LeakIX - Host 212.16.252.206

Host 212.16.252.206

Germany

SoftCom Datensysteme

Software information

openresty

tcp/443 tcp/80

Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 212.16.252.206
Domain: dev1.e-dienste.eu
Port: 443
URL: https://dev1.e-dienste.eu/_profiler/empty/search/results

First seen 2024-03-03 12:54
Last seen 2024-06-28 10:40
Open for 116 days
- Fingerprint: 407cf4363b0e62fafca67e07a63840dfa63840dfa63840dfa63840dfa63840df
```
Symfony profiler enabled:
https://dev1.e-dienste.eu/_profiler/empty/search/results
```
  Found on 2024-06-28 10:40
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 212.16.252.206
Domain: racket.e-dienste.eu
Port: 443
URL: https://racket.e-dienste.eu/_profiler/empty/search/results

First seen 2023-10-04 15:38
Last seen 2024-03-21 16:10
Open for 169 days
- Fingerprint: 407cf4363b0e62fafca67e0739f6864739f6864739f6864739f6864739f68647
```
Symfony profiler enabled:
https://racket.e-dienste.eu/_profiler/empty/search/results
```
  Found on 2024-03-21 16:10
Create report

Open service 212.16.252.206:443 · dev1.e-dienste.eu

2024-06-28 10:40

HTTP/1.1 500 Internal Server Error
Server: openresty
Date: Fri, 28 Jun 2024 10:40:10 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Debug-Exception: An%20exception%20occurred%20while%20executing%20a%20query%3A%20SQLSTATE%5B42S22%5D%3A%20Column%20not%20found%3A%201054%20Unknown%20column%20%27r0_.is_group%27%20in%20%27field%20list%27
X-Debug-Exception-File: %2Fvar%2Fwww%2Ftennistastic-dev%2Fvendor%2Fdoctrine%2Fdbal%2Fsrc%2FDriver%2FAPI%2FMySQL%2FExceptionConverter.php:67
Vary: Accept
Cache-Control: no-cache, private
X-Debug-Token: 6d267e
X-Debug-Token-Link: http://dev1.e-dienste.eu/_profiler/6d267e
X-Robots-Tag: noindex
X-Previous-Debug-Token: 4050e5

Found one day ago by HttpPlugin

Create report

Open service 212.16.252.206:443 · dev1.e-dienste.eu

2024-06-26 10:28

HTTP/1.1 500 Internal Server Error
Server: openresty
Date: Wed, 26 Jun 2024 10:28:09 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Debug-Exception: An%20exception%20occurred%20while%20executing%20a%20query%3A%20SQLSTATE%5B42S22%5D%3A%20Column%20not%20found%3A%201054%20Unknown%20column%20%27r0_.is_group%27%20in%20%27field%20list%27
X-Debug-Exception-File: %2Fvar%2Fwww%2Ftennistastic-dev%2Fvendor%2Fdoctrine%2Fdbal%2Fsrc%2FDriver%2FAPI%2FMySQL%2FExceptionConverter.php:67
Vary: Accept
Cache-Control: no-cache, private
X-Debug-Token: 71887e
X-Debug-Token-Link: http://dev1.e-dienste.eu/_profiler/71887e
X-Robots-Tag: noindex
X-Previous-Debug-Token: 6192eb

Found 2024-06-26 by HttpPlugin

Create report

Open service 212.16.252.206:443 · www.tennistastic.de

2024-06-26 07:53

HTTP/1.1 200 OK
Server: openresty
Date: Wed, 26 Jun 2024 07:53:08 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: max-age=0, must-revalidate, private
Expires: Wed, 26 Jun 2024 07:53:08 GMT
Vary: Accept-Encoding
Strict-Transport-Security: max-age=63072000; preload
X-Served-By: www.tennistastic.de

Page title: Tennistastic - Das Buchungstool für Tennis Plätze

<!doctype html>
<html lang="de">
<head>
    <meta charset="utf-8">
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <meta name="description" content="Das Tennisplatz Buchungstool aus Deutschland">
    <meta name="keywords"
          content="Tennistastic, Tennisplatz Buchungstool, Platz Reservierung, Trainings Management, Club Management, Einfach, Deutschland, Tennis">
    <meta name="author" content="Jan Heidel">
    <meta name="google-site-verification" content="5MtFdnthxbnsw0YYXCJnr3eDJ6eojktry-ECAWwkHpQ" />

    <meta property="og:title" content="Tennistastic">
    <meta property="og:description" content="Das Tennisplatz Buchungstool aus Deutschland">
    <meta property="og:image" content="/StartingPage/assets/img/logo/Logo.png">
    <meta property="og:url" content="https://tennistastic.de">


