fresh autorecon run

This commit is contained in:
beatzaplenty committed 2026-04-14 17:49:38 +10:00
1 parent c8f17a17e6
commit 3c3a192c79
1252 files changed
+4574573 -1993899

No files matched your search

@@ -1,6 +1,6 @@
HTTP/1.1 301 Moved Permanently
Location: https://gitea.lan.ddnsgeek.com/robots.txt
Date: Sun, 05 Apr 2026 07:38:40 GMT
Date: Tue, 14 Apr 2026 03:25:51 GMT
Content-Length: 17
Moved Permanently
@@ -1,6 +1,6 @@
HTTP/1.1 301 Moved Permanently
Location: https://gitea.lan.ddnsgeek.com/
Date: Sun, 05 Apr 2026 07:38:40 GMT
Date: Tue, 14 Apr 2026 03:25:51 GMT
Content-Length: 17
Moved Permanently
@@ -283,17 +283,17 @@ Configuration {
unique: false,
response_size_limit: 4194304,
}
200 GET 1l 208w 2138c https://gitea.lan.ddnsgeek.com/assets/img/favicon.svg
200 GET 14l 75w 744c https://gitea.lan.ddnsgeek.com/api/swagger
200 GET 273l 951w 11528c https://gitea.lan.ddnsgeek.com/user/sign_up
200 GET 52l 124w 7604c https://gitea.lan.ddnsgeek.com/assets/img/favicon.png
200 GET 31l 384w 22424c https://gitea.lan.ddnsgeek.com/assets/img/logo.png
200 GET 296l 1065w 12594c https://gitea.lan.ddnsgeek.com/user/login
200 GET 273l 951w 11528c https://gitea.lan.ddnsgeek.com/user/sign_up
200 GET 17l 4398w 272528c https://gitea.lan.ddnsgeek.com/assets/js/index.js
200 GET 1l 208w 2138c https://gitea.lan.ddnsgeek.com/assets/img/logo.svg
200 GET 390l 2006w 20937c https://gitea.lan.ddnsgeek.com/explore/repos
200 GET 1l 7174w 322483c https://gitea.lan.ddnsgeek.com/assets/css/index.css
200 GET 390l 2006w 20939c https://gitea.lan.ddnsgeek.com/explore/repos
200 GET 1l 208w 2138c https://gitea.lan.ddnsgeek.com/assets/img/favicon.svg
200 GET 1l 208w 2138c https://gitea.lan.ddnsgeek.com/assets/img/logo.svg
200 GET 27661l 208311w 1417806c https://gitea.lan.ddnsgeek.com/assets/licenses.txt
200 GET 296l 1065w 12594c https://gitea.lan.ddnsgeek.com/user/login
200 GET 1l 686w 21095c https://gitea.lan.ddnsgeek.com/assets/css/theme-gitea-auto.css
200 GET 235l 1262w 13794c https://gitea.lan.ddnsgeek.com/
200 GET 49l 62w 1243c https://gitea.lan.ddnsgeek.com/.well-known/openid-configuration
@@ -303,14 +303,14 @@ Configuration {
301 GET 1l 2w 17c http://gitea.lan.ddnsgeek.com/[ => https://gitea.lan.ddnsgeek.com/[
301 GET 1l 2w 17c http://gitea.lan.ddnsgeek.com/] => https://gitea.lan.ddnsgeek.com/]
301 GET 1l 2w 17c http://gitea.lan.ddnsgeek.com/[.txt => https://gitea.lan.ddnsgeek.com/[.txt
301 GET 1l 2w 17c http://gitea.lan.ddnsgeek.com/[.html => https://gitea.lan.ddnsgeek.com/[.html
301 GET 1l 2w 17c http://gitea.lan.ddnsgeek.com/].txt => https://gitea.lan.ddnsgeek.com/].txt
301 GET 1l 2w 17c http://gitea.lan.ddnsgeek.com/].html => https://gitea.lan.ddnsgeek.com/].html
