Skip to content

Commit 3650cdf

Browse files
committed
Modules update.
1 parent 413284b commit 3650cdf

File tree

3 files changed

+10
-9
lines changed

3 files changed

+10
-9
lines changed

modules/module_botua.php

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@
88
* License: GNU/GPLv2
99
* @see LICENSE.txt
1010
*
11-
* This file: Bot user agents module (last modified: 2025.08.19).
11+
* This file: Bot user agents module (last modified: 2025.08.21).
1212
*
1313
* False positive risk (an approximate, rough estimate only): « [ ]Low [x]Medium [ ]High »
1414
*/
@@ -231,11 +231,11 @@
231231
'a(?:bonti|ccserver|cme.spider|dreview/\d|jbaxy|nthill$|nyevent-http|ppengine|xios)|' .
232232
'b(?:igbozz|itsight|lackbird|logsearch|logbot|salsa)|' .
233233
'c(?:astlebot|atexplorador|cleaner|k=\{\}|lickagy|liqzbot|ms-?checker|ontextad|orporama|ortex/\d|rowsnest|yberpatrol)|' .
234-
'd(?:eepfield|le_spider|nbcrawler|omainappender|umprendertree)|' .
234+
'd(?:eepfield|le_spider|nbcrawler|omainappender|ummyconnection|umprendertree)|' .
235235
'expanse|' .
236236
'f(?:lightdeckreportsbot|luid/|orms\.gle)|' .
237237
'g(?:atheranalyzeprovide|enomecrawler|dnplus|imme60|lobalipv[46]space|ooglebenjojo|tbdfffgtb.?$)|' .
238-
'i(?:nfrawatch|nternet(?:census|measurement)|ps-agent|sitwp)|' .
238+
'i(?:nfrawatch|nternaldummy|nternet(?:census|measurement)|ps-agent|sitwp)|' .
239239
'k2spider|kemvi|' .
240240
'l(?:9scan|eak(?:\.info|ix)|exxebot|ivelapbot|wp)|' .
241241
'm(?:acinroyprivacyauditors|etaintelligence|ultipletimes)|' .
@@ -253,7 +253,7 @@
253253
) || preg_match(
254254
'~^Mozilla/5\.0( [A-Za-z]{2,5}/0\..)?$~',
255255
$CIDRAM['BlockInfo']['UA']
256-
), 'Unauthorised'); // 2023.09.15 mod 2025.08.19
256+
), 'Unauthorised'); // 2023.09.15 mod 2025.08.21
257257

258258
if ($Trigger(preg_match('~ivre-|masscan~', $UANoSpace), 'Port scanner and synflood tool detected')) {
259259
$CIDRAM['Reporter']->report([14, 15, 19], ['MASSCAN port scanner and synflood tool detected.'], $CIDRAM['BlockInfo']['IPAddr']);

modules/module_extras.php

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@
88
* License: GNU/GPLv2
99
* @see LICENSE.txt
1010
*
11-
* This file: Optional security extras module (last modified: 2025.08.19).
11+
* This file: Optional security extras module (last modified: 2025.08.21).
1212
*
1313
* False positive risk (an approximate, rough estimate only): « [ ]Low [x]Medium [ ]High »
1414
*/
@@ -71,6 +71,7 @@
7171
/** WordPress hack attempts. */
7272
$Trigger(strpos($LCNrURI, 'wp-print.php?script=1') !== false, 'WP hack attempt'); // 2017.10.07 mod 2023.08.10
7373
$Trigger(preg_match('~(?:^|[_/?])id=\d+/wp-login\.php[578]?(?:$|[/?])~', $LCNrURI), 'WP hack attempt'); // 2025.05.20
74+
$Trigger(preg_match('~(?:^|[/?])wp-admin/setup-config\.ph%70(?:$|[/?])~', $LCNrURI), 'WP hack attempt'); // 2025.08.21
7475

7576
/** Probing for quarantined files. */
7677
if ($Trigger(preg_match('~\.[\da-z]{2,4}\.suspected(?:$|[/?])~', $LCNrURI), 'Probing for quarantined files')) {

modules/modules.dat

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -203,7 +203,7 @@ module_bgpview.php:
203203
module_botua.php:
204204
Name: "Bot user agents module"
205205
False Positive Risk: "Medium"
206-
Version: "2025.230.0"
206+
Version: "2025.232.0"
207207
Dependencies:
208208
PHP: "^5.4|^7|^8"
209209
CIDRAM Core: "^1.13.1|^2.0.1"
@@ -215,7 +215,7 @@ module_botua.php:
215215
To:
216216
- "module_botua.php"
217217
Checksum:
218-
- "ffa125eb408e7b8fa9ccc51f8ef74f9c3401e73db968790d2619becae7aa014f:27422"
218+
- "f2acc3ef889d9f758f635bc2461b13fafeb410d08bf26124a09bef78e768953f:27450"
219219
Used with: "modules"
220220
Reannotate: "modules.dat"
221221
module_cookies.php:
@@ -239,7 +239,7 @@ module_cookies.php:
239239
module_extras.php:
240240
Name: "Optional security extras module"
241241
False Positive Risk: "Medium"
242-
Version: "2025.230.0"
242+
Version: "2025.232.0"
243243
Dependencies:
244244
PHP: "^5.4|^7|^8"
245245
CIDRAM Core: "^1.13.1|^2.0.1"
@@ -254,7 +254,7 @@ module_extras.php:
254254
- "module_extras.php"
255255
- "module_extras.yaml"
256256
Checksum:
257-
- "43cfe3a4c20c71f41062a0879a1dfe596304b41abc1a437bbc26b12aaf130818:47563"
257+
- "ac5fd6425f5a775789b802b534727bf20c0424ca0d730849b0bbcdf7ab54861b:47690"
258258
- "7b891d1fa4b1c52c410220bc758e8cb7064bd6040430fb149a5b60e9ae2e0838:890"
259259
Used with: "modules"
260260
Reannotate: "modules.dat"

0 commit comments

Comments
 (0)