LeakIX - Host learning.hydronova.tech

Domain learning.hydronova.tech

Finland

Hetzner Online GmbH

Software information

nginx nginx 1.25.3

tcp/443

Moodle is vulnerable
The following Moodle application is publicly accessible and looks out-dated :

It is highly recommended to update to a safe version as soon as possible since multiple CVEs allow remote attackers to craft XSS attacks leading to code execution on the server.

If the application was already patched, reloading the web server to clear the PHP opcache will fix issue.

Reference:

https://www.cvedetails.com/cve/CVE-2023-30943
IP: 65.108.11.99
Domain: learning.hydronova.tech
Port: 443
URL: https://learning.hydronova.tech

First seen 2023-10-06 14:41
Last seen 2024-12-22 05:01
Open for 442 days
- Severity: high
  Fingerprint: 0b591a20d83e9bbda3370ce58008084480080844800808448008084480080844
```
Found vulnerable Moodle application:
Affected by CVE-2023-30943
```
  Found on 2024-12-22 05:01
Create report

Open service 65.108.11.99:443 · learning.hydronova.tech

2024-12-22 05:01

HTTP/1.1 200 OK
Server: nginx/1.25.3
Date: Sun, 22 Dec 2024 05:01:47 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Set-Cookie: MoodleSession=jljmk9vp89ff505utas14kfjfu; path=/; secure
Expires: Mon, 20 Aug 1969 09:23:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Language: en
Content-Script-Type: text/javascript
Content-Style-Type: text/css
X-UA-Compatible: IE=edge
Cache-Control: post-check=0, pre-check=0, no-transform
Last-Modified: Sun, 22 Dec 2024 05:01:47 GMT
Accept-Ranges: none
X-Frame-Options: sameorigin
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000

Found 5 hours ago by HttpPlugin

Create report

Open service 65.108.11.99:443 · learning.hydronova.tech

2024-12-20 01:29

HTTP/1.1 200 OK
Server: nginx/1.25.3
Date: Fri, 20 Dec 2024 01:29:50 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Set-Cookie: MoodleSession=7pgechm9b26hgniu4l28e1i068; path=/; secure
Expires: Mon, 20 Aug 1969 09:23:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Language: en
Content-Script-Type: text/javascript
Content-Style-Type: text/css
X-UA-Compatible: IE=edge
Cache-Control: post-check=0, pre-check=0, no-transform
Last-Modified: Fri, 20 Dec 2024 01:29:50 GMT
Accept-Ranges: none
X-Frame-Options: sameorigin
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000

Found 2 days ago by HttpPlugin

Create report

Open service 65.108.11.99:443 · learning.hydronova.tech

2024-12-18 11:39

HTTP/1.1 200 OK
Server: nginx/1.25.3
Date: Wed, 18 Dec 2024 11:39:57 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Set-Cookie: MoodleSession=nm8l47pahb6ah47o98jmu4qtmg; path=/; secure
Expires: Mon, 20 Aug 1969 09:23:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Language: en
Content-Script-Type: text/javascript
Content-Style-Type: text/css
X-UA-Compatible: IE=edge
Cache-Control: post-check=0, pre-check=0, no-transform
Last-Modified: Wed, 18 Dec 2024 11:39:57 GMT
Accept-Ranges: none
X-Frame-Options: sameorigin
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000

Found 2024-12-18 by HttpPlugin

Create report

Open service 65.108.11.99:443 · learning.hydronova.tech

2024-12-16 04:24

HTTP/1.1 200 OK
Server: nginx/1.25.3
Date: Mon, 16 Dec 2024 04:24:33 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Set-Cookie: MoodleSession=k5tu97i24m54vv00mlfrss7lje; path=/; secure
Expires: Mon, 20 Aug 1969 09:23:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Language: en
Content-Script-Type: text/javascript
Content-Style-Type: text/css
X-UA-Compatible: IE=edge
Cache-Control: post-check=0, pre-check=0, no-transform
Last-Modified: Mon, 16 Dec 2024 04:24:33 GMT
Accept-Ranges: none
X-Frame-Options: sameorigin
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000

Found 2024-12-16 by HttpPlugin

Create report

Open service 65.108.11.99:443 · learning.hydronova.tech

2024-12-14 03:28

HTTP/1.1 200 OK
Server: nginx/1.25.3
Date: Sat, 14 Dec 2024 03:28:47 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Set-Cookie: MoodleSession=3aqe7009aonc4pgv5grhfib7bo; path=/; secure
Expires: Mon, 20 Aug 1969 09:23:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Language: en
Content-Script-Type: text/javascript
Content-Style-Type: text/css
X-UA-Compatible: IE=edge
Cache-Control: post-check=0, pre-check=0, no-transform
Last-Modified: Sat, 14 Dec 2024 03:28:47 GMT
Accept-Ranges: none
X-Frame-Options: sameorigin
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000

