LeakIX - Host 195.201.128.86

Host 195.201.128.86

Germany

Hetzner Online GmbH

Ubuntu

Software information

nginx nginx 1.24.0

tcp/443 tcp/80

SSH is potenitally vulnerable

WARNING: This plugin will generate false positive and is purely informative:

regreSSHion: RCE in OpenSSH's server, on glibc-based Linux systems (CVE-2024-6387)

IP: 195.201.128.86
Port: 22

First seen 2025-12-11 05:03
Last seen 2026-02-08 17:52
Open for 59 days
- Severity: info
  Fingerprint: 3f43e0ebb5dce37ab8b59eb581e37d9f0be3b35a0be3b35a0be3b35a0be3b35a
```
Found potentially vulnerable SSH version:
SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.14
WARNING, RISK IS ESTIMATED FALSE POSITIVE ARE LIKELY
```
  Found on 2026-02-08 17:52
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 195.201.128.86
Domain: blog.boringskool.com
Port: 443
URL: https://blog.boringskool.com

First seen 2025-11-13 02:54
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652248763d44
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/SidWorks/blog.boringskool.com.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
	vscode-merge-base = origin/main
```
  Found on 2025-11-13 02:54
  
  306 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 195.201.128.86
Domain: labs.boringskool.com
Port: 443
URL: https://labs.boringskool.com

First seen 2025-11-13 02:54
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522af78b950
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/SidWorks/labs.boringskool.com.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
	vscode-merge-base = origin/main
```
  Found on 2025-11-13 02:54
  
  306 Bytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 195.201.128.86
Domain: boringskool.com
Port: 443
URL: https://boringskool.com

First seen 2025-11-13 02:29
- Severity: low
  Fingerprint: 5f32cf5d6962f09c11d3744d11d3744d9930cc4639ff91e0fed0874d39284ef5
```
Found 12 files trough .DS_Store spidering:

/.git
/.github
/.vscode
/composer.json
/composer.lock
/config
/index.php
/logs
/setup.php
/storage
/vendor
/workers
```
  Found on 2025-11-13 02:29
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 195.201.128.86
Domain: boringskool.com
Port: 443
URL: https://boringskool.com

First seen 2025-11-13 02:29
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522a8bf8066
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/SidWorks/boringskool.com.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
	vscode-merge-base = origin/main
```
  Found on 2025-11-13 02:29
  
  301 Bytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 195.201.128.86
Domain: www.boringskool.com
Port: 443
URL: https://www.boringskool.com

First seen 2025-11-13 02:29
- Severity: low
  Fingerprint: 5f32cf5d6962f09c11d3744d11d3744d9930cc4639ff91e0fed0874d39284ef5
```
Found 12 files trough .DS_Store spidering:

/.git
/.github
/.vscode
/composer.json
/composer.lock
/config
/index.php
/logs
/setup.php
/storage
/vendor
/workers
```
  Found on 2025-11-13 02:29
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 195.201.128.86
Domain: www.boringskool.com
Port: 443
URL: https://www.boringskool.com

First seen 2025-11-13 02:29
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522a8bf8066
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/SidWorks/boringskool.com.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
	vscode-merge-base = origin/main
```
  Found on 2025-11-13 02:29
  
  301 Bytes
Create report

Open service 195.201.128.86:80 · www.boringqueue.com

2026-01-24 09:42

HTTP/1.1 301 Moved Permanently
Server: nginx/1.24.0 (Ubuntu)
Date: Sat, 24 Jan 2026 09:42:34 GMT
Content-Type: text/html
Content-Length: 178
Connection: close
Location: https://boringqueue.com/

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>nginx/1.24.0 (Ubuntu)</center>
</body>
</html>

Found 2026-01-24 by HttpPlugin

Create report

Open service 195.201.128.86:443 · www.boringqueue.com

2026-01-24 09:42

HTTP/1.1 200 OK
Server: nginx/1.24.0 (Ubuntu)
Date: Sat, 24 Jan 2026 09:42:34 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN

Page title: a place for lazy yet ambitious ones - boringskool 

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    
    <!-- Primary Meta Tags -->
    <title>a place for lazy yet ambitious ones - boringskool </title>
    <meta name="title" content="a place for lazy yet ambitious ones - boringskool">
    <meta name="description" content="a place for lazy yet ambitious ones - boringskool - boringskool, matters, education, thinking, valuable">
    <meta name="keywords" content="boringskool, matters, education, thinking, valuable, machines, between, like, educational, through, welcome, more, than, ever, each">
    <meta name="author" content="a place for lazy yet ambitious ones">
    <meta name="robots" content="index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1">
    <link rel="canonical" href="https://blog.boringskool.com/">
    
