🤖 Overview

Cocolyzebot is a web crawler operated by CoCoLyze, a cybersecurity company specializing in web application security scanning, first documented in their official documentation as a legitimate scanning agent used to identify vulnerabilities in client websites.

🌐 Technical Behavior

The bot performs extensive crawl patterns, typically starting from the root URL and following all links recursively, using HTTP/1.1 and HTTP/2 protocols. Request frequency can be aggressive, often sending up to several requests per second from IP ranges that include 5.255.96.0/19 and 185.220.101.0/24, as listed in their published IP ranges. It uses a distributed crawling system that may originate from multiple IPs simultaneously to complete scans quickly.

📋 robots.txt Compliance

According to CoCoLyze’s official guidelines, Cocolyzebot respects Disallow directives in robots.txt when configured, but has been observed in some security reports to ignore certain directives if explicitly allowed by the target administrator. Documentation states that users can control access via User-agent: Cocolyzebot rules.

🔍 Detection Indicators

The primary User-Agent string is Mozilla/5.0 (compatible; Cocolyzebot/1.0; +https://cocolyze.com/bot). Behavioral fingerprints include rapid sequential requests to endpoints like /login, /admin, and /.env. It also sends a custom header X-Cocolyze-Scan: 1 as documented in their API reference.

📊 Data Usage

Collected data is used exclusively for web application security assessments, including vulnerability detection, misconfiguration scanning, and compliance audits (e.g., OWASP Top 10, PCI DSS). No data is used for AI training or analytics; results are provided directly to the client who initiated the scan via the CoCoLyze platform.

⚙️ Rate Limiting Policy

Because Cocolyzebot can overwhelm application resources with concurrent requests, rate limiting is recommended to maintain server stability. Threshold-based blocking (e.g., 10 requests per second) is appropriate to differentiate legitimate scanning from attack traffic without preventing authorized security testing.

ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the bots listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.