LeakIX - Host 35.168.201.152

Host 35.168.201.152

United States

AMAZON-AES

Ubuntu

Software information

Apache Apache

tcp/443 tcp/80

Symfony error leaking informations

The application has Symfony verbose mode enabled.

It enables an attacker to access the following sensitive content :

System configuration and/or credentials

IP: 35.168.201.152
Port: 443
URL: https://35.168.201.152/frontend_dev.php/$

First seen 2022-06-08 18:19
Last seen 2022-08-26 01:56
Open for 78 days

Fingerprint: 05ab011344cbe668ce57db48b10dbab66a34c97c619a53a573df00cdcd25ea63

app_sf_guard_plugin_algorithm_callable: md5
sf_admin_module_web_dir: /sfDoctrinePlugin
sf_admin_web_dir: /sf/sf_admin
sf_app: frontend
sf_app_base_cache_dir: /home/ubuntu/symfony/rsv/cache/frontend
sf_app_cache_dir: /home/ubuntu/symfony/rsv/cache/frontend/dev
sf_app_config_dir: /home/ubuntu/symfony/rsv/apps/frontend/config
sf_app_dir: /home/ubuntu/symfony/rsv/apps/frontend
sf_app_i18n_dir: /home/ubuntu/symfony/rsv/apps/frontend/i18n
sf_app_lib_dir: /home/ubuntu/symfony/rsv/apps/frontend/lib
sf_app_module_dir: /home/ubuntu/symfony/rsv/apps/frontend/modules
sf_app_template_dir: /home/ubuntu/symfony/rsv/apps/frontend/templates
sf_apps_dir: /home/ubuntu/symfony/rsv/apps
sf_cache: false
sf_cache_dir: /home/ubuntu/symfony/rsv/cache
sf_charset: utf-8
sf_check_lock: true
sf_cli: false
sf_compressed: false
sf_config_cache_dir: /home/ubuntu/symfony/rsv/cache/frontend/dev/config
sf_config_dir: /home/ubuntu/symfony/rsv/config
sf_csrf_secret: b5a1d1a2fbf9fa3a1a4039f59ad899893c7bb172
sf_data_dir: /home/ubuntu/symfony/rsv/data
sf_debug: true
sf_default_culture: es
sf_enabled_modules:
  - default
  - sfGuardAuth
  - sfApply
sf_environment: dev
sf_error_404_action: error404
sf_error_404_module: default
sf_error_reporting: 24575
sf_escaping_method: ESC_SPECIALCHARS
sf_escaping_strategy: true
sf_etag: false
sf_file_link_format: null
sf_i18n: on
sf_i18n_cache_dir: /home/ubuntu/symfony/rsv/cache/frontend/dev/i18n
sf_lib_dir: /home/ubuntu/symfony/rsv/lib
sf_log_dir: /home/ubuntu/symfony/rsv/log
sf_logging_enabled: true
sf_login_action: signin
sf_login_module: sfGuardAuth
sf_module_cache_dir: /home/ubuntu/symfony/rsv/cache/frontend/dev/modules
sf_module_disabled_action: disabled
sf_module_disabled_module: default
sf_no_script_name: false
sf_orm: doctrine
sf_plugins_dir: /home/ubuntu/symfony/rsv/plugins
sf_psr_logger: false
sf_root_dir: /home/ubuntu/symfony/rsv
sf_secure_action: secure
sf_secure_module: default
sf_standard_helpers:
  - Partial
  - Cache
sf_symfony_lib_dir: /home/ubuntu/symfony/rsv/vendor/lexpress/symfony1/lib
sf_template_cache_dir: /home/ubuntu/symfony/rsv/cache/frontend/dev/template
sf_test_cache_dir: /home/ubuntu/symfony/rsv/cache/frontend/dev/test
sf_test_dir: /home/ubuntu/symfony/rsv/test
sf_upload_dir: /home/ubuntu/symfony/rsv/web/uploads
sf_upload_dir_name: uploads
sf_use_database: true
sf_web_debug: true
sf_web_debug_web_dir: /sf/sf_web_debug
sf_web_dir: /home/ubuntu/symfony/rsv/web

Found on 2022-06-08 18:19

Create report

Open service 35.168.201.152:443

2024-06-16 02:14

HTTP/1.1 302 
Date: Sun, 16 Jun 2024 02:14:07 GMT
Content-Length: 0
Connection: close
Set-Cookie: AWSALB=kXiZ6n8BRljE1zeTkX3hZT4nI+9+7XZ68dp/blXUS904PWJC7wT5gi9IeQNzxH78K7HnIcFX7+7isjosc2y2JZQ2snwpyFttisqOc1Jsk2NV9wRaJjSnFRPZgoLA; Expires=Sun, 23 Jun 2024 02:14:07 GMT; Path=/
Set-Cookie: AWSALBCORS=kXiZ6n8BRljE1zeTkX3hZT4nI+9+7XZ68dp/blXUS904PWJC7wT5gi9IeQNzxH78K7HnIcFX7+7isjosc2y2JZQ2snwpyFttisqOc1Jsk2NV9wRaJjSnFRPZgoLA; Expires=Sun, 23 Jun 2024 02:14:07 GMT; Path=/; SameSite=None; Secure
Server: Apache
Location: https://35.168.201.152/app/login
Set-Cookie: SessionProxyFilter_SessionId=b02551fd-1cf8-4792-bad6-8228eaf5e725; Domain=35.168.201.152; Path=/; Secure; HttpOnly
Vary: User-Agent
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Referrer-Policy: same-origin
X-Permitted-Cross-Domain-Policies: none

Found 2024-06-16 by HttpPlugin

Create report

Open service 35.168.201.152:80

2024-06-15 00:55

HTTP/1.1 302 Found
Date: Sat, 15 Jun 2024 00:55:42 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 207
Connection: close
Set-Cookie: AWSALB=dL8MkeWpCJmGY6AGtfPnBAuuQV/DUaD44VvwGtmfnIzITXzWGG+fzRBD0WDfHdQ1TvZhNLhsZBoulqGZfXvD8XeG+KnkoQaSnuA2jEeVlGfowl2BAJKsIicWF7sU; Expires=Sat, 22 Jun 2024 00:55:42 GMT; Path=/
Set-Cookie: AWSALBCORS=dL8MkeWpCJmGY6AGtfPnBAuuQV/DUaD44VvwGtmfnIzITXzWGG+fzRBD0WDfHdQ1TvZhNLhsZBoulqGZfXvD8XeG+KnkoQaSnuA2jEeVlGfowl2BAJKsIicWF7sU; Expires=Sat, 22 Jun 2024 00:55:42 GMT; Path=/; SameSite=None
Server: Apache
Location: https://35.168.201.152/

Page title: 302 Found

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>302 Found</title>
</head><body>
<h1>Found</h1>
<p>The document has moved <a href="https://35.168.201.152/">here</a>.</p>
</body></html>

Found 2024-06-15 by HttpPlugin

Create report

*.interpreterintelligence.cominterpreterintelligence.com

Fingerprint:

3dd47ff453c0d650c4fc2b5b077a2d2c4066b313cd6608bcd2e91d2e483ff417

CN:

*.interpreterintelligence.com

Key:

RSA-2048

Issuer:

Amazon RSA 2048 M01

Not before:

2023-08-28 00:00

Not after:

2024-09-25 23:59

Domain summary

No record