LeakIX - Host studenti.by

Domain studenti.by

Belarus

Business Network Ltd

Software information

nginx nginx 1.20.2

tcp/443

Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 178.172.137.225
Domain: studenti.by
Port: 443
URL: https://studenti.by/_profiler/empty/search/results

First seen 2022-12-20 22:14
Last seen 2024-05-28 19:14
Open for 524 days
- Fingerprint: 407cf4363b0e62fafca67e070612caca0612caca0612caca0612caca0612caca
```
Symfony profiler enabled:
https://studenti.by/_profiler/empty/search/results
```
  Found on 2024-05-28 19:14
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 178.172.137.225
Domain: www.studenti.by
Port: 443
URL: https://www.studenti.by/_profiler/empty/search/results

First seen 2022-12-20 22:14
Last seen 2024-05-28 22:50
Open for 525 days
- Fingerprint: 407cf4363b0e62fafca67e075fceb8875fceb8875fceb8875fceb8875fceb887
```
Symfony profiler enabled:
https://www.studenti.by/_profiler/empty/search/results
```
  Found on 2024-05-28 22:50
Create report

Open service 178.172.137.225:443 · www.studenti.by

2024-05-28 22:50

HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Tue, 28 May 2024 22:50:50 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/7.3.33
Cache-Control: max-age=0, must-revalidate, private
pragma: no-cache
Expires: Tue, 28 May 2024 22:50:50 GMT
X-Debug-Token: b95480
X-Debug-Token-Link: https://www.studenti.by/_profiler/b95480
X-Robots-Tag: noindex

Found 6 hours ago by HttpPlugin

Create report

Open service 178.172.137.225:443 · studenti.by

2024-05-28 19:14

HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Tue, 28 May 2024 19:14:08 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/7.3.33
Cache-Control: max-age=0, must-revalidate, private
pragma: no-cache
Expires: Tue, 28 May 2024 19:14:08 GMT
X-Debug-Token: b82dd8
X-Debug-Token-Link: https://studenti.by/_profiler/b82dd8
X-Robots-Tag: noindex

Found 10 hours ago by HttpPlugin

Create report

Open service 178.172.137.225:443 · www.studenti.by

2024-05-27 17:42

HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Mon, 27 May 2024 17:42:24 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/7.3.33
Cache-Control: max-age=0, must-revalidate, private
pragma: no-cache
Expires: Mon, 27 May 2024 17:42:24 GMT
X-Debug-Token: b631f9
X-Debug-Token-Link: https://www.studenti.by/_profiler/b631f9
X-Robots-Tag: noindex

Found one day ago by HttpPlugin

Create report

Open service 178.172.137.225:443 · studenti.by

2024-05-27 16:26

HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Mon, 27 May 2024 16:26:45 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/7.3.33
Cache-Control: max-age=0, must-revalidate, private
pragma: no-cache
Expires: Mon, 27 May 2024 16:26:45 GMT
X-Debug-Token: cbbf7b
X-Debug-Token-Link: https://studenti.by/_profiler/cbbf7b
X-Robots-Tag: noindex

Found 2 days ago by HttpPlugin

Create report

Open service 178.172.137.225:443 · studenti.by

2024-05-26 15:21

HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 26 May 2024 15:21:44 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/7.3.33
Cache-Control: max-age=0, must-revalidate, private
pragma: no-cache
Expires: Sun, 26 May 2024 15:21:44 GMT
X-Debug-Token: 8580b7
X-Debug-Token-Link: https://studenti.by/_profiler/8580b7
X-Robots-Tag: noindex

Found 3 days ago by HttpPlugin

Create report

Open service 178.172.137.225:443 · www.studenti.by

2024-05-26 11:28

HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 26 May 2024 11:28:11 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/7.3.33
Cache-Control: max-age=0, must-revalidate, private
pragma: no-cache
Expires: Sun, 26 May 2024 11:28:11 GMT
X-Debug-Token: 31db55
X-Debug-Token-Link: https://www.studenti.by/_profiler/31db55
X-Robots-Tag: noindex

Found 3 days ago by HttpPlugin

Create report

Open service 178.172.137.225:443 · studenti.by

2024-05-25 21:44

HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sat, 25 May 2024 21:44:31 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/7.3.33
Cache-Control: max-age=0, must-revalidate, private
pragma: no-cache
Expires: Sat, 25 May 2024 21:44:31 GMT
X-Debug-Token: dcf861
X-Debug-Token-Link: https://studenti.by/_profiler/dcf861
X-Robots-Tag: noindex

