Java Class File Download by Java User Agent

This analytic identifies a Java user agent performing a GET request for a .class file from a remote site. This behavior is significant as it may indicate exploitation attempts, such as those related to CVE-2021-44228 (Log4Shell). If confirmed malicious, an attacker could exploit vulnerabilities in the Java application, potentially leading to remote code execution and further compromise of the affected system.