301 GET 1l 2w 17c http://gitea.lan.ddnsgeek.com/[.html => https://gitea.lan.ddnsgeek.com/[.html
301 GET 1l 2w 17c http://gitea.lan.ddnsgeek.com/[.php => https://gitea.lan.ddnsgeek.com/[.php
301 GET 1l 2w 17c http://gitea.lan.ddnsgeek.com/].php => https://gitea.lan.ddnsgeek.com/].php
301 GET 1l 2w 17c http://gitea.lan.ddnsgeek.com/].html => https://gitea.lan.ddnsgeek.com/].html
301 GET 1l 2w 17c http://gitea.lan.ddnsgeek.com/[.asp => https://gitea.lan.ddnsgeek.com/[.asp
301 GET 1l 2w 17c http://gitea.lan.ddnsgeek.com/].asp => https://gitea.lan.ddnsgeek.com/].asp
301 GET 1l 2w 17c http://gitea.lan.ddnsgeek.com/].php => https://gitea.lan.ddnsgeek.com/].php
301 GET 1l 2w 17c http://gitea.lan.ddnsgeek.com/[.aspx => https://gitea.lan.ddnsgeek.com/[.aspx
301 GET 1l 2w 17c http://gitea.lan.ddnsgeek.com/].asp => https://gitea.lan.ddnsgeek.com/].asp
301 GET 1l 2w 17c http://gitea.lan.ddnsgeek.com/].aspx => https://gitea.lan.ddnsgeek.com/].aspx
301 GET 1l 2w 17c http://gitea.lan.ddnsgeek.com/[.jsp => https://gitea.lan.ddnsgeek.com/[.jsp
301 GET 1l 2w 17c http://gitea.lan.ddnsgeek.com/].jsp => https://gitea.lan.ddnsgeek.com/].jsp
@@ -328,3 +328,7 @@ Configuration {
301 GET 1l 2w 17c http://gitea.lan.ddnsgeek.com/quote].asp => https://gitea.lan.ddnsgeek.com/quote].asp
301 GET 1l 2w 17c http://gitea.lan.ddnsgeek.com/quote].aspx => https://gitea.lan.ddnsgeek.com/quote].aspx
301 GET 1l 2w 17c http://gitea.lan.ddnsgeek.com/quote].jsp => https://gitea.lan.ddnsgeek.com/quote].jsp
404 GET 0l 0w 64c https://gitea.lan.ddnsgeek.com/jiankang
404 GET 0l 0w 64c https://gitea.lan.ddnsgeek.com/write_comment.txt
404 GET 0l 0w 64c https://gitea.lan.ddnsgeek.com/old-index.txt
404 GET 0l 0w 64c https://gitea.lan.ddnsgeek.com/Doit.txt
@@ -1,6 +1,6 @@
HTTP/1.1 301 Moved Permanently
Location: https://gitea.lan.ddnsgeek.com/.well-known/security.txt
Date: Sun, 05 Apr 2026 07:38:40 GMT
Date: Tue, 14 Apr 2026 03:25:51 GMT
Content-Length: 17
Moved Permanently
@@ -1,3 +1,22 @@
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
LANGUAGE = (unset),
LC_ALL = (unset),
LC_CTYPE = (unset),
LC_NUMERIC = "en_AU.UTF-8",
LC_COLLATE = (unset),
LC_TIME = "en_AU.UTF-8",
LC_MESSAGES = (unset),
LC_MONETARY = "en_AU.UTF-8",
LC_ADDRESS = "en_AU.UTF-8",
LC_IDENTIFICATION = "en_AU.UTF-8",
LC_MEASUREMENT = "en_AU.UTF-8",
LC_PAPER = "en_AU.UTF-8",
LC_TELEPHONE = "en_AU.UTF-8",
LC_NAME = "en_AU.UTF-8",
LANG = "en_US.UTF-8"
are supported and installed on your system.
perl: warning: Falling back to a fallback locale ("en_US.UTF-8").
- Nikto v2.6.0
---------------------------------------------------------------------------
+ Your Nikto installation is out of date.
