Domain myprofile.servsuccess.com
United States
-
Server vulnerable to Log4J CVE-2021-44228
The reply originated from a backend server, the originating frontend server has been included in the report for reference.
It is critical to patch log4j or the application using since the issues is exploited in the wild and leads to RCE.
IP: 23.100.235.234
Domain: myprofile.servsuccess.com
Port: 443
URL: https://myprofile.servsuccess.comFirst seen 2022-01-02 11:28-
Severity: critical
Fingerprint: aff4d642200b0639f8880459215798a2d801a68b5b5f738be4ce229ab8bf27e0Received reply after a Log4j payload from this host Ping was received because of URL path Reply took 84.782786ms Orignal request was to 23.100.236.32:443 This event's HTTP and SSL details are preserved from the orignal request. Orignal reply: 5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f662055524c20706174680a5265706c7920746f6f6b2038342e3738323738366d730a4f7269676e616c20726571756573742077617320746f2032332e3130302e3233362e33323a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a
Found on 2022-01-02 11:28 -
Severity: critical
Fingerprint: aff4d642200b0639f8880459215798a282e656ab3db514eb79a281fa908a88a5Received reply after a Log4j payload from this host Ping was received because of URL path Reply took 306.128824ms Orignal request was to 23.100.236.32:443 This event's HTTP and SSL details are preserved from the orignal request. Orignal reply: 5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f662055524c20706174680a5265706c7920746f6f6b203330362e3132383832346d730a4f7269676e616c20726571756573742077617320746f2032332e3130302e3233362e33323a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a
Found on 2022-01-02 11:28 -
Severity: critical
Fingerprint: aff4d642200b0639f8880459215798a202a7ecbae238d89e3c56c359afc795f1Received reply after a Log4j payload from this host Ping was received because of URL path Reply took 405.009975ms Orignal request was to 23.100.236.32:443 This event's HTTP and SSL details are preserved from the orignal request. Orignal reply: 5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f662055524c20706174680a5265706c7920746f6f6b203430352e3030393937356d730a4f7269676e616c20726571756573742077617320746f2032332e3130302e3233362e33323a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a
Found on 2022-01-02 11:28
-