mozilla/5.0 (macintosh; intel mac os x 10_15_7) applewebkit/605.1.15 (khtml, like gecko)

[[TODO: MAP ONE SENTENCE SUMMARY]]

Category: [[TODO: MAP CATEGORY]] Avg 3.1 req/min Seen on 86 systems 1,774 observed requests 11 exact variants First seen August 3, 2026 Last seen September 28, 2026

[[TODO: MAP INTRODUCTION PARAGRAPH 1]]

[[TODO: MAP INTRODUCTION PARAGRAPH 2]]

What is mozilla/5.0 (macintosh; intel mac os x 10_15_7) applewebkit/605.1.15 (khtml, like gecko)?

[[TODO: MAP DEFINITION SUMMARY]]

[[TODO: MAP SHORT REFERENCE SUMMARY]]

Analyst summary: [[TODO: MAP ANALYST REPORT SUMMARY]]
User-agent
mozilla/5.0 (macintosh; intel mac os x 10_15_7) applewebkit/605.1.15 (khtml, like gecko)
Observed source IPs
0
Observed requests
1,774
Source networks
627
Exact variants
11
Latest hit count
1,635
Latest miss count
145
Latest 404 count
0
Unique paths
17
Related campaigns
[[TODO: MAP RELATED CAMPAIGN COUNT]]

Observed exact user-agent strings

mozilla/5.0 (macintosh; intel mac os x 10_15_7) applewebkit/605.1.15 (khtml, like gecko) First seen August 3, 2026 · Last seen September 28, 2026
mozilla/5.0 (macintosh; u; intel mac os x; en) applewebkit (khtml, like gecko) First seen August 10, 2026 · Last seen September 27, 2026
mozilla/5.0 (macintosh; intel mac os x 10_14_6) applewebkit/605.1.15 (khtml, like gecko) First seen August 9, 2026 · Last seen September 24, 2026
mozilla/5.0 (macintosh; u; intel mac os x 10_6_3; es-es) applewebkit/531.22.7 (khtml, like gecko) First seen August 5, 2026 · Last seen September 18, 2026
mozilla/5.0 (macintosh; intel mac os x 10_14) applewebkit/605.1.15 (khtml, like gecko) First seen August 26, 2026 · Last seen September 17, 2026
mozilla/5.0 (macintosh; u; intel mac os x 10_5_5; it-it) applewebkit/525.18 (khtml, like gecko) First seen August 5, 2026 · Last seen September 17, 2026
mozilla/5.0 (macintosh; intel mac os x 10_10_5) applewebkit/600.8.9 (khtml, like gecko) First seen September 15, 2026 · Last seen September 15, 2026
mozilla/5.0 (macintosh; u; intel mac os x 10_5_6; en-us) applewebkit/528.16 (khtml, like gecko) First seen September 3, 2026 · Last seen September 10, 2026
mozilla/5.0 (macintosh; intel mac os x 10_15_7) applewebkit/605.1.15 (khtml, like gecko) 5.122092 First seen September 2, 2026 · Last seen September 2, 2026
mozilla/5.0 (macintosh; intel mac os x 10_11_6) applewebkit/601.7.7 (khtml, like gecko) First seen August 23, 2026 · Last seen August 23, 2026
mozilla/5.0 (macintosh; intel mac os x 10_10_5) applewebkit/603.1.30 (khtml, like gecko) First seen August 7, 2026 · Last seen August 17, 2026

Behavior profile

[[TODO: MAP BEHAVIOR PROFILE INTRO]]

Category
[[TODO: MAP CATEGORY]]
Average request rate
3.1 requests per minute
HTTP and HTTPS support
[[TODO: MAP HTTP HTTPS SUPPORT]]
HTTP version support
[[TODO: MAP PROTOCOL SUPPORT SUMMARY]]
Redirect behavior
[[TODO: MAP REDIRECT BEHAVIOR]]
Robots.txt behavior
[[TODO: MAP ROBOTS TXT BEHAVIOR]]
Crawl-rate behavior
[[TODO: MAP CRAWL RATE BEHAVIOR]]
JavaScript execution
[[TODO: MAP JAVASCRIPT SUPPORT]]
Form submission activity
[[TODO: MAP FORM SUBMISSION ACTIVITY]]
Malformed URL requests
[[TODO: MAP MALFORMED URL BEHAVIOR]]
HTTP/1.0: [[TODO: MAP HTTP 1.0 SUPPORT]] HTTP/1.1: [[TODO: MAP HTTP 1.1 SUPPORT]] HTTP/2: [[TODO: MAP HTTP 2 SUPPORT]] HTTP/3: [[TODO: MAP HTTP 3 SUPPORT]] [[TODO: MAP HEADER ORDER FINGERPRINTED]]

Source distribution

[[TODO: MAP SOURCE DISTRIBUTION INTRO]]

Top countries

Country Networks Site sightings Share
United States 256 284 42.9%
France 31 34 10.7%
Germany 45 51 9.8%
Canada 42 42 5.4%
South Africa 22 23 2.8%
Netherlands 16 17 2.4%
United Kingdom 14 14 2.1%
India 17 19 1.9%
Switzerland 6 8 1.7%
Brazil 18 18 1.5%