@@ -5,19 +24,19 @@
+ Target Hostname: gitea.lan.ddnsgeek.com
+ Target Port: 80
+ Platform: Unknown
+ Start Time: 2026-04-05 07:39:04 (GMT0)
+ Start Time: 2026-04-14 03:26:00 (GMT0)
---------------------------------------------------------------------------
+ Server: No banner retrieved
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
+ [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
+ [013587] /: Suggested security header missing: strict-transport-security. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
+ [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
+ [013587] /: Suggested security header missing: x-content-type-options. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options
+ [999979] http://100.100.100.200/latest/meta-data/: IP address found in the 'location' header. The IP is "100.100.100.200". See: https://portswigger.net/kb/issues/00600300_private-ip-addresses-disclosed
+ [007342] /: X-Frame-Options header is deprecated and was replaced with the Content-Security-Policy HTTP header with the frame-ancestors directive. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-Frame-Options
+ [007352] /: The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type. See: https://www.netsparker.com/web-vulnerability-scanner/vulnerabilities/missing-content-type-header/
+ 7901 requests: 17 errors and 8 items reported on the remote host
+ End Time: 2026-04-05 08:01:47 (GMT0) (1363 seconds)
+ 7900 requests: 16 errors and 8 items reported on the remote host
+ End Time: 2026-04-14 03:36:29 (GMT0) (629 seconds)
---------------------------------------------------------------------------
+ 1 host(s) tested
@@ -1,48 +1,15 @@
# Nmap 7.98 scan initiated Sun Apr 5 07:38:40 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/gitea.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/gitea.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml gitea.lan.ddnsgeek.com
# Nmap 7.99 scan initiated Tue Apr 14 03:25:51 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/gitea.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/gitea.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml gitea.lan.ddnsgeek.com
Nmap scan report for gitea.lan.ddnsgeek.com (167.179.167.166)
Host is up, received user-set (0.015s latency).
Host is up, received user-set (0.014s latency).
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
Scanned at 2026-04-05 07:38:44 UTC for 721s
Scanned at 2026-04-14 03:25:51 UTC for 244s
Bug in http-security-headers: no string output.
PORT STATE SERVICE REASON VERSION
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|_http-mobileversion-checker: No mobile version detected.
|_http-malware-host: Host appears to be clean
|_http-errors: Couldn't find any error pages.
|_http-feed: Couldn't find any feeds.
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
|_http-dombased-xss: Couldn't find any DOM based XSS.
|_http-comments-displayer: Couldn't find any comments.
|_http-date: Sun, 05 Apr 2026 07:39:21 GMT; -4s from local time.
|_http-fetch: Please enter the complete path of the directory to save data in.
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
| http-vhosts:
|_128 names had status 308
| http-headers:
| Location: https://gitea.lan.ddnsgeek.com/
| Date: Sun, 05 Apr 2026 07:39:39 GMT
| Content-Length: 17
| Connection: close
|
|_ (Request type: GET)
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|_http-referer-checker: Couldn't find any cross-domain scripts.
| http-sitemap-generator:
| Directory structure:
| Longest directory structure:
| Depth: 0
| Dir: /
| Total files found (by extension):
|_
|_http-title: Did not follow redirect to https://gitea.lan.ddnsgeek.com/
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
| http-useragent-tester:
| Status for browser useragent: 200
| Redirected To: https://gitea.lan.ddnsgeek.com/
@@ -64,8 +31,41 @@ PORT STATE SERVICE REASON VERSION
| PECL::HTTP
| Wget/1.13.4 (linux-gnu)
|_ WWW-Mechanize/1.34
|_http-chrono: Request times for /; avg: 1424.74ms; min: 1129.99ms; max: 1705.87ms
|_http-title: Did not follow redirect to https://gitea.lan.ddnsgeek.com/
| http-vhosts:
|_128 names had status 308
|_http-comments-displayer: Couldn't find any comments.
| http-sitemap-generator:
| Directory structure:
| Longest directory structure:
| Depth: 0
| Dir: /
| Total files found (by extension):
|_
|_http-csrf: Couldn't find any CSRF vulnerabilities.
