BasicSecurity.txt

(ip.geoip.continent in {"T1" "XX"}) or (ip.geoip.country in {"T1"}) or (http.host contains ":") or (ip.geoip.asnum eq 8075) or (http.request.uri contains "#") or (http.request.uri contains "$") or (http.request.uri contains "%") or (http.request.uri contains "@") or (http.request.uri eq "~") or (cf.threat_score ge 5) or (http.request.version eq "HTTP/1.2") or (ip.geoip.asnum eq 17054) or (ip.geoip.asnum eq 577) or (http.user_agent contains "Slik") or (http.user_agent eq "") or (http.user_agent eq " ") or (http.user_agent eq "-") or (http.user_agent eq "'") or (http.user_agent contains "ALittle") or (http.user_agent contains ".NET") or (http.x_forwarded_for contains "192.0.") or (http.x_forwarded_for contains ".0.0") or (http.user_agent contains "NT 6.2") or (http.user_agent contains "NT 6.3") or (http.user_agent contains "NT 5.1") or (ip.geoip.asnum eq 211720) or (ip.geoip.asnum eq 271633) or (ip.geoip.asnum eq 266542) or (ip.geoip.asnum eq 45317) or (ip.geoip.asnum eq 64267) or (ip.geoip.asnum eq 6939) or (ip.geoip.asnum eq 54252) or (http.user_agent contains "LM-Q") or (not http.user_agent contains "Mozilla/5.0") or (ip.geoip.asnum eq 24961 and http.request.version ne "HTTP/3")