    <meta name="twitter:title" content="Tennistastic">
    <meta name="twitter:description" content="Das Tennisplatz Buchungstool aus Deutschland">
    <meta name="twitter:url" content="/StartingPage/assets/img/logo/Logo.png">
    <meta name="twitter:card" content="summary">


    <title>Tennistastic - Das Buchungstool für Tennis Plätze</title>
    <link rel="icon" href="/StartingPage/assets/img/logo/Logo.png">
    <link href="/StartingPage/assets/css/bootstrap.min.css" rel="stylesheet">
    <link href="/StartingPage/assets/css/style.css" rel="stylesheet">
    <link href="/StartingPage/assets/css/fonts.css" rel="stylesheet">
    <link href='/lib/boxicons-2.1.2/css/boxicons.min.css' rel='stylesheet'>
    <link href='/assets/cookies/cookies.min.css' rel='stylesheet'>
    <link rel="apple-touch-icon" href="/StartingPage/assets/img/logo/Logo.png"/>


    <!-- Typehead-->
    <script src="/lib/handelbars/index.js"></script>
    <script type="text/javascript" src="/StartingPage/assets/js/lib/jquery-3.6.1.min.js"></script>
    <script type="text/javascript" src="/lib/typehead/typehaed.bundle.js"></script>

    <script src="/assets/cookies/cookies.js"></script>
    <script>
        glowCookies.start('de', {
            style: 1,
            policyLink: '/DatenschutzBestimmung',
            bannerDescription: 'Um unsere Webseite für Sie optimal anbieten zu können, verwenden wir Cookies. Durch die Nutzung der Webseite stimmen Sie der Verwendung von Cookies zu. Weitere Informationen erhalten Sie in unserer'
        });
    </script>
    <!-- BEGIN PLERDY CODE -->


    </head>
<body>

<!-- Navbar-->
<nav class="navbar navbar-expand-lg bg-light py-3 sticky-top">
    <div class="container-fluid">
                    <a class="navbar-brand brand-name" href="/">Tennistastic</a>
        

        <button class="navbar-toggler" type="button" data-bs-toggle="collapse" data-bs-target="#navbarSupportedContent"
                aria-controls="navbarSupportedContent" aria-expanded="false" aria-label="Toggle navigation">
            <span class="navbar-toggler-icon"></span>
        </button>
        <div class="collapse navbar-collapse" id="navbarSupportedContent">
            <ul class="navbar-nav ms-auto mb-2 mb-lg-0">
                <li class="nav-item">
                    <a class="nav-link active" aria-current="page" href=/#">Home</a>
                </li>

                                    <li class="nav-item">
                        <a class="nav-link" href="#advantages">Vorteile</a>
                    </li>
                    <li class="nav-item">
                        <a class="nav-link" href="#pricing">Preise</a>
                    </li>
                
                
                                <button class="btn btn-basic ms-lg-3"
                        onclick="  window.location.href='/sign/up'">Registrieren
                </button>
                <button class="btn btn-basic-outline ms-lg-3"
                        onclick="  window.location.href='/login'">Einloggen
                </button>
            
        </div>
    </div>
</nav>
<!--NavBar end-->
<div class="row">

    
</div>
    <!--Hero-->
    <div class="hero vh-100 d-flex align-items-center">
        <div class="container">

Found 2024-06-26 by HttpPlugin

Create report

Open service 212.16.252.206:80 · www.tennistastic.de

2024-06-26 07:53

HTTP/1.1 301 Moved Permanently
Server: openresty
Date: Wed, 26 Jun 2024 07:53:06 GMT
Content-Type: text/html
Content-Length: 166
Connection: close
Location: https://www.tennistastic.de/
Strict-Transport-Security: max-age=63072000; preload

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>openresty</center>
</body>
</html>

Found 2024-06-26 by HttpPlugin

Create report

Open service 212.16.252.206:80 · tennistastic.de

2024-06-26 07:53

HTTP/1.1 301 Moved Permanently
Server: openresty
Date: Wed, 26 Jun 2024 07:53:05 GMT
Content-Type: text/html
Content-Length: 166
Connection: close
Location: https://tennistastic.de/
Strict-Transport-Security: max-age=63072000; preload

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>openresty</center>
</body>
</html>

Found 2024-06-26 by HttpPlugin

Create report

Open service 212.16.252.206:443 · tennistastic.de

2024-06-26 07:53

HTTP/1.1 200 OK
Server: openresty
Date: Wed, 26 Jun 2024 07:53:05 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: max-age=0, must-revalidate, private
Expires: Wed, 26 Jun 2024 07:53:05 GMT
Vary: Accept-Encoding
Strict-Transport-Security: max-age=63072000; preload
X-Served-By: tennistastic.de

