You are a SOC analyst investigating suspicious automated activity targeting the application's login endpoint.

A bot is bypassing signature-based defenses by mimicking legitimate browser behavior — sending a realistic user-agent, standard headers, and otherwise normal-looking traffic patterns to avoid detection.

Detect and block the bot using behavioral signals rather than relying on signature matching alone.

Enable a Bot Defense profile on the virtual server to analyze client behavior and block requests that exhibit automated patterns, regardless of how legitimate their headers appear.