THL HUNT AI-Agent-Campaign Sliver C2 — Known IP 5.230.201.54 (Case 10 Staging Infrastructure, JARM 3fd3fd20...) - Suricata Rule 1900004 (hunters-ledger)

Removed rule. This rule is known, but it is no longer present in its source. Showing the last known version.Removed: Jul 5, 2026, 4:07 AM

THL HUNT AI-Agent-Campaign Sliver C2 — Known IP 5.230.201.54 (Case 10 Staging Infrastructure, JARM 3fd3fd20...)

SID: 1900004Rev: 1Enabled2 viewsHistory

Sourcehunters-ledger

Filehunters-ledger.rules

CreatedJune 25, 2026

UpdatedJune 25, 2026

Classificationtrojan-activity

alert tls $HOME_NET any -> 5.230.201.54 any (msg:"THL HUNT AI-Agent-Campaign Sliver C2 — Known IP 5.230.201.54 (Case 10 Staging Infrastructure, JARM 3fd3fd20...)"; flow:established; classtype:trojan-activity; threshold:type limit,track by_src,count 1,seconds 3600; sid:1900004; rev:1; metadata:author The_Hunters_Ledger, date 2026-05-25, jarm 3fd3fd20d00000021c43d43d00043d204204071741c36579e355f830d285a5, reference https://the-hunters-ledger.com/hunting-detections/ai-agent-frameworks-2026-05-23-detections/;)

Metadata

authorThe_Hunters_Ledger

date2026-05-25

jarm3fd3fd20d00000021c43d43d00043d204204071741c36579e355f830d285a5

referencehttps://the-hunters-ledger.com/hunting-detections/ai-agent-frameworks-2026-05-23-detections/

Comments (0)

Please sign in to leave a comment.

No comments yet. Be the first to comment!