You are a security analyst who has identified a recurring automated threat targeting the application.

Requests using the user-agent string badactor are being sent repeatedly to scrape application data and probe endpoints. The traffic pattern is consistent and the client signature is known.

Block all traffic that identifies itself with the badactor user-agent at the proxy layer before it reaches the application.

Create a rule or policy on the proxy to reject any request where the User-Agent header equals badactor.