Scan of 81.17.20.98 (Switzerland)

[farias]

# grep "^81.17.20.98" /var/log/apache2/access.*.log  | awk '{print $6 " " $7 " " $8}' | wc -l
1193

Ce qui est marrant c’est le changement de signature à chaque scan :

81.17.20.98 - - [24/Sep/2025:05:37:24 +0200] "GET /DPMMg7Kl.js HTTP/1.1" 404 3795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36"
81.17.20.98 - - [24/Sep/2025:05:37:24 +0200] "GET /DZ-OFEny.js HTTP/1.1" 404 3795 "-" "Mozilla/5.0 (Linux; Android 11; moto e20) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
81.17.20.98 - - [24/Sep/2025:05:37:24 +0200] "GET /DNt7fPBn.js HTTP/1.1" 404 3795 "-" "Mozilla/5.0 (Linux; Android 11; SM-G980F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.61 Mobile Safari/537.36"
81.17.20.98 - - [24/Sep/2025:05:37:24 +0200] "GET /D4wLgXv6.js HTTP/1.1" 403 3798 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)"
81.17.20.98 - - [24/Sep/2025:05:37:24 +0200] "GET /DHpwYW4h.js HTTP/1.1" 403 3798 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)"
81.17.20.98 - - [24/Sep/2025:05:37:24 +0200] "GET /DHcHVv7h.js HTTP/1.1" 404 3795 "-" "Mozilla/5.0 (X11; Linux i686; rv:32.0) Gecko/20100101 Firefox/32.0"
81.17.20.98 - - [24/Sep/2025:05:37:24 +0200] "GET /DDaHskSk.js HTTP/1.1" 404 3795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36"
81.17.20.98 - - [24/Sep/2025:05:37:24 +0200] "GET /DKq2DBBE.js HTTP/1.1" 404 3795 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_8; en-US) AppleWebKit/532.8 (KHTML, like Gecko) Chrome/4.0.302.2 Safari/532.8"
81.17.20.98 - - [24/Sep/2025:05:37:24 +0200] "GET /DYEDWz2X.js HTTP/1.1" 404 3795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Safari/537.36"
81.17.20.98 - - [24/Sep/2025:05:37:24 +0200] "GET /DJq8fwm7.js HTTP/1.1" 404 3795 "-" "Mozilla/5.0 (SymbianOS/9.2; U; Series60/3.1 NokiaN95/10.0.018; Profile/MIDP-2.0 Configuration/CLDC-1.1) AppleWebKit/413 (KHTML, like Gecko) Safari/413 UP.Link/6.3.0.0.0"