LeakIX - Host datamana.net

Domain datamana.net

Germany

Contabo GmbH

Software information

nginx nginx 1.20.1

tcp/443 tcp/80

Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 194.163.147.58
Domain: datamana.net
Port: 443
URL: https://datamana.net/_profiler/empty/search/results

First seen 2024-08-08 12:36
Last seen 2024-09-20 17:38
Open for 43 days
- Fingerprint: 407cf4363b0e62fafca67e07bdbe59b9bdbe59b9bdbe59b9bdbe59b9bdbe59b9
```
Symfony profiler enabled:
https://datamana.net/_profiler/empty/search/results
```
  Found on 2024-09-20 17:38
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 194.163.147.58
Domain: admin.datamana.net
Port: 443
URL: https://admin.datamana.net/_profiler/empty/search/results

First seen 2023-09-06 06:28
Last seen 2023-11-06 08:00
Open for 61 days
- Fingerprint: 407cf4363b0e62fafca67e077a6c7ca67a6c7ca67a6c7ca67a6c7ca67a6c7ca6
```
Symfony profiler enabled:
https://admin.datamana.net/_profiler/empty/search/results
```
  Found on 2023-11-06 08:00
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 194.163.147.58
Domain: datamana.net
Port: 443
URL: https://datamana.net

First seen 2023-10-05 06:26
Last seen 2023-11-06 04:01
Open for 31 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652227821490
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://gitlab.com/Rova46/datamana-react.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
```
  Found on 2023-11-06 04:01
  
  265 Bytes
Create report

Open service 194.163.147.58:443 · datamana.net

2024-09-14 18:04

HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sat, 14 Sep 2024 18:04:19 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: max-age=0, must-revalidate, private
Expires: Sat, 14 Sep 2024 18:04:19 GMT
Link: <http://datamana.net/api/docs.jsonld>; rel="http://www.w3.org/ns/hydra/core#apiDocumentation"
X-Debug-Token: 7c8cf1
X-Debug-Token-Link: http://datamana.net/_profiler/7c8cf1
X-Powered-By: PHP/8.1.29
X-Robots-Tag: noindex

Found 2024-09-14 by HttpPlugin

Create report

Open service 194.163.147.58:443 · datamana.net

2024-09-13 00:01

HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Fri, 13 Sep 2024 00:01:19 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: max-age=0, must-revalidate, private
Expires: Fri, 13 Sep 2024 00:01:19 GMT
Link: <http://datamana.net/api/docs.jsonld>; rel="http://www.w3.org/ns/hydra/core#apiDocumentation"
X-Debug-Token: c615f3
X-Debug-Token-Link: http://datamana.net/_profiler/c615f3
X-Powered-By: PHP/8.1.29
X-Robots-Tag: noindex

Found 2024-09-13 by HttpPlugin

Create report

Open service 194.163.147.58:80 · datamana.net

2024-09-11 04:59

HTTP/1.1 301 Moved Permanently
Server: nginx/1.20.1
Date: Wed, 11 Sep 2024 04:59:05 GMT
Content-Type: text/html
Content-Length: 169
Connection: close
Location: https://datamana.net/

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>nginx/1.20.1</center>
</body>
</html>

Found 2024-09-11 by HttpPlugin

Create report

Open service 194.163.147.58:443 · datamana.net

2024-09-11 04:59

HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Wed, 11 Sep 2024 04:59:13 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: max-age=0, must-revalidate, private
Expires: Wed, 11 Sep 2024 04:59:13 GMT
Link: <http://datamana.net/api/docs.jsonld>; rel="http://www.w3.org/ns/hydra/core#apiDocumentation"
X-Debug-Token: 7af4f9
X-Debug-Token-Link: http://datamana.net/_profiler/7af4f9
X-Powered-By: PHP/8.1.29
X-Robots-Tag: noindex

Found 2024-09-11 by HttpPlugin

Create report

Open service 194.163.147.58:443 · www.datamana.net

2024-09-11 04:59

HTTP/1.1 502 Bad Gateway
Server: nginx/1.20.1
Date: Wed, 11 Sep 2024 04:59:11 GMT
Content-Type: text/html
Content-Length: 559
Connection: close

Page title: 502 Bad Gateway

<html>
<head><title>502 Bad Gateway</title></head>
<body>
<center><h1>502 Bad Gateway</h1></center>
<hr><center>nginx/1.20.1</center>
</body>
</html>
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->

Found 2024-09-11 by HttpPlugin

Create report

Open service 194.163.147.58:443 · datamana.net

2024-09-10 04:58

HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Tue, 10 Sep 2024 04:57:23 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: max-age=0, must-revalidate, private
