mozilla/5.0 applewebkit/537.36 (khtml, like gecko; compatible; chatgpt-user/1.0; +https://openai.com/bot)

[[TODO: MAP ONE SENTENCE SUMMARY]]

Category: [[TODO: MAP CATEGORY]] Avg 23.7 req/min Seen on 55 systems 153 observed requests 1 exact variants First seen August 3, 2026 Last seen October 19, 2026

[[TODO: MAP INTRODUCTION PARAGRAPH 1]]

[[TODO: MAP INTRODUCTION PARAGRAPH 2]]

What is mozilla/5.0 applewebkit/537.36 (khtml, like gecko; compatible; chatgpt-user/1.0; +https://openai.com/bot)?

[[TODO: MAP DEFINITION SUMMARY]]

[[TODO: MAP SHORT REFERENCE SUMMARY]]

Analyst summary: [[TODO: MAP ANALYST REPORT SUMMARY]]
User-agent
mozilla/5.0 applewebkit/537.36 (khtml, like gecko; compatible; chatgpt-user/1.0; +https://openai.com/bot)
Observed source IPs
0
Observed requests
153
Source networks
100
Exact variants
1
Latest hit count
94
Latest miss count
65
Latest 404 count
0
Unique paths
107
Related campaigns
[[TODO: MAP RELATED CAMPAIGN COUNT]]

Observed exact user-agent strings

mozilla/5.0 applewebkit/537.36 (khtml, like gecko; compatible; chatgpt-user/1.0; +https://openai.com/bot) First seen August 3, 2026 · Last seen October 19, 2026

Behavior profile

[[TODO: MAP BEHAVIOR PROFILE INTRO]]

Category
[[TODO: MAP CATEGORY]]
Average request rate
23.7 requests per minute
HTTP and HTTPS support
[[TODO: MAP HTTP HTTPS SUPPORT]]
HTTP version support
[[TODO: MAP PROTOCOL SUPPORT SUMMARY]]
Redirect behavior
[[TODO: MAP REDIRECT BEHAVIOR]]
Robots.txt behavior
[[TODO: MAP ROBOTS TXT BEHAVIOR]]
Crawl-rate behavior
[[TODO: MAP CRAWL RATE BEHAVIOR]]
JavaScript execution
[[TODO: MAP JAVASCRIPT SUPPORT]]
Form submission activity
[[TODO: MAP FORM SUBMISSION ACTIVITY]]
Malformed URL requests
[[TODO: MAP MALFORMED URL BEHAVIOR]]
HTTP/1.0: [[TODO: MAP HTTP 1.0 SUPPORT]] HTTP/1.1: [[TODO: MAP HTTP 1.1 SUPPORT]] HTTP/2: [[TODO: MAP HTTP 2 SUPPORT]] HTTP/3: [[TODO: MAP HTTP 3 SUPPORT]] [[TODO: MAP HEADER ORDER FINGERPRINTED]]

Source distribution

[[TODO: MAP SOURCE DISTRIBUTION INTRO]]

Top countries

Country Networks Site sightings Share
United States 67 72 60.8%
Russia 24 26 28.8%
United Kingdom 4 4 5.2%
Romania 2 3 3.3%
Lithuania 1 1 0.7%
Ukraine 1 1 0.7%
Spain 1 1 0.7%

Top ASNs

ASN Organization Networks Share
AS396982 [[TODO: MAP ASN ORGANIZATION]] 40 37.3%
AS209372 [[TODO: MAP ASN ORGANIZATION]] 13 15.7%
AS213541 [[TODO: MAP ASN ORGANIZATION]] 12 14.4%
AS9009 [[TODO: MAP ASN ORGANIZATION]] 3 4.6%
AS399804 [[TODO: MAP ASN ORGANIZATION]] 4 4.6%
AS400529 [[TODO: MAP ASN ORGANIZATION]] 2 3.9%
AS2914 [[TODO: MAP ASN ORGANIZATION]] 2 3.3%
AS13335 [[TODO: MAP ASN ORGANIZATION]] 4 2.6%
AS14061 [[TODO: MAP ASN ORGANIZATION]] 2 2.0%
AS16509 [[TODO: MAP ASN ORGANIZATION]] 2 1.3%

