LeakIX - Host manage-ro.flatfy.io

Domain manage-ro.flatfy.io

Germany

Hetzner Online GmbH

Server vulnerable to Log4J CVE-2021-44228

The reply originated from a backend server, the originating frontend server has been included in the report for reference.

It is critical to patch log4j or the application using since the issues is exploited in the wild and leads to RCE.

IP: 178.63.104.139
Domain: manage-ro.flatfy.io
Port: 443
URL: https://manage-ro.flatfy.io

First seen 2022-01-01 16:49

Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa4c6f31c9060e77c89836edb1c419d2d5c

Received reply after a Log4j payload from this host
Ping was received because of X-Forwared-Host
Reply took 628.730627ms
Orignal request was to 195.201.249.244:443
This event's HTTP and SSL details are preserved from the orignal request.

Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b203632382e3733303632376d730a4f7269676e616c20726571756573742077617320746f203139352e3230312e3234392e3234343a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a

Found on 2022-01-01 16:49

Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa4c2326ab90d1519205e2b6387977bcd10

Received reply after a Log4j payload from this host
Ping was received because of X-Forwared-Host
Reply took 693.070171ms
Orignal request was to 195.201.249.244:443
This event's HTTP and SSL details are preserved from the orignal request.

Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b203639332e3037303137316d730a4f7269676e616c20726571756573742077617320746f203139352e3230312e3234392e3234343a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a

Found on 2022-01-01 16:49

Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa47bb998589c0a39e14f2ebc242851b37e

Received reply after a Log4j payload from this host
Ping was received because of X-Forwared-Host
Reply took 764.411822ms
Orignal request was to 195.201.249.244:443
This event's HTTP and SSL details are preserved from the orignal request.

Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b203736342e3431313832326d730a4f7269676e616c20726571756573742077617320746f203139352e3230312e3234392e3234343a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a

Found on 2022-01-01 16:49

Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa426ec4aed743e06c49a19e1a32d6a8694

Received reply after a Log4j payload from this host
Ping was received because of X-Forwared-Host
Reply took 816.989047ms
Orignal request was to 195.201.249.244:443
This event's HTTP and SSL details are preserved from the orignal request.

Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b203831362e3938393034376d730a4f7269676e616c20726571756573742077617320746f203139352e3230312e3234392e3234343a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a

Found on 2022-01-01 16:49

Create report

Domain summary

manage-ro.flatfy.io 4

1 recorded

IP summary

178.63.104.139 1

1 recorded