Top ASNs

ASN Organization Networks Share
AS54113 [[TODO: MAP ASN ORGANIZATION]] 23 8.3%
AS13335 [[TODO: MAP ASN ORGANIZATION]] 17 6.7%
AS12322 [[TODO: MAP ASN ORGANIZATION]] 14 4.3%
AS7922 [[TODO: MAP ASN ORGANIZATION]] 20 4.0%
AS3320 [[TODO: MAP ASN ORGANIZATION]] 10 3.5%
AS3215 [[TODO: MAP ASN ORGANIZATION]] 9 3.5%
AS3209 [[TODO: MAP ASN ORGANIZATION]] 12 2.7%
AS396982 [[TODO: MAP ASN ORGANIZATION]] 15 2.4%
AS701 [[TODO: MAP ASN ORGANIZATION]] 24 2.4%
AS36183 [[TODO: MAP ASN ORGANIZATION]] 12 2.3%

Top datacenters

Provider Type Snapshots Share

Representative source IPs

[[TODO: MAP REPRESENTATIVE IPS INTRO]]

HTTP fingerprint and request characteristics

[[TODO: MAP HTTP FINGERPRINT INTRO]]

Observed header order
[[TODO: MAP HTTP HEADER ORDER SUMMARY]]
Common headers sent
[[TODO: MAP COMMON HEADERS SUMMARY]]
TLS and HTTPS behavior
[[TODO: MAP TLS HTTPS SUMMARY]]
URL normalization behavior
[[TODO: MAP URL NORMALIZATION SUMMARY]]
Malformed request patterns
[[TODO: MAP MALFORMED REQUEST SUMMARY]]
[[TODO: MAP OBSERVED HTTP HEADERS]]

Observed sample requests

[[TODO: MAP SAMPLE REQUESTS INTRO]]

POST
/wp-json/bitfire/v1/browser-verify?_fn=xhr&_bfa=a435354374458cc9e2e7fc74.b_qy1qc4zmrw.1789466400&per=0&_bfg=%5B%5D
Status pattern: HTTP 200
Seen 1 times, Last seen September 15, 2026
GET
/category/news/
Status pattern: HTTP 200
Seen 1 times, Last seen September 15, 2026
GET
/blog/
Status pattern: HTTP 200
Seen 1 times, Last seen August 31, 2026
POST
/wp-json/bitfire/v1/browser-verify?_fn=xhr&_bfa=fdc20e924267b7f422c6c0a6.ivb22x7skjlf.1788199200&per=0&_bfg=%5B%5D
Status pattern: HTTP 200
Seen 1 times, Last seen August 31, 2026
GET
/about-us/
Status pattern: HTTP 200
Seen 1 times, Last seen August 29, 2026
POST
/wp-admin/admin-ajax.php?action=shield_action&ex=capture_not_bot&exnonce=%2A%2A%2A
Status pattern: HTTP 200
Seen 1 times, Last seen August 29, 2026
GET
/
Status pattern: HTTP 200
Seen 8 times, Last seen August 29, 2026
GET
/apple-touch-icon-precomposed.png
Status pattern: HTTP 404
Seen 28 times, Last seen August 29, 2026
GET
/
Status pattern: HTTP 403
Seen 1 times, Last seen August 29, 2026
GET
/calendar/action~agenda/page_offset~18/time_limit~1761883200/request_format~json/
Status pattern: HTTP 200
Seen 1 times, Last seen August 28, 2026
GET
/ads.txt
Status pattern: HTTP 403
Seen 1 times, Last seen August 28, 2026
GET
/ads.txt
Status pattern: HTTP 404
Seen 4 times, Last seen August 28, 2026

Related campaigns and associations

[[TODO: MAP RELATED CAMPAIGNS INTRO]]

[[TODO: MAP RELATED CAMPAIGN NAME]]

[[TODO: MAP RELATED CAMPAIGN SUMMARY]]
Related IPs: [[TODO: MAP RELATED CAMPAIGN IP COUNT]], Systems seen: [[TODO: MAP RELATED CAMPAIGN SYSTEMS SEEN]]
Confidence: [[TODO: MAP RELATED CAMPAIGN CONFIDENCE]]

Detailed analyst report

[[TODO: MAP ANALYST REPORT PARAGRAPH 1]]

[[TODO: MAP ANALYST REPORT PARAGRAPH 2]]

[[TODO: MAP ANALYST REPORT PARAGRAPH 3]]

Frequently asked questions about mozilla/5.0 (macintosh; intel mac os x 10_15_7) applewebkit/605.1.15 (khtml, like gecko)

What is mozilla/5.0 (macintosh; intel mac os x 10_15_7) applewebkit/605.1.15 (khtml, like gecko)?

[[TODO: MAP FAQ WHAT IS ANSWER]]

Is mozilla/5.0 (macintosh; intel mac os x 10_15_7) applewebkit/605.1.15 (khtml, like gecko) considered malicious?

[[TODO: MAP FAQ MALICIOUS ANSWER]]

Does mozilla/5.0 (macintosh; intel mac os x 10_15_7) applewebkit/605.1.15 (khtml, like gecko) respect robots.txt and crawl-rate controls?

[[TODO: MAP FAQ ROBOTS ANSWER]]

What infrastructure is commonly associated with mozilla/5.0 (macintosh; intel mac os x 10_15_7) applewebkit/605.1.15 (khtml, like gecko)?

[[TODO: MAP FAQ INFRASTRUCTURE ANSWER]]