Expires: Tue, 10 Sep 2024 04:57:23 GMT
Link: <http://datamana.net/api/docs.jsonld>; rel="http://www.w3.org/ns/hydra/core#apiDocumentation"
X-Debug-Token: 92843d
X-Debug-Token-Link: http://datamana.net/_profiler/92843d
X-Powered-By: PHP/8.1.29
X-Robots-Tag: noindex

Found 2024-09-10 by HttpPlugin

Create report

Open service 194.163.147.58:443 · datamana.net

2024-09-08 04:18

HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sun, 08 Sep 2024 04:17:36 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: max-age=0, must-revalidate, private
Expires: Sun, 08 Sep 2024 04:17:36 GMT
Link: <http://datamana.net/api/docs.jsonld>; rel="http://www.w3.org/ns/hydra/core#apiDocumentation"
X-Debug-Token: 5a42e5
X-Debug-Token-Link: http://datamana.net/_profiler/5a42e5
X-Powered-By: PHP/8.1.29
X-Robots-Tag: noindex

Found 2024-09-08 by HttpPlugin

Create report

Open service 194.163.147.58:443 · datamana.net

2024-08-26 15:20

HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Mon, 26 Aug 2024 15:20:04 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: max-age=0, must-revalidate, private
Expires: Mon, 26 Aug 2024 15:20:04 GMT
Link: <http://datamana.net/api/docs.jsonld>; rel="http://www.w3.org/ns/hydra/core#apiDocumentation"
X-Debug-Token: a84d98
X-Debug-Token-Link: http://datamana.net/_profiler/a84d98
X-Powered-By: PHP/8.1.29
X-Robots-Tag: noindex

Found 2024-08-26 by HttpPlugin

Create report

Open service 194.163.147.58:443 · datamana.net

2024-08-18 01:57

HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sun, 18 Aug 2024 01:57:13 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: max-age=0, must-revalidate, private
Expires: Sun, 18 Aug 2024 01:57:13 GMT
Link: <http://datamana.net/api/docs.jsonld>; rel="http://www.w3.org/ns/hydra/core#apiDocumentation"
X-Debug-Token: 54ccfd
X-Debug-Token-Link: http://datamana.net/_profiler/54ccfd
X-Powered-By: PHP/8.1.29
X-Robots-Tag: noindex

Found 2024-08-18 by HttpPlugin

Create report

Open service 194.163.147.58:443 · datamana.net

2024-08-16 20:01

HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Fri, 16 Aug 2024 20:01:12 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: max-age=0, must-revalidate, private
Expires: Fri, 16 Aug 2024 20:01:12 GMT
Link: <http://datamana.net/api/docs.jsonld>; rel="http://www.w3.org/ns/hydra/core#apiDocumentation"
X-Debug-Token: 2f6769
X-Debug-Token-Link: http://datamana.net/_profiler/2f6769
X-Powered-By: PHP/8.1.29
X-Robots-Tag: noindex

Found 2024-08-16 by HttpPlugin

Create report

Open service 194.163.147.58:443 · datamana.net

2024-08-14 19:19

HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Wed, 14 Aug 2024 19:18:51 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: max-age=0, must-revalidate, private
Expires: Wed, 14 Aug 2024 19:18:51 GMT
Link: <http://datamana.net/api/docs.jsonld>; rel="http://www.w3.org/ns/hydra/core#apiDocumentation"
X-Debug-Token: 28547f
X-Debug-Token-Link: http://datamana.net/_profiler/28547f
X-Powered-By: PHP/8.1.29
X-Robots-Tag: noindex

Found 2024-08-14 by HttpPlugin

Create report

Open service 194.163.147.58:443 · datamana.net

2024-08-12 20:59

HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Mon, 12 Aug 2024 20:58:38 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: max-age=0, must-revalidate, private
Expires: Mon, 12 Aug 2024 20:58:38 GMT
Link: <http://datamana.net/api/docs.jsonld>; rel="http://www.w3.org/ns/hydra/core#apiDocumentation"
X-Debug-Token: 9aeac0
X-Debug-Token-Link: http://datamana.net/_profiler/9aeac0
X-Powered-By: PHP/8.1.29
X-Robots-Tag: noindex

Found 2024-08-12 by HttpPlugin

Create report

Open service 194.163.147.58:443 · datamana.net

2024-08-10 17:48

HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sat, 10 Aug 2024 17:47:43 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: max-age=0, must-revalidate, private
Expires: Sat, 10 Aug 2024 17:47:43 GMT
Link: <http://datamana.net/api/docs.jsonld>; rel="http://www.w3.org/ns/hydra/core#apiDocumentation"
X-Debug-Token: d8ecbb
X-Debug-Token-Link: http://datamana.net/_profiler/d8ecbb
X-Powered-By: PHP/8.1.29
X-Robots-Tag: noindex

Found 2024-08-10 by HttpPlugin