LeakIX - Host 13.38.24.42

Host 13.38.24.42

France

AMAZON-02

Unix

Software information

Apache Apache 2.4.43

tcp/443 tcp/80

OpenSSL OpenSSL 1.1.1n

tcp/443 tcp/80

Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 13.38.24.42
Port: 80
URL: http://13.38.24.42/_profiler/empty/search/results

First seen 2023-12-14 19:39
Last seen 2024-06-19 22:28
Open for 188 days
- Fingerprint: 407cf4363b0e62fafca67e07636dd80d636dd80d636dd80d636dd80d636dd80d
```
Symfony profiler enabled:
http://13.38.24.42/_profiler/empty/search/results
```
  Found on 2024-06-19 22:28
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 13.38.24.42
Port: 443
URL: https://13.38.24.42/_profiler/empty/search/results

First seen 2024-01-08 18:26
Last seen 2024-06-19 21:45
Open for 163 days
- Fingerprint: 407cf4363b0e62fafca67e07ea20649aea20649aea20649aea20649aea20649a
```
Symfony profiler enabled:
https://13.38.24.42/_profiler/empty/search/results
```
  Found on 2024-06-19 21:45
Create report

Open service 13.38.24.42:80

2024-06-19 22:28

HTTP/1.1 302 Found
Date: Wed, 19 Jun 2024 22:28:53 GMT
Server: Apache/2.4.43 (Unix) OpenSSL/1.1.1n
X-Powered-By: PHP/7.4.7
Cache-Control: max-age=0, must-revalidate, private
X-Debug-Token: 18a234
X-Debug-Token-Link: http://13.38.24.42/_profiler/18a234
X-Robots-Tag: noindex
Expires: Wed, 19 Jun 2024 22:28:53 GMT
Set-Cookie: sf_redirect=%7B%22token%22%3A%2218a234%22%2C%22route%22%3A%22home_redirect%22%2C%22method%22%3A%22GET%22%2C%22controller%22%3A%22Symfony%5C%5CBundle%5C%5CFrameworkBundle%5C%5CController%5C%5CRedirectController%22%2C%22status_code%22%3A302%2C%22status_text%22%3A%22Found%22%7D; path=/; httponly; samesite=lax
Set-Cookie: PHPSESSID=34s098ootccctapltop8dveo3d; path=/; httponly; samesite=lax
Location: http://13.38.24.42/login
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

Page title: Redirecting to http://13.38.24.42/login

<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='http://13.38.24.42/login'" />

        <title>Redirecting to http://13.38.24.42/login</title>
    </head>
    <body>
        Redirecting to <a href="http://13.38.24.42/login">http://13.38.24.42/login</a>.
    </body>
</html>

Found 13 hours ago by HttpPlugin

Create report

Open service 13.38.24.42:443

2024-06-19 21:45

HTTP/1.1 302 Found
Date: Wed, 19 Jun 2024 21:45:31 GMT
Server: Apache/2.4.43 (Unix) OpenSSL/1.1.1n
X-Powered-By: PHP/7.4.7
Cache-Control: max-age=0, must-revalidate, private
X-Debug-Token: 74067f
X-Debug-Token-Link: https://13.38.24.42/_profiler/74067f
X-Robots-Tag: noindex
Expires: Wed, 19 Jun 2024 21:45:31 GMT
Set-Cookie: sf_redirect=%7B%22token%22%3A%2274067f%22%2C%22route%22%3A%22home_redirect%22%2C%22method%22%3A%22GET%22%2C%22controller%22%3A%22Symfony%5C%5CBundle%5C%5CFrameworkBundle%5C%5CController%5C%5CRedirectController%22%2C%22status_code%22%3A302%2C%22status_text%22%3A%22Found%22%7D; path=/; secure; httponly; samesite=lax
Set-Cookie: PHPSESSID=tnkh26jgppgmst5au5bj5qnr61; path=/; secure; httponly; samesite=lax
Location: https://13.38.24.42/login
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

Page title: Redirecting to https://13.38.24.42/login

<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='https://13.38.24.42/login'" />

        <title>Redirecting to https://13.38.24.42/login</title>
    </head>
    <body>
        Redirecting to <a href="https://13.38.24.42/login">https://13.38.24.42/login</a>.
    </body>
</html>

