Action

Expression Preview

(http.user_agent contains "?%00") or (http.user_agent contains "/bin/") or (lower(http.user_agent) contains "curl") or (http.user_agent contains "echo ") or (http.user_agent contains "eval(") or (http.user_agent contains "wget ") or (http.user_agent contains "AhrefsBot") or (http.user_agent contains "ALittle") or (http.user_agent contains "baidu") or (http.user_agent contains "coccocbot") or (http.user_agent contains "DavClnt") or (http.user_agent contains "DnyzBot") or (http.user_agent contains "DotBot") or (http.user_agent contains "GRequest") or (http.user_agent contains "Hello") or (http.user_agent contains "http-client") or (http.user_agent contains "nowledge") or (http.user_agent contains "Lua") or (http.user_agent contains "mail.ru") or (http.user_agent contains "My User Agent") or (http.user_agent contains "NetSystemsResearch") or (http.user_agent contains "Nikto") or (http.user_agent contains "Nimbostratus") or (http.user_agent contains "PetalBot") or (lower(http.user_agent) contains "python") or (http.user_agent contains "ReactorNetty") or (http.user_agent contains "RestSharp") or (http.user_agent contains "Scrapy") or (http.user_agent contains "SeznamBot") or (http.user_agent contains "Sogou") or (http.user_agent contains "spbot") or (http.user_agent contains "Uptimebot") or (http.user_agent contains "WebDAV-MiniRedir") or (http.user_agent contains "WinHttp.WinHttpRequest") or (http.user_agent contains "YandexBot") or (http.user_agent contains "ZmEu")

Field

Operator

Tag

security

Value