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
|_http-malware-host: Host appears to be clean
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|_http-mobileversion-checker: No mobile version detected.
|_http-fetch: Please enter the complete path of the directory to save data in.
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|_http-feed: Couldn't find any feeds.
|_http-date: Tue, 14 Apr 2026 03:26:18 GMT; -1s from local time.
|_http-dombased-xss: Couldn't find any DOM based XSS.
|_http-chrono: Request times for /; avg: 1035.89ms; min: 625.70ms; max: 1648.40ms
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
| http-headers:
| Location: https://gitea.lan.ddnsgeek.com/
| Date: Tue, 14 Apr 2026 03:26:29 GMT
| Content-Length: 17
| Connection: close
|
|_ (Request type: GET)
|_http-errors: Couldn't find any error pages.
Read data files from: /usr/share/nmap
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 07:50:46 2026 -- 1 IP address (1 host up) scanned in 726.81 seconds
# Nmap done at Tue Apr 14 03:29:56 2026 -- 1 IP address (1 host up) scanned in 244.82 seconds
@@ -16,7 +16,7 @@ Detected Plugins:
HTTP Headers:
HTTP/1.1 301 Moved Permanently
Location: https://gitea.lan.ddnsgeek.com/
Date: Sun, 05 Apr 2026 07:39:56 GMT
Date: Tue, 14 Apr 2026 03:26:27 GMT
Content-Length: 17
Connection: close
@@ -113,9 +113,9 @@ HTTP Headers:
HTTP/1.1 200 OK
Cache-Control: max-age=0, private, must-revalidate, no-transform
Content-Type: text/html; charset=utf-8
Date: Sun, 05 Apr 2026 07:42:59 GMT
Set-Cookie: i_like_gitea=2584fd866dd31868; Path=/; HttpOnly; Secure; SameSite=Lax
Set-Cookie: _csrf=lRVJuxW_zJnvtwOqJdzZiMQ9tDY6MTc3NTM3NDk3OTY1MzcyNDUxMw; Path=/; Max-Age=86400; HttpOnly; Secure; SameSite=Lax
Date: Tue, 14 Apr 2026 03:26:45 GMT
Set-Cookie: i_like_gitea=991d9185d7f13941; Path=/; HttpOnly; Secure; SameSite=Lax
Set-Cookie: _csrf=7ThFqtYl1C5wdrAjCZuOO_CwUdA6MTc3NjEzNzIwNTY0MTU4MTYxMw; Path=/; Max-Age=86400; HttpOnly; Secure; SameSite=Lax
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
@@ -1,67 +1,45 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE nmaprun>
<?xml-stylesheet href="file:///usr/share/nmap/nmap.xsl" type="text/xsl"?>
<!-- Nmap 7.98 scan initiated Sun Apr 5 07:38:40 2026 as: /usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sV -p 80 &quot;-&#45;script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)&quot; -oN /root/results/gitea.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/gitea.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml gitea.lan.ddnsgeek.com -->
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sV -p 80 &quot;-&#45;script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)&quot; -oN /root/results/gitea.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/gitea.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml gitea.lan.ddnsgeek.com" start="1775374720" startstr="Sun Apr 5 07:38:40 2026" version="7.98" xmloutputversion="1.05">
<!-- Nmap 7.99 scan initiated Tue Apr 14 03:25:51 2026 as: /usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sV -p 80 &quot;-&#45;script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)&quot; -oN /root/results/gitea.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/gitea.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml gitea.lan.ddnsgeek.com -->
