About this bot
ReconWaveBot is Recon Wave’s documented security-assessment and internet-telemetry scanner.
HTTP checks contain `ReconWaveBot`, and scanning infrastructure uses reverse DNS under `reconwave.com`.
Directory status: Active. Identity classification: Verified with High confidence. Identity type: official-documented.
A general robots.txt commitment is not documented for security scanning.
Use reverse-DNS attribution and the published bot identity when evaluating the traffic.
How to identify this bot
- User-agent and crawler identifiers
-
ReconWaveBotMozilla/5.0 (compatible; ReconWaveBot; +https://reconwave.com/bot)
Details
- Kind
- Scanner
- Family
- Recon Wave
- Purpose
- Attack surface and security assessment
- Common Use
- Internet-wide security telemetry, attack-surface discovery, OSINT, and web application security assessment.
- Respects robots.txt
- Unknown
Verification
- Identity Type
- Officially documented
- Evidence Method
- Match `ReconWaveBot` and verify that the source IP has a reverse-DNS PTR under `reconwave.com`.
- Detection Notes
- Recon Wave publishes both the `ReconWaveBot` HTTP identifier and a reverse-DNS attribution signal.
Website controls
- Robots.txt Snippet
# robots.txt behavior is unconfirmed. Use server-side controls if restriction is required.- Apache Rule
SetEnvIfNoCase User-Agent "ReconWaveBot" bot_match- Nginx Rule
if ($http_user_agent ~* "ReconWaveBot") { set $bot_match 1; }