{"cve_id":"CVE-2017-12149","title":"Jboss Application Server - Remote Code Execution","severity":"critical","actively_exploited":true,"patterns":["/invoker/readonly","/invoker/EJBInvokerServlet","/invoker/JMXInvokerServlet"],"events":81,"unique_ips":11,"actors":[{"ip":"219.151.190.165","events":16,"country_code":"CN","country":"China","org":"Chongqing Telecom","rdns":"","scanner_tag":null},{"ip":"72.167.44.205","events":16,"country_code":"US","country":"United States","org":"GoDaddy.com, LLC","rdns":"205.44.167.72.host.secureserver.net","scanner_tag":null},{"ip":"222.211.66.28","events":16,"country_code":"CN","country":"China","org":"CHINANET SiChuan Telecom Internet Data Center","rdns":"28.66.211.222.broad.my.sc.dynamic.163data.com.cn","scanner_tag":null},{"ip":"190.80.139.156","events":8,"country_code":"DO","country":"Dominican Republic","org":"Compania Dominicana de Telefonos S. A.","rdns":"tdev139-156.codetel.net.do","scanner_tag":null},{"ip":"4.193.139.29","events":8,"country_code":"SG","country":"Singapore","org":"Microsoft Corporation","rdns":"","scanner_tag":null},{"ip":"190.167.169.205","events":4,"country_code":"DO","country":"Dominican Republic","org":"Compania Dominicana de Telefonos S. A.","rdns":"205.169.167.190.d.dyn.codetel.net.do","scanner_tag":null},{"ip":"211.101.237.84","events":4,"country_code":"CN","country":"China","org":"Cloud Computing Corporation","rdns":"","scanner_tag":null},{"ip":"115.171.80.253","events":3,"country_code":"CN","country":"China","org":"China Networks Inter-Exchange","rdns":"","scanner_tag":null},{"ip":"101.36.125.58","events":3,"country_code":"HK","country":"Hong Kong","org":"UCLOUD INFORMATION TECHNOLOGY HK LIMITED","rdns":"","scanner_tag":null},{"ip":"38.76.165.207","events":2,"country_code":"US","country":"United States","org":"Cogent Communications, LLC","rdns":"","scanner_tag":null},{"ip":"13.68.133.98","events":1,"country_code":"US","country":"United States","org":"Microsoft Corporation","rdns":"","scanner_tag":null}],"top_asns":[{"asn":134420,"org":"Chongqing Telecom","events":16,"ips":1},{"asn":398101,"org":"GoDaddy.com, LLC","events":16,"ips":1},{"asn":38283,"org":"CHINANET SiChuan Telecom Internet Data Center","events":16,"ips":1},{"asn":6400,"org":"Compania Dominicana de Telefonos S. A.","events":12,"ips":2},{"asn":8075,"org":"Microsoft Corporation","events":9,"ips":2},{"asn":58519,"org":"Cloud Computing Corporation","events":4,"ips":1},{"asn":4847,"org":"China Networks Inter-Exchange","events":3,"ips":1},{"asn":135377,"org":"UCLOUD INFORMATION TECHNOLOGY HK LIMITED","events":3,"ips":1},{"asn":174,"org":"Cogent Communications, LLC","events":2,"ips":1}],"fingerprints":{"ja4h":["po11nn0600_5aaf82b7b36c","he11nn0500_a3c44ede19e0"],"ja4":["t13i250900_b78ed14e2fd0_e7c285222651"]},"sample_paths":["/invoker/JMXInvokerServlet/","/invoker/EJBInvokerServlet","/invoker/EJBInvokerServlet/","/invoker/readonly","/invoker/JMXInvokerServlet"],"timeline":[{"day":"2026-05-15","events":3,"ips":1},{"day":"2026-05-16","events":3,"ips":1},{"day":"2026-05-22","events":8,"ips":1},{"day":"2026-05-23","events":8,"ips":1},{"day":"2026-05-29","events":8,"ips":1},{"day":"2026-06-01","events":1,"ips":1},{"day":"2026-06-02","events":8,"ips":1},{"day":"2026-06-06","events":8,"ips":1},{"day":"2026-06-24","events":2,"ips":1},{"day":"2026-06-26","events":4,"ips":1},{"day":"2026-07-01","events":8,"ips":1},{"day":"2026-07-07","events":8,"ips":1},{"day":"2026-07-08","events":8,"ips":1},{"day":"2026-07-22","events":4,"ips":1}],"window_hours":2160}