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sV -p 80 &quot;-&#45;script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)&quot; -oN /root/results/gitea.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/gitea.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml gitea.lan.ddnsgeek.com" start="1776137151" startstr="Tue Apr 14 03:25:51 2026" version="7.99" xmloutputversion="1.05">
<scaninfo type="syn" protocol="tcp" numservices="1" services="80"/>
<verbose level="2"/>
<debugging level="0"/>
<taskbegin task="NSE" time="1775374723"/>
<taskend task="NSE" time="1775374723"/>
<taskbegin task="NSE" time="1775374723"/>
<taskend task="NSE" time="1775374723"/>
<taskbegin task="NSE" time="1775374723"/>
<taskend task="NSE" time="1775374723"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1775374723"/>
<taskend task="Parallel DNS resolution of 1 host." time="1775374724"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1775374724"/>
<taskend task="Parallel DNS resolution of 1 host." time="1775374724"/>
<taskbegin task="SYN Stealth Scan" time="1775374724"/>
<taskend task="SYN Stealth Scan" time="1775374724" extrainfo="1 total ports"/>
<taskbegin task="Service scan" time="1775374727"/>
<taskend task="Service scan" time="1775374736" extrainfo="1 service on 1 host"/>
<taskbegin task="NSE" time="1775374736"/>
<taskprogress task="NSE" time="1775374767" percent="83.06" remaining="7" etc="1775374773"/>
<taskprogress task="NSE" time="1775374797" percent="97.08" remaining="2" etc="1775374799"/>
<taskprogress task="NSE" time="1775374827" percent="99.03" remaining="1" etc="1775374828"/>
<taskprogress task="NSE" time="1775374857" percent="99.03" remaining="2" etc="1775374858"/>
<taskprogress task="NSE" time="1775374887" percent="99.03" remaining="2" etc="1775374888"/>
<taskprogress task="NSE" time="1775374918" percent="99.03" remaining="2" etc="1775374920"/>
<taskprogress task="NSE" time="1775374949" percent="99.35" remaining="2" etc="1775374950"/>
<taskprogress task="NSE" time="1775374979" percent="99.68" remaining="1" etc="1775374980"/>
<taskprogress task="NSE" time="1775375009" percent="99.68" remaining="1" etc="1775375010"/>
<taskprogress task="NSE" time="1775375039" percent="99.68" remaining="1" etc="1775375040"/>
<taskprogress task="NSE" time="1775375069" percent="99.68" remaining="2" etc="1775375070"/>
<taskprogress task="NSE" time="1775375099" percent="99.68" remaining="2" etc="1775375100"/>
<taskprogress task="NSE" time="1775375129" percent="99.68" remaining="2" etc="1775375130"/>
<taskprogress task="NSE" time="1775375159" percent="99.68" remaining="2" etc="1775375160"/>
<taskprogress task="NSE" time="1775375189" percent="99.68" remaining="2" etc="1775375190"/>
<taskprogress task="NSE" time="1775375223" percent="99.68" remaining="2" etc="1775375225"/>
<taskprogress task="NSE" time="1775375319" percent="99.68" remaining="2" etc="1775375321"/>
<taskprogress task="NSE" time="1775375353" percent="99.68" remaining="2" etc="1775375355"/>
<taskprogress task="NSE" time="1775375443" percent="99.68" remaining="3" etc="1775375445"/>
<taskend task="NSE" time="1775375444"/>
<taskbegin task="NSE" time="1775375444"/>
<taskend task="NSE" time="1775375445"/>
<taskbegin task="NSE" time="1775375445"/>
<taskend task="NSE" time="1775375445"/>
<host starttime="1775374724" endtime="1775375445"><status state="up" reason="user-set" reason_ttl="0"/>
<taskbegin task="NSE" time="1776137151"/>
<taskend task="NSE" time="1776137151"/>
<taskbegin task="NSE" time="1776137151"/>
<taskend task="NSE" time="1776137151"/>
<taskbegin task="NSE" time="1776137151"/>
<taskend task="NSE" time="1776137151"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1776137151"/>
