mozilla/5.0 (macintosh; intel mac os x 10_15_7) applewebkit/605.1.15 (khtml, like gecko) safari

[[TODO: MAP ONE SENTENCE SUMMARY]]

Category: [[TODO: MAP CATEGORY]] Avg 8.4 req/min Seen on 33 systems 882 observed requests 1 exact variants First seen August 5, 2026 Last seen October 19, 2026

[[TODO: MAP INTRODUCTION PARAGRAPH 1]]

[[TODO: MAP INTRODUCTION PARAGRAPH 2]]

What is mozilla/5.0 (macintosh; intel mac os x 10_15_7) applewebkit/605.1.15 (khtml, like gecko) safari?

[[TODO: MAP DEFINITION SUMMARY]]

[[TODO: MAP SHORT REFERENCE SUMMARY]]

Analyst summary: [[TODO: MAP ANALYST REPORT SUMMARY]]
User-agent
mozilla/5.0 (macintosh; intel mac os x 10_15_7) applewebkit/605.1.15 (khtml, like gecko) safari
Observed source IPs
0
Observed requests
882
Source networks
170
Exact variants
1
Latest hit count
2,155
Latest miss count
16
Latest 404 count
0
Unique paths
21
Related campaigns
[[TODO: MAP RELATED CAMPAIGN COUNT]]

Observed exact user-agent strings

mozilla/5.0 (macintosh; intel mac os x 10_15_7) applewebkit/605.1.15 (khtml, like gecko) safari First seen August 5, 2026 · Last seen October 19, 2026

Behavior profile

[[TODO: MAP BEHAVIOR PROFILE INTRO]]

Category
[[TODO: MAP CATEGORY]]
Average request rate
8.4 requests per minute
HTTP and HTTPS support
[[TODO: MAP HTTP HTTPS SUPPORT]]
HTTP version support
[[TODO: MAP PROTOCOL SUPPORT SUMMARY]]
Redirect behavior
[[TODO: MAP REDIRECT BEHAVIOR]]
Robots.txt behavior
[[TODO: MAP ROBOTS TXT BEHAVIOR]]
Crawl-rate behavior
[[TODO: MAP CRAWL RATE BEHAVIOR]]
JavaScript execution
[[TODO: MAP JAVASCRIPT SUPPORT]]
Form submission activity
[[TODO: MAP FORM SUBMISSION ACTIVITY]]
Malformed URL requests
[[TODO: MAP MALFORMED URL BEHAVIOR]]
HTTP/1.0: [[TODO: MAP HTTP 1.0 SUPPORT]] HTTP/1.1: [[TODO: MAP HTTP 1.1 SUPPORT]] HTTP/2: [[TODO: MAP HTTP 2 SUPPORT]] HTTP/3: [[TODO: MAP HTTP 3 SUPPORT]] [[TODO: MAP HEADER ORDER FINGERPRINTED]]

Source distribution

[[TODO: MAP SOURCE DISTRIBUTION INTRO]]

Top countries

Country Networks Site sightings Share
France 14 14 35.9%
United States 48 51 18.9%
Canada 21 21 12.2%
Netherlands 12 12 11.8%
Germany 13 14 6.0%
South Africa 11 11 3.5%
Unknown 20 20 3.5%
Bangladesh 2 4 1.7%
Brazil 6 6 1.6%
Austria 2 2 1.1%

Top ASNs

ASN Organization Networks Share
AS12322 [[TODO: MAP ASN ORGANIZATION]] 6 15.4%
AS206092 [[TODO: MAP ASN ORGANIZATION]] 8 13.2%
AS3215 [[TODO: MAP ASN ORGANIZATION]] 6 12.4%
AS51207 [[TODO: MAP ASN ORGANIZATION]] 2 8.2%
AS13335 [[TODO: MAP ASN ORGANIZATION]] 7 4.6%
AS3320 [[TODO: MAP ASN ORGANIZATION]] 8 4.4%
AS5769 [[TODO: MAP ASN ORGANIZATION]] 9 4.3%
AS54113 [[TODO: MAP ASN ORGANIZATION]] 9 3.7%
AS62240 [[TODO: MAP ASN ORGANIZATION]] 6 2.7%
AS577 [[TODO: MAP ASN ORGANIZATION]] 5 2.6%

Top datacenters

Provider Type Snapshots Share

Representative source IPs

[[TODO: MAP REPRESENTATIVE IPS INTRO]]

HTTP fingerprint and request characteristics

[[TODO: MAP HTTP FINGERPRINT INTRO]]

