Whether it is malicious or not depends on what it does on your site, and to a certain extent, your preferences. Did it check robots.txt? If so, did it obey robots.txt? What was the user-agent? What IP address did it come from? Does that IP address resolve to a corporation, or a DSL or dial-up provider?
Take a look at your raw logs, using the time-stamp as a correlator, and see if you can find out the answers to the above. With tha %2e stuff in there, it could just be an AOL user. Or maybe not.