Skip to content

Instantly share code, notes, and snippets.

Show Gist options
  • Select an option

  • Save osapon/3e78f5435b3be28c43cfab1ec4534ff5 to your computer and use it in GitHub Desktop.

Select an option

Save osapon/3e78f5435b3be28c43cfab1ec4534ff5 to your computer and use it in GitHub Desktop.
Cloudflareで設定している、「明らかにお前クロール目的だろ」ってアクセスを検知する式
(http.request.method eq "GET") and (
(http.user_agent contains "Trident")
or (http.user_agent contains "Presto")
or (http.user_agent contains "Firefox/2")
or (http.user_agent contains "Firefox/3")
or (http.user_agent contains "Firefox/4")
or (http.user_agent contains "Firefox/5")
or (http.user_agent contains "Firefox/6")
or (http.user_agent contains "Firefox/7")
or (http.user_agent contains "Firefox/8")
or (http.user_agent contains "Firefox/9")
or (http.user_agent contains "Firefox/12.")
or (http.user_agent contains "Firefox/13.")
or (http.user_agent contains "Firefox/115.")
or (http.user_agent contains "Firefox/118.")
or (http.user_agent contains "Chrome/2")
or (http.user_agent contains "Chrome/3")
or (http.user_agent contains "Chrome/4")
or (http.user_agent contains "Chrome/5" and not ip.src.asnum in {15169})
or (http.user_agent contains "Chrome/6")
or (http.user_agent contains "Chrome/7")
or (http.user_agent contains "Chrome/8")
or (http.user_agent contains "Chrome/127.")
or (http.user_agent contains "Edg/114")
or (http.user_agent contains "Safari/531")
or (http.user_agent contains "Safari/532")
or (http.user_agent contains "Safari/533")
or (http.user_agent contains "Safari/534")
or (http.user_agent contains "Safari/535")
or (http.user_agent contains "Safari/536")
or (http.user_agent contains "iPhone OS 4_")
or (http.user_agent contains "iPhone OS 3_")
or (http.user_agent contains "Windows 98")
or (http.user_agent contains "Windows NT 4")
or (http.user_agent contains "Windows NT 5")
or (http.user_agent contains "Android 1.")
or (http.user_agent contains "Android 2.")
or (http.user_agent contains "Android 3.")
or (http.user_agent contains "Android 4.")
)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment