Burp Suite Web Scanner Traffic Detected

Darshan Thummar@Mighty

•updated Jun 10, 2026•0•0•2

This rule detects HTTP traffic where the User-Agent header contains the string "Burp" (case-insensitive). This is indicative of traffic generated by Burp Suite, a popular web vulnerability scanner and proxy tool. The rule specifically looks for traffic flowing from the internal network to a server.