mozilla/5.0 (linux; android 14; pixel 8) applewebkit/537.36 (khtml, like gecko) chrome/136.0.1236.219 mobile safari/537.36; compatible; claude-user/1.0; +https://www.anthropic.com/claude-user
First seen September 9, 2026 · Last seen September 9, 2026
mozilla/5.0 (linux; android 14; pixel 8) applewebkit/537.36 (khtml, like gecko) chrome/136.0.1236.219 mobile safari/537.36; compatible; claude-user/1.0; +https://www.anthropic.com/claude-user
[[TODO: MAP ONE SENTENCE SUMMARY]]
Category: [[TODO: MAP CATEGORY]]
Avg 95.7 req/min
Seen on 10 systems
10 observed requests
11 exact variants
First seen August 25, 2026
Last seen September 9, 2026
[[TODO: MAP INTRODUCTION PARAGRAPH 1]]
[[TODO: MAP INTRODUCTION PARAGRAPH 2]]
What is mozilla/5.0 (linux; android 14; pixel 8) applewebkit/537.36 (khtml, like gecko) chrome/136.0.1236.219 mobile safari/537.36; compatible; claude-user/1.0; +https://www.anthropic.com/claude-user?
[[TODO: MAP DEFINITION SUMMARY]]
[[TODO: MAP SHORT REFERENCE SUMMARY]]
Analyst summary: [[TODO: MAP ANALYST REPORT SUMMARY]]
User-agent
mozilla/5.0 (linux; android 14; pixel 8) applewebkit/537.36 (khtml, like gecko) chrome/136.0.1236.219 mobile safari/537.36; compatible; claude-user/1.0; +https://www.anthropic.com/claude-user
Observed source IPs
0
Observed requests
10
Source networks
10
Exact variants
11
Latest hit count
17
Latest miss count
0
Latest 404 count
0
Unique paths
20
Related campaigns
[[TODO: MAP RELATED CAMPAIGN COUNT]]
Observed exact user-agent strings
mozilla/5.0 (linux; android 13; pixel 7) applewebkit/537.36 (khtml, like gecko) chrome/85.0.7722.107 mobile safari/537.36; compatible; claude-user/1.0; +https://www.anthropic.com/claude-user
First seen September 8, 2026 · Last seen September 8, 2026
mozilla/5.0 (linux; android 14; pixel 8) applewebkit/537.36 (khtml, like gecko) chrome/126.0.5836.247 mobile safari/537.36; compatible; claude-user/1.0; +https://www.anthropic.com/claude-user
First seen September 6, 2026 · Last seen September 6, 2026
mozilla/5.0 (linux; android 12; pixel 6) applewebkit/537.36 (khtml, like gecko) chrome/85.0.1397.174 mobile safari/537.36; compatible; claude-user/1.0; +https://www.anthropic.com/claude-user
First seen September 4, 2026 · Last seen September 4, 2026
mozilla/5.0 (linux; android 14; pixel 8) applewebkit/537.36 (khtml, like gecko) chrome/91.0.6963.172 mobile safari/537.36; compatible; claude-user/1.0; +https://www.anthropic.com/claude-user
First seen September 4, 2026 · Last seen September 4, 2026
mozilla/5.0 (linux; android 14; pixel 8) applewebkit/537.36 (khtml, like gecko) chrome/151.0.4946.93 mobile safari/537.36; compatible; claude-user/1.0; +https://www.anthropic.com/claude-user
First seen September 4, 2026 · Last seen September 4, 2026
mozilla/5.0 (linux; android 13; pixel 7) applewebkit/537.36 (khtml, like gecko) chrome/109.0.6890.141 mobile safari/537.36; compatible; claude-user/1.0; +https://www.anthropic.com/claude-user
First seen August 29, 2026 · Last seen August 29, 2026
mozilla/5.0 (linux; android 12; pixel 6) applewebkit/537.36 (khtml, like gecko) chrome/120.0.3346.217 mobile safari/537.36; compatible; claude-user/1.0; +https://www.anthropic.com/claude-user
First seen August 28, 2026 · Last seen August 28, 2026
mozilla/5.0 (linux; android 13; pixel 7) applewebkit/537.36 (khtml, like gecko) chrome/133.0.381.191 mobile safari/537.36; compatible; claude-user/1.0; +https://www.anthropic.com/claude-user
First seen August 28, 2026 · Last seen August 28, 2026
mozilla/5.0 (linux; android 13; pixel 7) applewebkit/537.36 (khtml, like gecko) chrome/134.0.1544.197 mobile safari/537.36; compatible; claude-user/1.0; +https://www.anthropic.com/claude-user
