Theat Score Always 0 Even For Bot Traffic

Website, Application, Performance Security
1

What is the name of the domain?

What is the issue you’re encountering

Theat Score Always 0 Even For Bot Traffic

What steps have you taken to resolve the issue?

When I enabled WAF rules for IP threat score, they did nothing, absolutely no WAF entries.

So for test purpose I enabled skip rules for threats with 0 score, here is where I found all easily user agent identifiable bot traffic.

Is this normal that all bot traffic passes IP threat score as 0, which is supposed to be reserved only for the IPs with absolutely perfect reputation?

As an example this abusive bot with highly malicious ip is getting threat score of 0
Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected])
IP address: 47.128.34.44

What is the current SSL/TLS setting?

Full (strict)

2

So there is no one with such problem? By the way today I got a visitor with threat score = 1, it’s the first time since I enabled threat score tracking for several days. That’s with at least 12k unique visitors a day and over 30k bot traffic that I get daily. Sounds like a useless metric so far.

3

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.