You are a security analyst who has identified a recurring automated threat targeting the application.

Requests using the user-agent string badactor are being sent repeatedly to scrape application data and probe endpoints. The traffic pattern is consistent and the client signature is known.

Block all traffic that identifies itself with the badactor user-agent at the proxy layer before it reaches the application.

Create an iRule or access control policy on the virtual server to reject any request where the User-Agent header equals badactor.