LeakIX - Host 37.187.94.41

Host 37.187.94.41

France

OVH SAS

CentOS

Software information

Apache Apache 2.4.6

tcp/80

PHP PHP 7.2.34

tcp/80

Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 37.187.94.41
Port: 80
URL: http://37.187.94.41/_profiler/empty/search/results

First seen 2022-05-23 03:51
Last seen 2024-06-19 22:41
Open for 758 days
- Fingerprint: 407cf4363b0e62fafca67e07fd963f1cfd963f1cfd963f1cfd963f1cfd963f1c
```
Symfony profiler enabled:
http://37.187.94.41/_profiler/empty/search/results
```
  Found on 2024-06-19 22:41
Create report

Found php information file

PHPinfo page has been found in this directory. The PHPinfo page outputs a large amount of information about the current state of PHP.

This includes information about PHP compilation options and extensions, the PHP version, server information and environment (if compiled as a module), the PHP environment, OS version information, paths, master and local values of configuration options, HTTP headers, and the PHP License.

Environment variables may contain credentials.

https://www.acunetix.com/vulnerabilities/web/phpinfo-page/

IP: 37.187.94.41
Port: 80
URL: http://37.187.94.41/info.php

First seen 2022-04-14 09:54

Fingerprint: 2c44e2a6278fb0134173d6fa2de7709f7a06d9410ec5b7c37cd51b6d2e148793

Found PHP info page:
$_SERVER['UNIQUE_ID'] = YlfvQexuOYVBidNYbfkFVwAAAAU
$_SERVER['HTTP_HOST'] = 37.187.94.41
$_SERVER['HTTP_USER_AGENT'] = l9explore/1.3.0
$_SERVER['HTTP_ACCEPT_ENCODING'] = gzip
$_SERVER['HTTP_CONNECTION'] = close
$_SERVER['PATH'] = /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin
$_SERVER['SERVER_SIGNATURE'] = no value
$_SERVER['SERVER_SOFTWARE'] = Apache/2.4.6 (CentOS) PHP/7.2.34
$_SERVER['SERVER_NAME'] = 37.187.94.41
$_SERVER['SERVER_ADDR'] = 37.187.94.41
$_SERVER['SERVER_PORT'] = 80
$_SERVER['REMOTE_ADDR'] = 161.35.86.181
$_SERVER['DOCUMENT_ROOT'] = /home/sitesandstats/sd/engine7/www/web
$_SERVER['REQUEST_SCHEME'] = http
$_SERVER['CONTEXT_PREFIX'] = no value
$_SERVER['CONTEXT_DOCUMENT_ROOT'] = /home/sitesandstats/sd/engine7/www/web
$_SERVER['SERVER_ADMIN'] = webmaster@sitesandstats.com
$_SERVER['SCRIPT_FILENAME'] = /home/sitesandstats/sd/engine7/www/web/info.php
$_SERVER['REMOTE_PORT'] = 42264
$_SERVER['GATEWAY_INTERFACE'] = CGI/1.1
$_SERVER['SERVER_PROTOCOL'] = HTTP/1.1
$_SERVER['REQUEST_METHOD'] = GET
$_SERVER['QUERY_STRING'] = no value
$_SERVER['REQUEST_URI'] = /info.php
$_SERVER['SCRIPT_NAME'] = /info.php
$_SERVER['PHP_SELF'] = /info.php
$_SERVER['REQUEST_TIME_FLOAT'] = 1649930049.994
$_SERVER['REQUEST_TIME'] = 1649930049