Found 2024-05-25 by HttpPlugin

Create report

Open service 178.172.137.225:443 · www.studenti.by

2024-05-25 13:17

HTTP/1.1 400 Bad Request
Server: nginx/1.20.2
Date: Sat, 25 May 2024 13:17:27 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close

Page title: 400 The plain HTTP request was sent to HTTPS port

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx/1.20.2</center>
</body>
</html>
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->

Found 2024-05-25 by HttpPlugin

Create report

Open service 178.172.137.225:443 · studenti.by

2024-05-24 19:20

HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Fri, 24 May 2024 19:20:39 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/7.3.33
Cache-Control: max-age=0, must-revalidate, private
pragma: no-cache
Expires: Fri, 24 May 2024 19:20:39 GMT
X-Debug-Token: c6ebce
X-Debug-Token-Link: https://studenti.by/_profiler/c6ebce
X-Robots-Tag: noindex

Found 2024-05-24 by HttpPlugin

Create report

Open service 178.172.137.225:443 · www.studenti.by

2024-05-24 09:28

HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Fri, 24 May 2024 09:28:10 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/7.3.33
Cache-Control: max-age=0, must-revalidate, private
pragma: no-cache
Expires: Fri, 24 May 2024 09:28:10 GMT
X-Debug-Token: 46a8c9
X-Debug-Token-Link: https://www.studenti.by/_profiler/46a8c9
X-Robots-Tag: noindex

Found 2024-05-24 by HttpPlugin

Create report

Open service 178.172.137.225:443 · studenti.by

2024-05-23 13:11

HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Thu, 23 May 2024 13:11:22 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/7.3.33
Cache-Control: max-age=0, must-revalidate, private
pragma: no-cache
Expires: Thu, 23 May 2024 13:11:22 GMT
X-Debug-Token: c15b8d
X-Debug-Token-Link: https://studenti.by/_profiler/c15b8d
X-Robots-Tag: noindex

Found 2024-05-23 by HttpPlugin

Create report

Open service 178.172.137.225:443 · www.studenti.by

2024-05-23 05:58

HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Thu, 23 May 2024 05:58:44 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/7.3.33
Cache-Control: max-age=0, must-revalidate, private
pragma: no-cache
Expires: Thu, 23 May 2024 05:58:44 GMT
X-Debug-Token: 7a80eb
X-Debug-Token-Link: https://www.studenti.by/_profiler/7a80eb
X-Robots-Tag: noindex

Found 2024-05-23 by HttpPlugin

Create report

Open service 178.172.137.225:443 · studenti.by

2024-05-12 22:25

HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 12 May 2024 22:26:13 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/7.3.33
Cache-Control: max-age=0, must-revalidate, private
pragma: no-cache
Expires: Sun, 12 May 2024 22:26:13 GMT
X-Debug-Token: 456b75
X-Debug-Token-Link: https://studenti.by/_profiler/456b75
X-Robots-Tag: noindex

Found 2024-05-12 by HttpPlugin

Create report

Open service 178.172.137.225:443 · www.studenti.by

2024-05-08 16:46

HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Wed, 08 May 2024 16:46:38 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/7.3.33
Cache-Control: max-age=0, must-revalidate, private
pragma: no-cache
Expires: Wed, 08 May 2024 16:46:38 GMT
X-Debug-Token: 8c00db
X-Debug-Token-Link: https://www.studenti.by/_profiler/8c00db
X-Robots-Tag: noindex

Found 2024-05-08 by HttpPlugin

Create report

Open service 178.172.137.225:443 · studenti.by

2024-05-08 16:12

HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Wed, 08 May 2024 16:13:12 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/7.3.33
Cache-Control: max-age=0, must-revalidate, private
pragma: no-cache
Expires: Wed, 08 May 2024 16:13:12 GMT
X-Debug-Token: 1ffd6d
X-Debug-Token-Link: https://studenti.by/_profiler/1ffd6d
X-Robots-Tag: noindex

Found 2024-05-08 by HttpPlugin

Create report

studenti.bywww.studenti.by

Fingerprint:

c2336896458aec45aa9a4d5ae952932edf71c0cf9f972c5afa5b68de6e782f6a

CN:

studenti.by

Key:

RSA-2048

Issuer:

Not before:

2024-04-03 21:15

Not after:

2024-07-02 21:15

Domain summary

www.studenti.by 7 studenti.by 8

2 recorded

IP summary

178.172.137.225 4

1 recorded

Domain studenti.by

Belarus

Software information

Symfony developement panel enabled

Symfony developement panel enabled

studenti.bywww.studenti.by

Domain summary

IP summary