Network connections to IP 147.135.36.162 from Huntress php2shell advisory
Detects network connection and URL events involving IP address 147.135.36.162, identified as a malicious indicator of compromise from the Huntress php2shell advisory.
Microsoft Sentinel (KQL)