Found on 2022-04-14 09:54

Create report

Open service 37.187.94.41:80

2024-06-19 22:41

HTTP/1.1 302 Found
Date: Wed, 19 Jun 2024 22:41:47 GMT
Server: Apache/2.4.6 (CentOS) PHP/7.2.34
X-Powered-By: PHP/7.2.34
Cache-Control: max-age=0, must-revalidate, private
Location: /login
X-Debug-Token: 83a693
X-Debug-Token-Link: http://37.187.94.41/_profiler/83a693
X-Robots-Tag: noindex
Expires: Wed, 19 Jun 2024 22:41:47 GMT
Set-Cookie: sf_redirect=%7B%22token%22%3A%2283a693%22%2C%22route%22%3A%22home%22%2C%22method%22%3A%22GET%22%2C%22controller%22%3A%7B%22class%22%3A%22App%5C%5CController%5C%5CDefaultController%22%2C%22method%22%3A%22indexAction%22%2C%22file%22%3A%22%5C%2Fhome%5C%2Fsitesandstats%5C%2Fsd%5C%2Fengine7%5C%2Fwww%5C%2Fsrc%5C%2FController%5C%2FDefaultController.php%22%2C%22line%22%3A298%7D%2C%22status_code%22%3A302%2C%22status_text%22%3A%22Found%22%7D; path=/; httponly; samesite=lax
Set-Cookie: PHPSESSID=rueuphdboal7ap8n19lc1khfe9; path=/; httponly; samesite=lax
Content-Length: 270
Connection: close
Content-Type: text/html; charset=UTF-8

Page title: Redirecting to /login

<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='/login'" />

        <title>Redirecting to /login</title>
    </head>
    <body>
        Redirecting to <a href="/login">/login</a>.
    </body>
</html>

Found 13 hours ago by HttpPlugin

Create report

Open service 37.187.94.41:80

2024-06-17 21:58

HTTP/1.1 302 Found
Date: Mon, 17 Jun 2024 21:58:21 GMT
Server: Apache/2.4.6 (CentOS) PHP/7.2.34
X-Powered-By: PHP/7.2.34
Cache-Control: max-age=0, must-revalidate, private
Location: /login
X-Debug-Token: a8c6c8
X-Debug-Token-Link: http://37.187.94.41/_profiler/a8c6c8
X-Robots-Tag: noindex
Expires: Mon, 17 Jun 2024 21:58:21 GMT
Set-Cookie: sf_redirect=%7B%22token%22%3A%22a8c6c8%22%2C%22route%22%3A%22home%22%2C%22method%22%3A%22GET%22%2C%22controller%22%3A%7B%22class%22%3A%22App%5C%5CController%5C%5CDefaultController%22%2C%22method%22%3A%22indexAction%22%2C%22file%22%3A%22%5C%2Fhome%5C%2Fsitesandstats%5C%2Fsd%5C%2Fengine7%5C%2Fwww%5C%2Fsrc%5C%2FController%5C%2FDefaultController.php%22%2C%22line%22%3A298%7D%2C%22status_code%22%3A302%2C%22status_text%22%3A%22Found%22%7D; path=/; httponly; samesite=lax
Set-Cookie: PHPSESSID=dlr87oscoco3lumnhgo4vlvunk; path=/; httponly; samesite=lax
Content-Length: 270
Connection: close
Content-Type: text/html; charset=UTF-8

Page title: Redirecting to /login

<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='/login'" />

        <title>Redirecting to /login</title>
    </head>
    <body>
        Redirecting to <a href="/login">/login</a>.
    </body>
</html>

Found 3 days ago by HttpPlugin

Create report

Open service 37.187.94.41:80

2024-06-15 23:27

HTTP/1.1 302 Found
Date: Sat, 15 Jun 2024 23:27:29 GMT
Server: Apache/2.4.6 (CentOS) PHP/7.2.34
X-Powered-By: PHP/7.2.34
Cache-Control: max-age=0, must-revalidate, private
Location: /login
X-Debug-Token: 4cd92f
X-Debug-Token-Link: http://37.187.94.41/_profiler/4cd92f
X-Robots-Tag: noindex
Expires: Sat, 15 Jun 2024 23:27:29 GMT
Set-Cookie: sf_redirect=%7B%22token%22%3A%224cd92f%22%2C%22route%22%3A%22home%22%2C%22method%22%3A%22GET%22%2C%22controller%22%3A%7B%22class%22%3A%22App%5C%5CController%5C%5CDefaultController%22%2C%22method%22%3A%22indexAction%22%2C%22file%22%3A%22%5C%2Fhome%5C%2Fsitesandstats%5C%2Fsd%5C%2Fengine7%5C%2Fwww%5C%2Fsrc%5C%2FController%5C%2FDefaultController.php%22%2C%22line%22%3A298%7D%2C%22status_code%22%3A302%2C%22status_text%22%3A%22Found%22%7D; path=/; httponly; samesite=lax
Set-Cookie: PHPSESSID=n6r3emv2aik1c36m7d63o62f40; path=/; httponly; samesite=lax
Content-Length: 270
Connection: close
Content-Type: text/html; charset=UTF-8

