LeakIX - Host 34.74.17.15

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 34.74.17.15
Domain: romancerelax.iridian.co
Port: 443
URL: https://romancerelax.iridian.co

First seen 2022-10-09 01:23
Last seen 2024-12-31 15:56
Open for 814 days

Severity: high
Fingerprint: 5f32cf5d6962f09ca0cc0fcfa0cc0fcff5cd479247de8ca7aa413aae0183eee2

Found 25 files trough .DS_Store spidering:

/.htaccess
/.well-known
/apple-app-site-association
/autocomplete
/back
/build
/bundles
/css
/favicon.ico
/firebase
/fonts
/general.kml
/google1f7827b016ec2ced.html
/img
/index.php
/js
/login
/login_veci
/media
/reports
/robots.txt
/sitemap.xml
/upload
/uploads
/webfonts

Found on 2024-12-31 15:56

Create report

Symfony developement panel enabled

The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration
Request log, including POST request with credentials and/or api keys

IP: 34.74.17.15
Domain: romancerelax.iridian.co
Port: 443
URL: https://romancerelax.iridian.co/_profiler/empty/search/results

First seen 2022-10-09 01:23
Last seen 2024-12-31 15:56
Open for 814 days

Fingerprint: 407cf4363b0e62fafca67e071fa22dd41fa22dd41fa22dd41fa22dd41fa22dd4
```
Symfony profiler enabled:
https://romancerelax.iridian.co/_profiler/empty/search/results
```
Found on 2024-12-31 15:56

Create report

Symfony developement panel enabled

The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration
Request log, including POST request with credentials and/or api keys

IP: 34.74.17.15
Domain: berlian.iridian.co
Port: 443
URL: https://berlian.iridian.co/_profiler/empty/search/results

First seen 2022-08-11 01:36
Last seen 2024-12-10 05:57
Open for 852 days

Fingerprint: 407cf4363b0e62fafca67e07733de0d8733de0d8733de0d8733de0d8733de0d8
```
Symfony profiler enabled:
https://berlian.iridian.co/_profiler/empty/search/results
```
Found on 2024-12-10 05:57

Create report

Symfony developement panel enabled

The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration
Request log, including POST request with credentials and/or api keys

IP: 34.74.17.15
Domain: medintia.iridian.co
Port: 443
URL: https://medintia.iridian.co/_profiler/empty/search/results

First seen 2022-09-10 03:28
Last seen 2024-12-10 05:55
Open for 822 days

Fingerprint: 407cf4363b0e62fafca67e07bc062318bc062318bc062318bc062318bc062318
```
Symfony profiler enabled:
https://medintia.iridian.co/_profiler/empty/search/results
```
Found on 2024-12-10 05:55

Create report

Symfony developement panel enabled

The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration
Request log, including POST request with credentials and/or api keys

IP: 34.74.17.15
Port: 8010
URL: http://34.74.17.15:8010/_profiler/empty/search/results

First seen 2022-11-04 12:35
Last seen 2023-02-10 18:30
Open for 98 days

Fingerprint: 407cf4363b0e62fafca67e075eb2e6eb5eb2e6eb5eb2e6eb5eb2e6eb5eb2e6eb
```
Symfony profiler enabled:
http://34.74.17.15:8010/_profiler/empty/search/results
```
Found on 2022-11-04 12:35

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 34.74.17.15
Port: 8002
URL: http://34.74.17.15:8002

First seen 2022-09-23 12:19
Last seen 2023-02-09 11:51
Open for 138 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652234cef3c8

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/Iridian-co/zely-landing.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main

Found on 2022-09-23 12:19

267 Bytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 34.74.17.15
Domain: edukaecuador.iridian.co
Port: 443
URL: https://edukaecuador.iridian.co

First seen 2022-09-05 05:15
Last seen 2023-01-16 23:57
Open for 133 days

Severity: low
Fingerprint: 5f32cf5d6962f09c47dfe71947dfe719bf3fd42cc2f14923736f95fecf0dcbc8

Found 16 files trough .DS_Store spidering:

/.well-known
/adapters
/build
/bundles
/css
/documents
/firebase
/fonts
/games
/images
/js
/lang
/plugins
/skins
/uploads
/vendor

Found on 2022-09-05 05:15

Create report

Symfony developement panel enabled

The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration
Request log, including POST request with credentials and/or api keys

