Removed rule. This rule is known, but it is no longer present in its source. Showing the last known version.Removed: Jul 13, 2026, 4:10 PM

THE HUNTERS LEDGER - Inkognito Operator Via Caddy Header from Known Operator IPs

SID: 3500032Rev: 1Enabled4 viewsHistory
Filehunters-ledger.rules
CreatedMay 16, 2026
UpdatedJuly 6, 2026
Classificationtrojan-activity
alert http [185.221.196.118,176.124.211.174,77.239.101.23,193.46.56.182,79.137.203.87] any -> $HOME_NET any (msg:"THE HUNTERS LEDGER - Inkognito Operator Via Caddy Header from Known Operator IPs"; flow:established,to_client; http.header; content:"Via"; content:"1.1 Caddy"; nocase; sid:3500032; rev:1; classtype:trojan-activity; metadata:affected_product Web_Browser, attack_target Client_Endpoint, created_at 2026_05_16, deployment Perimeter, signature_severity Minor, tag Inkognito;)

Metadata

affected productWeb_Browser
attack targetClient_Endpoint
created at2026_05_16
deploymentPerimeter
signature severityMinor
tagInkognito

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!