gshjames Posted July 31, 2020 Share Posted July 31, 2020 https://www.abuseipdb.com/check/52.138.83.105 Is this ip part of a addon /plug or a hack 52.138.83.105 - - [07/Jul/2020:20:14:06 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 286 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:14:23 -0400] "GET /api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 290 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:14:38 -0400] "GET /laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 294 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:14:54 -0400] "GET /modules/autoupgrade/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 306 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:15:11 -0400] "GET /sites/all/libraries/mailchimp/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 316 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:15:27 -0400] "GET /test/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 291 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:15:43 -0400] "GET /admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 292 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:15:58 -0400] "GET /modules/ps_facetedsearch/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 311 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:16:14 -0400] "GET /blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 291 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:16:29 -0400] "GET /system/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 293 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:16:46 -0400] "GET /modules/gamification/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 307 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:17:02 -0400] "GET /shop/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 291 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:17:18 -0400] "GET /testing/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 294 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:17:35 -0400] "GET /laravel/click_e_money/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 308 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:17:50 -0400] "GET /mahara/auth/saml/extlib/simplesamlphp/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 324 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:18:07 -0400] "GET /concrete/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 295 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:18:25 -0400] "GET /wbs/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 290 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:18:41 -0400] "GET /app1/_lib/libraries/sys/dom_pdf/dompdf/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 325 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:18:57 -0400] "GET /wp-content/themes/enfold-child/update_script/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 331 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:19:13 -0400] "GET /proguard/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 295 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:19:27 -0400] "GET /mapa/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 291 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:19:42 -0400] "GET /cambio/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 293 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:19:57 -0400] "GET /__MACOSX/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 295 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:20:13 -0400] "GET /quotation/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 296 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:20:30 -0400] "GET /wp-content/plugins/mm-plugin/inc/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 319 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:20:46 -0400] "GET /onefolder/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 296 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:21:02 -0400] "GET /pro/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 290 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:21:17 -0400] "GET /staff/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 292 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:21:34 -0400] "GET /supervision/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 298 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:21:50 -0400] "GET /icms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 291 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:22:07 -0400] "GET /services/lib/pusher-http-php/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 315 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:22:23 -0400] "GET /release/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 294 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:22:39 -0400] "GET /backend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 294 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:22:56 -0400] "GET /freelance039/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 299 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:23:13 -0400] "GET /sistema/dompdf-master/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 308 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:23:29 -0400] "GET /tms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 290 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:23:46 -0400] "GET /old/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 290 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:24:01 -0400] "GET /cnishopping/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 298 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:24:17 -0400] "GET /protected/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 296 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:24:33 -0400] "GET /2020/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 291 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:24:49 -0400] "GET /2019/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 291 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:25:05 -0400] "GET /demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 291 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:25:20 -0400] "GET /Code/snippets/html2pdf-master/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 316 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:25:37 -0400] "GET /pp/basic/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 295 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:25:53 -0400] "GET /web.public/admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 303 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:26:09 -0400] "GET /servicecommon/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 300 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:26:25 -0400] "GET /woodfieldestates/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 303 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:26:47 -0400] "GET /old_stuff/meihome/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 304 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:26:57 -0400] "GET /dacol/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 292 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:27:13 -0400] "GET /freelandadm/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 298 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:27:29 -0400] "GET /Bank_bak/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 295 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:27:44 -0400] "GET /watern/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 293 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:28:01 -0400] "GET /test/med-decision/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 304 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:28:18 -0400] "GET /site/PortalEscolar/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 305 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:28:32 -0400] "GET /dev/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 290 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:28:49 -0400] "GET /admin_temp/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 297 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:29:05 -0400] "GET /Yii/basic/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 296 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:29:22 -0400] "GET /MyProject/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 296 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:29:38 -0400] "GET /en/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 289 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:29:53 -0400] "GET /administration/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 301 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:30:09 -0400] "GET /google/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 293 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:30:25 -0400] "GET /prensa.api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 297 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:30:39 -0400] "GET /assets/translation/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 305 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:30:55 -0400] "GET /site/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 291 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:31:11 -0400] "GET /assets/translation/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 305 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:31:26 -0400] "GET /assets/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 293 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:31:40 -0400] "GET /cpntest/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 294 "-" "python-requests/2.24.0" 52.138.83.105 - - [07/Jul/2020:20:31:59 -0400] "GET /wp-content/plugins/jekyll-exporter/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 321 "-" "python-requests/2.24.0" 0 Quote Link to comment Share on other sites More sharing options...
string Posted July 31, 2020 Share Posted July 31, 2020 What you see is an automatic scan, probably scanning for vulnerable scripts. This has no reference to WHMCS or a module. 0 Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.