Page title: Redirecting to /login

<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='/login'" />

        <title>Redirecting to /login</title>
    </head>
    <body>
        Redirecting to <a href="/login">/login</a>.
    </body>
</html>

Found 2024-06-15 by HttpPlugin

Create report

Open service 37.187.94.41:80

2024-06-15 14:19

HTTP/1.1 302 Found
Date: Sat, 15 Jun 2024 14:19:54 GMT
Server: Apache/2.4.6 (CentOS) PHP/7.2.34
X-Powered-By: PHP/7.2.34
Cache-Control: max-age=0, must-revalidate, private
Location: /login
X-Debug-Token: cf0218
X-Debug-Token-Link: http://37.187.94.41/_profiler/cf0218
X-Robots-Tag: noindex
Expires: Sat, 15 Jun 2024 14:19:54 GMT
Set-Cookie: sf_redirect=%7B%22token%22%3A%22cf0218%22%2C%22route%22%3A%22home%22%2C%22method%22%3A%22GET%22%2C%22controller%22%3A%7B%22class%22%3A%22App%5C%5CController%5C%5CDefaultController%22%2C%22method%22%3A%22indexAction%22%2C%22file%22%3A%22%5C%2Fhome%5C%2Fsitesandstats%5C%2Fsd%5C%2Fengine7%5C%2Fwww%5C%2Fsrc%5C%2FController%5C%2FDefaultController.php%22%2C%22line%22%3A298%7D%2C%22status_code%22%3A302%2C%22status_text%22%3A%22Found%22%7D; path=/; httponly; samesite=lax
Set-Cookie: PHPSESSID=dt4180roa2bdotr1vq7dqc4ak5; path=/; httponly; samesite=lax
Content-Length: 270
Connection: close
Content-Type: text/html; charset=UTF-8

Page title: Redirecting to /login

<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='/login'" />

        <title>Redirecting to /login</title>
    </head>
    <body>
        Redirecting to <a href="/login">/login</a>.
    </body>
</html>

Found 2024-06-15 by HttpPlugin

Create report

Open service 37.187.94.41:3306

2024-06-14 16:52
```
MySQL detected
```
Found 2024-06-14 by tcpid
Create report
Open service 37.187.94.41:22

2024-06-14 07:22
Found 2024-06-14 by SSHOpenPlugin
Create report

Open service 37.187.94.41:80

2024-06-11 20:00

HTTP/1.1 302 Found
Date: Tue, 11 Jun 2024 20:00:52 GMT
Server: Apache/2.4.6 (CentOS) PHP/7.2.34
X-Powered-By: PHP/7.2.34
Cache-Control: max-age=0, must-revalidate, private
Location: /login
X-Debug-Token: fc31e1
X-Debug-Token-Link: http://37.187.94.41/_profiler/fc31e1
X-Robots-Tag: noindex
Expires: Tue, 11 Jun 2024 20:00:52 GMT
Set-Cookie: sf_redirect=%7B%22token%22%3A%22fc31e1%22%2C%22route%22%3A%22home%22%2C%22method%22%3A%22GET%22%2C%22controller%22%3A%7B%22class%22%3A%22App%5C%5CController%5C%5CDefaultController%22%2C%22method%22%3A%22indexAction%22%2C%22file%22%3A%22%5C%2Fhome%5C%2Fsitesandstats%5C%2Fsd%5C%2Fengine7%5C%2Fwww%5C%2Fsrc%5C%2FController%5C%2FDefaultController.php%22%2C%22line%22%3A298%7D%2C%22status_code%22%3A302%2C%22status_text%22%3A%22Found%22%7D; path=/; httponly; samesite=lax
Set-Cookie: PHPSESSID=d406rjq4tqfoon99rsrqudjbrd; path=/; httponly; samesite=lax
Content-Length: 270
Connection: close
Content-Type: text/html; charset=UTF-8

Page title: Redirecting to /login

<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='/login'" />

        <title>Redirecting to /login</title>
    </head>
    <body>
        Redirecting to <a href="/login">/login</a>.
    </body>
</html>

Found 2024-06-11 by HttpPlugin

Create report

Open service 37.187.94.41:80

2024-06-09 20:07

HTTP/1.1 302 Found
Date: Sun, 09 Jun 2024 20:07:30 GMT
Server: Apache/2.4.6 (CentOS) PHP/7.2.34
X-Powered-By: PHP/7.2.34
Cache-Control: max-age=0, must-revalidate, private
Location: /login
X-Debug-Token: d16efc
X-Debug-Token-Link: http://37.187.94.41/_profiler/d16efc
X-Robots-Tag: noindex
Expires: Sun, 09 Jun 2024 20:07:30 GMT
Set-Cookie: sf_redirect=%7B%22token%22%3A%22d16efc%22%2C%22route%22%3A%22home%22%2C%22method%22%3A%22GET%22%2C%22controller%22%3A%7B%22class%22%3A%22App%5C%5CController%5C%5CDefaultController%22%2C%22method%22%3A%22indexAction%22%2C%22file%22%3A%22%5C%2Fhome%5C%2Fsitesandstats%5C%2Fsd%5C%2Fengine7%5C%2Fwww%5C%2Fsrc%5C%2FController%5C%2FDefaultController.php%22%2C%22line%22%3A298%7D%2C%22status_code%22%3A302%2C%22status_text%22%3A%22Found%22%7D; path=/; httponly; samesite=lax
Set-Cookie: PHPSESSID=0n7lkk7h6kf96qv9pr6h567aqk; path=/; httponly; samesite=lax
Content-Length: 270
Connection: close
Content-Type: text/html; charset=UTF-8

Page title: Redirecting to /login

<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='/login'" />

        <title>Redirecting to /login</title>
    </head>
    <body>
        Redirecting to <a href="/login">/login</a>.
    </body>
</html>

Found 2024-06-09 by HttpPlugin

Create report

Open service 37.187.94.41:80

2024-06-07 21:29

HTTP/1.1 302 Found
Date: Fri, 07 Jun 2024 21:29:59 GMT
Server: Apache/2.4.6 (CentOS) PHP/7.2.34
X-Powered-By: PHP/7.2.34
Cache-Control: max-age=0, must-revalidate, private
Location: /login
X-Debug-Token: 642996
X-Debug-Token-Link: http://37.187.94.41/_profiler/642996
X-Robots-Tag: noindex
Expires: Fri, 07 Jun 2024 21:29:59 GMT
Set-Cookie: sf_redirect=%7B%22token%22%3A%22642996%22%2C%22route%22%3A%22home%22%2C%22method%22%3A%22GET%22%2C%22controller%22%3A%7B%22class%22%3A%22App%5C%5CController%5C%5CDefaultController%22%2C%22method%22%3A%22indexAction%22%2C%22file%22%3A%22%5C%2Fhome%5C%2Fsitesandstats%5C%2Fsd%5C%2Fengine7%5C%2Fwww%5C%2Fsrc%5C%2FController%5C%2FDefaultController.php%22%2C%22line%22%3A298%7D%2C%22status_code%22%3A302%2C%22status_text%22%3A%22Found%22%7D; path=/; httponly; samesite=lax
Set-Cookie: PHPSESSID=rcaf5mi2j4sm2vvip02mkrndlf; path=/; httponly; samesite=lax
Content-Length: 270
Connection: close
Content-Type: text/html; charset=UTF-8

