LeakIX - Host 51.91.255.41

Host 51.91.255.41

France

OVH SAS

Debian

Software information

Apache Apache 2.4.38

tcp/443 tcp/80

Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 51.91.255.41
Port: 443
URL: https://51.91.255.41/_profiler/empty/search/results

First seen 2021-10-13 06:40
Last seen 2024-04-30 18:53
Open for 930 days
- Fingerprint: 407cf4363b0e62fafca67e071641d57a1641d57a1641d57a1641d57a1641d57a
```
Symfony profiler enabled:
https://51.91.255.41/_profiler/empty/search/results
```
  Found on 2024-04-30 18:53
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 51.91.255.41
Domain: api.dev.paplar-auto.fr
Port: 443
URL: https://api.dev.paplar-auto.fr/_profiler/empty/search/results

First seen 2021-11-03 11:03
Last seen 2024-04-28 21:02
Open for 907 days
- Fingerprint: 407cf4363b0e62fafca67e07ea371c5cea371c5cea371c5cea371c5cea371c5c
```
Symfony profiler enabled:
https://api.dev.paplar-auto.fr/_profiler/empty/search/results
```
  Found on 2024-04-28 21:02
Create report

Open service 51.91.255.41:443

2024-04-30 18:53

HTTP/1.1 404 Not Found
Date: Tue, 30 Apr 2024 18:53:07 GMT
Server: Apache/2.4.38 (Debian)
Cache-Control: no-cache, private
Link: <https://51.91.255.41/api/docs.jsonld>; rel="http://www.w3.org/ns/hydra/core#apiDocumentation"
X-Debug-Token: 15e1be
X-Debug-Token-Link: https://51.91.255.41/_profiler/15e1be
X-Robots-Tag: noindex
Connection: close
Transfer-Encoding: chunked
Content-Type: application/json

Found one day ago by HttpPlugin

Create report

Open service 51.91.255.41:443 · api.dev.paplar-auto.fr

2024-04-28 21:02

HTTP/1.1 404 Not Found
Date: Sun, 28 Apr 2024 21:02:37 GMT
Server: Apache/2.4.38 (Debian)
Cache-Control: no-cache, private
Link: <https://api.dev.paplar-auto.fr/api/docs.jsonld>; rel="http://www.w3.org/ns/hydra/core#apiDocumentation"
X-Debug-Token: 7b8fd5
X-Debug-Token-Link: https://api.dev.paplar-auto.fr/_profiler/7b8fd5
X-Robots-Tag: noindex
Connection: close
Transfer-Encoding: chunked
Content-Type: application/json

Found 3 days ago by HttpPlugin

Create report

Open service 51.91.255.41:443

2024-04-28 17:46

HTTP/1.1 404 Not Found
Date: Sun, 28 Apr 2024 17:46:10 GMT
Server: Apache/2.4.38 (Debian)
Cache-Control: no-cache, private
Link: <https://51.91.255.41/api/docs.jsonld>; rel="http://www.w3.org/ns/hydra/core#apiDocumentation"
X-Debug-Token: f6372d
X-Debug-Token-Link: https://51.91.255.41/_profiler/f6372d
X-Robots-Tag: noindex
Connection: close
Transfer-Encoding: chunked
Content-Type: application/json

Found 2024-04-28 by HttpPlugin

Create report

Open service 51.91.255.41:80

2024-04-24 06:45

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 06:45:24 GMT
Server: Apache/2.4.38 (Debian)
Last-Modified: Mon, 02 Dec 2019 10:34:59 GMT
ETag: "29cd-598b621aca499"
Accept-Ranges: bytes
Content-Length: 10701
Vary: Accept-Encoding
Connection: close
Content-Type: text/html

Page title: Apache2 Debian Default Page: It works


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
    <title>Apache2 Debian Default Page: It works</title>
    <style type="text/css" media="screen">
  * {
    margin: 0px 0px 0px 0px;
    padding: 0px 0px 0px 0px;
  }

  body, html {
    padding: 3px 3px 3px 3px;

    background-color: #D8DBE2;

    font-family: Verdana, sans-serif;
    font-size: 11pt;
    text-align: center;
  }

  div.main_page {
    position: relative;
    display: table;

    width: 800px;

    margin-bottom: 3px;
    margin-left: auto;
    margin-right: auto;
    padding: 0px 0px 0px 0px;

    border-width: 2px;
    border-color: #212738;
    border-style: solid;

    background-color: #FFFFFF;

    text-align: center;
  }

  div.page_header {
    height: 99px;
    width: 100%;

    background-color: #F5F6F7;
  }

  div.page_header span {
    margin: 15px 0px 0px 50px;

    font-size: 180%;
    font-weight: bold;
  }

  div.page_header img {
    margin: 3px 0px 0px 40px;

    border: 0px 0px 0px;
  }

  div.table_of_contents {
    clear: left;

    min-width: 200px;

    margin: 3px 3px 3px 3px;

    background-color: #FFFFFF;

    text-align: left;
  }

  div.table_of_contents_item {
    clear: left;

