Behaviour
Withheld · single source — count not published for this signal.
2026-11-01 22:36:49 UTC → 2026-11-02 02:10:50 UTC
LIB-PYTHON-AIOHTTP is a tracked bot identity in the Mothlight observatory. Traffic from an HTTP library or script, with no stronger identity claim. This profile describes observed requests and classification evidence, not the intent of every visitor sharing a signature.
No. Confidence measures support for the assigned label (out of 100). AI likelihood estimates evidence for AI involvement (out of 100). Identity verification is reported separately.
LIB-PYTHON-AIOHTTPConfidence and AI likelihood are scores out of 100, not shares of traffic. Percentages elsewhere on this page state their denominator in the section text.
Traffic from an HTTP library or script, with no stronger identity claim.
Label: LIB · Known identity — Python.
Verification: Unverifiable identity — method: none. Documented purpose: user-fetch. Vendor documentation
Withheld · single source — count not published for this signal.
2026-11-01 22:36:49 UTC → 2026-11-02 02:10:50 UTC
Withheld · single source — count not published for this signal.
2026-11-01 22:36:49 UTC → 2026-11-02 02:10:50 UTC
Withheld · single source — count not published for this signal.
2026-11-01 22:36:49 UTC → 2026-11-02 02:10:50 UTC
Mostly GET requests to /assets/apple-touch-icon.png, /assets/favicon-16.png, /assets/favicon-32.png from 3 sources across 1 persona; 6 distinct paths observed; no exploitation attempts observed.
Based on 16 requests from 3 distinct sources. Buckets with fewer than 3 events or 2 sources are hidden. IPs are never listed here; user agents are shown only as product families. Percentages in breakdowns use the publishable buckets shown as their denominator.
Window adapts to available data since first seen; empty early periods are trimmed and labelled, not stretched across a 30-day axis.
| Time | Requests |
|---|---|
| 2026-11-01T20:00:00.000Z | 0 |
| 2026-11-01T21:00:00.000Z | 0 |
| 2026-11-01T22:00:00.000Z | 5 |
| 2026-11-01T23:00:00.000Z | 0 |
| 2026-11-02T00:00:00.000Z | 5 |
| 2026-11-02T01:00:00.000Z | 1 |
| 2026-11-02T02:00:00.000Z | 5 |
| Time |
|---|
Services / traps targeted: site-page (15 of 15 publishable trap observations).
No publishable technique tags yet.
No publishable CVE observations yet. This does not mean the actor never probed a vulnerability; only that no bucket reached the publication threshold.
Robots compliance: Withheld · single source — not measured for publication.
Canary follows: Withheld or below publication threshold — not a zero. Canary follows are counted only when publishable.
Honeytoken uses: Withheld or below publication threshold — not a zero.
Following a canary or using a honeytoken is behavioural evidence; it does not by itself prove AI involvement or intent.
No related bots above the similarity threshold.
No publishable related actors yet. Related actors are publishable bots sharing a known-bot identity, cluster label, or technique set; withheld single-source actors are not listed here.
/assets/apple-touch-icon.png3/assets/favicon-16.png3/assets/favicon-32.png3/assets/logo.svg3/favicon.ico3First seen: 2026-11-01 22:36:49 UTC
Last seen: 2026-11-02 02:10:50 UTC
Regions: Not published yet
Countries: Not published yet
Copy this citation:
Mothlight Observatory. "aiohttp" (LIB-PYTHON-AIOHTTP). First seen 2026-11-01, last seen 2026-11-02. https://mothlight.ai/bots/python-aiohttp (accessed 2026-11-02). Counts follow the publication rule (at least 3 events from at least 2 distinct sources).
| Requests |
|---|
| 2026-10-30T00:00:00.000Z | 0 |
| 2026-10-31T00:00:00.000Z | 0 |
| 2026-11-01T00:00:00.000Z | 5 |
| 2026-11-02T00:00:00.000Z | 11 |