LeakIX - Host api.billing.mmcreation.com

Domain api.billing.mmcreation.com

France

OVH SAS

Software information

nginx nginx

tcp/80

Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 135.125.9.178
Domain: api.billing.mmcreation.com
Port: 443
URL: https://api.billing.mmcreation.com/_profiler/empty/search/results

First seen 2022-10-05 13:45
Last seen 2023-11-24 10:05
Open for 414 days
- Fingerprint: 407cf4363b0e62fafca67e07c26e8b5ac26e8b5ac26e8b5ac26e8b5ac26e8b5a
```
Symfony profiler enabled:
https://api.billing.mmcreation.com/_profiler/empty/search/results
```
  Found on 2023-11-24 10:05
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 51.83.37.150
Domain: api.billing.mmcreation.com
Port: 80
URL: http://api.billing.mmcreation.com/_profiler/empty/search/results

First seen 2022-11-29 10:44
Last seen 2024-05-08 18:17
Open for 526 days
- Fingerprint: 407cf4363b0e62fafca67e07d3f629f7d3f629f7d3f629f7d3f629f7d3f629f7
```
Symfony profiler enabled:
http://api.billing.mmcreation.com/_profiler/empty/search/results
```
  Found on 2024-05-08 18:17
Create report

Open service 51.83.37.150:80 · api.billing.mmcreation.com

2024-05-08 18:17

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 May 2024 18:17:14 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
X-Powered-By: PHP/7.4.30
Cache-Control: max-age=0, must-revalidate, private
pragma: no-cache
Expires: Wed, 08 May 2024 18:17:14 GMT
Link: <http://api.billing.mmcreation.com/api/docs.jsonld>; rel="http://www.w3.org/ns/hydra/core#apiDocumentation"
X-Debug-Token: e7fbd6
X-Debug-Token-Link: http://api.billing.mmcreation.com/_profiler/e7fbd6
X-Robots-Tag: noindex
Vary: Accept-Encoding
X-Powered-By: PleskLin

Found 2024-05-08 by HttpPlugin

Create report

Open service 51.83.37.150:80 · api.billing.mmcreation.com

2024-04-30 22:48

HTTP/1.1 200 OK
Server: nginx
Date: Tue, 30 Apr 2024 22:48:26 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
X-Powered-By: PHP/7.4.30
Cache-Control: max-age=0, must-revalidate, private
pragma: no-cache
Expires: Tue, 30 Apr 2024 22:48:26 GMT
Link: <http://api.billing.mmcreation.com/api/docs.jsonld>; rel="http://www.w3.org/ns/hydra/core#apiDocumentation"
X-Debug-Token: f0ee22
X-Debug-Token-Link: http://api.billing.mmcreation.com/_profiler/f0ee22
X-Robots-Tag: noindex
Vary: Accept-Encoding
X-Powered-By: PleskLin

Found 2024-04-30 by HttpPlugin

Create report

Open service 51.83.37.150:80 · api.billing.mmcreation.com

2024-04-28 20:53

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 28 Apr 2024 20:53:04 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
X-Powered-By: PHP/7.4.30
Cache-Control: max-age=0, must-revalidate, private
pragma: no-cache
Expires: Sun, 28 Apr 2024 20:53:04 GMT
Link: <http://api.billing.mmcreation.com/api/docs.jsonld>; rel="http://www.w3.org/ns/hydra/core#apiDocumentation"
X-Debug-Token: c476dd
X-Debug-Token-Link: http://api.billing.mmcreation.com/_profiler/c476dd
X-Robots-Tag: noindex
Vary: Accept-Encoding
X-Powered-By: PleskLin

Found 2024-04-28 by HttpPlugin

Create report

Open service 51.83.37.150:80 · api.billing.mmcreation.com

2024-04-19 00:39

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 19 Apr 2024 00:40:25 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
X-Powered-By: PHP/7.4.30
Cache-Control: max-age=0, must-revalidate, private
pragma: no-cache
Expires: Fri, 19 Apr 2024 00:40:25 GMT
Link: <http://api.billing.mmcreation.com/api/docs.jsonld>; rel="http://www.w3.org/ns/hydra/core#apiDocumentation"
X-Debug-Token: b152c2
X-Debug-Token-Link: http://api.billing.mmcreation.com/_profiler/b152c2
X-Robots-Tag: noindex
Vary: Accept-Encoding
X-Powered-By: PleskLin

Found 2024-04-19 by HttpPlugin