ARTEX actor host 38.244.50.120 HTTP request for exposed .claude/CLAUDE.md
Detects connections from internal hosts to the ARTEX-linked actor host 38.244.50.120, including requests for the exposed .claude/CLAUDE.md file and its open-directory port 18899.
Suricata