Observed header order
[[TODO: MAP HTTP HEADER ORDER SUMMARY]]
Common headers sent
[[TODO: MAP COMMON HEADERS SUMMARY]]
TLS and HTTPS behavior
[[TODO: MAP TLS HTTPS SUMMARY]]
URL normalization behavior
[[TODO: MAP URL NORMALIZATION SUMMARY]]
Malformed request patterns
[[TODO: MAP MALFORMED REQUEST SUMMARY]]
[[TODO: MAP OBSERVED HTTP HEADERS]]

Observed sample requests

[[TODO: MAP SAMPLE REQUESTS INTRO]]

GET
/wp-content/uploads/2019/06/clipesmaio2019-2.jpg
Status pattern: HTTP 404
Seen 1 times, Last seen September 19, 2026
GET
/jquery-file-upload/server/php/index.php/files/JC1yXAZ0.php
Status pattern: HTTP 404
Seen 1 times, Last seen August 20, 2026
GET
/files/JC1yXAZ0.php
Status pattern: HTTP 404
Seen 4 times, Last seen August 20, 2026
GET
/jquery-file-upload/server/php/index.php
Status pattern: HTTP 404
Seen 1 times, Last seen August 20, 2026
GET
/example/upload.php
Status pattern: HTTP 404
Seen 1 times, Last seen August 20, 2026
GET
/server/php/upload.class.php/files/JC1yXAZ0.php
Status pattern: HTTP 404
Seen 1 times, Last seen August 20, 2026
GET
/jQuery-File-Upload/server/php/index.php/files/JC1yXAZ0.php
Status pattern: HTTP 404
Seen 1 times, Last seen August 20, 2026
POST
/account?name%5B%23this.getClass%28%29.forName%28%27java.lang.Runtime%27%29.getRuntime%28%29.exec%28%27cat+%2Fetc%2Fpasswd%27%29%5D=ufbqy
Status pattern: HTTP 200
Seen 1 times, Last seen August 20, 2026
GET
/php/index.php/files/JC1yXAZ0.php
Status pattern: HTTP 404
Seen 1 times, Last seen August 20, 2026
POST
/account?name%5B%23this.getClass%28%29.forName%28%27java.lang.Runtime%27%29.getRuntime%28%29.exec%28%27type+C%3A%5C%2FWindows%5C%2Fwin.ini%27%29%5D=mroop
Status pattern: HTTP 200
Seen 1 times, Last seen August 20, 2026
GET
/login.action?action%3A%24%7B%23a%3D%28new_java_lang_ProcessBuilder%28new_java_lang_String%5B0%5D=
Status pattern: HTTP 404
Seen 1 times, Last seen August 20, 2026
GET
/login.action?redirectAction%3A%24%7B%23a%3D%28new_java_lang_ProcessBuilder%28new_java_lang_String%5B0%5D=
Status pattern: HTTP 404
Seen 1 times, Last seen August 20, 2026

Related campaigns and associations

[[TODO: MAP RELATED CAMPAIGNS INTRO]]

[[TODO: MAP RELATED CAMPAIGN NAME]]

[[TODO: MAP RELATED CAMPAIGN SUMMARY]]
Related IPs: [[TODO: MAP RELATED CAMPAIGN IP COUNT]], Systems seen: [[TODO: MAP RELATED CAMPAIGN SYSTEMS SEEN]]
Confidence: [[TODO: MAP RELATED CAMPAIGN CONFIDENCE]]

Detailed analyst report

[[TODO: MAP ANALYST REPORT PARAGRAPH 1]]

[[TODO: MAP ANALYST REPORT PARAGRAPH 2]]

[[TODO: MAP ANALYST REPORT PARAGRAPH 3]]

Frequently asked questions about mozilla/5.0 (macintosh; intel mac os x 10_15_7) applewebkit/605.1.15 (khtml, like gecko) safari

What is mozilla/5.0 (macintosh; intel mac os x 10_15_7) applewebkit/605.1.15 (khtml, like gecko) safari?

[[TODO: MAP FAQ WHAT IS ANSWER]]

Is mozilla/5.0 (macintosh; intel mac os x 10_15_7) applewebkit/605.1.15 (khtml, like gecko) safari considered malicious?

[[TODO: MAP FAQ MALICIOUS ANSWER]]

Does mozilla/5.0 (macintosh; intel mac os x 10_15_7) applewebkit/605.1.15 (khtml, like gecko) safari respect robots.txt and crawl-rate controls?

[[TODO: MAP FAQ ROBOTS ANSWER]]

What infrastructure is commonly associated with mozilla/5.0 (macintosh; intel mac os x 10_15_7) applewebkit/605.1.15 (khtml, like gecko) safari?

[[TODO: MAP FAQ INFRASTRUCTURE ANSWER]]