<taskend task="Parallel DNS resolution of 1 host." time="1776137151"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1776137151"/>
<taskend task="Parallel DNS resolution of 1 host." time="1776137151"/>
<taskbegin task="SYN Stealth Scan" time="1776137151"/>
<taskend task="SYN Stealth Scan" time="1776137151" extrainfo="1 total ports"/>
<taskbegin task="Service scan" time="1776137152"/>
<taskend task="Service scan" time="1776137161" extrainfo="1 service on 1 host"/>
<taskbegin task="NSE" time="1776137161"/>
<taskprogress task="NSE" time="1776137192" percent="88.93" remaining="4" etc="1776137196"/>
<taskprogress task="NSE" time="1776137222" percent="99.35" remaining="1" etc="1776137222"/>
<taskprogress task="NSE" time="1776137252" percent="99.68" remaining="1" etc="1776137252"/>
<taskprogress task="NSE" time="1776137282" percent="99.68" remaining="1" etc="1776137282"/>
<taskprogress task="NSE" time="1776137312" percent="99.68" remaining="1" etc="1776137312"/>
<taskprogress task="NSE" time="1776137342" percent="99.68" remaining="1" etc="1776137343"/>
<taskprogress task="NSE" time="1776137372" percent="99.68" remaining="1" etc="1776137373"/>
<taskend task="NSE" time="1776137395"/>
<taskbegin task="NSE" time="1776137395"/>
<taskend task="NSE" time="1776137395"/>
<taskbegin task="NSE" time="1776137395"/>
<taskend task="NSE" time="1776137395"/>
<host starttime="1776137151" endtime="1776137395"><status state="up" reason="user-set" reason_ttl="0"/>
<address addr="167.179.167.166" addrtype="ipv4"/>
<hostnames>
<hostname name="gitea.lan.ddnsgeek.com" type="user"/>
<hostname name="167-179-167-166.a7b3a7.bne.nbn.aussiebb.net" type="PTR"/>
</hostnames>
<ports><port protocol="tcp" portid="80"><state state="open" reason="syn-ack" reason_ttl="55"/><service name="http" product="Golang net/http server" extrainfo="Go-IPFS json-rpc or InfluxDB API" method="probed" conf="10"><cpe>cpe:/a:protocol_labs:go-ipfs</cpe></service><script id="http-mobileversion-checker" output="No mobile version detected."/><script id="http-malware-host" output="Host appears to be clean"/><script id="http-errors" output="Couldn&apos;t find any error pages."/><script id="http-feed" output="Couldn&apos;t find any feeds."/><script id="http-litespeed-sourcecode-download" output="Request with null byte did not work. This web server might not be vulnerable"/><script id="http-methods" output="&#xa; Supported Methods: GET HEAD POST OPTIONS"><table key="Supported Methods">
<elem>GET</elem>
<elem>HEAD</elem>
<elem>POST</elem>
<elem>OPTIONS</elem>
</table>
</script><script id="http-dombased-xss" output="Couldn&apos;t find any DOM based XSS."/><script id="http-comments-displayer" output="Couldn&apos;t find any comments."/><script id="http-date" output="Sun, 05 Apr 2026 07:39:21 GMT; -4s from local time."><elem key="date">2026-04-05T07:39:21+00:00</elem>
<elem key="delta">-4.0</elem>
</script><script id="http-fetch" output="Please enter the complete path of the directory to save data in."><elem key="ERROR">Please enter the complete path of the directory to save data in.</elem>