Top datacenters

Provider Type Snapshots Share

Representative source IPs

[[TODO: MAP REPRESENTATIVE IPS INTRO]]

HTTP fingerprint and request characteristics

[[TODO: MAP HTTP FINGERPRINT INTRO]]

Observed header order
[[TODO: MAP HTTP HEADER ORDER SUMMARY]]
Common headers sent
[[TODO: MAP COMMON HEADERS SUMMARY]]
TLS and HTTPS behavior
[[TODO: MAP TLS HTTPS SUMMARY]]
URL normalization behavior
[[TODO: MAP URL NORMALIZATION SUMMARY]]
Malformed request patterns
[[TODO: MAP MALFORMED REQUEST SUMMARY]]
[[TODO: MAP OBSERVED HTTP HEADERS]]

Observed sample requests

[[TODO: MAP SAMPLE REQUESTS INTRO]]

GET
/app
Status pattern: HTTP 404
Seen 1 times, Last seen September 29, 2026
GET
/checkout
Status pattern: HTTP 404
Seen 1 times, Last seen September 29, 2026
GET
/config.yaml
Status pattern: HTTP 428
Seen 1 times, Last seen September 29, 2026
GET
/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=4.1.2
Status pattern: HTTP 404
Seen 2 times, Last seen September 13, 2026
GET
/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
Status pattern: HTTP 404
Seen 2 times, Last seen September 13, 2026
GET
/wp-content/plugins/administrator-z/assets/js/adminz.js?ver=2026.06.03
Status pattern: HTTP 404
Seen 2 times, Last seen September 13, 2026
GET
/wp-includes/js/dist/i18n.min.js
Status pattern: HTTP 404
Seen 2 times, Last seen September 13, 2026
GET
/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=4.1.2
Status pattern: HTTP 404
Seen 2 times, Last seen September 13, 2026
GET
/graphql
Status pattern: HTTP 404
Seen 2 times, Last seen September 13, 2026
GET
/dist/.vite/manifest.json
Status pattern: HTTP 404
Seen 1 times, Last seen September 13, 2026
GET
/dist/manifest.json
Status pattern: HTTP 404
Seen 1 times, Last seen September 13, 2026
GET
/.vite/manifest.json
Status pattern: HTTP 404
Seen 1 times, Last seen September 13, 2026

Related campaigns and associations

[[TODO: MAP RELATED CAMPAIGNS INTRO]]

[[TODO: MAP RELATED CAMPAIGN NAME]]

[[TODO: MAP RELATED CAMPAIGN SUMMARY]]
Related IPs: [[TODO: MAP RELATED CAMPAIGN IP COUNT]], Systems seen: [[TODO: MAP RELATED CAMPAIGN SYSTEMS SEEN]]
Confidence: [[TODO: MAP RELATED CAMPAIGN CONFIDENCE]]

Detailed analyst report

[[TODO: MAP ANALYST REPORT PARAGRAPH 1]]

[[TODO: MAP ANALYST REPORT PARAGRAPH 2]]

[[TODO: MAP ANALYST REPORT PARAGRAPH 3]]

Frequently asked questions about mozilla/5.0 applewebkit/537.36 (khtml, like gecko; compatible; chatgpt-user/1.0; +https://openai.com/bot)

What is mozilla/5.0 applewebkit/537.36 (khtml, like gecko; compatible; chatgpt-user/1.0; +https://openai.com/bot)?

[[TODO: MAP FAQ WHAT IS ANSWER]]

Is mozilla/5.0 applewebkit/537.36 (khtml, like gecko; compatible; chatgpt-user/1.0; +https://openai.com/bot) considered malicious?

[[TODO: MAP FAQ MALICIOUS ANSWER]]

Does mozilla/5.0 applewebkit/537.36 (khtml, like gecko; compatible; chatgpt-user/1.0; +https://openai.com/bot) respect robots.txt and crawl-rate controls?

[[TODO: MAP FAQ ROBOTS ANSWER]]

What infrastructure is commonly associated with mozilla/5.0 applewebkit/537.36 (khtml, like gecko; compatible; chatgpt-user/1.0; +https://openai.com/bot)?

[[TODO: MAP FAQ INFRASTRUCTURE ANSWER]]