On this page

Atomicorp WAF Rule 330082

Rule Summary

  • Rule ID: 330082
  • Status: Active
  • Alert message: Atomicorp.com WAF Rules: Known Exploit User Agent
  • Observed CWEs: None documented
  • Revision: 4
  • Rule severity: Critical (2)
  • Phase: 2 (request body)
  • Request surfaces: Request headers
  • Rule action: deny
  • HTTP status: 403
  • Logging: log, auditlog

Description

This rule is detects known user agent strings used by malicious software.

False Positives

There is no known false positive for this rule. This user agent string is known to be malicious, and there are no known legitimate clients that use this identifer.

Therefore, it is not recommended that you disable this rule. If you believe that this is a false positive, please report this to our security team can determine if this is a legitimate case, or if its clever attack on your system. Instructions to report false positives are detailed on the Reporting False Positives wiki page.

This is a selected list of documented research observations, not an exhaustive coverage matrix. Absence of a CVE does not imply absence of protection.

No selected related public CVE research notes are currently published.

Documentation Source

  • Original wiki page: WAF 330082
  • Source revision: 1622
  • Source revision date: 2011-06-23