</script><script id="http-wordpress-enum" output="Nothing found amongst the top 100 resources,use -&#45;script-args search-limit=&lt;number|all&gt; for deeper analysis)"/><script id="http-wordpress-users" output="[Error] Wordpress installation was not found. We couldn&apos;t find wp-login.php"/><script id="http-drupal-enum" output="Nothing found amongst the top 100 resources,use -&#45;script-args number=&lt;number|all&gt; for deeper analysis)"/><script id="http-security-headers" output=""></script><script id="http-vhosts" output="&#xa;128 names had status 308"/><script id="http-headers" output="&#xa; Location: https://gitea.lan.ddnsgeek.com/&#xa; Date: Sun, 05 Apr 2026 07:39:39 GMT&#xa; Content-Length: 17&#xa; Connection: close&#xa; &#xa; (Request type: GET)&#xa;"/><script id="http-jsonp-detection" output="Couldn&apos;t find any JSONP endpoints."/><script id="http-devframework" output="Couldn&apos;t determine the underlying framework or CMS. Try increasing &apos;httpspider.maxpagecount&apos; value to spider more pages."/><script id="http-stored-xss" output="Couldn&apos;t find any stored XSS vulnerabilities."/><script id="http-csrf" output="Couldn&apos;t find any CSRF vulnerabilities."/><script id="http-referer-checker" output="Couldn&apos;t find any cross-domain scripts."/><script id="http-sitemap-generator" output="&#xa; Directory structure:&#xa; Longest directory structure:&#xa; Depth: 0&#xa; Dir: /&#xa; Total files found (by extension):&#xa; &#xa;"/><script id="http-title" output="Did not follow redirect to https://gitea.lan.ddnsgeek.com/"><elem key="redirect_url">https://gitea.lan.ddnsgeek.com/</elem>
</script><script id="http-useragent-tester" output="&#xa; Status for browser useragent: 200&#xa; Redirected To: https://gitea.lan.ddnsgeek.com/&#xa; Allowed User Agents: &#xa; Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)&#xa; libwww&#xa; lwp-trivial&#xa; libcurl-agent/1.0&#xa; PHP/&#xa; Python-urllib/2.5&#xa; GT::WWW&#xa; Snoopy&#xa; MFC_Tear_Sample&#xa; HTTP::Lite&#xa; PHPCrawl&#xa; URI::Fetch&#xa; Zend_Http_Client&#xa; http client&#xa; PECL::HTTP&#xa; Wget/1.13.4 (linux-gnu)&#xa; WWW-Mechanize/1.34"><elem key="Status for browser useragent">200</elem>
<ports><port protocol="tcp" portid="80"><state state="open" reason="syn-ack" reason_ttl="55"/><service name="http" product="Golang net/http server" extrainfo="Go-IPFS json-rpc or InfluxDB API" method="probed" conf="10"><cpe>cpe:/a:protocol_labs:go-ipfs</cpe></service><script id="http-referer-checker" output="Couldn&apos;t find any cross-domain scripts."/><script id="http-wordpress-enum" output="Nothing found amongst the top 100 resources,use -&#45;script-args search-limit=&lt;number|all&gt; for deeper analysis)"/><script id="http-litespeed-sourcecode-download" output="Request with null byte did not work. This web server might not be vulnerable"/><script id="http-useragent-tester" output="&#xa; Status for browser useragent: 200&#xa; Redirected To: https://gitea.lan.ddnsgeek.com/&#xa; Allowed User Agents: &#xa; Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)&#xa; libwww&#xa; lwp-trivial&#xa; libcurl-agent/1.0&#xa; PHP/&#xa; Python-urllib/2.5&#xa; GT::WWW&#xa; Snoopy&#xa; MFC_Tear_Sample&#xa; HTTP::Lite&#xa; PHPCrawl&#xa; URI::Fetch&#xa; Zend_Http_Client&#xa; http client&#xa; PECL::HTTP&#xa; Wget/1.13.4 (linux-gnu)&#xa; WWW-Mechanize/1.34"><elem key="Status for browser useragent">200</elem>
<elem key="Redirected To">https://gitea.lan.ddnsgeek.com/</elem>
<table key="Allowed User Agents">
<elem>Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)</elem>
@@ -82,16 +60,26 @@
<elem>Wget/1.13.4 (linux-gnu)</elem>
<elem>WWW-Mechanize/1.34</elem>
</table>
</script><script id="http-chrono" output="Request times for /; avg: 1424.74ms; min: 1129.99ms; max: 1705.87ms"/></port>
</script><script id="http-title" output="Did not follow redirect to https://gitea.lan.ddnsgeek.com/"><elem key="redirect_url">https://gitea.lan.ddnsgeek.com/</elem>
