Domain monitor.flatfy.io
Germany
-
Server vulnerable to Log4J CVE-2021-44228
The reply originated from a backend server, the originating frontend server has been included in the report for reference.
It is critical to patch log4j or the application using since the issues is exploited in the wild and leads to RCE.
First seen 2022-01-02 05:09-
Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa4ee613f13b665912e82bd27490874b1aeReceived reply after a Log4j payload from this host Ping was received because of X-Forwared-Host Reply took 154.476665ms Orignal request was to 195.201.249.244:443 This event's HTTP and SSL details are preserved from the orignal request. Orignal reply: 5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b203135342e3437363636356d730a4f7269676e616c20726571756573742077617320746f203139352e3230312e3234392e3234343a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a
Found on 2022-01-02 05:09 -
Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa46598c6d78af4858204307fa59560fbf2Received reply after a Log4j payload from this host Ping was received because of X-Forwared-Host Reply took 284.035062ms Orignal request was to 195.201.249.244:443 This event's HTTP and SSL details are preserved from the orignal request. Orignal reply: 5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b203238342e3033353036326d730a4f7269676e616c20726571756573742077617320746f203139352e3230312e3234392e3234343a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a
Found on 2022-01-02 05:09 -
Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa4a87d061947fe82405b1f5f27d3bd71f4Received reply after a Log4j payload from this host Ping was received because of X-Forwared-Host Reply took 107.328852ms Orignal request was to 195.201.249.244:443 This event's HTTP and SSL details are preserved from the orignal request. Orignal reply: 5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b203130372e3332383835326d730a4f7269676e616c20726571756573742077617320746f203139352e3230312e3234392e3234343a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a
Found on 2022-01-02 05:09 -
Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa4b7fa02e7f53e95322cf8a4b5a51ee54cReceived reply after a Log4j payload from this host Ping was received because of X-Forwared-Host Reply took 224.722494ms Orignal request was to 195.201.249.244:443 This event's HTTP and SSL details are preserved from the orignal request. Orignal reply: 5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b203232342e3732323439346d730a4f7269676e616c20726571756573742077617320746f203139352e3230312e3234392e3234343a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a
Found on 2022-01-02 05:09
-