IP: 34.74.17.15
Domain: farmaciavirtualecuador.iridian.co
Port: 443
URL: https://farmaciavirtualecuador.iridian.co/_profiler/empty/search/results

First seen 2022-09-12 03:33
Last seen 2023-01-10 17:05
Open for 120 days

Fingerprint: 407cf4363b0e62fafca67e07685cde4b685cde4b685cde4b685cde4b685cde4b
```
Symfony profiler enabled:
https://farmaciavirtualecuador.iridian.co/_profiler/empty/search/results
```
Found on 2022-09-12 03:33

Create report

Symfony developement panel enabled

The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration
Request log, including POST request with credentials and/or api keys

IP: 34.74.17.15
Domain: medicosecuador.iridian.co
Port: 443
URL: https://medicosecuador.iridian.co/_profiler/empty/search/results

First seen 2022-09-09 21:15
Last seen 2023-01-08 01:33
Open for 120 days

Fingerprint: 407cf4363b0e62fafca67e07c8de22dac8de22dac8de22dac8de22dac8de22da
```
Symfony profiler enabled:
https://medicosecuador.iridian.co/_profiler/empty/search/results
```
Found on 2022-09-09 21:15

Create report

Symfony developement panel enabled

The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration
Request log, including POST request with credentials and/or api keys

IP: 34.74.17.15
Port: 8005
URL: http://34.74.17.15:8005/_profiler/empty/search/results

First seen 2022-09-10 08:08
Last seen 2023-01-04 09:39
Open for 116 days

Fingerprint: 407cf4363b0e62fafca67e07ca31b581ca31b581ca31b581ca31b581ca31b581
```
Symfony profiler enabled:
http://34.74.17.15:8005/_profiler/empty/search/results
```
Found on 2022-09-10 08:08

Create report

Symfony developement panel enabled

The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration
Request log, including POST request with credentials and/or api keys

IP: 34.74.17.15
Domain: edukaecuador.iridian.co
Port: 443
URL: https://edukaecuador.iridian.co/_profiler/empty/search/results

First seen 2022-09-05 05:15
Last seen 2023-01-04 01:33
Open for 120 days

Fingerprint: 407cf4363b0e62fafca67e077a6266d27a6266d27a6266d27a6266d27a6266d2
```
Symfony profiler enabled:
https://edukaecuador.iridian.co/_profiler/empty/search/results
```
Found on 2022-09-05 05:15

Create report

Symfony developement panel enabled

The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration
Request log, including POST request with credentials and/or api keys

IP: 34.74.17.15
Port: 8078
URL: http://34.74.17.15:8078/_profiler/empty/search/results

First seen 2022-12-11 12:30
Last seen 2022-12-25 18:07
Open for 14 days

Fingerprint: 407cf4363b0e62fafca67e07dc1c6fb9dc1c6fb9dc1c6fb9dc1c6fb9dc1c6fb9
```
Symfony profiler enabled:
http://34.74.17.15:8078/_profiler/empty/search/results
```
Found on 2022-12-11 12:30

Create report

Symfony developement panel enabled

The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration
Request log, including POST request with credentials and/or api keys

IP: 34.74.17.15
Port: 8076
URL: http://34.74.17.15:8076/_profiler/empty/search/results

First seen 2022-12-03 23:04
Last seen 2022-12-24 06:17
Open for 20 days

Fingerprint: 407cf4363b0e62fafca67e07141be2bf141be2bf141be2bf141be2bf141be2bf
```
Symfony profiler enabled:
http://34.74.17.15:8076/_profiler/empty/search/results
```
Found on 2022-12-03 23:04

Create report

Symfony developement panel enabled

The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration
Request log, including POST request with credentials and/or api keys

IP: 34.74.17.15
Port: 8089
URL: http://34.74.17.15:8089/_profiler/empty/search/results

First seen 2022-12-02 09:44
Last seen 2022-12-23 16:23
Open for 21 days

Fingerprint: 407cf4363b0e62fafca67e07a54591f5a54591f5a54591f5a54591f5a54591f5
```
Symfony profiler enabled:
http://34.74.17.15:8089/_profiler/empty/search/results
```
Found on 2022-12-02 09:44

