandshake": "79100cb45fc19c40bb0795f9a050028a06ae8320ecbfbd3e66d6d5c2d4c22318de51da6653a32dae75020a4e0485e5e7",
"serverHandshake": "ddc162aa2bdb4436964cb70b035c64049bdc08e50befd77fcf6e1c9d8f17b7fd4254753f957ea72e271c1a58aa8bd5e0",
"clientFinished": "0401f0d06e66ed9e059e50fa8e6b792273af740d6c7620381d0f1585044ff4398ed1e22336a4925b36215e7b32ed694a",
"serverFinished": "516514da87ef0bca1e02803693eedec6edd854d27ead70d271f709b0c917522daa89dcc35dbe5abe2559946f3b7ee572"
},
"tlsClientHelloLength": "508",
"tlsClientAuth": {
"certPresented": "0",
"certVerified": "NONE",
"certRevoked": "0",
"certIssuerDN": "",
"certSubjectDN": "",
"certIssuerDNRFC2253": "",
"certSubjectDNRFC2253": "",
"certIssuerDNLegacy": "",
"certSubjectDNLegacy": "",
"certSerial": "",
"certIssuerSerial": "",
"certSKI": "",
"certIssuerSKI": "",
"certFingerprintSHA1": "",
"certFingerprintSHA256": "",
"certNotBefore": "",
"certNotAfter": "",
"certRFC9440": "",
"certRFC9440TooLarge": false,
"certChainRFC9440": "",
"certChainRFC9440TooLarge": false
},
"verifiedBotCategory": "",
"edgeL4": {
"deliveryRate": 441417
}
},
"jsData": null
}