    <!-- Open Graph / Facebook -->
    <meta property="og:type" content="website">
    <meta property="og:url" content="https://blog.boringskool.com/">
    <meta property="og:title" content="a place for lazy yet ambitious ones - boringskool">
    <meta property="og:description" content="a place for lazy yet ambitious ones - boringskool - boringskool, matters, education, thinking, valuable">
    <meta property="og:site_name" content="a place for lazy yet ambitious ones">
        <meta property="og:image" content="https://images.pexels.com/photos/10064346/pexels-photo-10064346.jpeg">
        
    <!-- Twitter -->
    <meta property="twitter:card" content="summary_large_image">
    <meta property="twitter:url" content="https://blog.boringskool.com/">
    <meta property="twitter:title" content="a place for lazy yet ambitious ones - Latest Articles">
    <meta property="twitter:description" content="a place for lazy yet ambitious ones - boringskool - boringskool, matters, education, thinking, valuable">
        <meta property="twitter:image" content="https://images.pexels.com/photos/10064346/pexels-photo-10064346.jpeg">
        
    <!-- Structured Data -->
    <script type="application/ld+json">{
    "@context": "https://schema.org",
    "@type": "WebSite",
    "name": "a place for lazy yet ambitious ones",
    "url": "https://blog.boringskool.com/",
    "potentialAction": {
        "@type": "SearchAction",
        "target": "https://blog.boringskool.com/search?q={search_term_string}",
        "query-input": "required name=search_term_string"
    }
}</script>
    <script type="application/ld+json">{
    "@context": "https://schema.org",
    "@type": "Blog",
    "headline": "a place for lazy yet ambitious ones",
    "description": "a place for lazy yet ambitious ones - boringskool - boringskool, matters, education, thinking, valuable",
    "url": "https://blog.boringskool.com/",
    "blogPost": [
        {
            "@type": "BlogPosting",
            "headline": "Welcome to BoringSkool",
            "datePublished": "2025-11-13T01:44:09+00:00",
            "dateModified": "2025-11-13T01:44:09+00:00",
            "url": "https://blog.boringskool.com/welcome-to-boringskool",
            "description": "The Era of Artificial Intelligence has Begun\u2014Knowing the Fundamentals Matters Now More Than Ever",
            "author": {
                "@type": "Person",
                "name": "a place for lazy yet ambitious ones"
            },
            "publisher": {
                "@type": "Organization",
                "name": "a place for lazy yet ambitious ones"
            },
            "image": "https://images.pexels.com/photos/10064346/pexels-photo-10064346.jpeg"
        }
    ]
}</script>
    <script type="application/ld+json">{
    "@context": "https://schema.org",
    "@type": "Organization",
    "name": "a place for lazy yet ambitious ones",
    "url": "https://blog.boringskool.com/",
    "logo": "https://blog.boringskool.com/logo.png"
}</script>
    
    <!-- Preconnect to required resources -->
    <link rel="preconnect" href="https://fonts.googleapis.com">
    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>

Found 2026-01-24 by HttpPlugin

Create report

Open service 195.201.128.86:22

2026-01-22 15:46
Found 2026-01-22 by SSHOpenPlugin
Create report

Open service 195.201.128.86:443 · boringskool.com

2026-01-08 22:15

HTTP/1.1 200 OK
Server: nginx/1.24.0 (Ubuntu)
Date: Thu, 08 Jan 2026 22:15:28 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Set-Cookie: PHPSESSID=28a1c4bf253d6a483b2b9a35b58229f9; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache

Found 2026-01-08 by HttpPlugin

Create report

Open service 195.201.128.86:443 · blog.boringskool.com

2026-01-08 22:15

HTTP/1.1 200 OK
Server: nginx/1.24.0 (Ubuntu)
Date: Thu, 08 Jan 2026 22:15:27 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN

Page title: a place for lazy yet ambitious ones - boringskool 

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    
    <!-- Primary Meta Tags -->
    <title>a place for lazy yet ambitious ones - boringskool </title>
    <meta name="title" content="a place for lazy yet ambitious ones - boringskool">
    <meta name="description" content="a place for lazy yet ambitious ones - boringskool - boringskool, matters, education, thinking, valuable">
    <meta name="keywords" content="boringskool, matters, education, thinking, valuable, machines, between, like, educational, through, welcome, more, than, ever, each">
    <meta name="author" content="a place for lazy yet ambitious ones">
    <meta name="robots" content="index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1">
    <link rel="canonical" href="https://blog.boringskool.com/">
    
    <!-- Open Graph / Facebook -->
    <meta property="og:type" content="website">
    <meta property="og:url" content="https://blog.boringskool.com/">
    <meta property="og:title" content="a place for lazy yet ambitious ones - boringskool">
    <meta property="og:description" content="a place for lazy yet ambitious ones - boringskool - boringskool, matters, education, thinking, valuable">
    <meta property="og:site_name" content="a place for lazy yet ambitious ones">
        <meta property="og:image" content="https://images.pexels.com/photos/10064346/pexels-photo-10064346.jpeg">
        