Found 2024-12-14 by HttpPlugin

Create report

Open service 65.108.11.99:443 · learning.hydronova.tech

2024-12-12 06:10

HTTP/1.1 200 OK
Server: nginx/1.25.3
Date: Thu, 12 Dec 2024 06:10:24 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Set-Cookie: MoodleSession=1bm238iug1end4h0k9beir3d9m; path=/; secure
Expires: Mon, 20 Aug 1969 09:23:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Language: en
Content-Script-Type: text/javascript
Content-Style-Type: text/css
X-UA-Compatible: IE=edge
Cache-Control: post-check=0, pre-check=0, no-transform
Last-Modified: Thu, 12 Dec 2024 06:10:24 GMT
Accept-Ranges: none
X-Frame-Options: sameorigin
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000

Found 2024-12-12 by HttpPlugin

Create report

Open service 65.108.11.99:443 · learning.hydronova.tech

2024-12-02 09:02

HTTP/1.1 200 OK
Server: nginx/1.25.3
Date: Mon, 02 Dec 2024 09:02:06 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Set-Cookie: MoodleSession=tsuoccvug23p2vdubupcobvhqp; path=/; secure
Expires: Mon, 20 Aug 1969 09:23:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Language: en
Content-Script-Type: text/javascript
Content-Style-Type: text/css
X-UA-Compatible: IE=edge
Cache-Control: post-check=0, pre-check=0, no-transform
Last-Modified: Mon, 02 Dec 2024 09:02:06 GMT
Accept-Ranges: none
X-Frame-Options: sameorigin
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000

Found 2024-12-02 by HttpPlugin

Create report

Open service 65.108.11.99:443 · learning.hydronova.tech

2024-11-30 05:41

HTTP/1.1 200 OK
Server: nginx/1.25.3
Date: Sat, 30 Nov 2024 05:41:04 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Set-Cookie: MoodleSession=fjpiip5bk8p4lslha8on4mt0uh; path=/; secure
Expires: Mon, 20 Aug 1969 09:23:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Language: en
Content-Script-Type: text/javascript
Content-Style-Type: text/css
X-UA-Compatible: IE=edge
Cache-Control: post-check=0, pre-check=0, no-transform
Last-Modified: Sat, 30 Nov 2024 05:41:04 GMT
Accept-Ranges: none
X-Frame-Options: sameorigin
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000

Found 2024-11-30 by HttpPlugin

Create report

Open service 65.108.11.99:443 · learning.hydronova.tech

2024-11-28 20:42

HTTP/1.1 200 OK
Server: nginx/1.25.3
Date: Thu, 28 Nov 2024 20:42:38 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Set-Cookie: MoodleSession=vljuh6tq5o7u6gv880r3il432v; path=/; secure
Expires: Mon, 20 Aug 1969 09:23:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Language: en
Content-Script-Type: text/javascript
Content-Style-Type: text/css
X-UA-Compatible: IE=edge
Cache-Control: post-check=0, pre-check=0, no-transform
Last-Modified: Thu, 28 Nov 2024 20:42:38 GMT
Accept-Ranges: none
X-Frame-Options: sameorigin
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000

Found 2024-11-28 by HttpPlugin

Create report

Open service 65.108.11.99:443 · learning.hydronova.tech

2024-11-26 17:54

HTTP/1.1 200 OK
Server: nginx/1.25.3
Date: Tue, 26 Nov 2024 17:55:01 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Set-Cookie: MoodleSession=pjsgjn80gadrdr3jj0npqdbelf; path=/; secure
Expires: Mon, 20 Aug 1969 09:23:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Language: en
Content-Script-Type: text/javascript
Content-Style-Type: text/css
X-UA-Compatible: IE=edge
Cache-Control: post-check=0, pre-check=0, no-transform
Last-Modified: Tue, 26 Nov 2024 17:55:01 GMT
Accept-Ranges: none
X-Frame-Options: sameorigin
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000

Found 2024-11-26 by HttpPlugin

Create report

learning.hydronova.tech

Fingerprint:

390de6548794cdd7c9c0ad90873cfceb66394a39abf4a331b80d3529d2402a43

CN:

learning.hydronova.tech

Key:

RSA-4096

Issuer:

R10

Not before:

2024-11-22 14:27

Not after:

2025-02-20 14:27

Domain summary

learning.hydronova.tech 10

1 recorded

IP summary

65.108.11.99 2

1 recorded

Domain learning.hydronova.tech

Finland

Software information

Moodle is vulnerable

learning.hydronova.tech

Domain summary

IP summary