[ossec-list] stupid (?) rule question

2011-06-05 Thread Rainer
Hi, I want to block a certain WWW bot called verticalpigeon; it is known to scan for Joomla! installations. You can also trigger it through the website manually. But the nice thing is, it says who it is: 66.103.61.161 - - [05/Jun/2011:09:44:59 +0200] GET /index2.php?option=com_docman HTTP/1.0

Re: [ossec-list] stupid (?) rule question

2011-06-05 Thread Steven Stern
On 06/05/2011 07:02 AM, Rainer wrote: Hi, I want to block a certain WWW bot called verticalpigeon; it is known to scan for Joomla! installations. You can also trigger it through the website manually. But the nice thing is, it says who it is: 66.103.61.161 - - [05/Jun/2011:09:44:59 +0200] GET