    <!-- Twitter -->
    <meta property="twitter:card" content="summary_large_image">
    <meta property="twitter:url" content="https://blog.boringskool.com/">
    <meta property="twitter:title" content="a place for lazy yet ambitious ones - Latest Articles">
    <meta property="twitter:description" content="a place for lazy yet ambitious ones - boringskool - boringskool, matters, education, thinking, valuable">
        <meta property="twitter:image" content="https://images.pexels.com/photos/10064346/pexels-photo-10064346.jpeg">
        
    <!-- Structured Data -->
    <script type="application/ld+json">{
    "@context": "https://schema.org",
    "@type": "WebSite",
    "name": "a place for lazy yet ambitious ones",
    "url": "https://blog.boringskool.com/",
    "potentialAction": {
        "@type": "SearchAction",
        "target": "https://blog.boringskool.com/search?q={search_term_string}",
        "query-input": "required name=search_term_string"
    }
}</script>
    <script type="application/ld+json">{
    "@context": "https://schema.org",
    "@type": "Blog",
    "headline": "a place for lazy yet ambitious ones",
    "description": "a place for lazy yet ambitious ones - boringskool - boringskool, matters, education, thinking, valuable",
    "url": "https://blog.boringskool.com/",
    "blogPost": [
        {
            "@type": "BlogPosting",
            "headline": "Welcome to BoringSkool",
            "datePublished": "2025-11-13T01:44:09+00:00",
            "dateModified": "2025-11-13T01:44:09+00:00",
            "url": "https://blog.boringskool.com/welcome-to-boringskool",
            "description": "The Era of Artificial Intelligence has Begun\u2014Knowing the Fundamentals Matters Now More Than Ever",
            "author": {
                "@type": "Person",
                "name": "a place for lazy yet ambitious ones"
            },
            "publisher": {
                "@type": "Organization",
                "name": "a place for lazy yet ambitious ones"
            },
            "image": "https://images.pexels.com/photos/10064346/pexels-photo-10064346.jpeg"
        }
    ]
}</script>
    <script type="application/ld+json">{
    "@context": "https://schema.org",
    "@type": "Organization",
    "name": "a place for lazy yet ambitious ones",
    "url": "https://blog.boringskool.com/",
    "logo": "https://blog.boringskool.com/logo.png"
}</script>
    
    <!-- Preconnect to required resources -->
    <link rel="preconnect" href="https://fonts.googleapis.com">
    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>

Found 2026-01-08 by HttpPlugin

Create report

Open service 195.201.128.86:443 · labs.boringskool.com

2026-01-08 22:15

HTTP/1.1 200 OK
Server: nginx/1.24.0 (Ubuntu)
Date: Thu, 08 Jan 2026 22:15:27 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN

Found 2026-01-08 by HttpPlugin

Create report

Open service 195.201.128.86:443 · www.boringskool.com

2026-01-08 21:47

HTTP/1.1 301 Moved Permanently
Server: nginx/1.24.0 (Ubuntu)
Date: Thu, 08 Jan 2026 21:47:36 GMT
Content-Type: text/html
Content-Length: 178
Connection: close
Location: https://boringskool.com/

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>nginx/1.24.0 (Ubuntu)</center>
</body>
</html>

Found 2026-01-08 by HttpPlugin

Create report

Open service 195.201.128.86:443 · boringskool.com

2026-01-08 21:15

HTTP/1.1 200 OK
Server: nginx/1.24.0 (Ubuntu)
Date: Thu, 08 Jan 2026 21:15:36 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Set-Cookie: PHPSESSID=a6838cad63c2264a1259693190a32451; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache

Found 2026-01-08 by HttpPlugin

Create report

Open service 195.201.128.86:443 · www.boringskool.com

2026-01-08 18:53

HTTP/1.1 301 Moved Permanently
Server: nginx/1.24.0 (Ubuntu)
Date: Thu, 08 Jan 2026 18:53:53 GMT
Content-Type: text/html
Content-Length: 178
Connection: close
Location: https://boringskool.com/

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>nginx/1.24.0 (Ubuntu)</center>
</body>
</html>

Found 2026-01-08 by HttpPlugin

Create report

Open service 195.201.128.86:22

2026-01-08 15:53
Found 2026-01-08 by SSHOpenPlugin
Create report

Open service 195.201.128.86:443 · boringskool.com

2026-01-01 22:21

HTTP/1.1 200 OK
Server: nginx/1.24.0 (Ubuntu)
Date: Thu, 01 Jan 2026 22:21:23 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Set-Cookie: PHPSESSID=d45ea76de2a968a6a07eec63d39bb9b1; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache