Domain api.big-buyer.ru
Russia
Software information
nginx 1.24.0
tcp/443
-
Symfony developement panel enabled
The application has Symfony profiling enabled.
It enables an attacker to access the following sensitive content :
- System configuration
- Request log, including POST request with credentials and/or api keys
IP: 91.218.230.10
Domain: api.big-buyer.ru
Port: 443
URL: https://api.big-buyer.ru/_profiler/empty/search/resultsFirst seen 2023-12-24 07:50
Last seen 2024-09-14 19:51
Open for 265 days-
Fingerprint: 407cf4363b0e62fafca67e07a8344b02a8344b02a8344b02a8344b02a8344b02
Symfony profiler enabled: https://api.big-buyer.ru/_profiler/empty/search/results
Found on 2024-09-14 19:51
-
Open service 91.218.230.10:443 · api.big-buyer.ru
2024-09-26 09:21
HTTP/1.1 401 Unauthorized Server: nginx/1.24.0 Content-Type: application/json Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.2.13 Cache-Control: max-age=0, must-revalidate, private Date: Thu, 26 Sep 2024 09:21:36 GMT Link: <https://api.big-buyer.ru/docs.jsonld>; rel="http://www.w3.org/ns/hydra/core#apiDocumentation" Expires: Thu, 26 Sep 2024 09:21:36 GMT Strict-Transport-Security: max-age=31536000 {"message":"Authentication Required"}Found 2 days ago by HttpPluginCreate report
-
Open service 91.218.230.10:443 · api.big-buyer.ru
2024-09-14 19:51
HTTP/1.1 401 Unauthorized Server: nginx/1.24.0 Content-Type: application/json Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.2.13 Cache-Control: max-age=0, must-revalidate, private Date: Sat, 14 Sep 2024 19:51:52 GMT Link: <https://api.big-buyer.ru/docs.jsonld>; rel="http://www.w3.org/ns/hydra/core#apiDocumentation" X-Debug-Token: d59cf6 X-Debug-Token-Link: https://api.big-buyer.ru/_profiler/d59cf6 X-Robots-Tag: noindex Expires: Sat, 14 Sep 2024 19:51:52 GMT Strict-Transport-Security: max-age=31536000 {"message":"Authentication Required"}Found 2024-09-14 by HttpPluginCreate report
-
Open service 91.218.230.10:443 · api.big-buyer.ru
2024-09-12 15:04
HTTP/1.1 401 Unauthorized Server: nginx/1.24.0 Content-Type: application/json Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.2.13 Cache-Control: max-age=0, must-revalidate, private Date: Thu, 12 Sep 2024 15:04:47 GMT Link: <https://api.big-buyer.ru/docs.jsonld>; rel="http://www.w3.org/ns/hydra/core#apiDocumentation" X-Debug-Token: d7755e X-Debug-Token-Link: https://api.big-buyer.ru/_profiler/d7755e X-Robots-Tag: noindex Expires: Thu, 12 Sep 2024 15:04:47 GMT Strict-Transport-Security: max-age=31536000 {"message":"Authentication Required"}Found 2024-09-12 by HttpPluginCreate report
-
Open service 91.218.230.10:443 · api.big-buyer.ru
2024-09-10 21:07
HTTP/1.1 401 Unauthorized Server: nginx/1.24.0 Content-Type: application/json Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.2.13 Cache-Control: max-age=0, must-revalidate, private Date: Tue, 10 Sep 2024 21:07:11 GMT Link: <https://api.big-buyer.ru/docs.jsonld>; rel="http://www.w3.org/ns/hydra/core#apiDocumentation" Expires: Tue, 10 Sep 2024 21:07:11 GMT Strict-Transport-Security: max-age=31536000 {"message":"Authentication Required"}Found 2024-09-10 by HttpPluginCreate report
-
Open service 91.218.230.10:443 · api.big-buyer.ru
2024-09-08 22:13
HTTP/1.1 401 Unauthorized Server: nginx/1.24.0 Content-Type: application/json Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.2.13 Cache-Control: max-age=0, must-revalidate, private Date: Sun, 08 Sep 2024 22:13:56 GMT Link: <https://api.big-buyer.ru/docs.jsonld>; rel="http://www.w3.org/ns/hydra/core#apiDocumentation" Expires: Sun, 08 Sep 2024 22:13:56 GMT Strict-Transport-Security: max-age=31536000 {"message":"Authentication Required"}Found 2024-09-08 by HttpPluginCreate report
-
Open service 91.218.230.10:443 · api.big-buyer.ru
2024-09-06 23:05
HTTP/1.1 401 Unauthorized Server: nginx/1.24.0 Content-Type: application/json Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.2.13 Cache-Control: max-age=0, must-revalidate, private Date: Fri, 06 Sep 2024 23:05:03 GMT Link: <https://api.big-buyer.ru/docs.jsonld>; rel="http://www.w3.org/ns/hydra/core#apiDocumentation" Expires: Fri, 06 Sep 2024 23:05:03 GMT Strict-Transport-Security: max-age=31536000 {"message":"Authentication Required"}Found 2024-09-06 by HttpPluginCreate report