User agent BAV2ROPC only by unsuccessful login

Question

Hello,

we are having this situation where we are having multiple login failure from different source IPs and multiple countries were always the user agent is BAV2ROPC.

But when the actual user logged in, the user agent is HTTPS Browser.

Is there any explanation for this and what can we change in the configuration to block the BAV2ROPC agent.

Thanks