Found 14 hours ago by HttpPlugin

Create report

Open service 13.38.24.42:443

2024-06-17 20:11

HTTP/1.1 302 Found
Date: Mon, 17 Jun 2024 20:11:15 GMT
Server: Apache/2.4.43 (Unix) OpenSSL/1.1.1n
X-Powered-By: PHP/7.4.7
Cache-Control: max-age=0, must-revalidate, private
X-Debug-Token: 734edd
X-Debug-Token-Link: https://13.38.24.42/_profiler/734edd
X-Robots-Tag: noindex
Expires: Mon, 17 Jun 2024 20:11:16 GMT
Set-Cookie: sf_redirect=%7B%22token%22%3A%22734edd%22%2C%22route%22%3A%22home_redirect%22%2C%22method%22%3A%22GET%22%2C%22controller%22%3A%22Symfony%5C%5CBundle%5C%5CFrameworkBundle%5C%5CController%5C%5CRedirectController%22%2C%22status_code%22%3A302%2C%22status_text%22%3A%22Found%22%7D; path=/; secure; httponly; samesite=lax
Set-Cookie: PHPSESSID=pvvmoqfduk1lss6h3m3jteiqs1; path=/; secure; httponly; samesite=lax
Location: https://13.38.24.42/login
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

Page title: Redirecting to https://13.38.24.42/login

<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='https://13.38.24.42/login'" />

        <title>Redirecting to https://13.38.24.42/login</title>
    </head>
    <body>
        Redirecting to <a href="https://13.38.24.42/login">https://13.38.24.42/login</a>.
    </body>
</html>

Found 3 days ago by HttpPlugin

Create report

Open service 13.38.24.42:80

2024-06-17 20:01

HTTP/1.1 302 Found
Date: Mon, 17 Jun 2024 20:01:26 GMT
Server: Apache/2.4.43 (Unix) OpenSSL/1.1.1n
X-Powered-By: PHP/7.4.7
Cache-Control: max-age=0, must-revalidate, private
X-Debug-Token: 67020b
X-Debug-Token-Link: http://13.38.24.42/_profiler/67020b
X-Robots-Tag: noindex
Expires: Mon, 17 Jun 2024 20:01:26 GMT
Set-Cookie: sf_redirect=%7B%22token%22%3A%2267020b%22%2C%22route%22%3A%22home_redirect%22%2C%22method%22%3A%22GET%22%2C%22controller%22%3A%22Symfony%5C%5CBundle%5C%5CFrameworkBundle%5C%5CController%5C%5CRedirectController%22%2C%22status_code%22%3A302%2C%22status_text%22%3A%22Found%22%7D; path=/; httponly; samesite=lax
Set-Cookie: PHPSESSID=gk14qce6rrst7up7m6n6bo4jjj; path=/; httponly; samesite=lax
Location: http://13.38.24.42/login
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

Page title: Redirecting to http://13.38.24.42/login

<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='http://13.38.24.42/login'" />

        <title>Redirecting to http://13.38.24.42/login</title>
    </head>
    <body>
        Redirecting to <a href="http://13.38.24.42/login">http://13.38.24.42/login</a>.
    </body>
</html>

Found 3 days ago by HttpPlugin

Create report

Open service 13.38.24.42:22

2024-06-13 20:34
Found 2024-06-13 by SSHOpenPlugin
Create report

Open service 13.38.24.42:80

2024-06-12 22:59

HTTP/1.1 302 Found
Date: Wed, 12 Jun 2024 22:59:29 GMT
Server: Apache/2.4.43 (Unix) OpenSSL/1.1.1n
X-Powered-By: PHP/7.4.7
Cache-Control: max-age=0, must-revalidate, private
X-Debug-Token: 70b07d
X-Debug-Token-Link: http://13.38.24.42/_profiler/70b07d
X-Robots-Tag: noindex
Expires: Wed, 12 Jun 2024 22:59:29 GMT
Set-Cookie: sf_redirect=%7B%22token%22%3A%2270b07d%22%2C%22route%22%3A%22home_redirect%22%2C%22method%22%3A%22GET%22%2C%22controller%22%3A%22Symfony%5C%5CBundle%5C%5CFrameworkBundle%5C%5CController%5C%5CRedirectController%22%2C%22status_code%22%3A302%2C%22status_text%22%3A%22Found%22%7D; path=/; httponly; samesite=lax
Set-Cookie: PHPSESSID=qhgcnmdomu7fomhtq26kgbd9ss; path=/; httponly; samesite=lax
Location: http://13.38.24.42/login
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

Page title: Redirecting to http://13.38.24.42/login

<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='http://13.38.24.42/login'" />

        <title>Redirecting to http://13.38.24.42/login</title>
    </head>
    <body>
        Redirecting to <a href="http://13.38.24.42/login">http://13.38.24.42/login</a>.
    </body>
</html>

Found 2024-06-12 by HttpPlugin

Create report

Open service 13.38.24.42:443

2024-06-11 21:24

HTTP/1.1 302 Found
Date: Tue, 11 Jun 2024 21:24:57 GMT
Server: Apache/2.4.43 (Unix) OpenSSL/1.1.1n
X-Powered-By: PHP/7.4.7
Cache-Control: max-age=0, must-revalidate, private
X-Debug-Token: d7ece9
X-Debug-Token-Link: https://13.38.24.42/_profiler/d7ece9
X-Robots-Tag: noindex
Expires: Tue, 11 Jun 2024 21:24:57 GMT
Set-Cookie: sf_redirect=%7B%22token%22%3A%22d7ece9%22%2C%22route%22%3A%22home_redirect%22%2C%22method%22%3A%22GET%22%2C%22controller%22%3A%22Symfony%5C%5CBundle%5C%5CFrameworkBundle%5C%5CController%5C%5CRedirectController%22%2C%22status_code%22%3A302%2C%22status_text%22%3A%22Found%22%7D; path=/; secure; httponly; samesite=lax
Set-Cookie: PHPSESSID=m0j29k3ihi4f3kgcj4qsrba10g; path=/; secure; httponly; samesite=lax
Location: https://13.38.24.42/login
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

Page title: Redirecting to https://13.38.24.42/login

<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='https://13.38.24.42/login'" />

        <title>Redirecting to https://13.38.24.42/login</title>
    </head>
    <body>
        Redirecting to <a href="https://13.38.24.42/login">https://13.38.24.42/login</a>.
    </body>
</html>

Found 2024-06-11 by HttpPlugin

Create report

Open service 13.38.24.42:80

2024-06-11 21:21

HTTP/1.1 302 Found
Date: Tue, 11 Jun 2024 21:21:00 GMT
Server: Apache/2.4.43 (Unix) OpenSSL/1.1.1n
X-Powered-By: PHP/7.4.7
Cache-Control: max-age=0, must-revalidate, private
X-Debug-Token: 6868a4
X-Debug-Token-Link: http://13.38.24.42/_profiler/6868a4
X-Robots-Tag: noindex
Expires: Tue, 11 Jun 2024 21:21:00 GMT
Set-Cookie: sf_redirect=%7B%22token%22%3A%226868a4%22%2C%22route%22%3A%22home_redirect%22%2C%22method%22%3A%22GET%22%2C%22controller%22%3A%22Symfony%5C%5CBundle%5C%5CFrameworkBundle%5C%5CController%5C%5CRedirectController%22%2C%22status_code%22%3A302%2C%22status_text%22%3A%22Found%22%7D; path=/; httponly; samesite=lax
Set-Cookie: PHPSESSID=e3fr236tegf9sms954v0ve19sp; path=/; httponly; samesite=lax
Location: http://13.38.24.42/login
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

Page title: Redirecting to http://13.38.24.42/login

<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='http://13.38.24.42/login'" />

        <title>Redirecting to http://13.38.24.42/login</title>
    </head>
    <body>
        Redirecting to <a href="http://13.38.24.42/login">http://13.38.24.42/login</a>.
    </body>
</html>

Found 2024-06-11 by HttpPlugin

Create report

Open service 13.38.24.42:80

2024-06-09 20:25

HTTP/1.1 302 Found
Date: Sun, 09 Jun 2024 20:25:09 GMT
Server: Apache/2.4.43 (Unix) OpenSSL/1.1.1n
X-Powered-By: PHP/7.4.7
Cache-Control: max-age=0, must-revalidate, private
X-Debug-Token: 4bd412
X-Debug-Token-Link: http://13.38.24.42/_profiler/4bd412
X-Robots-Tag: noindex
Expires: Sun, 09 Jun 2024 20:25:09 GMT
Set-Cookie: sf_redirect=%7B%22token%22%3A%224bd412%22%2C%22route%22%3A%22home_redirect%22%2C%22method%22%3A%22GET%22%2C%22controller%22%3A%22Symfony%5C%5CBundle%5C%5CFrameworkBundle%5C%5CController%5C%5CRedirectController%22%2C%22status_code%22%3A302%2C%22status_text%22%3A%22Found%22%7D; path=/; httponly; samesite=lax
Set-Cookie: PHPSESSID=f8aj8u6v167cet0671fcqgbbbu; path=/; httponly; samesite=lax
Location: http://13.38.24.42/login
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

Page title: Redirecting to http://13.38.24.42/login

<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='http://13.38.24.42/login'" />

        <title>Redirecting to http://13.38.24.42/login</title>
    </head>
    <body>
        Redirecting to <a href="http://13.38.24.42/login">http://13.38.24.42/login</a>.
    </body>
</html>