</script><script id="http-vhosts" output="&#xa;128 names had status 308"/><script id="http-comments-displayer" output="Couldn&apos;t find any comments."/><script id="http-sitemap-generator" output="&#xa; Directory structure:&#xa; Longest directory structure:&#xa; Depth: 0&#xa; Dir: /&#xa; Total files found (by extension):&#xa; &#xa;"/><script id="http-csrf" output="Couldn&apos;t find any CSRF vulnerabilities."/><script id="http-methods" output="&#xa; Supported Methods: GET HEAD POST OPTIONS"><table key="Supported Methods">
<elem>GET</elem>
<elem>HEAD</elem>
<elem>POST</elem>
<elem>OPTIONS</elem>
</table>
</script><script id="http-malware-host" output="Host appears to be clean"/><script id="http-wordpress-users" output="[Error] Wordpress installation was not found. We couldn&apos;t find wp-login.php"/><script id="http-mobileversion-checker" output="No mobile version detected."/><script id="http-fetch" output="Please enter the complete path of the directory to save data in."><elem key="ERROR">Please enter the complete path of the directory to save data in.</elem>
</script><script id="http-drupal-enum" output="Nothing found amongst the top 100 resources,use -&#45;script-args number=&lt;number|all&gt; for deeper analysis)"/><script id="http-feed" output="Couldn&apos;t find any feeds."/><script id="http-date" output="Tue, 14 Apr 2026 03:26:18 GMT; -1s from local time."><elem key="date">2026-04-14T03:26:18+00:00</elem>
<elem key="delta">-1.0</elem>
</script><script id="http-dombased-xss" output="Couldn&apos;t find any DOM based XSS."/><script id="http-chrono" output="Request times for /; avg: 1035.89ms; min: 625.70ms; max: 1648.40ms"/><script id="http-stored-xss" output="Couldn&apos;t find any stored XSS vulnerabilities."/><script id="http-devframework" output="Couldn&apos;t determine the underlying framework or CMS. Try increasing &apos;httpspider.maxpagecount&apos; value to spider more pages."/><script id="http-jsonp-detection" output="Couldn&apos;t find any JSONP endpoints."/><script id="http-headers" output="&#xa; Location: https://gitea.lan.ddnsgeek.com/&#xa; Date: Tue, 14 Apr 2026 03:26:29 GMT&#xa; Content-Length: 17&#xa; Connection: close&#xa; &#xa; (Request type: GET)&#xa;"/><script id="http-security-headers" output=""></script><script id="http-errors" output="Couldn&apos;t find any error pages."/></port>
</ports>
<times srtt="14782" rttvar="14782" to="100000"/>
<times srtt="14273" rttvar="14273" to="100000"/>
</host>
<taskbegin task="NSE" time="1775375446"/>
<taskend task="NSE" time="1775375446"/>
<taskbegin task="NSE" time="1775375446"/>
<taskend task="NSE" time="1775375446"/>
<taskbegin task="NSE" time="1775375446"/>
<taskend task="NSE" time="1775375446"/>
<runstats><finished time="1775375446" timestr="Sun Apr 5 07:50:46 2026" summary="Nmap done at Sun Apr 5 07:50:46 2026; 1 IP address (1 host up) scanned in 726.81 seconds" elapsed="726.81" exit="success"/><hosts up="1" down="0" total="1"/>
<taskbegin task="NSE" time="1776137396"/>
<taskend task="NSE" time="1776137396"/>
<taskbegin task="NSE" time="1776137396"/>
<taskend task="NSE" time="1776137396"/>
<taskbegin task="NSE" time="1776137396"/>
<taskend task="NSE" time="1776137396"/>
<runstats><finished time="1776137396" timestr="Tue Apr 14 03:29:56 2026" summary="Nmap done at Tue Apr 14 03:29:56 2026; 1 IP address (1 host up) scanned in 244.82 seconds" elapsed="244.82" exit="success"/><hosts up="1" down="0" total="1"/>
</runstats>
</nmaprun>