First seen August 26, 2026 · Last seen August 26, 2026
mozilla/5.0 (linux; android 12; pixel 6) applewebkit/537.36 (khtml, like gecko) chrome/136.0.3037.231 mobile safari/537.36; compatible; claude-user/1.0; +https://www.anthropic.com/claude-user
First seen August 25, 2026 · Last seen August 25, 2026
Behavior profile
[[TODO: MAP BEHAVIOR PROFILE INTRO]]
Category
[[TODO: MAP CATEGORY]]
Average request rate
95.7 requests per minute
HTTP and HTTPS support
[[TODO: MAP HTTP HTTPS SUPPORT]]
HTTP version support
[[TODO: MAP PROTOCOL SUPPORT SUMMARY]]
Redirect behavior
[[TODO: MAP REDIRECT BEHAVIOR]]
Robots.txt behavior
[[TODO: MAP ROBOTS TXT BEHAVIOR]]
Crawl-rate behavior
[[TODO: MAP CRAWL RATE BEHAVIOR]]
JavaScript execution
[[TODO: MAP JAVASCRIPT SUPPORT]]
Form submission activity
[[TODO: MAP FORM SUBMISSION ACTIVITY]]
Malformed URL requests
[[TODO: MAP MALFORMED URL BEHAVIOR]]
HTTP/1.0: [[TODO: MAP HTTP 1.0 SUPPORT]]
HTTP/1.1: [[TODO: MAP HTTP 1.1 SUPPORT]]
HTTP/2: [[TODO: MAP HTTP 2 SUPPORT]]
HTTP/3: [[TODO: MAP HTTP 3 SUPPORT]]
[[TODO: MAP HEADER ORDER FINGERPRINTED]]
Source distribution
[[TODO: MAP SOURCE DISTRIBUTION INTRO]]
Top countries
| Country | Networks | Site sightings | Share |
|---|---|---|---|
| United States | 10 | 10 | 100.0% |
Top ASNs
| ASN | Organization | Networks | Share |
|---|---|---|---|
| AS396982 | [[TODO: MAP ASN ORGANIZATION]] | 10 | 100.0% |
Top datacenters
| Provider | Type | Snapshots | Share |
|---|
Representative source IPs
[[TODO: MAP REPRESENTATIVE IPS INTRO]]
HTTP fingerprint and request characteristics
[[TODO: MAP HTTP FINGERPRINT INTRO]]
Observed header order
[[TODO: MAP HTTP HEADER ORDER SUMMARY]]
Common headers sent
[[TODO: MAP COMMON HEADERS SUMMARY]]
TLS and HTTPS behavior
[[TODO: MAP TLS HTTPS SUMMARY]]
URL normalization behavior
[[TODO: MAP URL NORMALIZATION SUMMARY]]
Malformed request patterns
[[TODO: MAP MALFORMED REQUEST SUMMARY]]
[[TODO: MAP OBSERVED HTTP HEADERS]]
Observed sample requests
[[TODO: MAP SAMPLE REQUESTS INTRO]]
/nginx_status
/api/openapi.json
/.ssh/id_dsa
/api
/.continue/config.json
/dist/manifest.json
/google-service-account.json
/.anthropic/config.json
/app-config.json
/ssl/localhost.key
/id_ecdsa
/host.key
Related campaigns and associations
[[TODO: MAP RELATED CAMPAIGNS INTRO]]
[[TODO: MAP RELATED CAMPAIGN NAME]]
Detailed analyst report
[[TODO: MAP ANALYST REPORT PARAGRAPH 1]]
[[TODO: MAP ANALYST REPORT PARAGRAPH 2]]
[[TODO: MAP ANALYST REPORT PARAGRAPH 3]]
Frequently asked questions about mozilla/5.0 (linux; android 14; pixel 8) applewebkit/537.36 (khtml, like gecko) chrome/136.0.1236.219 mobile safari/537.36; compatible; claude-user/1.0; +https://www.anthropic.com/claude-user
What is mozilla/5.0 (linux; android 14; pixel 8) applewebkit/537.36 (khtml, like gecko) chrome/136.0.1236.219 mobile safari/537.36; compatible; claude-user/1.0; +https://www.anthropic.com/claude-user?
[[TODO: MAP FAQ WHAT IS ANSWER]]
Is mozilla/5.0 (linux; android 14; pixel 8) applewebkit/537.36 (khtml, like gecko) chrome/136.0.1236.219 mobile safari/537.36; compatible; claude-user/1.0; +https://www.anthropic.com/claude-user considered malicious?
[[TODO: MAP FAQ MALICIOUS ANSWER]]
Does mozilla/5.0 (linux; android 14; pixel 8) applewebkit/537.36 (khtml, like gecko) chrome/136.0.1236.219 mobile safari/537.36; compatible; claude-user/1.0; +https://www.anthropic.com/claude-user respect robots.txt and crawl-rate controls?
[[TODO: MAP FAQ ROBOTS ANSWER]]
What infrastructure is commonly associated with mozilla/5.0 (linux; android 14; pixel 8) applewebkit/537.36 (khtml, like gecko) chrome/136.0.1236.219 mobile safari/537.36; compatible; claude-user/1.0; +https://www.anthropic.com/claude-user?
[[TODO: MAP FAQ INFRASTRUCTURE ANSWER]]