LeakIX - Host 103.18.142.28

Host 103.18.142.28

India

I World Tower, DLF CITY

Server vulnerable to Log4J CVE-2021-44228

The reply originated from a backend server, the originating frontend server has been included in the report for reference.

It is critical to patch log4j or the application using since the issues is exploited in the wild and leads to RCE.

IP: 103.18.142.28
Port: 443
URL: https://103.18.142.28

First seen 2021-12-15 09:14

Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa465e243d8d9cd5085997271e0faddca43

Received reply after a Log4j payload from this host
Ping was received because of X-Forwared-Host
Reply took 1.089274861s
Orignal request was to 223.165.28.150:443
This event's HTTP and SSL details are preserved from the orignal request.

Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b20312e303839323734383631730a4f7269676e616c20726571756573742077617320746f203232332e3136352e32382e3135303a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a

Found on 2021-12-15 09:14

Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa46054f73db373fc062c28aa11fde7b38f

Received reply after a Log4j payload from this host
Ping was received because of X-Forwared-Host
Reply took 1.541370741s
Orignal request was to 223.165.28.150:443
This event's HTTP and SSL details are preserved from the orignal request.

Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b20312e353431333730373431730a4f7269676e616c20726571756573742077617320746f203232332e3136352e32382e3135303a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a

Found on 2021-12-15 09:14

Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa40b6c1bc8079abc95b65347101d294aed

Received reply after a Log4j payload from this host
Ping was received because of X-Forwared-Host
Reply took 1.935593049s
Orignal request was to 223.165.28.150:443
This event's HTTP and SSL details are preserved from the orignal request.

Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b20312e393335353933303439730a4f7269676e616c20726571756573742077617320746f203232332e3136352e32382e3135303a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a

Found on 2021-12-15 09:14

Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa4cd54b8aafb2fcd0f64d6829608c005b7

Received reply after a Log4j payload from this host
Ping was received because of X-Forwared-Host
Reply took 2.305999148s
Orignal request was to 223.165.28.150:443
This event's HTTP and SSL details are preserved from the orignal request.

Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b20322e333035393939313438730a4f7269676e616c20726571756573742077617320746f203232332e3136352e32382e3135303a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a

Found on 2021-12-15 09:14

Create report

Server vulnerable to Log4J CVE-2021-44228

The reply originated from a backend server, the originating frontend server has been included in the report for reference.

It is critical to patch log4j or the application using since the issues is exploited in the wild and leads to RCE.

IP: 103.18.142.28
Domain: pflivefeeds.indiatimes.com
Port: 443
URL: https://pflivefeeds.indiatimes.com

First seen 2021-12-13 08:19

Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa4b207125482fd8d92673e9a95b310bf2b

Received reply after a Log4j payload from this host
Ping was received because of X-Forwared-Host
Reply took 1.71249002s
Orignal request was to 103.225.63.37:443
This event's HTTP and SSL details are preserved from the orignal request.

Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b20312e3731323439303032730a4f7269676e616c20726571756573742077617320746f203130332e3232352e36332e33373a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a

Found on 2021-12-13 08:19

Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa45e6133ab6ff9b3114f8859744154a3cc

Received reply after a Log4j payload from this host
Ping was received because of X-Forwared-Host
Reply took 2.085953296s
Orignal request was to 103.225.63.37:443
This event's HTTP and SSL details are preserved from the orignal request.

Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b20322e303835393533323936730a4f7269676e616c20726571756573742077617320746f203130332e3232352e36332e33373a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a

Found on 2021-12-13 08:19

Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa4373d06f0d5f44026be919d3131d68af4

Received reply after a Log4j payload from this host
Ping was received because of X-Forwared-Host
Reply took 846.610615ms
Orignal request was to 103.225.63.37:443
This event's HTTP and SSL details are preserved from the orignal request.

Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b203834362e3631303631356d730a4f7269676e616c20726571756573742077617320746f203130332e3232352e36332e33373a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a

Found on 2021-12-13 08:19

Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa4e7a5985bafea3da1255a1364bcb64fcc

Received reply after a Log4j payload from this host
Ping was received because of X-Forwared-Host
Reply took 1.321868574s
Orignal request was to 103.225.63.37:443
This event's HTTP and SSL details are preserved from the orignal request.

Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b20312e333231383638353734730a4f7269676e616c20726571756573742077617320746f203130332e3232352e36332e33373a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a

Found on 2021-12-13 08:19

Create report

Domain summary

pflivefeeds.indiatimes.com 4

1 recorded