REQUEST DETAILS - COMPREHENSIVE ANALYSIS
REQUEST ID: f2b2ff8c-b3c8-4e90-a337-60e82c43356e
2026-06-18T00:29:30.594Z
91.92.243.207
MAYBE BOT
BOT DETECTION RESULT
STATUS: MAYBE BOT
CONFIDENCE: 60%
OPERATOR: Python
BOT NAME: Python-Requests
TYPE: Developer Tool
UA CLAIM: Python-Requests | CLOUDFLARE VERIFIED: no
WHY MAYBE BOT:
- Command-line tool for Python HTTP requests and web scraping
REQUEST INFO
ID: f2b2ff8c-b3c8-4e90-a337-60e82c43356e
TIME: 2026-06-18T00:29:30.594Z
METHOD: GET
URL: https://header-analyzer.franzai.com/.env.backup
PATH: /.env.backup
HEADERS (11)
accept: */*
accept-encoding: gzip, br
cf-connecting-ip: 91.92.243.207
cf-ipcountry: NL
cf-ray: a0d62e1a187d6e9d
cf-visitor: {"scheme":"https"}
connection: Keep-Alive
host: header-analyzer.franzai.com
user-agent: python-httpx/0.28.1
x-forwarded-proto: https
x-real-ip: 91.92.243.207
NETWORK
IP: 91.92.243.207
TLS: TLSv1.3
PROTOCOL: HTTP/1.1
LOCATION
COUNTRY: NL
CITY: Rotterdam
ASN: 202412
JAVASCRIPT DETECTION
Status: NO JS SUPPORTED
JavaScript was not executed for this request
- Likely a bot, crawler, or API client
- JavaScript disabled in browser
- Server-side request (curl, wget, etc)
DETECTIVE ANALYSIS
Referrer Analysis
Source: Direct Visit
Full Referrer: Direct
Bot Detection Summary
Bot Probability: 60%
Confidence: 60%
Status: Probable Bot
Suspicious Indicators
- Command-line tool for Python HTTP requests and web scraping
User Agent
Raw JSON Data
{
"id": "f2b2ff8c-b3c8-4e90-a337-60e82c43356e",
"timestamp": "2026-06-18T00:29:30.594Z",
"timestampMs": 1781742570594,
"request": {
"method": "GET",
"url": "https://header-analyzer.franzai.com/.env.backup",
"path": "/.env.backup",
"host": "header-analyzer.franzai.com"
},
"headers": {
"accept": "*/*",
"accept-encoding": "gzip, br",
"cf-connecting-ip": "91.92.243.207",
"cf-ipcountry": "NL",
"cf-ray": "a0d62e1a187d6e9d",
"cf-visitor": "{\"scheme\":\"https\"}",
"connection": "Keep-Alive",
"host": "header-analyzer.franzai.com",
"user-agent": "python-httpx/0.28.1",
"x-forwarded-proto": "https",
"x-real-ip": "91.92.243.207"
},
"cookies": {},
"query": {},
"network": {
"ip": "91.92.243.207",
"country": "NL",
"city": "Rotterdam",
"asn": 202412
},
"geo": {
"country": "NL",
"city": "Rotterdam",
"asn": 202412,
"colo": "SOF"
},
"bot": {
"isBot": false,
"probableBot": true,
"confidence": 60,
"suspiciousScore": 60,
"spoofed": false,
"uaVerified": false,
"uaClaim": "Python-Requests",
"botName": "Python-Requests",
"operator": "Python",
"operatorSource": "rule",
"type": "Developer Tool",
"ruleId": "python-requests",
"detectionReason": "Command-line tool for Python HTTP requests and web scraping",
"reasons": [
"Command-line tool for Python HTTP requests and web scraping"
],
"rulesVersion": "d5662f0e0a20"
},
"cf": {
"httpProtocol": "HTTP/1.1",
"clientAcceptEncoding": "gzip, deflate",
"requestPriority": "",
"edgeRequestKeepAliveStatus": 1,
"requestHeaderNames": {},
"clientTcpRtt": 35,
"clientQuicRtt": 0,
"colo": "SOF",
"asn": 202412,
"asOrganization": "OMEGATECH",
"country": "NL",
"isEUCountry": "1",
"city": "Rotterdam",
"continent": "EU",
"region": "South Holland",
"regionCode": "ZH",
"timezone": "Europe/Amsterdam",
"longitude": "4.47917",
"latitude": "51.9225",
"postalCode": "3011",
"tlsVersion": "TLSv1.3",
"tlsCipher": "AEAD-AES256-GCM-SHA384",
"tlsClientRandom": "ZubpFVjrVOwjtLV4JZrTCCfeoYzkg9v7Mkt0psvC0PU=",
"tlsClientCiphersSha1": "GXSPDLP4G3X+prK73a4wBuOaHRc=",
"tlsClientExtensionsSha1": "eBrZDr0YocoC2Wfqz/18YVTvEQE=",
"tlsClientExtensionsSha1Le": "dC4haEKQu51afM2H7tInG8zYGBw=",
"tlsExportedAuthenticator": {
"clientHandshake": "3e20f3c725ff39100d86cff2a0b319cd3446e7617685e4b51195a5f8e8303dc75029610fa1a2352e28feb6443f990837",
"serverHandshake": "91c5c7bc492dda1a6cf47bce7990fbb0c8f4f4cfb12193ad07b2ee474f7e33a6cbb41c34e8d2ba5de7eb855f5186b31d",
"clientFinished": "c412e8185f7416f5da4e5609144217afd7b36b765147638ccb8dbad4321fced6ce45c2e5cdd96ae82478a87cd9caf8de",
"serverFinished": "d670b39120e8160beddca90670410e057956e261fed553ed355bbf3e51170c89a6fbc6b3e478c317f365a75faede11c5"
},
"tlsClientHelloLength": "508",
"tlsClientAuth": {
"certPresented": "0",
"certVerified": "NONE",
"certRevoked": "0",
"certIssuerDN": "",
"certSubjectDN": "",
"certIssuerDNRFC2253": "",
"certSubjectDNRFC2253": "",
"certIssuerDNLegacy": "",
"certSubjectDNLegacy": "",
"certSerial": "",
"certIssuerSerial": "",
"certSKI": "",
"certIssuerSKI": "",
"certFingerprintSHA1": "",
"certFingerprintSHA256": "",
"certNotBefore": "",
"certNotAfter": "",
"certRFC9440": "",
"certRFC9440TooLarge": false,
"certChainRFC9440": "",
"certChainRFC9440TooLarge": false
},
"verifiedBotCategory": "",
"edgeL4": {
"deliveryRate": 81244
}
},
"jsData": null
}