mozilla/5.0 (compatible; reconx-l2s/1.0)
First seen September 22, 2026 · Last seen October 18, 2026
mozilla/5.0 (compatible; reconx-l2s/1.0)
[[TODO: MAP ONE SENTENCE SUMMARY]]
Category: [[TODO: MAP CATEGORY]]
Avg 2.0 req/min
Seen on 20 systems
24 observed requests
2 exact variants
First seen August 12, 2026
Last seen October 18, 2026
[[TODO: MAP INTRODUCTION PARAGRAPH 1]]
[[TODO: MAP INTRODUCTION PARAGRAPH 2]]
What is mozilla/5.0 (compatible; reconx-l2s/1.0)?
[[TODO: MAP DEFINITION SUMMARY]]
[[TODO: MAP SHORT REFERENCE SUMMARY]]
Analyst summary: [[TODO: MAP ANALYST REPORT SUMMARY]]
User-agent
mozilla/5.0 (compatible; reconx-l2s/1.0)
Observed source IPs
0
Observed requests
24
Source networks
7
Exact variants
2
Latest hit count
33
Latest miss count
0
Latest 404 count
0
Unique paths
6
Related campaigns
[[TODO: MAP RELATED CAMPAIGN COUNT]]
Observed exact user-agent strings
mozilla/5.0 (compatible; reconx/1.0)
First seen August 12, 2026 · Last seen August 12, 2026
Behavior profile
[[TODO: MAP BEHAVIOR PROFILE INTRO]]
Category
[[TODO: MAP CATEGORY]]
Average request rate
2.0 requests per minute
HTTP and HTTPS support
[[TODO: MAP HTTP HTTPS SUPPORT]]
HTTP version support
[[TODO: MAP PROTOCOL SUPPORT SUMMARY]]
Redirect behavior
[[TODO: MAP REDIRECT BEHAVIOR]]
Robots.txt behavior
[[TODO: MAP ROBOTS TXT BEHAVIOR]]
Crawl-rate behavior
[[TODO: MAP CRAWL RATE BEHAVIOR]]
JavaScript execution
[[TODO: MAP JAVASCRIPT SUPPORT]]
Form submission activity
[[TODO: MAP FORM SUBMISSION ACTIVITY]]
Malformed URL requests
[[TODO: MAP MALFORMED URL BEHAVIOR]]
HTTP/1.0: [[TODO: MAP HTTP 1.0 SUPPORT]]
HTTP/1.1: [[TODO: MAP HTTP 1.1 SUPPORT]]
HTTP/2: [[TODO: MAP HTTP 2 SUPPORT]]
HTTP/3: [[TODO: MAP HTTP 3 SUPPORT]]
[[TODO: MAP HEADER ORDER FINGERPRINTED]]
Source distribution
[[TODO: MAP SOURCE DISTRIBUTION INTRO]]
Top countries
| Country | Networks | Site sightings | Share |
|---|---|---|---|
| Germany | 3 | 13 | 54.2% |
| United Arab Emirates | 2 | 4 | 20.8% |
| Bulgaria | 1 | 3 | 16.7% |
| Netherlands | 1 | 1 | 8.3% |
Top ASNs
| ASN | Organization | Networks | Share |
|---|---|---|---|
| AS197170 | [[TODO: MAP ASN ORGANIZATION]] | 2 | 41.7% |
| AS213438 | [[TODO: MAP ASN ORGANIZATION]] | 3 | 37.5% |
| AS203861 | [[TODO: MAP ASN ORGANIZATION]] | 1 | 16.7% |
| AS209630 | [[TODO: MAP ASN ORGANIZATION]] | 1 | 4.2% |
Top datacenters
| Provider | Type | Snapshots | Share |
|---|
Representative source IPs
[[TODO: MAP REPRESENTATIVE IPS INTRO]]
HTTP fingerprint and request characteristics
[[TODO: MAP HTTP FINGERPRINT INTRO]]
Observed header order
[[TODO: MAP HTTP HEADER ORDER SUMMARY]]
Common headers sent
[[TODO: MAP COMMON HEADERS SUMMARY]]
TLS and HTTPS behavior
[[TODO: MAP TLS HTTPS SUMMARY]]
URL normalization behavior
[[TODO: MAP URL NORMALIZATION SUMMARY]]
Malformed request patterns
[[TODO: MAP MALFORMED REQUEST SUMMARY]]
[[TODO: MAP OBSERVED HTTP HEADERS]]
Observed sample requests
[[TODO: MAP SAMPLE REQUESTS INTRO]]
/
/
/seolyzer-4caa114688be99c25f8897e72f6d941a.php
/wp-admin/admin-ajax.php
/admin-ajax.php
Related campaigns and associations
[[TODO: MAP RELATED CAMPAIGNS INTRO]]
[[TODO: MAP RELATED CAMPAIGN NAME]]
Detailed analyst report
[[TODO: MAP ANALYST REPORT PARAGRAPH 1]]
[[TODO: MAP ANALYST REPORT PARAGRAPH 2]]
[[TODO: MAP ANALYST REPORT PARAGRAPH 3]]
Frequently asked questions about mozilla/5.0 (compatible; reconx-l2s/1.0)
What is mozilla/5.0 (compatible; reconx-l2s/1.0)?
[[TODO: MAP FAQ WHAT IS ANSWER]]
Is mozilla/5.0 (compatible; reconx-l2s/1.0) considered malicious?
[[TODO: MAP FAQ MALICIOUS ANSWER]]
Does mozilla/5.0 (compatible; reconx-l2s/1.0) respect robots.txt and crawl-rate controls?
[[TODO: MAP FAQ ROBOTS ANSWER]]
What infrastructure is commonly associated with mozilla/5.0 (compatible; reconx-l2s/1.0)?
[[TODO: MAP FAQ INFRASTRUCTURE ANSWER]]