(http.request.full_uri contains "https://astrowhat.com/internal_data") or (http.request.full_uri contains "https://astrowhat.com/src") or (http.request.uri.path contains " /.git/config") or (http.request.uri.path contains "/actuator/") or (http.request.uri.path contains "/sendgrid.env") or (http.request.uri.path contains "/settings.py") or (http.request.uri.path contains "/WPnBr.dll") or (http.user_agent contains "bytespider") or (http.user_agent contains "bytedance") or (http.request.uri.path contains "/wallet.dat") or (http.request.uri.path contains "/cgi-bin") or (http.request.uri.path contains "/_ignition/") or (http.request.uri.path contains "/readme.txt") or (http.request.uri.path contains "/fckeditor/") or (http.user_agent contains "claudebot") or (http.user_agent contains "CCBot") or (http.user_agent contains "ChatGPT-User") or (http.user_agent contains "GPTBot") or (http.user_agent contains "Omgili") or (http.user_agent contains "ImagesiftBot ") or (http.user_agent contains "cohere-ai") or (http.user_agent contains "anthropic-ai") or (http.user_agent contains "Google-Extended") or (http.request.uri.path contains "/laravel-filemanager ") or (http.user_agent contains "Claude-Web") or (http.user_agent contains "Perplexity-ai") or (http.user_agent contains "Seekr") or (http.user_agent contains "Meltwater") or (http.request.uri.path contains "/clients/MyCRL") or (http.request.uri.path contains "/debug/default/") or (http.request.uri.path contains "/wordpress/") or (http.request.uri.path contains "/wp-includes") or (http.request.uri.path contains "/remote/login") or (http.request.uri.path contains "/symfony") or (http.request.uri.path contains "/wiki/pages") or (http.request.uri.path contains "/cpanel/") or (http.request.uri.path contains "/phpstorm") or (http.request.uri.path contains "/../../") or (http.request.uri.path contains "/etc/passwd") or (http.request.uri.path contains "modules/elfinder") or (http.request.uri.path contains ".sqlite") or (http.request.uri.path contains "xingzuo.zhlgch.com") or (http.request.uri.path contains "/server.key") or (http.request.uri.path contains "/geoserver") or (http.request.uri.path contains "/alfacgiapi") or (http.request.uri.path contains "/rhuk_milkyway") or (http.request.uri.path contains "/includes") or (http.request.uri.path contains "/beez") or (http.request.uri.path contains "/wp-includes") or (http.request.uri.path contains "/wp-content") or (http.request.uri.path contains "/wp-login.php") or (http.request.uri.path contains "/_profiler/") or (http.request.uri.path contains "/wp-admin") or (http.request.uri.path contains "/xmlrpc.php") or (http.request.uri.path contains "/phpunit") or (http.request.uri.path contains "/plugins/ckeditor") or (http.request.uri.path contains ".SQL")