Page title: Tennistastic - Das Buchungstool für Tennis Plätze

<!doctype html>
<html lang="de">
<head>
    <meta charset="utf-8">
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <meta name="description" content="Das Tennisplatz Buchungstool aus Deutschland">
    <meta name="keywords"
          content="Tennistastic, Tennisplatz Buchungstool, Platz Reservierung, Trainings Management, Club Management, Einfach, Deutschland, Tennis">
    <meta name="author" content="Jan Heidel">
    <meta name="google-site-verification" content="5MtFdnthxbnsw0YYXCJnr3eDJ6eojktry-ECAWwkHpQ" />

    <meta property="og:title" content="Tennistastic">
    <meta property="og:description" content="Das Tennisplatz Buchungstool aus Deutschland">
    <meta property="og:image" content="/StartingPage/assets/img/logo/Logo.png">
    <meta property="og:url" content="https://tennistastic.de">


    <meta name="twitter:title" content="Tennistastic">
    <meta name="twitter:description" content="Das Tennisplatz Buchungstool aus Deutschland">
    <meta name="twitter:url" content="/StartingPage/assets/img/logo/Logo.png">
    <meta name="twitter:card" content="summary">


    <title>Tennistastic - Das Buchungstool für Tennis Plätze</title>
    <link rel="icon" href="/StartingPage/assets/img/logo/Logo.png">
    <link href="/StartingPage/assets/css/bootstrap.min.css" rel="stylesheet">
    <link href="/StartingPage/assets/css/style.css" rel="stylesheet">
    <link href="/StartingPage/assets/css/fonts.css" rel="stylesheet">
    <link href='/lib/boxicons-2.1.2/css/boxicons.min.css' rel='stylesheet'>
    <link href='/assets/cookies/cookies.min.css' rel='stylesheet'>
    <link rel="apple-touch-icon" href="/StartingPage/assets/img/logo/Logo.png"/>


    <!-- Typehead-->
    <script src="/lib/handelbars/index.js"></script>
    <script type="text/javascript" src="/StartingPage/assets/js/lib/jquery-3.6.1.min.js"></script>
    <script type="text/javascript" src="/lib/typehead/typehaed.bundle.js"></script>

    <script src="/assets/cookies/cookies.js"></script>
    <script>
        glowCookies.start('de', {
            style: 1,
            policyLink: '/DatenschutzBestimmung',
            bannerDescription: 'Um unsere Webseite für Sie optimal anbieten zu können, verwenden wir Cookies. Durch die Nutzung der Webseite stimmen Sie der Verwendung von Cookies zu. Weitere Informationen erhalten Sie in unserer'
        });
    </script>
    <!-- BEGIN PLERDY CODE -->


    </head>
<body>

<!-- Navbar-->
<nav class="navbar navbar-expand-lg bg-light py-3 sticky-top">
    <div class="container-fluid">
                    <a class="navbar-brand brand-name" href="/">Tennistastic</a>
        

        <button class="navbar-toggler" type="button" data-bs-toggle="collapse" data-bs-target="#navbarSupportedContent"
                aria-controls="navbarSupportedContent" aria-expanded="false" aria-label="Toggle navigation">
            <span class="navbar-toggler-icon"></span>
        </button>
        <div class="collapse navbar-collapse" id="navbarSupportedContent">
            <ul class="navbar-nav ms-auto mb-2 mb-lg-0">
                <li class="nav-item">
                    <a class="nav-link active" aria-current="page" href=/#">Home</a>
                </li>

                                    <li class="nav-item">
                        <a class="nav-link" href="#advantages">Vorteile</a>
                    </li>
                    <li class="nav-item">
                        <a class="nav-link" href="#pricing">Preise</a>
                    </li>
                
                
                                <button class="btn btn-basic ms-lg-3"
                        onclick="  window.location.href='/sign/up'">Registrieren
                </button>
                <button class="btn btn-basic-outline ms-lg-3"
                        onclick="  window.location.href='/login'">Einloggen
                </button>
            
        </div>
    </div>
</nav>
<!--NavBar end-->
<div class="row">

    
</div>
    <!--Hero-->
    <div class="hero vh-100 d-flex align-items-center">
        <div class="container">