    width: 100%;

    margin: 4px 0px 0px 0px;

    background-color: #FFFFFF;

    color: #000000;
    text-align: left;
  }

  div.table_of_contents_item a {
    margin: 6px 0px 0px 6px;
  }

  div.content_section {
    margin: 3px 3px 3px 3px;

    background-color: #FFFFFF;

    text-align: left;
  }

  div.content_section_text {
    padding: 4px 8px 4px 8px;

    color: #000000;
    font-size: 100%;
  }

  div.content_section_text pre {
    margin: 8px 0px 8px 0px;
    padding: 8px 8px 8px 8px;

    border-width: 1px;
    border-style: dotted;
    border-color: #000000;

    background-color: #F5F6F7;

    font-style: italic;
  }

  div.content_section_text p {
    margin-bottom: 6px;
  }

  div.content_section_text ul, div.content_section_text li {
    padding: 4px 8px 4px 16px;
  }

  div.section_header {
    padding: 3px 6px 3px 6px;

    background-color: #8E9CB2;

    color: #FFFFFF;
    font-weight: bold;
    font-size: 112%;
    text-align: center;
  }

  div.section_header_red {
    background-color: #CD214F;
  }

  div.section_header_grey {
    background-color: #9F9386;
  }

  .floating_element {
    position: relative;
    float: left;
  }

  div.table_of_contents_item a,
  div.content_section_text a {
    text-decoration: none;
    font-weight: bold;
  }

  div.table_of_contents_item a:link,
  div.table_of_contents_item a:visited,
  div.table_of_contents_item a:active {
    color: #000000;
  }

  div.table_of_contents_item a:hover {
    background-color: #000000;

    color: #FFFFFF;
  }

  div.content_section_text a:link,
  div.content_section_text a:visited,
   div.content_section_text a:active {
    background-color: #DCDFE6;

    color: #000000;
  }

  div.content_section_text a:hover {
    background-color: #000000;

    color: #DCDFE6;
  }

  div.validator {
  }
    </style>
  </head>
  <body>
    <div class="main_page">
      <div class="page_header floating_element">
        <img src="/icons/openlogo-75.png" alt="Debian Logo" class="floating_element"/>
        <span class="floating_element">
          Apache2 Debian Default Page
        </span>
      </div>
<!--      <div class="table_of_contents floating_element">
        <div class="section_header section_header_grey">
          TABLE OF CONTENTS
        </div>
        <div class="table_of_contents_item floating_element">
          <a href="#about">About</a>
        </div>
        <div class="table_of_contents_item floating_element">
          <a href="#changes">Changes</a>
        </div>
        <div class="table_of_contents_item floating_element">
          <a href="#scope">Scope</a>
        </div>
        <div class="table_of_contents_item floating_element">
          <a hr

Found 2024-04-24 by HttpPlugin

Create report

Open service 51.91.255.41:443

2024-04-24 04:45

HTTP/1.1 404 Not Found
Date: Wed, 24 Apr 2024 04:45:04 GMT
Server: Apache/2.4.38 (Debian)
Cache-Control: no-cache, private
Link: <https://51.91.255.41/api/docs.jsonld>; rel="http://www.w3.org/ns/hydra/core#apiDocumentation"
X-Debug-Token: 624585
X-Debug-Token-Link: https://51.91.255.41/_profiler/624585
X-Robots-Tag: noindex
Connection: close
Transfer-Encoding: chunked
Content-Type: application/json

Found 2024-04-24 by HttpPlugin

Create report

Open service 51.91.255.41:22

2024-04-23 07:29
Found 2024-04-23 by SSHOpenPlugin
Create report

Open service 51.91.255.41:443 · api.dev.paplar-auto.fr

2024-04-18 22:54

HTTP/1.1 404 Not Found
Date: Thu, 18 Apr 2024 22:55:12 GMT
Server: Apache/2.4.38 (Debian)
Cache-Control: no-cache, private
Link: <https://api.dev.paplar-auto.fr/api/docs.jsonld>; rel="http://www.w3.org/ns/hydra/core#apiDocumentation"
X-Debug-Token: 66febd
X-Debug-Token-Link: https://api.dev.paplar-auto.fr/_profiler/66febd
X-Robots-Tag: noindex
Connection: close
Transfer-Encoding: chunked
Content-Type: application/json

Found 2024-04-18 by HttpPlugin

Create report

Open service 51.91.255.41:443

2024-04-18 18:38

HTTP/1.1 404 Not Found
Date: Thu, 18 Apr 2024 18:38:46 GMT
Server: Apache/2.4.38 (Debian)
Cache-Control: no-cache, private
Link: <https://51.91.255.41/api/docs.jsonld>; rel="http://www.w3.org/ns/hydra/core#apiDocumentation"
X-Debug-Token: 8b7d53
X-Debug-Token-Link: https://51.91.255.41/_profiler/8b7d53
X-Robots-Tag: noindex
Connection: close
Transfer-Encoding: chunked
Content-Type: application/json

Found 2024-04-18 by HttpPlugin