Action
Expression Preview
(http.user_agent contains "?%00") or
(http.user_agent contains "/bin/") or
(lower(http.user_agent) contains "curl") or
(http.user_agent contains "echo ") or
(http.user_agent contains "eval(") or
(http.user_agent contains "wget ") or
(http.user_agent contains "AhrefsBot") or
(http.user_agent contains "ALittle") or
(http.user_agent contains "baidu") or
(http.user_agent contains "coccocbot") or
(http.user_agent contains "DavClnt") or
(http.user_agent contains "DnyzBot") or
(http.user_agent contains "DotBot") or
(http.user_agent contains "GRequest") or
(http.user_agent contains "Hello") or
(http.user_agent contains "http-client") or
(http.user_agent contains "nowledge") or
(http.user_agent contains "Lua") or
(http.user_agent contains "mail.ru") or
(http.user_agent contains "My User Agent") or
(http.user_agent contains "NetSystemsResearch") or
(http.user_agent contains "Nikto") or
(http.user_agent contains "Nimbostratus") or
(http.user_agent contains "PetalBot") or
(lower(http.user_agent) contains "python") or
(http.user_agent contains "ReactorNetty") or
(http.user_agent contains "RestSharp") or
(http.user_agent contains "Scrapy") or
(http.user_agent contains "SeznamBot") or
(http.user_agent contains "Sogou") or
(http.user_agent contains "spbot") or
(http.user_agent contains "Uptimebot") or
(http.user_agent contains "WebDAV-MiniRedir") or
(http.user_agent contains "WinHttp.WinHttpRequest") or
(http.user_agent contains "YandexBot") or
(http.user_agent contains "ZmEu")
Field
Operator
Tag
security
Value