Email Address Harvesting via Web Scraping

Darshan Thummar@Mighty

•updated Jun 10, 2026•0•0•1

This rule detects potential email address harvesting via web scraping by identifying a high volume of HTTP GET requests to URIs containing the word "contact" within a short timeframe from a single source IP address. The threshold is set to 30 requests within 30 seconds, indicating automated or rapid access attempts often associated with scraping activities.