Removed rule. This rule is known, but it is no longer present in its source. Showing the last known version.Removed: Jul 5, 2026, 4:07 AM

THL-OPDIR-94103113 — HTTP to Chaos/TorBrowserTor Staging Host 94.103.1.13 (AS209207)

SID: 1900047Rev: 1Enabled2 viewsHistory
Filehunters-ledger.rules
CreatedApril 23, 2026
UpdatedApril 23, 2026
Classificationtrojan-activity
alert http $HOME_NET any -> 94.103.1.13 any (msg:"THL-OPDIR-94103113 — HTTP to Chaos/TorBrowserTor Staging Host 94.103.1.13 (AS209207)"; flow:established,to_server; http.method; content:"GET"; sid:1900047; rev:1; metadata:affected_product Windows, attack_target Client_Endpoint, created_at 2026_04_23, deployment Perimeter, signature_severity Major, tag Chaos-TorBrowserTor, updated_at 2026_04_23; reference:url,the-hunters-ledger.com/hunting-detections/open-directory-94-103-1-13-20260423-detections/; classtype:trojan-activity;)

References

urlthe-hunters-ledger.com/hunting-detections/open-directory-94-103-1-13-20260423-detections/

Metadata

affected productWindows
attack targetClient_Endpoint
created at2026_04_23
deploymentPerimeter
signature severityMajor
tagChaos-TorBrowserTor
updated at2026_04_23

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!