ARTEX user-agent bulk web requests with scanner allowlist

ills3c Intel&Coffee@Ills3C

•updated 6 days ago•20•0•51

Detects bulk web requests originating from the ARTEX AI framework user agents ('artex-enrich/1.0' and 'norma/0.4'). These requests are aggregated by source IP and destination hostname to identify heavy activity such as automated scanning or content enrichment.