is there a way to block by agent? agent="BaiduSpider"
it_admin
Newbie ✭
SSLVPN: id=sslvpn sn=2CB8ED4AAC88 time="2022-11-15 15:39:25" vp_time="2022-11-15 21:39:25 UTC" fw=10.49.10.2 pri=2 m=34 c=402 src=107.150.5.186 dst="ww2.bucoks.com" user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 10" URI=XXX.XXXX.com:443/internetsite/webportal/appraiser/details.aspx?..... summ="SQL Injection is an attack technique used to exploit web sites that construct SQL statements from user-supplied input" sigid="9035" category="Command Execution--SQL Injection" agent="BaiduSpider"
Category: Web Application Firewall
Tagged:
0