claude-user (claude-code/2.1.185; +https://support.anthropic.com/)

[[TODO: MAP ONE SENTENCE SUMMARY]]

Category: [[TODO: MAP CATEGORY]] Avg 1.2 req/min Seen on 48 systems 368 observed requests 34 exact variants First seen August 4, 2026 Last seen September 28, 2026

[[TODO: MAP INTRODUCTION PARAGRAPH 1]]

[[TODO: MAP INTRODUCTION PARAGRAPH 2]]

What is claude-user (claude-code/2.1.185; +https://support.anthropic.com/)?

[[TODO: MAP DEFINITION SUMMARY]]

[[TODO: MAP SHORT REFERENCE SUMMARY]]

Analyst summary: [[TODO: MAP ANALYST REPORT SUMMARY]]
User-agent
claude-user (claude-code/2.1.185; +https://support.anthropic.com/)
Observed source IPs
0
Observed requests
368
Source networks
192
Exact variants
34
Latest hit count
386
Latest miss count
0
Latest 404 count
0
Unique paths
11
Related campaigns
[[TODO: MAP RELATED CAMPAIGN COUNT]]

Observed exact user-agent strings

claude-user (claude-code/2.1.185; +https://support.anthropic.com/) First seen September 28, 2026 · Last seen September 28, 2026
claude-user (claude-code/2.1.220; +https://support.anthropic.com/) First seen August 13, 2026 · Last seen September 28, 2026
claude-user (claude-code/2.1.202; +https://support.anthropic.com/) First seen August 28, 2026 · Last seen September 28, 2026
claude-user (claude-code/2.1.195; +https://support.anthropic.com/) First seen September 16, 2026 · Last seen September 28, 2026
claude-user (claude-code/2.1.269; +https://support.anthropic.com/) First seen September 19, 2026 · Last seen September 28, 2026
claude-user (claude-code/2.1.280; +https://support.anthropic.com/) First seen September 23, 2026 · Last seen September 27, 2026
claude-user (claude-code/2.1.281; +https://support.anthropic.com/) First seen September 25, 2026 · Last seen September 27, 2026
claude-user (claude-code/2.1.266; +https://support.anthropic.com/) First seen September 15, 2026 · Last seen September 27, 2026
claude-user (claude-code/2.1.273; +https://support.anthropic.com/) First seen September 16, 2026 · Last seen September 27, 2026
claude-user (claude-code/2.1.215; +https://support.anthropic.com/) First seen August 4, 2026 · Last seen September 27, 2026
claude-user (claude-code/2.1.272; +https://support.anthropic.com/) First seen September 16, 2026 · Last seen September 26, 2026
claude-user (claude-code/2.1.219; +https://support.anthropic.com/) First seen September 23, 2026 · Last seen September 25, 2026

Behavior profile

[[TODO: MAP BEHAVIOR PROFILE INTRO]]

Category
[[TODO: MAP CATEGORY]]
Average request rate
1.2 requests per minute
HTTP and HTTPS support
[[TODO: MAP HTTP HTTPS SUPPORT]]
HTTP version support
[[TODO: MAP PROTOCOL SUPPORT SUMMARY]]
Redirect behavior
[[TODO: MAP REDIRECT BEHAVIOR]]
Robots.txt behavior
[[TODO: MAP ROBOTS TXT BEHAVIOR]]
Crawl-rate behavior
[[TODO: MAP CRAWL RATE BEHAVIOR]]
JavaScript execution
[[TODO: MAP JAVASCRIPT SUPPORT]]
Form submission activity
[[TODO: MAP FORM SUBMISSION ACTIVITY]]
Malformed URL requests
[[TODO: MAP MALFORMED URL BEHAVIOR]]
HTTP/1.0: [[TODO: MAP HTTP 1.0 SUPPORT]] HTTP/1.1: [[TODO: MAP HTTP 1.1 SUPPORT]] HTTP/2: [[TODO: MAP HTTP 2 SUPPORT]] HTTP/3: [[TODO: MAP HTTP 3 SUPPORT]] [[TODO: MAP HEADER ORDER FINGERPRINTED]]

Source distribution

[[TODO: MAP SOURCE DISTRIBUTION INTRO]]

Top countries

Country Networks Site sightings Share
United States 54 54 31.5%
France 26 27 15.2%
Germany 10 10 7.6%
United Kingdom 11 11 4.9%
Canada 8 8 4.6%
Switzerland 6 8 4.1%
Hungary 4 4 3.3%
Netherlands 6 6 3.0%
Spain 6 6 2.7%
Brazil 7 7 2.7%

