Jump to content
gshjames

Is this ip part of a addon /plug or a hack

Recommended Posts

https://www.abuseipdb.com/check/52.138.83.105

Is this ip part of a addon /plug or a hack

52.138.83.105 - - [07/Jul/2020:20:14:06 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 286 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:14:23 -0400] "GET /api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 290 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:14:38 -0400] "GET /laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 294 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:14:54 -0400] "GET /modules/autoupgrade/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 306 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:15:11 -0400] "GET /sites/all/libraries/mailchimp/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 316 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:15:27 -0400] "GET /test/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 291 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:15:43 -0400] "GET /admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 292 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:15:58 -0400] "GET /modules/ps_facetedsearch/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 311 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:16:14 -0400] "GET /blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 291 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:16:29 -0400] "GET /system/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 293 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:16:46 -0400] "GET /modules/gamification/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 307 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:17:02 -0400] "GET /shop/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 291 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:17:18 -0400] "GET /testing/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 294 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:17:35 -0400] "GET /laravel/click_e_money/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 308 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:17:50 -0400] "GET /mahara/auth/saml/extlib/simplesamlphp/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 324 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:18:07 -0400] "GET /concrete/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 295 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:18:25 -0400] "GET /wbs/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 290 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:18:41 -0400] "GET /app1/_lib/libraries/sys/dom_pdf/dompdf/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 325 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:18:57 -0400] "GET /wp-content/themes/enfold-child/update_script/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 331 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:19:13 -0400] "GET /proguard/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 295 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:19:27 -0400] "GET /mapa/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 291 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:19:42 -0400] "GET /cambio/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 293 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:19:57 -0400] "GET /__MACOSX/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 295 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:20:13 -0400] "GET /quotation/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 296 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:20:30 -0400] "GET /wp-content/plugins/mm-plugin/inc/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 319 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:20:46 -0400] "GET /onefolder/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 296 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:21:02 -0400] "GET /pro/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 290 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:21:17 -0400] "GET /staff/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 292 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:21:34 -0400] "GET /supervision/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 298 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:21:50 -0400] "GET /icms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 291 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:22:07 -0400] "GET /services/lib/pusher-http-php/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 315 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:22:23 -0400] "GET /release/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 294 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:22:39 -0400] "GET /backend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 294 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:22:56 -0400] "GET /freelance039/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 299 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:23:13 -0400] "GET /sistema/dompdf-master/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 308 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:23:29 -0400] "GET /tms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 290 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:23:46 -0400] "GET /old/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 290 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:24:01 -0400] "GET /cnishopping/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 298 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:24:17 -0400] "GET /protected/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 296 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:24:33 -0400] "GET /2020/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 291 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:24:49 -0400] "GET /2019/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 291 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:25:05 -0400] "GET /demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 291 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:25:20 -0400] "GET /Code/snippets/html2pdf-master/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 316 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:25:37 -0400] "GET /pp/basic/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 295 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:25:53 -0400] "GET /web.public/admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 303 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:26:09 -0400] "GET /servicecommon/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 300 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:26:25 -0400] "GET /woodfieldestates/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 303 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:26:47 -0400] "GET /old_stuff/meihome/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 304 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:26:57 -0400] "GET /dacol/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 292 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:27:13 -0400] "GET /freelandadm/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 298 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:27:29 -0400] "GET /Bank_bak/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 295 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:27:44 -0400] "GET /watern/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 293 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:28:01 -0400] "GET /test/med-decision/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 304 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:28:18 -0400] "GET /site/PortalEscolar/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 305 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:28:32 -0400] "GET /dev/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 290 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:28:49 -0400] "GET /admin_temp/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 297 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:29:05 -0400] "GET /Yii/basic/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 296 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:29:22 -0400] "GET /MyProject/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 296 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:29:38 -0400] "GET /en/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 289 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:29:53 -0400] "GET /administration/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 301 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:30:09 -0400] "GET /google/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 293 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:30:25 -0400] "GET /prensa.api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 297 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:30:39 -0400] "GET /assets/translation/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 305 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:30:55 -0400] "GET /site/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 291 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:31:11 -0400] "GET /assets/translation/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 305 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:31:26 -0400] "GET /assets/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 293 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:31:40 -0400] "GET /cpntest/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 294 "-" "python-requests/2.24.0"
52.138.83.105 - - [07/Jul/2020:20:31:59 -0400] "GET /wp-content/plugins/jekyll-exporter/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 321 "-" "python-requests/2.24.0"

Share this post


Link to post
Share on other sites

What you see is an automatic scan, probably scanning for vulnerable scripts. This has no reference to WHMCS or a module.

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

By using this site, you agree to our Terms of Use & Guidelines and understand your posts will initially be pre-moderated