LeakIX - Host nmdeveloper.tk

Domain nmdeveloper.tk

Bulgaria

A1 Bulgaria EAD

Server vulnerable to Log4J CVE-2021-44228

The reply originated from a backend server, the originating frontend server has been included in the report for reference.

It is critical to patch log4j or the application using since the issues is exploited in the wild and leads to RCE.

IP: 87.227.132.209
Domain: raspberry.nmdeveloper.tk
Port: 9443
URL: https://raspberry.nmdeveloper.tk:9443

First seen 2022-01-04 03:54

Severity: critical
Fingerprint: aff4d642200b0639f888045993190123170baa86f5e0e06c99c9c75899c9c758

Received reply after a Log4j payload from this host
Ping was received because of query argument
Reply took 220.576682ms
Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620717565727920617267756d656e740a5265706c7920746f6f6b203232302e3537363638326d730a

Found on 2022-01-04 03:54

Severity: critical
Fingerprint: aff4d642200b0639f8880459931901236813bf8e628f3e2450bc90ee50bc90ee

Received reply after a Log4j payload from this host
Ping was received because of query argument
Reply took 487.415966ms
Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620717565727920617267756d656e740a5265706c7920746f6f6b203438372e3431353936366d730a

Found on 2022-01-04 03:54

Severity: critical
Fingerprint: aff4d642200b0639f8880459e94669a5b461fdc9d960c34f0204f77a0204f77a

Received reply after a Log4j payload from this host
Ping was received because of query value
Reply took 364.257172ms
Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f662071756572792076616c75650a5265706c7920746f6f6b203336342e3235373137326d730a

Found on 2022-01-04 03:54

Severity: critical
Fingerprint: aff4d642200b0639f8880459e94669a53617e02f4863f36593dfe08993dfe089

Received reply after a Log4j payload from this host
Ping was received because of query value
Reply took 635.97784ms
Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f662071756572792076616c75650a5265706c7920746f6f6b203633352e39373738346d730a

Found on 2022-01-04 03:54

Create report

Server vulnerable to Log4J CVE-2021-44228

The reply originated from a backend server, the originating frontend server has been included in the report for reference.

It is critical to patch log4j or the application using since the issues is exploited in the wild and leads to RCE.

IP: 87.227.132.209
Domain: nmdeveloper.tk
Port: 9443
URL: https://nmdeveloper.tk:9443

First seen 2022-01-02 18:13

Severity: critical
Fingerprint: aff4d642200b0639f88804599319012313167bc9f945114f5fc756ce5fc756ce

Received reply after a Log4j payload from this host
Ping was received because of query argument
Reply took 71.14116ms
Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620717565727920617267756d656e740a5265706c7920746f6f6b2037312e31343131366d730a

Found on 2022-01-02 18:13

Severity: critical
Fingerprint: aff4d642200b0639f8880459e94669a5c99f91c8e554d5ae6d067aa26d067aa2

Received reply after a Log4j payload from this host
Ping was received because of query value
Reply took 448.156183ms
Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f662071756572792076616c75650a5265706c7920746f6f6b203434382e3135363138336d730a

Found on 2022-01-02 18:13

Severity: critical
Fingerprint: aff4d642200b0639f8880459e94669a5e0cce7f400517d5a7f086e947f086e94

Received reply after a Log4j payload from this host
Ping was received because of query value
Reply took 209.073661ms
Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f662071756572792076616c75650a5265706c7920746f6f6b203230392e3037333636316d730a

Found on 2022-01-02 18:13

Severity: critical
Fingerprint: aff4d642200b0639f88804599319012354dd8a976efdb63dbf8abb08bf8abb08

Received reply after a Log4j payload from this host
Ping was received because of query argument
Reply took 330.624948ms
Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620717565727920617267756d656e740a5265706c7920746f6f6b203333302e3632343934386d730a

Found on 2022-01-02 18:13

Create report

Domain summary

raspberry.nmdeveloper.tk 4 nmdeveloper.tk 4

2 recorded

IP summary

87.227.132.209 2

1 recorded