Found 2024-06-26 by HttpPlugin

Create report

Open service 212.16.252.206:443 · dev1.e-dienste.eu

2024-06-24 11:15

HTTP/1.1 500 Internal Server Error
Server: openresty
Date: Mon, 24 Jun 2024 11:15:38 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Debug-Exception: An%20exception%20occurred%20while%20executing%20a%20query%3A%20SQLSTATE%5B42S22%5D%3A%20Column%20not%20found%3A%201054%20Unknown%20column%20%27r0_.is_group%27%20in%20%27field%20list%27
X-Debug-Exception-File: %2Fvar%2Fwww%2Ftennistastic-dev%2Fvendor%2Fdoctrine%2Fdbal%2Fsrc%2FDriver%2FAPI%2FMySQL%2FExceptionConverter.php:67
Vary: Accept
Cache-Control: no-cache, private
X-Debug-Token: 102013
X-Debug-Token-Link: http://dev1.e-dienste.eu/_profiler/102013
X-Robots-Tag: noindex
X-Previous-Debug-Token: 1af76c

Found 2024-06-24 by HttpPlugin

Create report

Open service 212.16.252.206:443 · gitlab.e-dienste.eu

2024-06-23 08:02

HTTP/1.1 302 Found
Server: openresty
Date: Sun, 23 Jun 2024 08:02:41 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-cache
Content-Security-Policy: 
Location: https://gitlab.e-dienste.eu/users/sign_in
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01J121WSCJ7VQTB7ZSA4PS5PQM","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01J121WSCJ7VQTB7ZSA4PS5PQM
X-Runtime: 0.023184
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
X-Served-By: gitlab.e-dienste.eu


<html><body>You are being <a href="https://gitlab.e-dienste.eu/users/sign_in">redirected</a>.</body></html>

Found 2024-06-23 by HttpPlugin

Create report

Open service 212.16.252.206:80 · gitlab.e-dienste.eu

2024-06-23 08:02

HTTP/1.1 301 Moved Permanently
Server: openresty
Date: Sun, 23 Jun 2024 08:02:40 GMT
Content-Type: text/html
Content-Length: 166
Connection: close
Location: https://gitlab.e-dienste.eu/

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>openresty</center>
</body>
</html>

Found 2024-06-23 by HttpPlugin

Create report

Open service 212.16.252.206:443

2024-06-22 21:34
Found 2024-06-22 by HttpPlugin
Create report

Open service 212.16.252.206:443 · dev1.e-dienste.eu

2024-06-22 16:53

HTTP/1.1 500 Internal Server Error
Server: openresty
Date: Sat, 22 Jun 2024 16:53:52 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Debug-Exception: An%20exception%20occurred%20while%20executing%20a%20query%3A%20SQLSTATE%5B42S22%5D%3A%20Column%20not%20found%3A%201054%20Unknown%20column%20%27r0_.is_group%27%20in%20%27field%20list%27
X-Debug-Exception-File: %2Fvar%2Fwww%2Ftennistastic-dev%2Fvendor%2Fdoctrine%2Fdbal%2Fsrc%2FDriver%2FAPI%2FMySQL%2FExceptionConverter.php:67
Vary: Accept
Cache-Control: no-cache, private
X-Debug-Token: ee781c
X-Debug-Token-Link: http://dev1.e-dienste.eu/_profiler/ee781c
X-Robots-Tag: noindex
X-Previous-Debug-Token: ce056e

Found 2024-06-22 by HttpPlugin

Create report

Open service 212.16.252.206:80

2024-06-22 12:03

HTTP/1.1 200 OK
Server: openresty
Date: Sat, 22 Jun 2024 12:03:27 GMT
Content-Type: text/html
Content-Length: 1033
Last-Modified: Thu, 31 Mar 2022 05:41:06 GMT
Connection: close
ETag: "62453ef2-409"
Accept-Ranges:  none

Page title: Default Site

<!DOCTYPE html>
<html lang="en">
    <head>
        <meta charset="utf-8">
        <meta http-equiv="X-UA-Compatible" content="IE=edge">
        <meta name="viewport" content="width=device-width, initial-scale=1">
        <title>Default Site</title>
        <link href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css" rel="stylesheet">
        <style>
            .jumbotron { margin-top: 50px; }
        </style>
    </head>
    <body>
        <div class="container">
            <div class="jumbotron">
                <h1>Congratulations!</h1>
                <p>You've successfully started the Nginx Proxy Manager.</p>
                <p>If you're seeing this site then you're trying to access a host that isn't set up yet.</p>
                <p>Log in to the Admin panel to get started.</p>
            </div>
            <p class="text-center"><small>Powered by <a href="https://github.com/jc21/nginx-proxy-manager" target="_blank">Nginx Proxy Manager</a></small></p>
        </div>
    </body>
</html>

Found 2024-06-22 by HttpPlugin