Create report

Symfony developement panel enabled

The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration
Request log, including POST request with credentials and/or api keys

IP: 34.74.17.15
Port: 8052
URL: http://34.74.17.15:8052/_profiler/empty/search/results

First seen 2022-12-11 10:43
Last seen 2022-12-23 14:45
Open for 12 days

Fingerprint: 407cf4363b0e62fafca67e07d550b085d550b085d550b085d550b085d550b085
```
Symfony profiler enabled:
http://34.74.17.15:8052/_profiler/empty/search/results
```
Found on 2022-12-11 10:43

Create report

Symfony developement panel enabled

The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration
Request log, including POST request with credentials and/or api keys

IP: 34.74.17.15
Port: 8077
URL: http://34.74.17.15:8077/_profiler/empty/search/results

First seen 2022-12-04 07:44
Last seen 2022-12-23 02:24
Open for 18 days

Fingerprint: 407cf4363b0e62fafca67e072fed9b842fed9b842fed9b842fed9b842fed9b84
```
Symfony profiler enabled:
http://34.74.17.15:8077/_profiler/empty/search/results
```
Found on 2022-12-04 07:44

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 34.74.17.15
Port: 8077
URL: http://34.74.17.15:8077

First seen 2022-12-04 07:44
Last seen 2022-12-23 02:24
Open for 18 days

Severity: high
Fingerprint: 5f32cf5d6962f09ca0cc0fcfa0cc0fcff5cd479247de8ca7aa413aae0183eee2

Found 25 files trough .DS_Store spidering:

/.htaccess
/.well-known
/apple-app-site-association
/autocomplete
/back
/build
/bundles
/css
/favicon.ico
/firebase
/fonts
/general.kml
/google1f7827b016ec2ced.html
/img
/index.php
/js
/login
/login_veci
/media
/reports
/robots.txt
/sitemap.xml
/upload
/uploads
/webfonts

Found on 2022-12-04 07:44

Create report

Symfony developement panel enabled

The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration
Request log, including POST request with credentials and/or api keys

IP: 34.74.17.15
Port: 8084
URL: http://34.74.17.15:8084/_profiler/empty/search/results

First seen 2022-12-06 21:37
Last seen 2022-12-22 12:39
Open for 15 days

Fingerprint: 407cf4363b0e62fafca67e07d93dc536d93dc536d93dc536d93dc536d93dc536
```
Symfony profiler enabled:
http://34.74.17.15:8084/_profiler/empty/search/results
```
Found on 2022-12-06 21:37

Create report

Symfony developement panel enabled

The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration
Request log, including POST request with credentials and/or api keys

IP: 34.74.17.15
Port: 8086
URL: http://34.74.17.15:8086/_profiler/empty/search/results

First seen 2022-12-22 09:55

Fingerprint: 407cf4363b0e62fafca67e07cb1f5218cb1f5218cb1f5218cb1f5218cb1f5218
```
Symfony profiler enabled:
http://34.74.17.15:8086/_profiler/empty/search/results
```
Found on 2022-12-22 09:55

Create report

Symfony developement panel enabled

The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration
Request log, including POST request with credentials and/or api keys

IP: 34.74.17.15
Port: 8083
URL: http://34.74.17.15:8083/_profiler/empty/search/results

First seen 2022-12-22 06:38

Fingerprint: 407cf4363b0e62fafca67e07ff62e027ff62e027ff62e027ff62e027ff62e027
```
Symfony profiler enabled:
http://34.74.17.15:8083/_profiler/empty/search/results
```
Found on 2022-12-22 06:38

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 34.74.17.15
Port: 8083
URL: http://34.74.17.15:8083

First seen 2022-08-24 02:31
Last seen 2022-12-22 06:38
Open for 120 days

Severity: high
Fingerprint: 5f32cf5d6962f09ca0cc0fcfa0cc0fcff5cd479247de8ca7aa413aae0183eee2

Found 25 files trough .DS_Store spidering:

/.htaccess
/.well-known
/apple-app-site-association
/autocomplete
/back
/build
/bundles
/css
/favicon.ico
/firebase
/fonts
/general.kml
/google1f7827b016ec2ced.html
/img
/index.php
/js
/login
/login_veci
/media
/reports
/robots.txt
/sitemap.xml
/upload
/uploads
/webfonts

Found on 2022-08-24 02:31

Create report

Symfony developement panel enabled

The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration
Request log, including POST request with credentials and/or api keys

IP: 34.74.17.15
Port: 8059
URL: http://34.74.17.15:8059/_profiler/empty/search/results

First seen 2022-12-22 00:33

Fingerprint: 407cf4363b0e62fafca67e0741879ffc41879ffc41879ffc41879ffc41879ffc
```
Symfony profiler enabled:
http://34.74.17.15:8059/_profiler/empty/search/results
```
Found on 2022-12-22 00:33

Create report

Symfony developement panel enabled

The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration
Request log, including POST request with credentials and/or api keys

IP: 34.74.17.15
Port: 8007
URL: http://34.74.17.15:8007/_profiler/empty/search/results

First seen 2022-09-13 11:30
Last seen 2022-12-19 23:58
Open for 97 days

Fingerprint: 407cf4363b0e62fafca67e07c5447cbbc5447cbbc5447cbbc5447cbbc5447cbb
```
Symfony profiler enabled:
http://34.74.17.15:8007/_profiler/empty/search/results
```
Found on 2022-09-13 11:30

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 34.74.17.15
Port: 8070
URL: http://34.74.17.15:8070

First seen 2022-12-18 12:57

Severity: low
Fingerprint: 5f32cf5d6962f09c2eda814e2eda814e4ce52271cbc9b5ef74efface70172af6

Found 6 files trough .DS_Store spidering:

/img_2
/img_2/2x
/img_2/3x
/img_2/NINSBA.jpg
/img_2/Sin-título-1.jpg
/img_2/SVG

Found on 2022-12-18 12:57

Create report

Symfony developement panel enabled

The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration
Request log, including POST request with credentials and/or api keys

IP: 34.74.17.15
Port: 8055
URL: http://34.74.17.15:8055/_profiler/empty/search/results

First seen 2022-12-03 07:43
Last seen 2022-12-18 12:14
Open for 15 days

Fingerprint: 407cf4363b0e62fafca67e07dc256170dc256170dc256170dc256170dc256170
```
Symfony profiler enabled:
http://34.74.17.15:8055/_profiler/empty/search/results
```
Found on 2022-12-03 07:43

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 34.74.17.15
Port: 8006
URL: http://34.74.17.15:8006

First seen 2022-09-08 19:08
Last seen 2022-12-18 02:39
Open for 100 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65226cce6dd3

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/Iridian-co/paletteria-wordpress.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main

Found on 2022-09-08 19:08

275 Bytes

Create report

Symfony developement panel enabled

The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration
Request log, including POST request with credentials and/or api keys

IP: 34.74.17.15
Port: 8045
URL: http://34.74.17.15:8045/_profiler/empty/search/results

First seen 2022-09-06 21:20
Last seen 2022-12-12 00:16
Open for 96 days

Fingerprint: 407cf4363b0e62fafca67e079029de4d9029de4d9029de4d9029de4d9029de4d
```
Symfony profiler enabled:
http://34.74.17.15:8045/_profiler/empty/search/results
```
Found on 2022-09-06 21:20

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 34.74.17.15
Port: 8060
URL: http://34.74.17.15:8060

First seen 2022-12-08 19:53

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522d3210c55

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/Iridian-co/academia-alejandro-falla.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2022-12-08 19:53

283 Bytes

Create report

Host 34.74.17.15

United States

MacOS file listing through .DS_Store file

Symfony developement panel enabled

Symfony developement panel enabled

Symfony developement panel enabled

Symfony developement panel enabled

Git configuration and history exposed

MacOS file listing through .DS_Store file

Symfony developement panel enabled

Symfony developement panel enabled

Symfony developement panel enabled

Symfony developement panel enabled

Symfony developement panel enabled

Symfony developement panel enabled

Symfony developement panel enabled

Symfony developement panel enabled

Symfony developement panel enabled

MacOS file listing through .DS_Store file

Symfony developement panel enabled

Symfony developement panel enabled

Symfony developement panel enabled

MacOS file listing through .DS_Store file

Symfony developement panel enabled

Symfony developement panel enabled

MacOS file listing through .DS_Store file

Symfony developement panel enabled

Git configuration and history exposed

Symfony developement panel enabled

Git configuration and history exposed

Domain summary