Top ASNs

ASN Organization Networks Share
AS7922 [[TODO: MAP ASN ORGANIZATION]] 7 5.2%
AS3215 [[TODO: MAP ASN ORGANIZATION]] 9 4.9%
AS12322 [[TODO: MAP ASN ORGANIZATION]] 6 3.8%
AS396982 [[TODO: MAP ASN ORGANIZATION]] 8 3.3%
AS3303 [[TODO: MAP ASN ORGANIZATION]] 3 3.0%
AS701 [[TODO: MAP ASN ORGANIZATION]] 4 3.0%
AS22773 [[TODO: MAP ASN ORGANIZATION]] 3 2.4%
AS14593 [[TODO: MAP ASN ORGANIZATION]] 7 2.4%
AS7018 [[TODO: MAP ASN ORGANIZATION]] 4 2.2%
AS15557 [[TODO: MAP ASN ORGANIZATION]] 2 2.2%

Top datacenters

Provider Type Snapshots Share

Representative source IPs

[[TODO: MAP REPRESENTATIVE IPS INTRO]]

HTTP fingerprint and request characteristics

[[TODO: MAP HTTP FINGERPRINT INTRO]]

Observed header order
[[TODO: MAP HTTP HEADER ORDER SUMMARY]]
Common headers sent
[[TODO: MAP COMMON HEADERS SUMMARY]]
TLS and HTTPS behavior
[[TODO: MAP TLS HTTPS SUMMARY]]
URL normalization behavior
[[TODO: MAP URL NORMALIZATION SUMMARY]]
Malformed request patterns
[[TODO: MAP MALFORMED REQUEST SUMMARY]]
[[TODO: MAP OBSERVED HTTP HEADERS]]

Observed sample requests

[[TODO: MAP SAMPLE REQUESTS INTRO]]

GET
/marina/
Status pattern: HTTP 200
Seen 3 times, Last seen September 27, 2026
GET
/brasil-creator-rewards-tiktok-video-longo/
Status pattern: HTTP 200
Seen 1 times, Last seen September 22, 2026
GET
/brasil-creator-rewards-tiktok-video-longo
Status pattern: HTTP 301
Seen 1 times, Last seen September 22, 2026
GET
/
Status pattern: HTTP 200
Seen 8 times, Last seen September 4, 2026
GET
/child-seat-car-rules-denmark/
Status pattern: HTTP 200
Seen 1 times, Last seen August 19, 2026
GET
/news/future-events/
Status pattern: HTTP 200
Seen 3 times, Last seen August 17, 2026
GET
/category/news/
Status pattern: HTTP 200
Seen 1 times, Last seen August 17, 2026
GET
/donate/
Status pattern: HTTP 200
Seen 1 times, Last seen August 17, 2026
GET
/get-involved/
Status pattern: HTTP 200
Seen 1 times, Last seen August 17, 2026
GET
/information/
Status pattern: HTTP 200
Seen 1 times, Last seen August 17, 2026
POST
/wp-json/bitfire/v1/browser-verify?_fn=xhr&_bfa=c4da57bb2e98e74e7aa85410.lpsngo6idpbn.1786975200&per=0&_bfg=%5B%5D
Status pattern: HTTP 200
Seen 1 times, Last seen August 17, 2026
GET
/child-car-seat-rules-qatar/
Status pattern: HTTP 200
Seen 1 times, Last seen August 15, 2026

Related campaigns and associations

[[TODO: MAP RELATED CAMPAIGNS INTRO]]

[[TODO: MAP RELATED CAMPAIGN NAME]]

[[TODO: MAP RELATED CAMPAIGN SUMMARY]]
Related IPs: [[TODO: MAP RELATED CAMPAIGN IP COUNT]], Systems seen: [[TODO: MAP RELATED CAMPAIGN SYSTEMS SEEN]]
Confidence: [[TODO: MAP RELATED CAMPAIGN CONFIDENCE]]

Detailed analyst report

[[TODO: MAP ANALYST REPORT PARAGRAPH 1]]

[[TODO: MAP ANALYST REPORT PARAGRAPH 2]]

[[TODO: MAP ANALYST REPORT PARAGRAPH 3]]

Frequently asked questions about claude-user (claude-code/2.1.185; +https://support.anthropic.com/)

What is claude-user (claude-code/2.1.185; +https://support.anthropic.com/)?

[[TODO: MAP FAQ WHAT IS ANSWER]]

Is claude-user (claude-code/2.1.185; +https://support.anthropic.com/) considered malicious?

[[TODO: MAP FAQ MALICIOUS ANSWER]]

Does claude-user (claude-code/2.1.185; +https://support.anthropic.com/) respect robots.txt and crawl-rate controls?

[[TODO: MAP FAQ ROBOTS ANSWER]]

What infrastructure is commonly associated with claude-user (claude-code/2.1.185; +https://support.anthropic.com/)?

[[TODO: MAP FAQ INFRASTRUCTURE ANSWER]]