LeakIX - Host vknotifications.indiatimes.com

Domain vknotifications.indiatimes.com

India

I World Tower, DLF CITY

Server vulnerable to Log4J CVE-2021-44228

The reply originated from a backend server, the originating frontend server has been included in the report for reference.

It is critical to patch log4j or the application using since the issues is exploited in the wild and leads to RCE.

IP: 103.18.141.25
Domain: vknotifications.indiatimes.com
Port: 443
URL: https://vknotifications.indiatimes.com

First seen 2021-12-13 08:20

Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa468717e18df189fac8e8bfc3b325956dc

Received reply after a Log4j payload from this host
Ping was received because of X-Forwared-Host
Reply took 1.675508486s
Orignal request was to 23.222.64.106:443
This event's HTTP and SSL details are preserved from the orignal request.

Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b20312e363735353038343836730a4f7269676e616c20726571756573742077617320746f2032332e3232322e36342e3130363a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a

Found on 2021-12-13 08:20

Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa4a1bc8c59218aa0e5a70642c0823e139e

Received reply after a Log4j payload from this host
Ping was received because of X-Forwared-Host
Reply took 779.280201ms
Orignal request was to 23.222.64.106:443
This event's HTTP and SSL details are preserved from the orignal request.

Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b203737392e3238303230316d730a4f7269676e616c20726571756573742077617320746f2032332e3232322e36342e3130363a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a

Found on 2021-12-13 08:20

Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa4f6d1883ce19ce41876027cef2edf7d6c

Received reply after a Log4j payload from this host
Ping was received because of X-Forwared-Host
Reply took 1.176861642s
Orignal request was to 23.222.64.106:443
This event's HTTP and SSL details are preserved from the orignal request.

Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b20312e313736383631363432730a4f7269676e616c20726571756573742077617320746f2032332e3232322e36342e3130363a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a

Found on 2021-12-13 08:20

Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa40d64d3078305b2e7e17126fe4fc87900

Received reply after a Log4j payload from this host
Ping was received because of X-Forwared-Host
Reply took 1.568048221s
Orignal request was to 23.222.64.106:443
This event's HTTP and SSL details are preserved from the orignal request.

Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b20312e353638303438323231730a4f7269676e616c20726571756573742077617320746f2032332e3232322e36342e3130363a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a

Found on 2021-12-13 08:20

Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa4d254675f48a48baf1b3dee3642fc53e5

Received reply after a Log4j payload from this host
Ping was received because of X-Forwared-Host
Reply took 2.57081578s
Orignal request was to 23.222.64.106:443
This event's HTTP and SSL details are preserved from the orignal request.

Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b20322e3537303831353738730a4f7269676e616c20726571756573742077617320746f2032332e3232322e36342e3130363a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a

Found on 2021-12-13 08:20

Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa4c6768965fedde1f97d4c52ac0626fb12

Received reply after a Log4j payload from this host
Ping was received because of X-Forwared-Host
Reply took 3.071614988s
Orignal request was to 23.222.64.106:443
This event's HTTP and SSL details are preserved from the orignal request.

Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b20332e303731363134393838730a4f7269676e616c20726571756573742077617320746f2032332e3232322e36342e3130363a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a

Found on 2021-12-13 08:20

Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa4f100724ed3a2ebeefafeb389cc396d5a

Received reply after a Log4j payload from this host
Ping was received because of X-Forwared-Host
Reply took 2.076545841s
Orignal request was to 23.222.64.106:443
This event's HTTP and SSL details are preserved from the orignal request.

Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b20322e303736353435383431730a4f7269676e616c20726571756573742077617320746f2032332e3232322e36342e3130363a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a

Found on 2021-12-13 08:20

Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa452f62745f76f89994224cecc9953d8e4

Received reply after a Log4j payload from this host
Ping was received because of X-Forwared-Host
Reply took 2.173743376s
Orignal request was to 23.222.64.106:443
This event's HTTP and SSL details are preserved from the orignal request.

Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b20322e313733373433333736730a4f7269676e616c20726571756573742077617320746f2032332e3232322e36342e3130363a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a

Found on 2021-12-13 08:20

Create report

Domain summary

vknotifications.indiatimes.com 8

1 recorded

IP summary

103.18.141.25 1 103.18.141.26 1

2 recorded