LeakIX - Host manage-gr.flatfy.io

Domain manage-gr.flatfy.io

Germany

Hetzner Online GmbH

Server vulnerable to Log4J CVE-2021-44228

The reply originated from a backend server, the originating frontend server has been included in the report for reference.

It is critical to patch log4j or the application using since the issues is exploited in the wild and leads to RCE.

IP: 178.63.104.139
Domain: manage-gr.flatfy.io
Port: 443
URL: https://manage-gr.flatfy.io

First seen 2022-01-01 16:49

Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa4eb5d399e8f518afb189f4daae7c93c14

Received reply after a Log4j payload from this host
Ping was received because of X-Forwared-Host
Reply took 274.900449ms
Orignal request was to 195.201.249.244:443
This event's HTTP and SSL details are preserved from the orignal request.

Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b203237342e3930303434396d730a4f7269676e616c20726571756573742077617320746f203139352e3230312e3234392e3234343a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a

Found on 2022-01-01 16:49

Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa45fc1f05ce984d1957e4c3610eb51b07c

Received reply after a Log4j payload from this host
Ping was received because of X-Forwared-Host
Reply took 346.789444ms
Orignal request was to 195.201.249.244:443
This event's HTTP and SSL details are preserved from the orignal request.

Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b203334362e3738393434346d730a4f7269676e616c20726571756573742077617320746f203139352e3230312e3234392e3234343a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a

Found on 2022-01-01 16:49

Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa493786d9b74228f06894f331165bd5931

Received reply after a Log4j payload from this host
Ping was received because of X-Forwared-Host
Reply took 458.14561ms
Orignal request was to 195.201.249.244:443
This event's HTTP and SSL details are preserved from the orignal request.

Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b203435382e31343536316d730a4f7269676e616c20726571756573742077617320746f203139352e3230312e3234392e3234343a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a

Found on 2022-01-01 16:49

Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa4a71d90ca50039337eb330dae38eeb0c2

Received reply after a Log4j payload from this host
Ping was received because of X-Forwared-Host
Reply took 407.055703ms
Orignal request was to 195.201.249.244:443
This event's HTTP and SSL details are preserved from the orignal request.

Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b203430372e3035353730336d730a4f7269676e616c20726571756573742077617320746f203139352e3230312e3234392e3234343a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a

Found on 2022-01-01 16:49

Create report

Domain summary

manage-gr.flatfy.io 4

1 recorded

IP summary

178.63.104.139 1

1 recorded