LeakIX - Host autogrill.api-ch.strooka.com

Domain autogrill.api-ch.strooka.com

Finland

Hetzner Online GmbH

Software information

nginx nginx

tcp/443

VSCode SFTP configuration exposed

The following URL is publicly accessible and is leaking deployment credentials

IP: 95.217.178.219
Domain: autogrill.api-ch.strooka.com
Port: 443
URL: https://autogrill.api-ch.strooka.com/.vscode/sftp.json

First seen 2024-05-21 08:56
Last seen 2024-12-22 04:54
Open for 214 days
- Fingerprint: 13b3a7b17cfc7502c36c325d2c9bda3f2368cd555a5beef59f1bc1cda72d7264
```
{
    "name": "My Server",
    "host": "173.212.217.103",
    "protocol": "ftp",
    "port": 21,
    "username": "cloudgroup_api",
    "password": "dEyl38_3",
    "remotePath": "/",
    "uploadOnSave": true
}
```
  Found on 2024-12-22 04:54
  
  209 Bytes
Create report

Open service 95.217.178.219:443 · autogrill.api-ch.strooka.com

2024-12-22 04:54

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 22 Dec 2024 04:54:50 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/7.4.33
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Token
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'none'
X-XSS-Protection: 1; mode=block; report=/report/xss/
X-Frame-Options: deny
Expires: Sun, 01 Jan 2014 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Powered-By: PleskLin


{
    "success": 0,
    "errormessage": "Credenziali API errate (2)!",
    "errorcode": 401
}

Found 6 hours ago by HttpPlugin

Create report

Open service 95.217.178.219:443 · autogrill.api-ch.strooka.com

2024-12-20 01:33

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 20 Dec 2024 01:33:16 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/7.4.33
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Token
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'none'
X-XSS-Protection: 1; mode=block; report=/report/xss/
X-Frame-Options: deny
Expires: Sun, 01 Jan 2014 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Powered-By: PleskLin


{
    "success": 0,
    "errormessage": "Credenziali API errate (2)!",
    "errorcode": 401
}

Found 2 days ago by HttpPlugin

Create report

Open service 95.217.178.219:443 · autogrill.api-ch.strooka.com

2024-12-18 11:04

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 18 Dec 2024 11:04:31 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/7.4.33
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Token
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'none'
X-XSS-Protection: 1; mode=block; report=/report/xss/
X-Frame-Options: deny
Expires: Sun, 01 Jan 2014 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Powered-By: PleskLin


{
    "success": 0,
    "errormessage": "Credenziali API errate (2)!",
    "errorcode": 401
}

Found 2024-12-18 by HttpPlugin

Create report

Open service 95.217.178.219:443 · autogrill.api-ch.strooka.com

2024-12-16 05:26

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 16 Dec 2024 05:26:38 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/7.4.33
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Token
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'none'
X-XSS-Protection: 1; mode=block; report=/report/xss/
X-Frame-Options: deny
Expires: Sun, 01 Jan 2014 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Powered-By: PleskLin


{
    "success": 0,
    "errormessage": "Credenziali API errate (2)!",
    "errorcode": 401
}

Found 2024-12-16 by HttpPlugin

Create report

Open service 95.217.178.219:443 · autogrill.api-ch.strooka.com

2024-12-14 15:12

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 14 Dec 2024 15:12:23 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/7.4.33
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Token
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'none'
X-XSS-Protection: 1; mode=block; report=/report/xss/
X-Frame-Options: deny
Expires: Sun, 01 Jan 2014 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Powered-By: PleskLin


{
    "success": 0,
    "errormessage": "Credenziali API errate (2)!",
    "errorcode": 401
}

Found 2024-12-14 by HttpPlugin

Create report

Open service 95.217.178.219:443 · autogrill.api-ch.strooka.com

2024-12-12 16:17

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 12 Dec 2024 16:17:47 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/7.4.33
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Token
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'none'
X-XSS-Protection: 1; mode=block; report=/report/xss/
X-Frame-Options: deny
Expires: Sun, 01 Jan 2014 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Powered-By: PleskLin


{
    "success": 0,
    "errormessage": "Credenziali API errate (2)!",
    "errorcode": 401
}

Found 2024-12-12 by HttpPlugin

Create report

Open service 95.217.178.219:443 · autogrill.api-ch.strooka.com

2024-12-02 21:35

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 02 Dec 2024 21:35:30 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/7.4.33
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Token
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'none'
X-XSS-Protection: 1; mode=block; report=/report/xss/
X-Frame-Options: deny
Expires: Sun, 01 Jan 2014 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Powered-By: PleskLin


{
    "success": 0,
    "errormessage": "Credenziali API errate (2)!",
    "errorcode": 401
}

Found 2024-12-02 by HttpPlugin

Create report

Open service 95.217.178.219:443 · autogrill.api-ch.strooka.com

2024-11-30 15:32

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 30 Nov 2024 15:32:13 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/7.4.33
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Token
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'none'
X-XSS-Protection: 1; mode=block; report=/report/xss/
X-Frame-Options: deny
Expires: Sun, 01 Jan 2014 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Powered-By: PleskLin


{
    "success": 0,
    "errormessage": "Credenziali API errate (2)!",
    "errorcode": 401
}

Found 2024-11-30 by HttpPlugin

Create report

Open service 95.217.178.219:443 · autogrill.api-ch.strooka.com

2024-11-28 17:47

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 28 Nov 2024 17:47:55 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/7.4.33
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Token
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'none'
X-XSS-Protection: 1; mode=block; report=/report/xss/
X-Frame-Options: deny
Expires: Sun, 01 Jan 2014 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Powered-By: PleskLin


{
    "success": 0,
    "errormessage": "Credenziali API errate (2)!",
    "errorcode": 401
}

Found 2024-11-28 by HttpPlugin

Create report

Open service 95.217.178.219:443 · autogrill.api-ch.strooka.com

2024-11-21 00:48

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 21 Nov 2024 00:49:01 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/7.4.33
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Token
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'none'
X-XSS-Protection: 1; mode=block; report=/report/xss/
X-Frame-Options: deny
Expires: Sun, 01 Jan 2014 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Powered-By: PleskLin


{
    "success": 0,
    "errormessage": "Credenziali API errate (2)!",
    "errorcode": 401
}

Found 2024-11-21 by HttpPlugin

Create report

autogrill.api-ch.strooka.com

Fingerprint:

161dfc2362d152e771e612c7fd92f79262fa98cfeef5a7562f2aae3d059e0bc5

CN:

autogrill.api-ch.strooka.com

Key:

RSA-2048

Issuer:

R10

Not before:

2024-11-17 07:56

Not after:

2025-02-15 07:56

Domain summary

autogrill.api-ch.strooka.com 10

1 recorded

IP summary

95.217.178.219 2

1 recorded

Domain autogrill.api-ch.strooka.com

Finland

Software information

VSCode SFTP configuration exposed

autogrill.api-ch.strooka.com

Domain summary

IP summary