Removed rule. This rule is known, but it is no longer present in its source. Showing the last known version.Removed: Jul 13, 2026, 4:10 PM

THL BellaMain PhaaS Admin Panel Path Access V5VgjLU0jsDe

SID: 3500006Rev: 1Enabled8 viewsHistory
Filehunters-ledger.rules
CreatedJuly 5, 2026
UpdatedJuly 5, 2026
Classificationweb-application-attack
alert http any any -> $HTTP_SERVERS any (msg:"THL BellaMain PhaaS Admin Panel Path Access V5VgjLU0jsDe"; flow:established,to_server; http.uri; content:"/V5VgjLU0jsDe/"; nocase; classtype:web-application-attack; sid:3500006; rev:1; metadata:author "The Hunters Ledger", date "2026-05-16", mitre_technique "T1505.003", reference "https://the-hunters-ledger.com/hunting-detections/bellamain-turkish-phaas-79-137-192-3-20260516-detections/";)

Metadata

author"The Hunters Ledger"
date"2026-05-16"
mitre technique"T1505.003"
reference"https://the-hunters-ledger.com/hunting-detections/bellamain-turkish-phaas-79-137-192-3-20260516-detections/"

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!