Domain myprofile.nrfsp.com
United States
-
Server vulnerable to Log4J CVE-2021-44228
The reply originated from a backend server, the originating frontend server has been included in the report for reference.
It is critical to patch log4j or the application using since the issues is exploited in the wild and leads to RCE.
First seen 2022-01-02 11:28-
Severity: critical
Fingerprint: aff4d642200b0639f8880459215798a2618ec0430e0d405349973712a62925aaReceived reply after a Log4j payload from this host Ping was received because of URL path Reply took 14.412664ms Orignal request was to 23.100.236.32:443 This event's HTTP and SSL details are preserved from the orignal request. Orignal reply: 5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f662055524c20706174680a5265706c7920746f6f6b2031342e3431323636346d730a4f7269676e616c20726571756573742077617320746f2032332e3130302e3233362e33323a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a
Found on 2022-01-02 11:28 -
Severity: critical
Fingerprint: aff4d642200b0639f8880459215798a2a6b91e7c25e3d63489fc897310967f28Received reply after a Log4j payload from this host Ping was received because of URL path Reply took 85.172123ms Orignal request was to 23.100.236.32:443 This event's HTTP and SSL details are preserved from the orignal request. Orignal reply: 5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f662055524c20706174680a5265706c7920746f6f6b2038352e3137323132336d730a4f7269676e616c20726571756573742077617320746f2032332e3130302e3233362e33323a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a
Found on 2022-01-02 11:28 -
Severity: critical
Fingerprint: aff4d642200b0639f8880459215798a267f2104dbb678549703e0b5cfc08fb5dReceived reply after a Log4j payload from this host Ping was received because of URL path Reply took 332.486152ms Orignal request was to 23.100.236.32:443 This event's HTTP and SSL details are preserved from the orignal request. Orignal reply: 5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f662055524c20706174680a5265706c7920746f6f6b203333322e3438363135326d730a4f7269676e616c20726571756573742077617320746f2032332e3130302e3233362e33323a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a
Found on 2022-01-02 11:28 -
Severity: critical
Fingerprint: aff4d642200b0639f8880459215798a2c367698332c2b2130d38675216762523Received reply after a Log4j payload from this host Ping was received because of URL path Reply took 410.959057ms Orignal request was to 23.100.236.32:443 This event's HTTP and SSL details are preserved from the orignal request. Orignal reply: 5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f662055524c20706174680a5265706c7920746f6f6b203431302e3935393035376d730a4f7269676e616c20726571756573742077617320746f2032332e3130302e3233362e33323a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a
Found on 2022-01-02 11:28
-