Found 2024-06-09 by HttpPlugin

Create report

Open service 13.38.24.42:443

2024-06-09 20:24

HTTP/1.1 302 Found
Date: Sun, 09 Jun 2024 20:24:07 GMT
Server: Apache/2.4.43 (Unix) OpenSSL/1.1.1n
X-Powered-By: PHP/7.4.7
Cache-Control: max-age=0, must-revalidate, private
X-Debug-Token: 8be8c4
X-Debug-Token-Link: https://13.38.24.42/_profiler/8be8c4
X-Robots-Tag: noindex
Expires: Sun, 09 Jun 2024 20:24:07 GMT
Set-Cookie: sf_redirect=%7B%22token%22%3A%228be8c4%22%2C%22route%22%3A%22home_redirect%22%2C%22method%22%3A%22GET%22%2C%22controller%22%3A%22Symfony%5C%5CBundle%5C%5CFrameworkBundle%5C%5CController%5C%5CRedirectController%22%2C%22status_code%22%3A302%2C%22status_text%22%3A%22Found%22%7D; path=/; secure; httponly; samesite=lax
Set-Cookie: PHPSESSID=kc11ugc2hmas1as1b1e14nk04u; path=/; secure; httponly; samesite=lax
Location: https://13.38.24.42/login
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

Page title: Redirecting to https://13.38.24.42/login

<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='https://13.38.24.42/login'" />

        <title>Redirecting to https://13.38.24.42/login</title>
    </head>
    <body>
        Redirecting to <a href="https://13.38.24.42/login">https://13.38.24.42/login</a>.
    </body>
</html>

Found 2024-06-09 by HttpPlugin

Create report

Open service 13.38.24.42:443

2024-06-07 20:19

HTTP/1.1 302 Found
Date: Fri, 07 Jun 2024 20:19:53 GMT
Server: Apache/2.4.43 (Unix) OpenSSL/1.1.1n
X-Powered-By: PHP/7.4.7
Cache-Control: max-age=0, must-revalidate, private
X-Debug-Token: 2405cd
X-Debug-Token-Link: https://13.38.24.42/_profiler/2405cd
X-Robots-Tag: noindex
Expires: Fri, 07 Jun 2024 20:19:53 GMT
Set-Cookie: sf_redirect=%7B%22token%22%3A%222405cd%22%2C%22route%22%3A%22home_redirect%22%2C%22method%22%3A%22GET%22%2C%22controller%22%3A%22Symfony%5C%5CBundle%5C%5CFrameworkBundle%5C%5CController%5C%5CRedirectController%22%2C%22status_code%22%3A302%2C%22status_text%22%3A%22Found%22%7D; path=/; secure; httponly; samesite=lax
Set-Cookie: PHPSESSID=inga00pa9a7nbgla20jfoi9mkq; path=/; secure; httponly; samesite=lax
Location: https://13.38.24.42/login
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

Page title: Redirecting to https://13.38.24.42/login

<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='https://13.38.24.42/login'" />

        <title>Redirecting to https://13.38.24.42/login</title>
    </head>
    <body>
        Redirecting to <a href="https://13.38.24.42/login">https://13.38.24.42/login</a>.
    </body>
</html>

Found 2024-06-07 by HttpPlugin

Create report

Open service 13.38.24.42:80

2024-06-07 20:13

HTTP/1.1 302 Found
Date: Fri, 07 Jun 2024 20:13:00 GMT
Server: Apache/2.4.43 (Unix) OpenSSL/1.1.1n
X-Powered-By: PHP/7.4.7
Cache-Control: max-age=0, must-revalidate, private
X-Debug-Token: 132feb
X-Debug-Token-Link: http://13.38.24.42/_profiler/132feb
X-Robots-Tag: noindex
Expires: Fri, 07 Jun 2024 20:13:01 GMT
Set-Cookie: sf_redirect=%7B%22token%22%3A%22132feb%22%2C%22route%22%3A%22home_redirect%22%2C%22method%22%3A%22GET%22%2C%22controller%22%3A%22Symfony%5C%5CBundle%5C%5CFrameworkBundle%5C%5CController%5C%5CRedirectController%22%2C%22status_code%22%3A302%2C%22status_text%22%3A%22Found%22%7D; path=/; httponly; samesite=lax
Set-Cookie: PHPSESSID=koavl2nk3mr3r0vh9fk9kff8f3; path=/; httponly; samesite=lax
Location: http://13.38.24.42/login
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

Page title: Redirecting to http://13.38.24.42/login

<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='http://13.38.24.42/login'" />

        <title>Redirecting to http://13.38.24.42/login</title>
    </head>
    <body>
        Redirecting to <a href="http://13.38.24.42/login">http://13.38.24.42/login</a>.
    </body>
</html>

Found 2024-06-07 by HttpPlugin

Create report

api.atlas.visiotechsecurity.com

Fingerprint:

2ef1d2652cf4cb23cad5bdd4c557fca3b4badddf1836f5e69c399fed5036eef5

CN:

api.atlas.visiotechsecurity.com

Key:

ECDSA-256

Issuer:

Not before:

2024-05-03 21:00

Not after:

2024-08-01 21:00

Domain summary

No record

Host 13.38.24.42

France

Software information

Symfony developement panel enabled

Symfony developement panel enabled

api.atlas.visiotechsecurity.com

Domain summary