Page title: Redirecting to /login

<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='/login'" />

        <title>Redirecting to /login</title>
    </head>
    <body>
        Redirecting to <a href="/login">/login</a>.
    </body>
</html>

Found 2024-06-07 by HttpPlugin

Create report

Open service 37.187.94.41:80

2024-06-05 20:14

HTTP/1.1 302 Found
Date: Wed, 05 Jun 2024 20:14:25 GMT
Server: Apache/2.4.6 (CentOS) PHP/7.2.34
X-Powered-By: PHP/7.2.34
Cache-Control: max-age=0, must-revalidate, private
Location: /login
X-Debug-Token: 566009
X-Debug-Token-Link: http://37.187.94.41/_profiler/566009
X-Robots-Tag: noindex
Expires: Wed, 05 Jun 2024 20:14:25 GMT
Set-Cookie: sf_redirect=%7B%22token%22%3A%22566009%22%2C%22route%22%3A%22home%22%2C%22method%22%3A%22GET%22%2C%22controller%22%3A%7B%22class%22%3A%22App%5C%5CController%5C%5CDefaultController%22%2C%22method%22%3A%22indexAction%22%2C%22file%22%3A%22%5C%2Fhome%5C%2Fsitesandstats%5C%2Fsd%5C%2Fengine7%5C%2Fwww%5C%2Fsrc%5C%2FController%5C%2FDefaultController.php%22%2C%22line%22%3A298%7D%2C%22status_code%22%3A302%2C%22status_text%22%3A%22Found%22%7D; path=/; httponly; samesite=lax
Set-Cookie: PHPSESSID=lknjobl2o7lb80q6s63ire08ls; path=/; httponly; samesite=lax
Content-Length: 270
Connection: close
Content-Type: text/html; charset=UTF-8

Page title: Redirecting to /login

<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='/login'" />

        <title>Redirecting to /login</title>
    </head>
    <body>
        Redirecting to <a href="/login">/login</a>.
    </body>
</html>

Found 2024-06-05 by HttpPlugin

Create report

Open service 37.187.94.41:80

2024-06-03 21:35

HTTP/1.1 302 Found
Date: Mon, 03 Jun 2024 21:35:38 GMT
Server: Apache/2.4.6 (CentOS) PHP/7.2.34
X-Powered-By: PHP/7.2.34
Cache-Control: max-age=0, must-revalidate, private
Location: /login
X-Debug-Token: 3372c3
X-Debug-Token-Link: http://37.187.94.41/_profiler/3372c3
X-Robots-Tag: noindex
Expires: Mon, 03 Jun 2024 21:35:38 GMT
Set-Cookie: sf_redirect=%7B%22token%22%3A%223372c3%22%2C%22route%22%3A%22home%22%2C%22method%22%3A%22GET%22%2C%22controller%22%3A%7B%22class%22%3A%22App%5C%5CController%5C%5CDefaultController%22%2C%22method%22%3A%22indexAction%22%2C%22file%22%3A%22%5C%2Fhome%5C%2Fsitesandstats%5C%2Fsd%5C%2Fengine7%5C%2Fwww%5C%2Fsrc%5C%2FController%5C%2FDefaultController.php%22%2C%22line%22%3A298%7D%2C%22status_code%22%3A302%2C%22status_text%22%3A%22Found%22%7D; path=/; httponly; samesite=lax
Set-Cookie: PHPSESSID=jiuvp0v1bgs0sp9ckg9i8tium3; path=/; httponly; samesite=lax
Content-Length: 270
Connection: close
Content-Type: text/html; charset=UTF-8

Page title: Redirecting to /login

<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='/login'" />

        <title>Redirecting to /login</title>
    </head>
    <body>
        Redirecting to <a href="/login">/login</a>.
    </body>
</html>

Found 2024-06-03 by HttpPlugin

Create report

Domain summary

No record

Host 37.187.94.41

France

Software information

Symfony developement panel enabled

Found php information file

Domain summary