Domain myprofile.servsafeinternational.com
United States
-
Server vulnerable to Log4J CVE-2021-44228
The reply originated from a backend server, the originating frontend server has been included in the report for reference.
It is critical to patch log4j or the application using since the issues is exploited in the wild and leads to RCE.
IP: 23.100.235.249
Domain: myprofile.servsafeinternational.com
Port: 443
URL: https://myprofile.servsafeinternational.comFirst seen 2022-01-02 11:28-
Severity: critical
Fingerprint: aff4d642200b0639f8880459215798a23e2d1ac279727816b1831181dd051b13Received reply after a Log4j payload from this host Ping was received because of URL path Reply took 104.972707ms Orignal request was to 23.100.236.32:443 This event's HTTP and SSL details are preserved from the orignal request. Orignal reply: 5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f662055524c20706174680a5265706c7920746f6f6b203130342e3937323730376d730a4f7269676e616c20726571756573742077617320746f2032332e3130302e3233362e33323a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a
Found on 2022-01-02 11:28 -
Severity: critical
Fingerprint: aff4d642200b0639f8880459215798a2a21cf4b784903e6fee97047634686b29Received reply after a Log4j payload from this host Ping was received because of URL path Reply took 196.806914ms Orignal request was to 23.100.236.32:443 This event's HTTP and SSL details are preserved from the orignal request. Orignal reply: 5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f662055524c20706174680a5265706c7920746f6f6b203139362e3830363931346d730a4f7269676e616c20726571756573742077617320746f2032332e3130302e3233362e33323a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a
Found on 2022-01-02 11:28 -
Severity: critical
Fingerprint: aff4d642200b0639f8880459215798a284d48463737223b345b66c72050f7803Received reply after a Log4j payload from this host Ping was received because of URL path Reply took 417.808004ms Orignal request was to 23.100.236.32:443 This event's HTTP and SSL details are preserved from the orignal request. Orignal reply: 5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f662055524c20706174680a5265706c7920746f6f6b203431372e3830383030346d730a4f7269676e616c20726571756573742077617320746f2032332e3130302e3233362e33323a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a
Found on 2022-01-02 11:28
-