Bot Visibility

Flumotion Smart Multi CDN automatically classifies requests based on whether they originate from a human, a known (verified or similar) bot, or a suspicious automated client.

This provides visibility into the nature of the traffic reaching your service without relying solely on block or allow decisions.

Flumotion Smart Multi CDN determines bot classifications using a combination of signals, including request fingerprints—such as TLS characteristics, HTTP/2 settings, and header ordering—and IP reputation data.

This multi-signal approach allows Flumotion Smart Multi CDN to accurately identify bots even when they attempt to mimic legitimate browser behavior.

You can further improve bot classification by providing additional signals for the classification engine to evaluate. To do this, add the JS Detection code snippet to your application’s HTML pages. See JS Detection for more information.

Bot Classifications #

Each request is assigned one of the following classifications:

• Likely human — Requests that appear to originate from human interaction with the site.
• Verified bot — Requests from well-known bots that Flumotion Smart Multi CDN can identify individually, such as search engine crawlers or monitoring agents.
• Likely bot — Requests that appear to originate from non-human interaction with the site but cannot be individually identified.
• Detected bot — Requests that definitively originate from non-human automated activity.

Bot Visibility Dashboard #

The Bot Visibility page provides an overview of bot activity across your service:

• Summary — A breakdown of traffic by classification (Likely human, Verified bot, Likely bot, and Detected bot), showing the volume and share of each category.
• Over-time chart — A multi-line chart that tracks each classification over time, helping you identify trends and anomalies.
• Verified bot categories — A detailed breakdown of verified bot traffic by category, including request counts, percentage of total verified bot traffic, and a sparkline for each category. Clicking a category opens the full analytics page for that bot type.

Bot Visibility in Security Analytics #

The Security Analytics page allows you to view and analyze bot traffic.

For example, you can:

• Break down overall traffic by Bot Classification to compare human, verified bot, and other bot traffic over time.
• Filter traffic by a specific verified bot category and analyze its geographical distribution.
• Filter traffic by a specific bot and examine individual requests in the sampled logs.

JS Detection #

This small code snippet provides the Flumotion Smart Multi CDN bot classification engine with additional anonymous signals that can be used to distinguish human activity, verified bot activity, and other automated bot activity.

To enable JS Detection, add the following snippet to your application’s HTML pages:

<script src="/ioriver-challenge/bot-detection.js" defer></script>

After adding the snippet, navigate to Security > Bot Management and enable the JS Detection option. This indicates that JS Detection data should be considered when analyzing bot classification results.

Verified Bots #

Verified Bot Categories #

Flumotion Smart Multi CDN can identify verified bots and classify them into the following common categories: