fresh autorecon run

This commit is contained in:
beatzaplenty committed 2026-04-14 17:49:38 +10:00
1 parent c8f17a17e6
commit 3c3a192c79
1252 files changed
+4574573 -1993899

No files matched your search

@@ -2,7 +2,7 @@
[*] http found on tcp/443.
[*] https found on tcp/443.
@@ -3,8 +3,6 @@ nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN "/root/res
nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN "/root/results/kuma.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt" -oX "/root/results/kuma.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml" kuma.lan.ddnsgeek.com
nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN "/root/results/kuma.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt" -oX "/root/results/kuma.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml" kuma.lan.ddnsgeek.com
feroxbuster -u http://kuma.lan.ddnsgeek.com:80/ -t 10 -w /root/.local/share/AutoRecon/wordlists/dirbuster.txt -x "txt,html,php,asp,aspx,jsp" -v -k -n -q -e -r -o "/root/results/kuma.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_feroxbuster_dirbuster.txt"
curl -sSikf http://kuma.lan.ddnsgeek.com:80/.well-known/security.txt
@@ -35,9 +33,9 @@ nmap -vv --reason -Pn -T4 -sV -p 443 --script="banner,(http* or ssl*) and not (b
sslscan --show-certificate --no-colour kuma.lan.ddnsgeek.com:443 2>&1
ffuf -u https://kuma.lan.ddnsgeek.com:443/ -t 10 -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-110000.txt -H "Host: FUZZ.kuma.lan.ddnsgeek.com" -mc all -fs 19 -r -noninteractive -s | tee "/root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_kuma.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt"
whatweb --color=never --no-errors -a 3 -v https://kuma.lan.ddnsgeek.com:443 2>&1
nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN "/root/results/kuma.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt" -oX "/root/results/kuma.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml" kuma.lan.ddnsgeek.com
```
@@ -19,7 +19,7 @@
wpscan --url http://kuma.lan.ddnsgeek.com:80/ --no-update -e vp,vt,tt,cb,dbe,u,m --plugins-detection aggressive --plugins-version-detection aggressive -f cli-no-color 2>&1 | tee "/root/results/kuma.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_wpscan.txt"
[*] http on tcp/443
[*] https on tcp/443
[-] (feroxbuster) Multi-threaded recursive directory/file enumeration for web servers using various wordlists:
@@ -1,62 +0,0 @@
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
@@ -5,26 +5,18 @@ nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN "/root
[/root/results/kuma.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt](file:///root/results/kuma.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt):
```
# Nmap 7.98 scan initiated Sun Apr 5 08:04:44 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN /root/results/kuma.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml kuma.lan.ddnsgeek.com
adjust_timeouts2: packet supposedly had rtt of -984240 microseconds. Ignoring time.
adjust_timeouts2: packet supposedly had rtt of -1004694 microseconds. Ignoring time.
adjust_timeouts2: packet supposedly had rtt of -1004694 microseconds. Ignoring time.
adjust_timeouts2: packet supposedly had rtt of -806844 microseconds. Ignoring time.
adjust_timeouts2: packet supposedly had rtt of -806844 microseconds. Ignoring time.
# Nmap 7.99 scan initiated Tue Apr 14 03:42:34 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN /root/results/kuma.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml kuma.lan.ddnsgeek.com
Nmap scan report for kuma.lan.ddnsgeek.com (101.180.16.105)
Host is up, received user-set (0.053s latency).
Host is up, received user-set (0.039s latency).
rDNS record for 101.180.16.105: cpe-101-180-16-105.nb10.nsw.asp.telstra.net
Scanned at 2026-04-05 08:04:51 UTC for 381s
Scanned at 2026-04-14 03:42:37 UTC for 132s
Not shown: 65533 filtered tcp ports (no-response)
PORT STATE SERVICE REASON VERSION
80/tcp open http syn-ack ttl 52 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
PORT STATE SERVICE REASON VERSION
80/tcp open http syn-ack ttl 53 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
|_http-title: Did not follow redirect to https://kuma.lan.ddnsgeek.com/
443/tcp open ssl/http syn-ack ttl 53 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|_ssl-date: TLS randomness does not represent time
| http-methods:
|_ Supported Methods: GET HEAD POST
443/tcp open ssl/https syn-ack ttl 53
| ssl-cert: Subject: commonName=kuma.lan.ddnsgeek.com
| Subject Alternative Name: DNS:kuma.lan.ddnsgeek.com
| Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
@@ -71,22 +63,19 @@ PORT STATE SERVICE REASON VERSION
| nq9c8G6psGHa8K0O0t+cPwXHZQlZi2nAVN2UhV3GrwfAakzw3Bu31z8nS8OoFxRv
| ssZpBGM=
|_-----END CERTIFICATE-----
| http-title: Uptime Kuma
|_Requested resource was /dashboard
| http-robots.txt: 1 disallowed entry
|_/
|_http-favicon: Unknown favicon MD5: 5EA4B467D984433398E1037469F13214
|_ssl-date: TLS randomness does not represent time
|_http-title: Site doesn't have a title (text/plain; charset=utf-8).
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose|router|storage-misc
Running (JUST GUESSING): Linux 4.X|5.X|6.X|2.6.X|3.X (93%), MikroTik RouterOS 7.X (93%), Synology DiskStation Manager 5.X (85%)
OS CPE: cpe:/o:linux:linux_kernel:4 cpe:/o:linux:linux_kernel:5 cpe:/o:mikrotik:routeros:7 cpe:/o:linux:linux_kernel:5.6.3 cpe:/o:linux:linux_kernel:6.0 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3 cpe:/a:synology:diskstation_manager:5.2
Device type: general purpose|router
Running (JUST GUESSING): Linux 4.X|5.X|6.X|2.6.X|3.X (93%), MikroTik RouterOS 7.X (92%)
OS CPE: cpe:/o:linux:linux_kernel:4 cpe:/o:linux:linux_kernel:5 cpe:/o:linux:linux_kernel:6.0 cpe:/o:mikrotik:routeros:7 cpe:/o:linux:linux_kernel:5.6.3 cpe:/o:linux:linux_kernel:2.6 cpe:/o:linux:linux_kernel:3
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
Aggressive OS guesses: Linux 4.15 - 5.19 (93%), Linux 4.19 (93%), Linux 5.0 - 5.14 (93%), OpenWrt 21.02 (Linux 5.4) (93%), MikroTik RouterOS 7.2 - 7.5 (Linux 5.6.3) (93%), Linux 6.0 (92%), Linux 5.4 - 5.10 (87%), Linux 2.6.32 (87%), Linux 2.6.32 - 3.13 (87%), Linux 3.10 (87%)
Aggressive OS guesses: Linux 4.15 - 5.19 (93%), Linux 4.19 (92%), Linux 5.0 - 5.14 (92%), OpenWrt 21.02 (Linux 5.4) (92%), Linux 6.0 (92%), MikroTik RouterOS 7.2 - 7.5 (Linux 5.6.3) (92%), Linux 6.15 (89%), Linux 2.6.32 - 3.13 (87%), Linux 3.2 - 4.14 (87%), Linux 2.6.32 - 3.10 (86%)
No exact OS matches for host (test conditions non-ideal).
TCP/IP fingerprint:
SCAN(V=7.98%E=4%D=4/5%OT=80%CT=%CU=%PV=Y%DS=10%DC=T%G=N%TM=69D21921%P=x86_64-pc-linux-gnu)
SEQ(SP=103%GCD=1%ISR=10A%TI=Z%TS=A)
SEQ(SP=103%GCD=1%ISR=10C%TI=Z%TS=A)
SCAN(V=7.99%E=4%D=4/14%OT=80%CT=%CU=%PV=Y%DS=10%DC=T%G=N%TM=69DDB831%P=x86_64-pc-linux-gnu)
SEQ(SP=102%GCD=1%ISR=10D%TI=Z%TS=A)
SEQ(SP=F4%GCD=1%ISR=10F%TI=Z%TS=A)
OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)
WIN(W1=FE88%W2=FE88%W3=FE88%W4=FE88%W5=FE88%W6=FE88)
ECN(R=Y%DF=Y%TG=40%W=FAF0%O=M5B4NNSNW7%CC=Y%Q=)
@@ -97,26 +86,26 @@ T4(R=Y%DF=Y%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
U1(R=N)
IE(R=N)
Uptime guess: 6.448 days (since Sun Mar 29 21:26:28 2026)
Uptime guess: 37.080 days (since Sun Mar 8 01:49:42 2026)
Network Distance: 10 hops
TCP Sequence Prediction: Difficulty=259 (Good luck!)
TCP Sequence Prediction: Difficulty=258 (Good luck!)
IP ID Sequence Generation: All zeros
TRACEROUTE (using port 443/tcp)
HOP RTT ADDRESS
1 0.07 ms 10.216.0.161
2 0.23 ms 10.216.35.12
3 0.80 ms 10.216.32.2
4 10.87 ms lo0-0.gw2.syd1.au.linode.com (172.105.160.102)
5 0.25 ms ae29.r02.syd01.ien.netarch.akamai.com (104.70.113.22)
6 1.74 ms Bundle-Ether96.ken-edge903.sydney.telstra.net (203.54.231.153)
7 2.57 ms bundle-ether12.hay-core30.sydney.telstra.net (203.50.11.172)
8 0.84 ms ae10.ken-ice301.sydney.telstra.net (203.50.61.81)
9 0.90 ms gateway.nb10.sydney.asp.telstra.net (58.162.26.74)
10 38.80 ms cpe-101-180-16-105.nb10.nsw.asp.telstra.net (101.180.16.105)
1 0.12 ms 10.216.0.161
2 0.43 ms 10.216.35.12
3 0.81 ms 10.216.32.2
4 0.43 ms lo0-0.gw2.syd1.au.linode.com (172.105.160.102)
5 0.41 ms ae29.r02.syd01.ien.netarch.akamai.com (104.70.113.22)
6 1.97 ms Bundle-Ether96.ken-edge903.sydney.telstra.net (203.54.231.153)
7 2.50 ms bundle-ether12.hay-core30.sydney.telstra.net (203.50.11.172)
8 0.91 ms ae10.ken-ice301.sydney.telstra.net (203.50.61.81)
9 0.82 ms gateway.nb10.sydney.asp.telstra.net (58.162.26.74)
10 44.07 ms cpe-101-180-16-105.nb10.nsw.asp.telstra.net (101.180.16.105)
Read data files from: /usr/share/nmap
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 08:11:13 2026 -- 1 IP address (1 host up) scanned in 394.56 seconds
# Nmap done at Tue Apr 14 03:44:49 2026 -- 1 IP address (1 host up) scanned in 136.35 seconds
```
@@ -5,16 +5,16 @@ nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN "/root/results/kuma.lan.ddn
[/root/results/kuma.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt](file:///root/results/kuma.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt):
```
# Nmap 7.98 scan initiated Sun Apr 5 08:05:19 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN /root/results/kuma.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml kuma.lan.ddnsgeek.com
# Nmap 7.99 scan initiated Tue Apr 14 03:44:21 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN /root/results/kuma.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml kuma.lan.ddnsgeek.com
Nmap scan report for kuma.lan.ddnsgeek.com (101.180.16.105)
Host is up, received user-set.
rDNS record for 101.180.16.105: cpe-101-180-16-105.nb10.nsw.asp.telstra.net
Scanned at 2026-04-05 08:06:00 UTC for 1373s
Scanned at 2026-04-14 03:44:23 UTC for 1486s
All 100 scanned ports on kuma.lan.ddnsgeek.com (101.180.16.105) are in ignored states.
Not shown: 100 open|filtered udp ports (no-response)
Too many fingerprints match this host to give specific OS details
TCP/IP fingerprint:
SCAN(V=7.98%E=4%D=4/5%OT=%CT=%CU=%PV=Y%G=N%TM=69D21D47%P=x86_64-pc-linux-gnu)
SCAN(V=7.99%E=4%D=4/14%OT=%CT=%CU=%PV=Y%G=N%TM=69DDBDE5%P=x86_64-pc-linux-gnu)
SEQ()
U1(R=N)
IE(R=N)
@@ -23,18 +23,18 @@ IE(R=N)
TRACEROUTE (using proto 1/icmp)
HOP RTT ADDRESS
1 0.08 ms 10.216.0.161
2 0.21 ms 10.216.35.11
3 0.87 ms 10.216.32.2
4 0.38 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
5 0.32 ms ae19.r01.syd01.ien.netarch.akamai.com (104.70.113.20)
6 1.35 ms Bundle-Ether96.ken-edge903.sydney.telstra.net (203.54.231.153)
7 2.29 ms bundle-ether12.hay-core30.sydney.telstra.net (203.50.11.172)
2 0.19 ms 10.216.35.11
3 0.90 ms 10.216.32.2
4 0.58 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
5 0.25 ms ae19.r01.syd01.ien.netarch.akamai.com (104.70.113.20)
6 1.71 ms Bundle-Ether96.ken-edge903.sydney.telstra.net (203.54.231.153)
7 1.91 ms bundle-ether12.hay-core30.sydney.telstra.net (203.50.11.172)
8 0.82 ms ae10.ken-ice301.sydney.telstra.net (203.50.61.81)
9 5.08 ms gateway.nb10.sydney.asp.telstra.net (58.162.26.74)
9 0.87 ms gateway.nb10.sydney.asp.telstra.net (58.162.26.74)
10 ... 30
Read data files from: /usr/share/nmap
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 08:28:57 2026 -- 1 IP address (1 host up) scanned in 1430.00 seconds
# Nmap done at Tue Apr 14 04:09:09 2026 -- 1 IP address (1 host up) scanned in 1488.91 seconds
```
@@ -5,22 +5,20 @@ nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN "/root/res
[/root/results/kuma.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt](file:///root/results/kuma.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt):
```
# Nmap 7.98 scan initiated Sun Apr 5 08:04:18 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN /root/results/kuma.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml kuma.lan.ddnsgeek.com
# Nmap 7.99 scan initiated Tue Apr 14 03:41:47 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN /root/results/kuma.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml kuma.lan.ddnsgeek.com
Nmap scan report for kuma.lan.ddnsgeek.com (101.180.16.105)
Host is up, received user-set (0.040s latency).
Host is up, received user-set (0.038s latency).
rDNS record for 101.180.16.105: cpe-101-180-16-105.nb10.nsw.asp.telstra.net
Scanned at 2026-04-05 08:04:26 UTC for 39s
Scanned at 2026-04-14 03:41:48 UTC for 44s
Not shown: 998 filtered tcp ports (no-response)
PORT STATE SERVICE REASON VERSION
80/tcp open http syn-ack ttl 52 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
PORT STATE SERVICE REASON VERSION
80/tcp open http syn-ack ttl 52 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
|_http-title: Did not follow redirect to https://kuma.lan.ddnsgeek.com/
443/tcp open ssl/http syn-ack ttl 52 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
| http-robots.txt: 1 disallowed entry
|_/
| http-methods:
|_ Supported Methods: GET HEAD POST
443/tcp open ssl/https syn-ack ttl 53
|_http-title: Site doesn't have a title (text/plain; charset=utf-8).
|_ssl-date: TLS randomness does not represent time
| ssl-cert: Subject: commonName=kuma.lan.ddnsgeek.com
| Subject Alternative Name: DNS:kuma.lan.ddnsgeek.com
| Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
@@ -67,21 +65,17 @@ PORT STATE SERVICE REASON VERSION
| nq9c8G6psGHa8K0O0t+cPwXHZQlZi2nAVN2UhV3GrwfAakzw3Bu31z8nS8OoFxRv
| ssZpBGM=
|_-----END CERTIFICATE-----
|_ssl-date: TLS randomness does not represent time
| http-title: Uptime Kuma
|_Requested resource was /dashboard
|_http-favicon: Unknown favicon MD5: 5EA4B467D984433398E1037469F13214
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose|router
Running (JUST GUESSING): Linux 4.X|5.X|6.X|2.6.X|3.X (93%), MikroTik RouterOS 7.X (92%)
OS CPE: cpe:/o:linux:linux_kernel:4 cpe:/o:linux:linux_kernel:5 cpe:/o:mikrotik:routeros:7 cpe:/o:linux:linux_kernel:5.6.3 cpe:/o:linux:linux_kernel:6.0 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3
Device type: general purpose|router|storage-misc
Running (JUST GUESSING): Linux 4.X|5.X|6.X|2.6.X|3.X (93%), MikroTik RouterOS 7.X (93%), Synology DiskStation Manager 5.X (85%)
OS CPE: cpe:/o:linux:linux_kernel:4 cpe:/o:linux:linux_kernel:5 cpe:/o:mikrotik:routeros:7 cpe:/o:linux:linux_kernel:5.6.3 cpe:/o:linux:linux_kernel:6.0 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3 cpe:/a:synology:diskstation_manager:5.2
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
Aggressive OS guesses: Linux 4.15 - 5.19 (93%), Linux 5.0 - 5.14 (93%), Linux 4.19 (92%), OpenWrt 21.02 (Linux 5.4) (92%), MikroTik RouterOS 7.2 - 7.5 (Linux 5.6.3) (92%), Linux 6.0 (90%), Linux 2.6.32 (87%), Linux 2.6.32 - 3.13 (87%), Linux 3.10 - 4.11 (87%), Linux 3.2 - 4.14 (87%)
Aggressive OS guesses: Linux 4.15 - 5.19 (93%), Linux 4.19 (93%), Linux 5.0 - 5.14 (93%), OpenWrt 21.02 (Linux 5.4) (93%), MikroTik RouterOS 7.2 - 7.5 (Linux 5.6.3) (93%), Linux 6.0 (92%), Linux 6.15 (90%), Linux 5.4 - 5.10 (87%), Linux 2.6.32 (87%), Linux 2.6.32 - 3.13 (87%)
No exact OS matches for host (test conditions non-ideal).
TCP/IP fingerprint:
SCAN(V=7.98%E=4%D=4/5%OT=80%CT=%CU=%PV=Y%DS=10%DC=T%G=N%TM=69D217B1%P=x86_64-pc-linux-gnu)
SEQ(SP=105%GCD=1%ISR=101%TI=Z%TS=A)
SEQ(SP=105%GCD=1%ISR=10C%TI=Z%TS=A)
SCAN(V=7.99%E=4%D=4/14%OT=80%CT=%CU=%PV=Y%DS=10%DC=T%G=N%TM=69DDB7A8%P=x86_64-pc-linux-gnu)
SEQ(SP=102%GCD=1%ISR=10D%TI=Z%TS=A)
SEQ(SP=104%GCD=1%ISR=109%TI=Z%TS=A)
OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)
WIN(W1=FE88%W2=FE88%W3=FE88%W4=FE88%W5=FE88%W6=FE88)
ECN(R=Y%DF=Y%TG=40%W=FAF0%O=M5B4NNSNW7%CC=Y%Q=)
@@ -92,26 +86,26 @@ T4(R=Y%DF=Y%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
U1(R=N)
IE(R=N)
Uptime guess: 6.443 days (since Sun Mar 29 21:26:28 2026)
Uptime guess: 37.078 days (since Sun Mar 8 01:49:42 2026)
Network Distance: 10 hops
TCP Sequence Prediction: Difficulty=261 (Good luck!)
TCP Sequence Prediction: Difficulty=260 (Good luck!)
IP ID Sequence Generation: All zeros
TRACEROUTE (using port 443/tcp)
HOP RTT ADDRESS
1 0.12 ms 10.216.0.161
2 0.25 ms 10.216.35.11
3 0.91 ms 10.216.32.2
4 0.93 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
5 0.27 ms ae29.r02.syd01.ien.netarch.akamai.com (104.70.113.22)
6 1.66 ms Bundle-Ether96.ken-edge903.sydney.telstra.net (203.54.231.153)
7 1.79 ms bundle-ether50.hay-core30.sydney.telstra.net (203.50.12.130)
8 0.96 ms ae10.ken-ice301.sydney.telstra.net (203.50.61.81)
9 0.99 ms gateway.nb10.sydney.asp.telstra.net (58.162.26.74)
10 41.72 ms cpe-101-180-16-105.nb10.nsw.asp.telstra.net (101.180.16.105)
1 0.32 ms 10.216.0.161
2 0.35 ms 10.216.35.12
3 0.85 ms 10.216.32.1
4 0.38 ms lo0-0.gw2.syd1.au.linode.com (172.105.160.102)
5 0.36 ms ae29.r02.syd01.ien.netarch.akamai.com (104.70.113.22)
6 1.45 ms Bundle-Ether96.ken-edge903.sydney.telstra.net (203.54.231.153)
7 1.05 ms bundle-ether50.hay-core30.sydney.telstra.net (203.50.12.130)
8 0.80 ms ae10.ken-ice301.sydney.telstra.net (203.50.61.81)
9 0.89 ms gateway.nb10.sydney.asp.telstra.net (58.162.26.74)
10 33.83 ms cpe-101-180-16-105.nb10.nsw.asp.telstra.net (101.180.16.105)
Read data files from: /usr/share/nmap
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 08:05:05 2026 -- 1 IP address (1 host up) scanned in 53.02 seconds
# Nmap done at Tue Apr 14 03:42:32 2026 -- 1 IP address (1 host up) scanned in 45.09 seconds
```
@@ -1,20 +0,0 @@
```bash
curl -sSikf https://kuma.lan.ddnsgeek.com:443/robots.txt
```
[/root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_curl-robots.txt](file:///root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_curl-robots.txt):
```
HTTP/2 200
content-type: text/plain; charset=utf-8
date: Sun, 05 Apr 2026 08:05:10 GMT
etag: W/"19-2NTlN/votVlrfMtAaltZ799LfR0"
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 25
User-agent: *
Disallow: /
```
@@ -1,21 +0,0 @@
```bash
curl -sSik https://kuma.lan.ddnsgeek.com:443/
```
[/root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_curl.html](file:///root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_curl.html):
```
HTTP/2 302
content-type: text/plain; charset=utf-8
date: Sun, 05 Apr 2026 08:05:10 GMT
location: /dashboard
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Accept
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 32
Found. Redirecting to /dashboard
```
@@ -1,310 +0,0 @@
```bash
feroxbuster -u https://kuma.lan.ddnsgeek.com:443/ -t 10 -w /root/.local/share/AutoRecon/wordlists/dirbuster.txt -x "txt,html,php,asp,aspx,jsp" -v -k -n -q -e -r -o "/root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt"
```
[/root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt](file:///root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt):
```
Configuration {
kind: "configuration",
wordlist: "/root/.local/share/AutoRecon/wordlists/dirbuster.txt",
config: "/etc/feroxbuster/ferox-config.toml",
proxy: "",
replay_proxy: "",
server_certs: [],
client_cert: "",
client_key: "",
target_url: "https://kuma.lan.ddnsgeek.com/",
status_codes: [
100,
101,
102,
200,
201,
202,
203,
204,
205,
206,
207,
208,
226,
300,
301,
302,
303,
304,
305,
307,
308,
400,
401,
402,
403,
404,
405,
406,
407,
408,
409,
410,
411,
412,
413,
414,
415,
416,
417,
418,
421,
422,
423,
424,
426,
428,
429,
431,
451,
500,
501,
502,
503,
504,
505,
506,
507,
508,
510,
511,
103,
425,
],
replay_codes: [
100,
101,
102,
200,
201,
202,
203,
204,
205,
206,
207,
208,
226,
300,
301,
302,
303,
304,
305,
307,
308,
400,
401,
402,
403,
404,
405,
406,
407,
408,
409,
410,
411,
412,
413,
414,
415,
416,
417,
418,
421,
422,
423,
424,
426,
428,
429,
431,
451,
500,
501,
502,
503,
504,
505,
506,
507,
508,
510,
511,
103,
425,
],
filter_status: [],
client: Client {
accepts: Accepts,
proxies: [
Matcher,
],
redirect_policy: "Policy(Custom)",
referer: true,
default_headers: {
"accept": "*/*",
"user-agent": "feroxbuster/2.13.1",
},
reqwest::config::RequestTimeout: 7s,
},
replay_client: None,
threads: 10,
timeout: 7,
verbosity: 1,
silent: false,
quiet: true,
output_level: Quiet,
auto_bail: false,
auto_tune: false,
requester_policy: Default,
json: false,
output: "/root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt",
debug_log: "",
user_agent: "feroxbuster/2.13.1",
random_agent: false,
redirects: true,
insecure: true,
extensions: [
"txt",
"html",
"php",
"asp",
"aspx",
"jsp",
],
methods: [
"GET",
],
data: [],
headers: {},
queries: [],
no_recursion: true,
extract_links: true,
add_slash: false,
stdin: false,
cached_stdin: [],
depth: 4,
scan_limit: 0,
parallel: 0,
rate_limit: 0,
filter_size: [],
filter_line_count: [],
filter_word_count: [],
filter_regex: [],
dont_filter: false,
resumed: false,
resume_from: "",
save_state: true,
time_limit: "",
filter_similar: [],
url_denylist: [],
regex_denylist: [],
scope: [
Url {
scheme: "https",
cannot_be_a_base: false,
username: "",
password: None,
host: Some(
Domain(
"kuma.lan.ddnsgeek.com",
),
),
port: None,
path: "/",
query: None,
fragment: None,
},
],
collect_extensions: false,
dont_collect: [
"woff2",
"woff",
"ttf",
"otf",
"eot",
"tif",
"tiff",
"ico",
"cur",
"bmp",
"webp",
"svg",
"png",
"jpg",
"jpeg",
"jfif",
"gif",
"avif",
"apng",
"pjpeg",
"pjp",
"mov",
"wav",
"mpg",
"mpeg",
"mp3",
"mp4",
"m4a",
"m4p",
"m4v",
"ogg",
"webm",
"ogv",
"oga",
"flac",
"aac",
"3gp",
"css",
"zip",
"xls",
"xml",
"gz",
"tgz",
],
collect_backups: false,
backup_extensions: [
"~",
".bak",
".bak2",
".old",
".1",
],
collect_words: false,
force_recursion: false,
update_app: false,
scan_dir_listings: false,
request_file: "",
protocol: "https",
limit_bars: 0,
unique: false,
response_size_limit: 4194304,
}
302 GET 1l 4w 89c https://kuma.lan.ddnsgeek.com/.well-known/change-password => https://github.com/louislam/uptime-kuma/wiki/Reset-Password-via-CLI
200 GET 4l 33w 29264c https://kuma.lan.ddnsgeek.com/favicon.ico
200 GET 2l 4w 25c https://kuma.lan.ddnsgeek.com/robots.txt
200 GET 1l 1w 141c https://kuma.lan.ddnsgeek.com/api/status-page/default/manifest.json
200 GET 9l 104w 1168c https://kuma.lan.ddnsgeek.com/icon.svg
200 GET 1l 2912w 155329c https://kuma.lan.ddnsgeek.com/assets/polyfills-legacy-CC6RtsPR.js
200 GET 6l 2770w 163840c https://kuma.lan.ddnsgeek.com/assets/index-BBxTfFCS.js
200 GET 1l 4307w 196608c https://kuma.lan.ddnsgeek.com/assets/index-legacy-DAPjczQA.js
200 GET 6l 3493w 163840c https://kuma.lan.ddnsgeek.com/assets/index-bOVKKa1O.css
200 GET 41l 139w 4221c https://kuma.lan.ddnsgeek.com/status
404 GET 1l 3w 15c https://kuma.lan.ddnsgeek.com/upload/
401 GET 0l 0w 0c https://kuma.lan.ddnsgeek.com/metrics
200 GET 41l 139w 4221c https://kuma.lan.ddnsgeek.com/STATUS
200 GET 2l 4w 25c https://kuma.lan.ddnsgeek.com/Robots.txt
200 GET 41l 139w 4221c https://kuma.lan.ddnsgeek.com/Status
401 GET 0l 0w 0c https://kuma.lan.ddnsgeek.com/Metrics
```
@@ -1,56 +0,0 @@
```bash
curl -sSikf https://kuma.lan.ddnsgeek.com:443/.well-known/security.txt
```
[/root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_known-security.txt](file:///root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_known-security.txt):
```
HTTP/2 200
content-type: text/html; charset=utf-8
date: Sun, 05 Apr 2026 08:05:09 GMT
etag: W/"98c-RxUaxZHFr+/FSabMqXO58T7mz+U"
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 2444
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0, viewport-fit=cover" />
<link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png">
<link rel="icon" type="image/svg+xml" href="/icon.svg" />
<link rel="manifest" href="/manifest.json" />
<meta name="theme-color" id="theme-color" content="" />
<meta name="description" content="Uptime Kuma monitoring tool" />
<title>Uptime Kuma</title>
<style> .noscript-message {
font-size: 20px;
text-align: center;
padding: 10px;
max-width: 500px;
margin: 0 auto;
}
</style>
<script type="module" crossorigin src="/assets/index-BBxTfFCS.js"></script>
<link rel="stylesheet" crossorigin href="/assets/index-bOVKKa1O.css">
<script type="module">import.meta.url;import("_").catch(()=>1);async function* g(){};if(location.protocol!="file:"){window.__vite_is_modern_browser=true}</script>
<script type="module">!function(){if(window.__vite_is_modern_browser)return;console.warn("vite: loading legacy chunks, syntax error above and the same error below should be ignored");var e=document.getElementById("vite-legacy-polyfill"),n=document.createElement("script");n.src=e.src,n.onload=function(){System.import(document.getElementById('vite-legacy-entry').getAttribute('data-src'))},document.body.appendChild(n)}();</script>
</head>
<body>
<noscript>
<div class="noscript-message">
Sorry, you don't seem to have JavaScript enabled or your browser
doesn't support it.<br />This website requires JavaScript to function.
Please enable JavaScript in your browser settings to continue.
</div>
</noscript>
<div id="app"></div>
<script nomodule>!function(){var e=document,t=e.createElement("script");if(!("noModule"in t)&&"onbeforeload"in t){var n=!1;e.addEventListener("beforeload",(function(e){if(e.target===t)n=!0;else if(!e.target.hasAttribute("nomodule")||!n)return;e.preventDefault()}),!0),t.type="module",t.src=".",e.head.appendChild(t),t.remove()}}();</script>
<script nomodule crossorigin id="vite-legacy-polyfill" src="/assets/polyfills-legacy-CC6RtsPR.js"></script>
<script nomodule crossorigin id="vite-legacy-entry" data-src="/assets/index-legacy-DAPjczQA.js">System.import(document.getElementById('vite-legacy-entry').getAttribute('data-src'))</script>
</body>
</html>
```
@@ -1,277 +0,0 @@
```bash
nmap -vv --reason -Pn -T4 -sV -p 443 --script="banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN "/root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt" -oX "/root/results/kuma.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml" kuma.lan.ddnsgeek.com
```
[/root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt](file:///root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt):
```
# Nmap 7.98 scan initiated Sun Apr 5 08:05:15 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml kuma.lan.ddnsgeek.com
Nmap scan report for kuma.lan.ddnsgeek.com (101.180.16.105)
Host is up, received user-set (0.035s latency).
rDNS record for 101.180.16.105: cpe-101-180-16-105.nb10.nsw.asp.telstra.net
Scanned at 2026-04-05 08:05:54 UTC for 467s
PORT STATE SERVICE REASON VERSION
443/tcp open ssl/http syn-ack ttl 53 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|_http-dombased-xss: Couldn't find any DOM based XSS.
| http-useragent-tester:
| Status for browser useragent: 200
| Redirected To: /dashboard
| Allowed User Agents:
| libwww
| lwp-trivial
| libcurl-agent/1.0
| Python-urllib/2.5
| GT::WWW
| Snoopy
| MFC_Tear_Sample
| HTTP::Lite
| URI::Fetch
| Zend_Http_Client
| http client
| PECL::HTTP
| Wget/1.13.4 (linux-gnu)
| WWW-Mechanize/1.34
| Change in Status Code:
| PHP/: 404
| PHPCrawl: 404
|_ Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html): 404
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|_ssl-date: TLS randomness does not represent time
|_http-favicon: Unknown favicon MD5: 5EA4B467D984433398E1037469F13214
| http-drupal-enum:
| Modules:
| views
| token
| ctools
| pathauto
| libraries
| entity
| admin_menu
| date
| imce
| jquery_update
| ckeditor
| wysiwyg
| link
| webform
| backup_migrate
| rules
| module_filter
| google_analytics
| views_slideshow
| features
| xmlsitemap
| metatag
| captcha
| colorbox
| media
| entityreference
| panels
| field_group
| devel
| views_bulk_operations
| menu_block
| transliteration
| l10n_update
| imce_wysiwyg
| globalredirect
| variable
| i18n
| context
| imageapi
| advanced_help
| filefield
| email
| page_title
| lightbox2
| ds
| strongarm
| superfish
| imagefield
| calendar
| imagecache
| references
| field_collection
| block_class
| job_scheduler
| menu_attributes
| redirect
| addressfield
| mailsystem
| nice_menus
| diff
| flexslider
| taxonomy_menu
| file_entity
| feeds
| media_youtube
| node_clone
| admin_views
| smtp
| special_menu_items
| auto_nodetitle
| jquery_ui
| insert
| cck
| quicktabs
| mimemail
| views_php
| content_access
| jcarousel
| print
| plupload
| votingapi
| poormanscron
| simplenews
| filefield_sources
| extlink
| honeypot
| facetapi
| logintoboggan
| search_api
| uuid
| commerce
| custom_breadcrumbs
| views_data_export
| oauth
| better_formats
| site_verify
| location
| fontyourface
| masquerade
|_ imce_mkdir
| http-sitemap-generator:
| Directory structure:
| /
| Other: 1; json: 1; png: 1; svg: 1
| /assets/
| css: 1; js: 2
| Longest directory structure:
| Depth: 1
| Dir: /assets/
| Total files found (by extension):
|_ Other: 1; css: 1; js: 2; json: 1; png: 1; svg: 1
|_http-majordomo2-dir-traversal: ERROR: Script execution failed (use -d to debug)
|_http-mobileversion-checker: No mobile version detected.
|_http-referer-checker: Couldn't find any cross-domain scripts.
|_http-errors: ERROR: Script execution failed (use -d to debug)
|_http-comments-displayer: Couldn't find any comments.
| http-methods:
|_ Supported Methods: GET HEAD POST
|_http-trane-info: Problem with XML parsing of /evox/about
|_http-php-version: Credits query returned unknown hash 3b299781d582f5b522a0a6f14dfd9268
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|_http-date: Sun, 05 Apr 2026 08:06:30 GMT; -1s from local time.
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
| http-vhosts:
|_128 names had status 404
|_http-malware-host: Host appears to be clean
| ssl-enum-ciphers:
| TLSv1.2:
| ciphers:
| TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
| TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A
| TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A
| TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A
| TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A
| compressors:
| NULL
| cipher preference: server
| warnings:
| Key exchange (secp256r1) of lower strength than certificate key
| TLSv1.3:
| ciphers:
| TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A
| TLS_AKE_WITH_AES_128_GCM_SHA256 (X25519MLKEM768) - A
| TLS_AKE_WITH_AES_256_GCM_SHA384 (X25519MLKEM768) - A
| cipher preference: server
|_ least strength: A
|_http-fetch: Please enter the complete path of the directory to save data in.
|_http-feed: Couldn't find any feeds.
| http-security-headers:
| Strict_Transport_Security:
| Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
| X_Frame_Options:
| Header: X-Frame-Options: SAMEORIGIN
| Description: The browser must not display this content in any frame from a page of different origin than the content itself.
| X_XSS_Protection:
| Header: X-XSS-Protection: 1; mode=block
| Description: The browser will prevent the rendering of the page when XSS is detected.
| X_Content_Type_Options:
| Header: X-Content-Type-Options: nosniff
|_ Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type.
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
| http-headers:
| Content-Length: 2444
| Content-Type: text/html; charset=utf-8
| Date: Sun, 05 Apr 2026 08:07:06 GMT
| Etag: W/"98c-RxUaxZHFr+/FSabMqXO58T7mz+U"
| Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
| X-Content-Type-Options: nosniff
| X-Frame-Options: SAMEORIGIN
| X-Xss-Protection: 1; mode=block
| Connection: close
|
|_ (Request type: HEAD)
|_http-chrono: Request times for /; avg: 33701.34ms; min: 1061.83ms; max: 134159.26ms
| http-robots.txt: 1 disallowed entry
|_/
| http-title: Uptime Kuma
|_Requested resource was /dashboard
| ssl-cert: Subject: commonName=kuma.lan.ddnsgeek.com
| Subject Alternative Name: DNS:kuma.lan.ddnsgeek.com
| Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
| Public Key type: rsa
| Public Key bits: 4096
| Signature Algorithm: sha256WithRSAEncryption
| Not valid before: 2026-04-01T19:44:43
| Not valid after: 2026-06-30T19:44:42
| MD5: 4503 8f10 fe7f f545 fff2 813b 5a8f 7631
| SHA-1: a08d 7799 f3ef cb17 9052 958c 43c5 eeb5 d6b5 59c1
| SHA-256: 0c92 3f5e b861 8c91 b8a8 f4bf 1cb8 7d80 f07a ddc8 3c4b 8ed9 5478 90cf b482 512b
| -----BEGIN CERTIFICATE-----
| MIIGATCCBOmgAwIBAgISBYYKHnpmPDpUPJjaOPK93fSHMA0GCSqGSIb3DQEBCwUA
| MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
| EwNSMTMwHhcNMjYwNDAxMTk0NDQzWhcNMjYwNjMwMTk0NDQyWjAgMR4wHAYDVQQD
| ExVrdW1hLmxhbi5kZG5zZ2Vlay5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAw
| ggIKAoICAQC2bNy5QjaE52KGlHDyiggwMm0YUU1SlAUrH1Awn3efLnnU2CKuF/NT
| pLP2ahkt7Js/bURSHJgISI7D8tQ3uT1+D7ZZjljYkaXQhdrLRdCSNCNDi3cmBEcR
| WUD8cnS2jXZgwV6C9sU2nXgxiDNEnFy3AOJppuUo6TU2eipfYMHwsz+FIz/ghD3Z
| lTf+T8HO70cGQLBRQP/4cu1Kc5sL+xDOk88SB/91j6FapUmXrsLaIaLeX7EQm7Yy
| 2pBkaXe/6UxzNuCAAPqxtkuMPi9Tcmm7X9fqo3ErMcc8BtZqeGcp2Zwm1sg3pYjF
| MjTLTsGAcxfMBWvQi8nhQ92Ah+Vm7O0SddUEFNRvoOioG9dR32C+v6w0E004Upt+
| BY0UWt9EgUrC4I8awGBrL4/E5qgnl6Hi5ho2Q6Px28ybIuoSQ7aeJtS8g5nBjCzp
| 5n81UcTtD98lhZKWRRJObFPh9YP/lxYz41GSIrRgBg6PtxU/1nJ0rZZvfwiuigxr
| NdoMo561ghayd607GVZ0JPKvY7sbxEkJ6XQ45E2MP5KF8EaPdvc+V2rP9Djy80+D
| XUq5FsmhM+YK1FfCw6S9cN7JRD9F1wZYmdHtHdS7Nmpag2/8w42UJQgN93WsflEx
| JKdNOuS9JWj95j84WmLkgWugWjZcrgk11PL6WkN6cecDt8+jbmWjvQIDAQABo4IC
| IDCCAhwwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1Ud
| EwEB/wQCMAAwHQYDVR0OBBYEFFXeRi9gTjL3dXj8UCJJQeJ90UeeMB8GA1UdIwQY
| MBaAFOernw8sM6BT015PeMiyhA471pIzMDMGCCsGAQUFBwEBBCcwJTAjBggrBgEF
| BQcwAoYXaHR0cDovL3IxMy5pLmxlbmNyLm9yZy8wIAYDVR0RBBkwF4IVa3VtYS5s
| YW4uZGRuc2dlZWsuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMC0GA1UdHwQmMCQw
| IqAgoB6GHGh0dHA6Ly9yMTMuYy5sZW5jci5vcmcvOC5jcmwwggEKBgorBgEEAdZ5
| AgQCBIH7BIH4APYAdQAWgy2r8KklDw/wOqVF/8i/yCPQh0v2BCkn+OcfMxP1+gAA
| AZ1KyTc0AAAEAwBGMEQCIFgwfeRhONb6T5LOG5a3CEnv5uU9GgHReu3FgCbNWvaO
| AiB4qoUik6olE6a7XgyMymRtow3pT+b51p8jdt+BaxswPAB9AKgmy+MKxjUSRlM/
| 4GXxTxnZbhkIE8Qd2W15ALMSPFUnAAABnUrJOMEACAAABQAFK3PIBAMARjBEAiAh
| 2KriLcSsAzvAqrucXzHSrZgfFf5tgwdSAYBbsUQxgAIgMhTKcEpKu31cvaY5rjEI
| 3CRiSD0zRDpz0muR3ED0Vi0wDQYJKoZIhvcNAQELBQADggEBADbjfbibh5H8hw6L
| 2KKxOcEGi787TIgm058gYlsm/2skqK1VqvS3Qmoj5IA05Yr5QpMFQFf6Z1kAy78P
| DH8qfadIgAU2Nbe1cK9o5f4LhTU9wM58C9Ti7e5aiNHA1UCsrwnvJnH523uxEVcG
| HCrne4Bewvtpfyb6M1RoRp3W4lHS4d7thHm6LXLEEJgBCFA5Yz6ez6mtainST5sU
| 6j4s+Jt5BQ2zTka2y2ao18OTfkeLtGqUDfB3oZWMNqK/m6m90FKTKYSTyoBtdESc
| nq9c8G6psGHa8K0O0t+cPwXHZQlZi2nAVN2UhV3GrwfAakzw3Bu31z8nS8OoFxRv
| ssZpBGM=
|_-----END CERTIFICATE-----
| http-waf-detect: IDS/IPS/WAF detected:
|_kuma.lan.ddnsgeek.com:443/?p4yl04d3=<script>alert(document.cookie)</script>
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
Read data files from: /usr/share/nmap
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 08:13:42 2026 -- 1 IP address (1 host up) scanned in 509.39 seconds
```
@@ -1,201 +0,0 @@
```bash
sslscan --show-certificate --no-colour kuma.lan.ddnsgeek.com:443 2>&1
```
[/root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_sslscan.html](file:///root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_sslscan.html):
```
Version: 2.1.5
OpenSSL 3.5.3 16 Sep 2025
Connected to 101.180.16.105
Testing SSL server kuma.lan.ddnsgeek.com on port 443 using SNI name kuma.lan.ddnsgeek.com
SSL/TLS Protocols:
SSLv2 disabled
SSLv3 disabled
TLSv1.0 disabled
TLSv1.1 disabled
TLSv1.2 enabled
TLSv1.3 enabled
TLS Fallback SCSV:
Server supports TLS Fallback SCSV
TLS renegotiation:
Session renegotiation not supported
TLS Compression:
Compression disabled
Heartbleed:
TLSv1.3 not vulnerable to heartbleed
TLSv1.2 not vulnerable to heartbleed
Supported Server Cipher(s):
Preferred TLSv1.3 256 bits TLS_CHACHA20_POLY1305_SHA256
Accepted TLSv1.3 128 bits TLS_AES_128_GCM_SHA256
Accepted TLSv1.3 256 bits TLS_AES_256_GCM_SHA384
Preferred TLSv1.2 256 bits ECDHE-RSA-CHACHA20-POLY1305 Curve 25519 DHE 253
Accepted TLSv1.2 128 bits ECDHE-RSA-AES128-GCM-SHA256 Curve 25519 DHE 253
Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-GCM-SHA384 Curve 25519 DHE 253
Accepted TLSv1.2 128 bits ECDHE-RSA-AES128-SHA Curve 25519 DHE 253
Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-SHA Curve 25519 DHE 253
Server Key Exchange Group(s):
TLSv1.3 128 bits secp256r1 (NIST P-256)
TLSv1.3 192 bits secp384r1 (NIST P-384)
TLSv1.3 260 bits secp521r1 (NIST P-521)
TLSv1.3 128 bits x25519
TLSv1.2 128 bits secp256r1 (NIST P-256)
TLSv1.2 192 bits secp384r1 (NIST P-384)
TLSv1.2 260 bits secp521r1 (NIST P-521)
TLSv1.2 128 bits x25519
SSL Certificate:
Certificate blob:
-----BEGIN CERTIFICATE-----
MIIGATCCBOmgAwIBAgISBYYKHnpmPDpUPJjaOPK93fSHMA0GCSqGSIb3DQEBCwUA
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
EwNSMTMwHhcNMjYwNDAxMTk0NDQzWhcNMjYwNjMwMTk0NDQyWjAgMR4wHAYDVQQD
ExVrdW1hLmxhbi5kZG5zZ2Vlay5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAw
ggIKAoICAQC2bNy5QjaE52KGlHDyiggwMm0YUU1SlAUrH1Awn3efLnnU2CKuF/NT
pLP2ahkt7Js/bURSHJgISI7D8tQ3uT1+D7ZZjljYkaXQhdrLRdCSNCNDi3cmBEcR
WUD8cnS2jXZgwV6C9sU2nXgxiDNEnFy3AOJppuUo6TU2eipfYMHwsz+FIz/ghD3Z
lTf+T8HO70cGQLBRQP/4cu1Kc5sL+xDOk88SB/91j6FapUmXrsLaIaLeX7EQm7Yy
2pBkaXe/6UxzNuCAAPqxtkuMPi9Tcmm7X9fqo3ErMcc8BtZqeGcp2Zwm1sg3pYjF
MjTLTsGAcxfMBWvQi8nhQ92Ah+Vm7O0SddUEFNRvoOioG9dR32C+v6w0E004Upt+
BY0UWt9EgUrC4I8awGBrL4/E5qgnl6Hi5ho2Q6Px28ybIuoSQ7aeJtS8g5nBjCzp
5n81UcTtD98lhZKWRRJObFPh9YP/lxYz41GSIrRgBg6PtxU/1nJ0rZZvfwiuigxr
NdoMo561ghayd607GVZ0JPKvY7sbxEkJ6XQ45E2MP5KF8EaPdvc+V2rP9Djy80+D
XUq5FsmhM+YK1FfCw6S9cN7JRD9F1wZYmdHtHdS7Nmpag2/8w42UJQgN93WsflEx
JKdNOuS9JWj95j84WmLkgWugWjZcrgk11PL6WkN6cecDt8+jbmWjvQIDAQABo4IC
IDCCAhwwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1Ud
EwEB/wQCMAAwHQYDVR0OBBYEFFXeRi9gTjL3dXj8UCJJQeJ90UeeMB8GA1UdIwQY
MBaAFOernw8sM6BT015PeMiyhA471pIzMDMGCCsGAQUFBwEBBCcwJTAjBggrBgEF
BQcwAoYXaHR0cDovL3IxMy5pLmxlbmNyLm9yZy8wIAYDVR0RBBkwF4IVa3VtYS5s
YW4uZGRuc2dlZWsuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMC0GA1UdHwQmMCQw
IqAgoB6GHGh0dHA6Ly9yMTMuYy5sZW5jci5vcmcvOC5jcmwwggEKBgorBgEEAdZ5
AgQCBIH7BIH4APYAdQAWgy2r8KklDw/wOqVF/8i/yCPQh0v2BCkn+OcfMxP1+gAA
AZ1KyTc0AAAEAwBGMEQCIFgwfeRhONb6T5LOG5a3CEnv5uU9GgHReu3FgCbNWvaO
AiB4qoUik6olE6a7XgyMymRtow3pT+b51p8jdt+BaxswPAB9AKgmy+MKxjUSRlM/
4GXxTxnZbhkIE8Qd2W15ALMSPFUnAAABnUrJOMEACAAABQAFK3PIBAMARjBEAiAh
2KriLcSsAzvAqrucXzHSrZgfFf5tgwdSAYBbsUQxgAIgMhTKcEpKu31cvaY5rjEI
3CRiSD0zRDpz0muR3ED0Vi0wDQYJKoZIhvcNAQELBQADggEBADbjfbibh5H8hw6L
2KKxOcEGi787TIgm058gYlsm/2skqK1VqvS3Qmoj5IA05Yr5QpMFQFf6Z1kAy78P
DH8qfadIgAU2Nbe1cK9o5f4LhTU9wM58C9Ti7e5aiNHA1UCsrwnvJnH523uxEVcG
HCrne4Bewvtpfyb6M1RoRp3W4lHS4d7thHm6LXLEEJgBCFA5Yz6ez6mtainST5sU
6j4s+Jt5BQ2zTka2y2ao18OTfkeLtGqUDfB3oZWMNqK/m6m90FKTKYSTyoBtdESc
nq9c8G6psGHa8K0O0t+cPwXHZQlZi2nAVN2UhV3GrwfAakzw3Bu31z8nS8OoFxRv
ssZpBGM=
-----END CERTIFICATE-----
Version: 2
Serial Number: 05:86:0a:1e:7a:66:3c:3a:54:3c:98:da:38:f2:bd:dd:f4:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: /C=US/O=Let's Encrypt/CN=R13
Not valid before: Apr 1 19:44:43 2026 GMT
Not valid after: Jun 30 19:44:42 2026 GMT
Subject: /CN=kuma.lan.ddnsgeek.com
Public Key Algorithm: NULL
RSA Public Key: (4096 bit)
RSA Public-Key: (4096 bit)
Modulus:
00:b6:6c:dc:b9:42:36:84:e7:62:86:94:70:f2:8a:
08:30:32:6d:18:51:4d:52:94:05:2b:1f:50:30:9f:
77:9f:2e:79:d4:d8:22:ae:17:f3:53:a4:b3:f6:6a:
19:2d:ec:9b:3f:6d:44:52:1c:98:08:48:8e:c3:f2:
d4:37:b9:3d:7e:0f:b6:59:8e:58:d8:91:a5:d0:85:
da:cb:45:d0:92:34:23:43:8b:77:26:04:47:11:59:
40:fc:72:74:b6:8d:76:60:c1:5e:82:f6:c5:36:9d:
78:31:88:33:44:9c:5c:b7:00:e2:69:a6:e5:28:e9:
35:36:7a:2a:5f:60:c1:f0:b3:3f:85:23:3f:e0:84:
3d:d9:95:37:fe:4f:c1:ce:ef:47:06:40:b0:51:40:
ff:f8:72:ed:4a:73:9b:0b:fb:10:ce:93:cf:12:07:
ff:75:8f:a1:5a:a5:49:97:ae:c2:da:21:a2:de:5f:
b1:10:9b:b6:32:da:90:64:69:77:bf:e9:4c:73:36:
e0:80:00:fa:b1:b6:4b:8c:3e:2f:53:72:69:bb:5f:
d7:ea:a3:71:2b:31:c7:3c:06:d6:6a:78:67:29:d9:
9c:26:d6:c8:37:a5:88:c5:32:34:cb:4e:c1:80:73:
17:cc:05:6b:d0:8b:c9:e1:43:dd:80:87:e5:66:ec:
ed:12:75:d5:04:14:d4:6f:a0:e8:a8:1b:d7:51:df:
60:be:bf:ac:34:13:4d:38:52:9b:7e:05:8d:14:5a:
df:44:81:4a:c2:e0:8f:1a:c0:60:6b:2f:8f:c4:e6:
a8:27:97:a1:e2:e6:1a:36:43:a3:f1:db:cc:9b:22:
ea:12:43:b6:9e:26:d4:bc:83:99:c1:8c:2c:e9:e6:
7f:35:51:c4:ed:0f:df:25:85:92:96:45:12:4e:6c:
53:e1:f5:83:ff:97:16:33:e3:51:92:22:b4:60:06:
0e:8f:b7:15:3f:d6:72:74:ad:96:6f:7f:08:ae:8a:
0c:6b:35:da:0c:a3:9e:b5:82:16:b2:77:ad:3b:19:
56:74:24:f2:af:63:bb:1b:c4:49:09:e9:74:38:e4:
4d:8c:3f:92:85:f0:46:8f:76:f7:3e:57:6a:cf:f4:
38:f2:f3:4f:83:5d:4a:b9:16:c9:a1:33:e6:0a:d4:
57:c2:c3:a4:bd:70:de:c9:44:3f:45:d7:06:58:99:
d1:ed:1d:d4:bb:36:6a:5a:83:6f:fc:c3:8d:94:25:
08:0d:f7:75:ac:7e:51:31:24:a7:4d:3a:e4:bd:25:
68:fd:e6:3f:38:5a:62:e4:81:6b:a0:5a:36:5c:ae:
09:35:d4:f2:fa:5a:43:7a:71:e7:03:b7:cf:a3:6e:
65:a3:bd
Exponent: 65537 (0x10001)
X509v3 Extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
55:DE:46:2F:60:4E:32:F7:75:78:FC:50:22:49:41:E2:7D:D1:47:9E
X509v3 Authority Key Identifier:
E7:AB:9F:0F:2C:33:A0:53:D3:5E:4F:78:C8:B2:84:0E:3B:D6:92:33
Authority Information Access:
CA Issuers - URI:http://r13.i.lencr.org/
X509v3 Subject Alternative Name:
DNS:kuma.lan.ddnsgeek.com
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
X509v3 CRL Distribution Points:
Full Name:
URI:http://r13.c.lencr.org/8.crl
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 16:83:2D:AB:F0:A9:25:0F:0F:F0:3A:A5:45:FF:C8:BF:
C8:23:D0:87:4B:F6:04:29:27:F8:E7:1F:33:13:F5:FA
Timestamp : Apr 1 20:43:14.100 2026 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:20:58:30:7D:E4:61:38:D6:FA:4F:92:CE:1B:
96:B7:08:49:EF:E6:E5:3D:1A:01:D1:7A:ED:C5:80:26:
CD:5A:F6:8E:02:20:78:AA:85:22:93:AA:25:13:A6:BB:
5E:0C:8C:CA:64:6D:A3:0D:E9:4F:E6:F9:D6:9F:23:76:
DF:81:6B:1B:30:3C
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : A8:26:CB:E3:0A:C6:35:12:46:53:3F:E0:65:F1:4F:19:
D9:6E:19:08:13:C4:1D:D9:6D:79:00:B3:12:3C:55:27
Timestamp : Apr 1 20:43:14.497 2026 GMT
Extensions: 00:00:05:00:05:2B:73:C8
Signature : ecdsa-with-SHA256
30:44:02:20:21:D8:AA:E2:2D:C4:AC:03:3B:C0:AA:BB:
9C:5F:31:D2:AD:98:1F:15:FE:6D:83:07:52:01:80:5B:
B1:44:31:80:02:20:32:14:CA:70:4A:4A:BB:7D:5C:BD:
A6:39:AE:31:08:DC:24:62:48:3D:33:44:3A:73:D2:6B:
91:DC:40:F4:56:2D
Verify m:
unable to get local issuer certificate
SSL Certificate:
Signature Algorithm: sha256WithRSAEncryption
RSA Key Strength: 4096
Subject: kuma.lan.ddnsgeek.com
Altnames: DNS:kuma.lan.ddnsgeek.com
Issuer: R13
Not valid before: Apr 1 19:44:43 2026 GMT
Not valid after: Jun 30 19:44:42 2026 GMT
```
@@ -1,9 +0,0 @@
```bash
ffuf -u https://kuma.lan.ddnsgeek.com:443/ -t 10 -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-110000.txt -H "Host: FUZZ.kuma.lan.ddnsgeek.com" -mc all -fs 19 -r -noninteractive -s | tee "/root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_kuma.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt"
```
[/root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_kuma.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt](file:///root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_kuma.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt):
```
```
@@ -1,154 +0,0 @@
```bash
nikto -ask=no -Tuning=x4567890ac -nointeractive -host https://kuma.lan.ddnsgeek.com:443 2>&1 | tee "/root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt"
```
[/root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt](file:///root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt):
```
- Nikto v2.6.0
---------------------------------------------------------------------------
+ Your Nikto installation is out of date.
+ Target IP: 101.180.16.105
+ Target Hostname: kuma.lan.ddnsgeek.com
+ Target Port: 443
---------------------------------------------------------------------------
+ SSL Info: Subject: /CN=kuma.lan.ddnsgeek.com
CN: kuma.lan.ddnsgeek.com
SAN: kuma.lan.ddnsgeek.com
Ciphers: TLS_CHACHA20_POLY1305_SHA256
Issuer: /C=US/O=Let's Encrypt/CN=R13
+ Platform: Unknown
+ Start Time: 2026-04-05 08:06:30 (GMT0)
---------------------------------------------------------------------------
+ Server: No banner retrieved
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 79 requests (~1% complete, ~1.8 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 81 requests (~1% complete, ~1.8 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 83 requests (~1% complete, ~1.7 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 85 requests (~1% complete, ~1.7 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 87 requests (~1% complete, ~1.7 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 89 requests (~1% complete, ~1.7 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 91 requests (~1% complete, ~1.6 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 93 requests (~1% complete, ~1.6 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 95 requests (~1% complete, ~1.6 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 97 requests (~1% complete, ~1.6 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 99 requests (~1% complete, ~1.6 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 101 requests (~1% complete, ~1.5 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 103 requests (~2% complete, ~1.5 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 105 requests (~2% complete, ~1.5 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 107 requests (~2% complete, ~1.5 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 109 requests (~2% complete, ~1.5 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 111 requests (~2% complete, ~1.5 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 113 requests (~2% complete, ~1.5 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 115 requests (~2% complete, ~1.4 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 117 requests (~2% complete, ~1.4 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 119 requests (~2% complete, ~1.4 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 121 requests (~2% complete, ~1.4 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 123 requests (~2% complete, ~1.4 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 125 requests (~2% complete, ~1.4 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 127 requests (~2% complete, ~1.4 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 129 requests (~2% complete, ~1.4 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 131 requests (~2% complete, ~1.3 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 133 requests (~2% complete, ~1.3 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 135 requests (~2% complete, ~1.3 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 137 requests (~2% complete, ~1.3 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 139 requests (~2% complete, ~1.3 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ Scan terminated: 50 errors and 0 items reported on the remote host
+ End Time: 2026-04-05 08:07:23 (GMT0) (53 seconds)
---------------------------------------------------------------------------
+ 1 host(s) tested
```
@@ -1,133 +0,0 @@
```bash
whatweb --color=never --no-errors -a 3 -v https://kuma.lan.ddnsgeek.com:443 2>&1
```
[/root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_whatweb.txt](file:///root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_whatweb.txt):
```
WhatWeb report for https://kuma.lan.ddnsgeek.com:443
Status : 302 Found
Title : <None>
IP : 101.180.16.105
Country : AUSTRALIA, AU
Summary : RedirectLocation[/dashboard], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[x-content-type-options], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
Detected Plugins:
[ RedirectLocation ]
HTTP Server string location. used with http-status 301 and
302
String : /dashboard (from location)
[ Strict-Transport-Security ]
Strict-Transport-Security is an HTTP header that restricts
a web browser from accessing a website without the security
of the HTTPS protocol.
String : max-age=15552000; includeSubDomains; preload
[ UncommonHeaders ]
Uncommon HTTP server headers. The blacklist includes all
the standard headers and many non standard but common ones.
Interesting but fairly common headers should have their own
plugins, eg. x-powered-by, server and x-aspnet-version.
Info about headers can be found at www.http-stats.com
String : x-content-type-options (from headers)
[ X-Frame-Options ]
This plugin retrieves the X-Frame-Options value from the
HTTP header. - More Info:
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
aspx
String : SAMEORIGIN
[ X-XSS-Protection ]
This plugin retrieves the X-XSS-Protection value from the
HTTP header. - More Info:
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
aspx
String : 1; mode=block
HTTP Headers:
HTTP/1.1 302 Found
Content-Length: 32
Content-Type: text/plain; charset=utf-8
Date: Sun, 05 Apr 2026 08:07:00 GMT
Location: /dashboard
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
Vary: Accept
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Connection: close
WhatWeb report for https://kuma.lan.ddnsgeek.com/dashboard
Status : 200 OK
Title : Uptime Kuma
IP : 101.180.16.105
Country : AUSTRALIA, AU
Summary : HTML5, Script[module], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[x-content-type-options], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
Detected Plugins:
[ HTML5 ]
HTML version 5, detected by the doctype declaration
[ Script ]
This plugin detects instances of script HTML elements and
returns the script language/type.
String : module
[ Strict-Transport-Security ]
Strict-Transport-Security is an HTTP header that restricts
a web browser from accessing a website without the security
of the HTTPS protocol.
String : max-age=15552000; includeSubDomains; preload
[ UncommonHeaders ]
Uncommon HTTP server headers. The blacklist includes all
the standard headers and many non standard but common ones.
Interesting but fairly common headers should have their own
plugins, eg. x-powered-by, server and x-aspnet-version.
Info about headers can be found at www.http-stats.com
String : x-content-type-options (from headers)
[ X-Frame-Options ]
This plugin retrieves the X-Frame-Options value from the
HTTP header. - More Info:
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
aspx
String : SAMEORIGIN
[ X-XSS-Protection ]
This plugin retrieves the X-XSS-Protection value from the
HTTP header. - More Info:
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
aspx
String : 1; mode=block
HTTP Headers:
HTTP/1.1 200 OK
Content-Length: 2444
Content-Type: text/html; charset=utf-8
Date: Sun, 05 Apr 2026 08:07:15 GMT
Etag: W/"98c-RxUaxZHFr+/FSabMqXO58T7mz+U"
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Connection: close
```
@@ -7,7 +7,7 @@ curl -sSikf http://kuma.lan.ddnsgeek.com:80/robots.txt
```
HTTP/1.1 301 Moved Permanently
Location: https://kuma.lan.ddnsgeek.com/robots.txt
Date: Sun, 05 Apr 2026 08:05:08 GMT
Date: Tue, 14 Apr 2026 03:42:33 GMT
Content-Length: 17
Moved Permanently
@@ -7,7 +7,7 @@ curl -sSik http://kuma.lan.ddnsgeek.com:80/
```
HTTP/1.1 301 Moved Permanently
Location: https://kuma.lan.ddnsgeek.com/
Date: Sun, 05 Apr 2026 08:05:08 GMT
Date: Tue, 14 Apr 2026 03:42:33 GMT
Content-Length: 17
Moved Permanently
@@ -290,45 +290,5 @@ Configuration {
unique: false,
response_size_limit: 4194304,
}
302 GET 1l 4w 89c https://kuma.lan.ddnsgeek.com/.well-known/change-password => https://github.com/louislam/uptime-kuma/wiki/Reset-Password-via-CLI
200 GET 4l 33w 29264c https://kuma.lan.ddnsgeek.com/favicon.ico
200 GET 2l 4w 25c https://kuma.lan.ddnsgeek.com/robots.txt
200 GET 1l 1w 141c https://kuma.lan.ddnsgeek.com/api/status-page/default/manifest.json
200 GET 9l 104w 1168c https://kuma.lan.ddnsgeek.com/icon.svg
200 GET 6l 2252w 131072c https://kuma.lan.ddnsgeek.com/assets/index-BBxTfFCS.js
200 GET 1l 2817w 114688c https://kuma.lan.ddnsgeek.com/assets/index-legacy-DAPjczQA.js
200 GET 6l 4304w 229376c https://kuma.lan.ddnsgeek.com/assets/index-bOVKKa1O.css
200 GET 1l 2525w 131072c https://kuma.lan.ddnsgeek.com/assets/polyfills-legacy-CC6RtsPR.js
200 GET 41l 139w 4221c https://kuma.lan.ddnsgeek.com/status
404 GET 1l 3w 15c https://kuma.lan.ddnsgeek.com/upload/
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/[ => https://kuma.lan.ddnsgeek.com/[
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/] => https://kuma.lan.ddnsgeek.com/]
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/[.txt => https://kuma.lan.ddnsgeek.com/[.txt
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/].txt => https://kuma.lan.ddnsgeek.com/].txt
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/[.html => https://kuma.lan.ddnsgeek.com/[.html
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/].html => https://kuma.lan.ddnsgeek.com/].html
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/[.php => https://kuma.lan.ddnsgeek.com/[.php
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/[.asp => https://kuma.lan.ddnsgeek.com/[.asp
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/[.aspx => https://kuma.lan.ddnsgeek.com/[.aspx
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/[.jsp => https://kuma.lan.ddnsgeek.com/[.jsp
401 GET 0l 0w 0c https://kuma.lan.ddnsgeek.com/metrics
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/plain] => https://kuma.lan.ddnsgeek.com/plain]
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/plain].txt => https://kuma.lan.ddnsgeek.com/plain].txt
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/plain].html => https://kuma.lan.ddnsgeek.com/plain].html
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/plain].php => https://kuma.lan.ddnsgeek.com/plain].php
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/plain].asp => https://kuma.lan.ddnsgeek.com/plain].asp
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/plain].aspx => https://kuma.lan.ddnsgeek.com/plain].aspx
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/plain].jsp => https://kuma.lan.ddnsgeek.com/plain].jsp
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/quote] => https://kuma.lan.ddnsgeek.com/quote]
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/quote].txt => https://kuma.lan.ddnsgeek.com/quote].txt
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/quote].html => https://kuma.lan.ddnsgeek.com/quote].html
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/quote].php => https://kuma.lan.ddnsgeek.com/quote].php
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/quote].asp => https://kuma.lan.ddnsgeek.com/quote].asp
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/quote].aspx => https://kuma.lan.ddnsgeek.com/quote].aspx
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/quote].jsp => https://kuma.lan.ddnsgeek.com/quote].jsp
200 GET 41l 139w 4221c https://kuma.lan.ddnsgeek.com/STATUS
200 GET 2l 4w 25c https://kuma.lan.ddnsgeek.com/Robots.txt
200 GET 41l 139w 4221c https://kuma.lan.ddnsgeek.com/Status
401 GET 0l 0w 0c https://kuma.lan.ddnsgeek.com/Metrics
```
@@ -7,7 +7,7 @@ curl -sSikf http://kuma.lan.ddnsgeek.com:80/.well-known/security.txt
```
HTTP/1.1 301 Moved Permanently
Location: https://kuma.lan.ddnsgeek.com/.well-known/security.txt
Date: Sun, 05 Apr 2026 08:05:08 GMT
Date: Tue, 14 Apr 2026 03:42:33 GMT
Content-Length: 17
Moved Permanently
@@ -5,20 +5,28 @@ nmap -vv --reason -Pn -T4 -sV -p 80 --script="banner,(http* or ssl*) and not (br
[/root/results/kuma.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt](file:///root/results/kuma.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt):
```
# Nmap 7.98 scan initiated Sun Apr 5 08:05:09 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/kuma.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml kuma.lan.ddnsgeek.com
# Nmap 7.99 scan initiated Tue Apr 14 03:42:33 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/kuma.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml kuma.lan.ddnsgeek.com
Nmap scan report for kuma.lan.ddnsgeek.com (101.180.16.105)
Host is up, received user-set (0.042s latency).
Host is up, received user-set (0.030s latency).
rDNS record for 101.180.16.105: cpe-101-180-16-105.nb10.nsw.asp.telstra.net
Scanned at 2026-04-05 08:05:50 UTC for 797s
Scanned at 2026-04-14 03:42:36 UTC for 207s
Bug in http-security-headers: no string output.
PORT STATE SERVICE REASON VERSION
80/tcp open http syn-ack ttl 53 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|_http-chrono: Request times for /; avg: 1116.60ms; min: 752.39ms; max: 1373.17ms
|_http-malware-host: Host appears to be clean
|_http-date: Tue, 14 Apr 2026 03:42:49 GMT; -1s from local time.
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|_http-title: Did not follow redirect to https://kuma.lan.ddnsgeek.com/
|_http-comments-displayer: Couldn't find any comments.
|_http-errors: Couldn't find any error pages.
|_http-chrono: Request times for /; avg: 339.90ms; min: 222.68ms; max: 427.92ms
|_http-feed: Couldn't find any feeds.
|_http-fetch: Please enter the complete path of the directory to save data in.
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|_http-mobileversion-checker: No mobile version detected.
| http-useragent-tester:
| Status for browser useragent: 404
| Redirected To: /dashboard
| Status for browser useragent: false
| Redirected To: https://kuma.lan.ddnsgeek.com/
| Allowed User Agents:
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
| libwww
@@ -37,19 +45,21 @@ PORT STATE SERVICE REASON VERSION
| PECL::HTTP
| Wget/1.13.4 (linux-gnu)
|_ WWW-Mechanize/1.34
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|_http-fetch: Please enter the complete path of the directory to save data in.
|_http-comments-displayer: Couldn't find any comments.
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
| http-headers:
| Location: https://kuma.lan.ddnsgeek.com/
| Date: Tue, 14 Apr 2026 03:42:52 GMT
| Content-Length: 17
| Connection: close
|
|_ (Request type: GET)
| http-vhosts:
|_128 names had status 308
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
|_http-malware-host: Host appears to be clean
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|_http-date: Sun, 05 Apr 2026 08:06:35 GMT; -5s from local time.
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|_http-dombased-xss: Couldn't find any DOM based XSS.
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|_http-mobileversion-checker: No mobile version detected.
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|_http-errors: Couldn't find any error pages.
|_http-csrf: Couldn't find any CSRF vulnerabilities.
| http-sitemap-generator:
| Directory structure:
| Longest directory structure:
@@ -57,24 +67,14 @@ PORT STATE SERVICE REASON VERSION
| Dir: /
| Total files found (by extension):
|_
| http-vhosts:
|_128 names had status 308
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
|_http-title: Did not follow redirect to https://kuma.lan.ddnsgeek.com/
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
| http-headers:
| Location: https://kuma.lan.ddnsgeek.com/
| Date: Sun, 05 Apr 2026 08:06:53 GMT
| Content-Length: 17
| Connection: close
|
|_ (Request type: GET)
|_http-feed: Couldn't find any feeds.
|_http-dombased-xss: Couldn't find any DOM based XSS.
|_http-referer-checker: Couldn't find any cross-domain scripts.
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
Read data files from: /usr/share/nmap
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 08:19:08 2026 -- 1 IP address (1 host up) scanned in 840.61 seconds
# Nmap done at Tue Apr 14 03:46:32 2026 -- 1 IP address (1 host up) scanned in 239.03 seconds
```
@@ -5,6 +5,25 @@ nikto -ask=no -Tuning=x4567890ac -nointeractive -host http://kuma.lan.ddnsgeek.c
[/root/results/kuma.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt](file:///root/results/kuma.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt):
```
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
LANGUAGE = (unset),
LC_ALL = (unset),
LC_CTYPE = (unset),
LC_NUMERIC = "en_AU.UTF-8",
LC_COLLATE = (unset),
LC_TIME = "en_AU.UTF-8",
LC_MESSAGES = (unset),
LC_MONETARY = "en_AU.UTF-8",
LC_ADDRESS = "en_AU.UTF-8",
LC_IDENTIFICATION = "en_AU.UTF-8",
LC_MEASUREMENT = "en_AU.UTF-8",
LC_PAPER = "en_AU.UTF-8",
LC_TELEPHONE = "en_AU.UTF-8",
LC_NAME = "en_AU.UTF-8",
LANG = "en_US.UTF-8"
are supported and installed on your system.
perl: warning: Falling back to a fallback locale ("en_US.UTF-8").
- Nikto v2.6.0
---------------------------------------------------------------------------
+ Your Nikto installation is out of date.
@@ -12,20 +31,20 @@ nikto -ask=no -Tuning=x4567890ac -nointeractive -host http://kuma.lan.ddnsgeek.c
+ Target Hostname: kuma.lan.ddnsgeek.com
+ Target Port: 80
+ Platform: Unknown
+ Start Time: 2026-04-05 08:06:25 (GMT0)
+ Start Time: 2026-04-14 03:42:40 (GMT0)
---------------------------------------------------------------------------
+ Server: No banner retrieved
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
+ [013587] /: Suggested security header missing: strict-transport-security. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
+ [013587] /: Suggested security header missing: x-content-type-options. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
+ [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
+ [013587] /: Suggested security header missing: strict-transport-security. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
+ [999979] http://100.100.100.200/latest/meta-data/: IP address found in the 'location' header. The IP is "100.100.100.200". See: https://portswigger.net/kb/issues/00600300_private-ip-addresses-disclosed
+ [007342] /: X-Frame-Options header is deprecated and was replaced with the Content-Security-Policy HTTP header with the frame-ancestors directive. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-Frame-Options
+ [007352] /: The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type. See: https://www.netsparker.com/web-vulnerability-scanner/vulnerabilities/missing-content-type-header/
+ 7900 requests: 16 errors and 8 items reported on the remote host
+ End Time: 2026-04-05 08:47:07 (GMT0) (2442 seconds)
+ End Time: 2026-04-14 04:08:35 (GMT0) (1555 seconds)
---------------------------------------------------------------------------
+ 1 host(s) tested
@@ -23,133 +23,10 @@ Detected Plugins:
HTTP Headers:
HTTP/1.1 301 Moved Permanently
Location: https://kuma.lan.ddnsgeek.com/
Date: Sun, 05 Apr 2026 08:06:59 GMT
Date: Tue, 14 Apr 2026 03:42:46 GMT
Content-Length: 17
Connection: close
WhatWeb report for https://kuma.lan.ddnsgeek.com/
Status : 302 Found
Title : <None>
IP : 101.180.16.105
Country : AUSTRALIA, AU
Summary : RedirectLocation[/dashboard], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[x-content-type-options], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
Detected Plugins:
[ RedirectLocation ]
HTTP Server string location. used with http-status 301 and
302
String : /dashboard (from location)
[ Strict-Transport-Security ]
Strict-Transport-Security is an HTTP header that restricts
a web browser from accessing a website without the security
of the HTTPS protocol.
String : max-age=15552000; includeSubDomains; preload
[ UncommonHeaders ]
Uncommon HTTP server headers. The blacklist includes all
the standard headers and many non standard but common ones.
Interesting but fairly common headers should have their own
plugins, eg. x-powered-by, server and x-aspnet-version.
Info about headers can be found at www.http-stats.com
String : x-content-type-options (from headers)
[ X-Frame-Options ]
This plugin retrieves the X-Frame-Options value from the
HTTP header. - More Info:
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
aspx
String : SAMEORIGIN
[ X-XSS-Protection ]
This plugin retrieves the X-XSS-Protection value from the
HTTP header. - More Info:
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
aspx
String : 1; mode=block
HTTP Headers:
HTTP/1.1 302 Found
Content-Length: 32
Content-Type: text/plain; charset=utf-8
Date: Sun, 05 Apr 2026 08:07:14 GMT
Location: /dashboard
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
Vary: Accept
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Connection: close
WhatWeb report for https://kuma.lan.ddnsgeek.com/dashboard
Status : 200 OK
Title : Uptime Kuma
IP : 101.180.16.105
Country : AUSTRALIA, AU
Summary : HTML5, Script[module], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[x-content-type-options], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
Detected Plugins:
[ HTML5 ]
HTML version 5, detected by the doctype declaration
[ Script ]
This plugin detects instances of script HTML elements and
returns the script language/type.
String : module
[ Strict-Transport-Security ]
Strict-Transport-Security is an HTTP header that restricts
a web browser from accessing a website without the security
of the HTTPS protocol.
String : max-age=15552000; includeSubDomains; preload
[ UncommonHeaders ]
Uncommon HTTP server headers. The blacklist includes all
the standard headers and many non standard but common ones.
Interesting but fairly common headers should have their own
plugins, eg. x-powered-by, server and x-aspnet-version.
Info about headers can be found at www.http-stats.com
String : x-content-type-options (from headers)
[ X-Frame-Options ]
This plugin retrieves the X-Frame-Options value from the
HTTP header. - More Info:
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
aspx
String : SAMEORIGIN
[ X-XSS-Protection ]
This plugin retrieves the X-XSS-Protection value from the
HTTP header. - More Info:
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
aspx
String : 1; mode=block
HTTP Headers:
HTTP/1.1 200 OK
Content-Length: 2444
Content-Type: text/html; charset=utf-8
Date: Sun, 05 Apr 2026 08:07:30 GMT
Etag: W/"98c-RxUaxZHFr+/FSabMqXO58T7mz+U"
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Connection: close
```
@@ -2,8 +2,6 @@ nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN "/root/res
nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN "/root/results/kuma.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt" -oX "/root/results/kuma.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml" kuma.lan.ddnsgeek.com
nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN "/root/results/kuma.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt" -oX "/root/results/kuma.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml" kuma.lan.ddnsgeek.com
feroxbuster -u http://kuma.lan.ddnsgeek.com:80/ -t 10 -w /root/.local/share/AutoRecon/wordlists/dirbuster.txt -x "txt,html,php,asp,aspx,jsp" -v -k -n -q -e -r -o "/root/results/kuma.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_feroxbuster_dirbuster.txt"
curl -sSikf http://kuma.lan.ddnsgeek.com:80/.well-known/security.txt
@@ -34,7 +32,7 @@ nmap -vv --reason -Pn -T4 -sV -p 443 --script="banner,(http* or ssl*) and not (b
sslscan --show-certificate --no-colour kuma.lan.ddnsgeek.com:443 2>&1
ffuf -u https://kuma.lan.ddnsgeek.com:443/ -t 10 -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-110000.txt -H "Host: FUZZ.kuma.lan.ddnsgeek.com" -mc all -fs 19 -r -noninteractive -s | tee "/root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_kuma.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt"
whatweb --color=never --no-errors -a 3 -v https://kuma.lan.ddnsgeek.com:443 2>&1
nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN "/root/results/kuma.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt" -oX "/root/results/kuma.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml" kuma.lan.ddnsgeek.com
@@ -1,30 +0,0 @@
{
"host": "kuma.lan.ddnsgeek.com",
"generated_at": "2026-04-07T03:49:38.723646+00:00",
"required_reproduction_step_before_ticket": "Before creating a ticket, reproduce vulnerable behavior directly (e.g., crafted request causing data exposure, traversal read, or exploitable crash) and attach request/response proof. Banner or script signature matches alone are insufficient.",
"findings": [
{
"host": "kuma.lan.ddnsgeek.com",
"cve": "CVE-2017-9798",
"affected_host": "kuma.lan.ddnsgeek.com",
"endpoint": "unknown",
"product_version_evidence": [
"http syn-ack ttl 52 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)",
"http syn-ack ttl 53 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)",
"ssl/http syn-ack ttl 52 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)",
"ssl/http syn-ack ttl 53 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)"
],
"exploit_precondition": "Target must run Apache HTTP Server with mod_http2 and be susceptible to OptionBleed conditions.",
"reproducibility": "not-reproduced",
"disposition": "needs-manual-test",
"disposition_rationale": "Signature-based identification only; exploitability depends on module/configuration and requires targeted validation.",
"required_reproduction_step_before_ticket": "Before creating a ticket, reproduce vulnerable behavior directly (e.g., crafted request causing data exposure, traversal read, or exploitable crash) and attach request/response proof. Banner or script signature matches alone are insufficient.",
"evidence_sources": [
{
"file": "results/kuma.lan.ddnsgeek.com/scans/_patterns.log",
"match_count": 31
}
]
}
]
}
@@ -1,8 +0,0 @@
# CVE triage sheet - kuma.lan.ddnsgeek.com
Generated (UTC): 2026-04-07T03:49:38.723646+00:00
| CVE | Affected host | Endpoint | Product/version evidence | Exploit precondition | Reproducibility | Disposition |
|---|---|---|---|---|---|---|
| CVE-2017-9798 | kuma.lan.ddnsgeek.com | `unknown` | http syn-ack ttl 52 Golang net/http server (Go-IPFS json-rpc or InfluxDB API); http syn-ack ttl 53 Golang net/http server (Go-IPFS json-rpc or InfluxDB API) | Target must run Apache HTTP Server with mod_http2 and be susceptible to OptionBleed conditions. | not-reproduced | **needs-manual-test** |
| | | | | | | Required reproduction gate: Before creating a ticket, reproduce vulnerable behavior directly (e.g., crafted request causing data exposure, traversal read, or exploitable crash) and attach request/response proof. Banner or script signature matches alone are insufficient. |
@@ -1,23 +1,15 @@
# Nmap 7.98 scan initiated Sun Apr 5 08:04:44 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN /root/results/kuma.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml kuma.lan.ddnsgeek.com
adjust_timeouts2: packet supposedly had rtt of -984240 microseconds. Ignoring time.
adjust_timeouts2: packet supposedly had rtt of -1004694 microseconds. Ignoring time.
adjust_timeouts2: packet supposedly had rtt of -1004694 microseconds. Ignoring time.
adjust_timeouts2: packet supposedly had rtt of -806844 microseconds. Ignoring time.
adjust_timeouts2: packet supposedly had rtt of -806844 microseconds. Ignoring time.
# Nmap 7.99 scan initiated Tue Apr 14 03:42:34 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN /root/results/kuma.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml kuma.lan.ddnsgeek.com
Nmap scan report for kuma.lan.ddnsgeek.com (101.180.16.105)
Host is up, received user-set (0.053s latency).
Host is up, received user-set (0.039s latency).
rDNS record for 101.180.16.105: cpe-101-180-16-105.nb10.nsw.asp.telstra.net
Scanned at 2026-04-05 08:04:51 UTC for 381s
Scanned at 2026-04-14 03:42:37 UTC for 132s
Not shown: 65533 filtered tcp ports (no-response)
PORT STATE SERVICE REASON VERSION
80/tcp open http syn-ack ttl 52 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
PORT STATE SERVICE REASON VERSION
80/tcp open http syn-ack ttl 53 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
|_http-title: Did not follow redirect to https://kuma.lan.ddnsgeek.com/
443/tcp open ssl/http syn-ack ttl 53 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|_ssl-date: TLS randomness does not represent time
| http-methods:
|_ Supported Methods: GET HEAD POST
443/tcp open ssl/https syn-ack ttl 53
| ssl-cert: Subject: commonName=kuma.lan.ddnsgeek.com
| Subject Alternative Name: DNS:kuma.lan.ddnsgeek.com
| Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
@@ -64,22 +56,19 @@ PORT STATE SERVICE REASON VERSION
| nq9c8G6psGHa8K0O0t+cPwXHZQlZi2nAVN2UhV3GrwfAakzw3Bu31z8nS8OoFxRv
| ssZpBGM=
|_-----END CERTIFICATE-----
| http-title: Uptime Kuma
|_Requested resource was /dashboard
| http-robots.txt: 1 disallowed entry
|_/
|_http-favicon: Unknown favicon MD5: 5EA4B467D984433398E1037469F13214
|_ssl-date: TLS randomness does not represent time
|_http-title: Site doesn't have a title (text/plain; charset=utf-8).
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose|router|storage-misc
Running (JUST GUESSING): Linux 4.X|5.X|6.X|2.6.X|3.X (93%), MikroTik RouterOS 7.X (93%), Synology DiskStation Manager 5.X (85%)
OS CPE: cpe:/o:linux:linux_kernel:4 cpe:/o:linux:linux_kernel:5 cpe:/o:mikrotik:routeros:7 cpe:/o:linux:linux_kernel:5.6.3 cpe:/o:linux:linux_kernel:6.0 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3 cpe:/a:synology:diskstation_manager:5.2
Device type: general purpose|router
Running (JUST GUESSING): Linux 4.X|5.X|6.X|2.6.X|3.X (93%), MikroTik RouterOS 7.X (92%)
OS CPE: cpe:/o:linux:linux_kernel:4 cpe:/o:linux:linux_kernel:5 cpe:/o:linux:linux_kernel:6.0 cpe:/o:mikrotik:routeros:7 cpe:/o:linux:linux_kernel:5.6.3 cpe:/o:linux:linux_kernel:2.6 cpe:/o:linux:linux_kernel:3
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
Aggressive OS guesses: Linux 4.15 - 5.19 (93%), Linux 4.19 (93%), Linux 5.0 - 5.14 (93%), OpenWrt 21.02 (Linux 5.4) (93%), MikroTik RouterOS 7.2 - 7.5 (Linux 5.6.3) (93%), Linux 6.0 (92%), Linux 5.4 - 5.10 (87%), Linux 2.6.32 (87%), Linux 2.6.32 - 3.13 (87%), Linux 3.10 (87%)
Aggressive OS guesses: Linux 4.15 - 5.19 (93%), Linux 4.19 (92%), Linux 5.0 - 5.14 (92%), OpenWrt 21.02 (Linux 5.4) (92%), Linux 6.0 (92%), MikroTik RouterOS 7.2 - 7.5 (Linux 5.6.3) (92%), Linux 6.15 (89%), Linux 2.6.32 - 3.13 (87%), Linux 3.2 - 4.14 (87%), Linux 2.6.32 - 3.10 (86%)
No exact OS matches for host (test conditions non-ideal).
TCP/IP fingerprint:
SCAN(V=7.98%E=4%D=4/5%OT=80%CT=%CU=%PV=Y%DS=10%DC=T%G=N%TM=69D21921%P=x86_64-pc-linux-gnu)
SEQ(SP=103%GCD=1%ISR=10A%TI=Z%TS=A)
SEQ(SP=103%GCD=1%ISR=10C%TI=Z%TS=A)
SCAN(V=7.99%E=4%D=4/14%OT=80%CT=%CU=%PV=Y%DS=10%DC=T%G=N%TM=69DDB831%P=x86_64-pc-linux-gnu)
SEQ(SP=102%GCD=1%ISR=10D%TI=Z%TS=A)
SEQ(SP=F4%GCD=1%ISR=10F%TI=Z%TS=A)
OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)
WIN(W1=FE88%W2=FE88%W3=FE88%W4=FE88%W5=FE88%W6=FE88)
ECN(R=Y%DF=Y%TG=40%W=FAF0%O=M5B4NNSNW7%CC=Y%Q=)
@@ -90,24 +79,24 @@ T4(R=Y%DF=Y%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
U1(R=N)
IE(R=N)
Uptime guess: 6.448 days (since Sun Mar 29 21:26:28 2026)
Uptime guess: 37.080 days (since Sun Mar 8 01:49:42 2026)
Network Distance: 10 hops
TCP Sequence Prediction: Difficulty=259 (Good luck!)
TCP Sequence Prediction: Difficulty=258 (Good luck!)
IP ID Sequence Generation: All zeros
TRACEROUTE (using port 443/tcp)
HOP RTT ADDRESS
1 0.07 ms 10.216.0.161
2 0.23 ms 10.216.35.12
3 0.80 ms 10.216.32.2
4 10.87 ms lo0-0.gw2.syd1.au.linode.com (172.105.160.102)
5 0.25 ms ae29.r02.syd01.ien.netarch.akamai.com (104.70.113.22)
6 1.74 ms Bundle-Ether96.ken-edge903.sydney.telstra.net (203.54.231.153)
7 2.57 ms bundle-ether12.hay-core30.sydney.telstra.net (203.50.11.172)
8 0.84 ms ae10.ken-ice301.sydney.telstra.net (203.50.61.81)
9 0.90 ms gateway.nb10.sydney.asp.telstra.net (58.162.26.74)
10 38.80 ms cpe-101-180-16-105.nb10.nsw.asp.telstra.net (101.180.16.105)
1 0.12 ms 10.216.0.161
2 0.43 ms 10.216.35.12
3 0.81 ms 10.216.32.2
4 0.43 ms lo0-0.gw2.syd1.au.linode.com (172.105.160.102)
5 0.41 ms ae29.r02.syd01.ien.netarch.akamai.com (104.70.113.22)
6 1.97 ms Bundle-Ether96.ken-edge903.sydney.telstra.net (203.54.231.153)
7 2.50 ms bundle-ether12.hay-core30.sydney.telstra.net (203.50.11.172)
8 0.91 ms ae10.ken-ice301.sydney.telstra.net (203.50.61.81)
9 0.82 ms gateway.nb10.sydney.asp.telstra.net (58.162.26.74)
10 44.07 ms cpe-101-180-16-105.nb10.nsw.asp.telstra.net (101.180.16.105)
Read data files from: /usr/share/nmap
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 08:11:13 2026 -- 1 IP address (1 host up) scanned in 394.56 seconds
# Nmap done at Tue Apr 14 03:44:49 2026 -- 1 IP address (1 host up) scanned in 136.35 seconds
@@ -18,7 +18,7 @@
wpscan --url http://kuma.lan.ddnsgeek.com:80/ --no-update -e vp,vt,tt,cb,dbe,u,m --plugins-detection aggressive --plugins-version-detection aggressive -f cli-no-color 2>&1 | tee "/root/results/kuma.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_wpscan.txt"
[*] http on tcp/443
[*] https on tcp/443
[-] (feroxbuster) Multi-threaded recursive directory/file enumeration for web servers using various wordlists:
@@ -1,62 +0,0 @@
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
CVE Identified: CVE-2017-9798
@@ -1,19 +1,17 @@
# Nmap 7.98 scan initiated Sun Apr 5 08:04:18 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN /root/results/kuma.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml kuma.lan.ddnsgeek.com
# Nmap 7.99 scan initiated Tue Apr 14 03:41:47 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN /root/results/kuma.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml kuma.lan.ddnsgeek.com
Nmap scan report for kuma.lan.ddnsgeek.com (101.180.16.105)
Host is up, received user-set (0.040s latency).
Host is up, received user-set (0.038s latency).
rDNS record for 101.180.16.105: cpe-101-180-16-105.nb10.nsw.asp.telstra.net
Scanned at 2026-04-05 08:04:26 UTC for 39s
Scanned at 2026-04-14 03:41:48 UTC for 44s
Not shown: 998 filtered tcp ports (no-response)
PORT STATE SERVICE REASON VERSION
80/tcp open http syn-ack ttl 52 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
PORT STATE SERVICE REASON VERSION
80/tcp open http syn-ack ttl 52 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
|_http-title: Did not follow redirect to https://kuma.lan.ddnsgeek.com/
443/tcp open ssl/http syn-ack ttl 52 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
| http-robots.txt: 1 disallowed entry
|_/
| http-methods:
|_ Supported Methods: GET HEAD POST
443/tcp open ssl/https syn-ack ttl 53
|_http-title: Site doesn't have a title (text/plain; charset=utf-8).
|_ssl-date: TLS randomness does not represent time
| ssl-cert: Subject: commonName=kuma.lan.ddnsgeek.com
| Subject Alternative Name: DNS:kuma.lan.ddnsgeek.com
| Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
@@ -60,21 +58,17 @@ PORT STATE SERVICE REASON VERSION
| nq9c8G6psGHa8K0O0t+cPwXHZQlZi2nAVN2UhV3GrwfAakzw3Bu31z8nS8OoFxRv
| ssZpBGM=
|_-----END CERTIFICATE-----
|_ssl-date: TLS randomness does not represent time
| http-title: Uptime Kuma
|_Requested resource was /dashboard
|_http-favicon: Unknown favicon MD5: 5EA4B467D984433398E1037469F13214
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose|router
Running (JUST GUESSING): Linux 4.X|5.X|6.X|2.6.X|3.X (93%), MikroTik RouterOS 7.X (92%)
OS CPE: cpe:/o:linux:linux_kernel:4 cpe:/o:linux:linux_kernel:5 cpe:/o:mikrotik:routeros:7 cpe:/o:linux:linux_kernel:5.6.3 cpe:/o:linux:linux_kernel:6.0 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3
Device type: general purpose|router|storage-misc
Running (JUST GUESSING): Linux 4.X|5.X|6.X|2.6.X|3.X (93%), MikroTik RouterOS 7.X (93%), Synology DiskStation Manager 5.X (85%)
OS CPE: cpe:/o:linux:linux_kernel:4 cpe:/o:linux:linux_kernel:5 cpe:/o:mikrotik:routeros:7 cpe:/o:linux:linux_kernel:5.6.3 cpe:/o:linux:linux_kernel:6.0 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3 cpe:/a:synology:diskstation_manager:5.2
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
Aggressive OS guesses: Linux 4.15 - 5.19 (93%), Linux 5.0 - 5.14 (93%), Linux 4.19 (92%), OpenWrt 21.02 (Linux 5.4) (92%), MikroTik RouterOS 7.2 - 7.5 (Linux 5.6.3) (92%), Linux 6.0 (90%), Linux 2.6.32 (87%), Linux 2.6.32 - 3.13 (87%), Linux 3.10 - 4.11 (87%), Linux 3.2 - 4.14 (87%)
Aggressive OS guesses: Linux 4.15 - 5.19 (93%), Linux 4.19 (93%), Linux 5.0 - 5.14 (93%), OpenWrt 21.02 (Linux 5.4) (93%), MikroTik RouterOS 7.2 - 7.5 (Linux 5.6.3) (93%), Linux 6.0 (92%), Linux 6.15 (90%), Linux 5.4 - 5.10 (87%), Linux 2.6.32 (87%), Linux 2.6.32 - 3.13 (87%)
No exact OS matches for host (test conditions non-ideal).
TCP/IP fingerprint:
SCAN(V=7.98%E=4%D=4/5%OT=80%CT=%CU=%PV=Y%DS=10%DC=T%G=N%TM=69D217B1%P=x86_64-pc-linux-gnu)
SEQ(SP=105%GCD=1%ISR=101%TI=Z%TS=A)
SEQ(SP=105%GCD=1%ISR=10C%TI=Z%TS=A)
SCAN(V=7.99%E=4%D=4/14%OT=80%CT=%CU=%PV=Y%DS=10%DC=T%G=N%TM=69DDB7A8%P=x86_64-pc-linux-gnu)
SEQ(SP=102%GCD=1%ISR=10D%TI=Z%TS=A)
SEQ(SP=104%GCD=1%ISR=109%TI=Z%TS=A)
OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)
WIN(W1=FE88%W2=FE88%W3=FE88%W4=FE88%W5=FE88%W6=FE88)
ECN(R=Y%DF=Y%TG=40%W=FAF0%O=M5B4NNSNW7%CC=Y%Q=)
@@ -85,24 +79,24 @@ T4(R=Y%DF=Y%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
U1(R=N)
IE(R=N)
Uptime guess: 6.443 days (since Sun Mar 29 21:26:28 2026)
Uptime guess: 37.078 days (since Sun Mar 8 01:49:42 2026)
Network Distance: 10 hops
TCP Sequence Prediction: Difficulty=261 (Good luck!)
TCP Sequence Prediction: Difficulty=260 (Good luck!)
IP ID Sequence Generation: All zeros
TRACEROUTE (using port 443/tcp)
HOP RTT ADDRESS
1 0.12 ms 10.216.0.161
2 0.25 ms 10.216.35.11
3 0.91 ms 10.216.32.2
4 0.93 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
5 0.27 ms ae29.r02.syd01.ien.netarch.akamai.com (104.70.113.22)
6 1.66 ms Bundle-Ether96.ken-edge903.sydney.telstra.net (203.54.231.153)
7 1.79 ms bundle-ether50.hay-core30.sydney.telstra.net (203.50.12.130)
8 0.96 ms ae10.ken-ice301.sydney.telstra.net (203.50.61.81)
9 0.99 ms gateway.nb10.sydney.asp.telstra.net (58.162.26.74)
10 41.72 ms cpe-101-180-16-105.nb10.nsw.asp.telstra.net (101.180.16.105)
1 0.32 ms 10.216.0.161
2 0.35 ms 10.216.35.12
3 0.85 ms 10.216.32.1
4 0.38 ms lo0-0.gw2.syd1.au.linode.com (172.105.160.102)
5 0.36 ms ae29.r02.syd01.ien.netarch.akamai.com (104.70.113.22)
6 1.45 ms Bundle-Ether96.ken-edge903.sydney.telstra.net (203.54.231.153)
7 1.05 ms bundle-ether50.hay-core30.sydney.telstra.net (203.50.12.130)
8 0.80 ms ae10.ken-ice301.sydney.telstra.net (203.50.61.81)
9 0.89 ms gateway.nb10.sydney.asp.telstra.net (58.162.26.74)
10 33.83 ms cpe-101-180-16-105.nb10.nsw.asp.telstra.net (101.180.16.105)
Read data files from: /usr/share/nmap
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 08:05:05 2026 -- 1 IP address (1 host up) scanned in 53.02 seconds
# Nmap done at Tue Apr 14 03:42:32 2026 -- 1 IP address (1 host up) scanned in 45.09 seconds
@@ -1,13 +1,13 @@
# Nmap 7.98 scan initiated Sun Apr 5 08:05:19 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN /root/results/kuma.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml kuma.lan.ddnsgeek.com
# Nmap 7.99 scan initiated Tue Apr 14 03:44:21 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN /root/results/kuma.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml kuma.lan.ddnsgeek.com
Nmap scan report for kuma.lan.ddnsgeek.com (101.180.16.105)
Host is up, received user-set.
rDNS record for 101.180.16.105: cpe-101-180-16-105.nb10.nsw.asp.telstra.net
Scanned at 2026-04-05 08:06:00 UTC for 1373s
Scanned at 2026-04-14 03:44:23 UTC for 1486s
All 100 scanned ports on kuma.lan.ddnsgeek.com (101.180.16.105) are in ignored states.
Not shown: 100 open|filtered udp ports (no-response)
Too many fingerprints match this host to give specific OS details
TCP/IP fingerprint:
SCAN(V=7.98%E=4%D=4/5%OT=%CT=%CU=%PV=Y%G=N%TM=69D21D47%P=x86_64-pc-linux-gnu)
SCAN(V=7.99%E=4%D=4/14%OT=%CT=%CU=%PV=Y%G=N%TM=69DDBDE5%P=x86_64-pc-linux-gnu)
SEQ()
U1(R=N)
IE(R=N)
@@ -16,16 +16,16 @@ IE(R=N)
TRACEROUTE (using proto 1/icmp)
HOP RTT ADDRESS
1 0.08 ms 10.216.0.161
2 0.21 ms 10.216.35.11
3 0.87 ms 10.216.32.2
4 0.38 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
5 0.32 ms ae19.r01.syd01.ien.netarch.akamai.com (104.70.113.20)
6 1.35 ms Bundle-Ether96.ken-edge903.sydney.telstra.net (203.54.231.153)
7 2.29 ms bundle-ether12.hay-core30.sydney.telstra.net (203.50.11.172)
2 0.19 ms 10.216.35.11
3 0.90 ms 10.216.32.2
4 0.58 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
5 0.25 ms ae19.r01.syd01.ien.netarch.akamai.com (104.70.113.20)
6 1.71 ms Bundle-Ether96.ken-edge903.sydney.telstra.net (203.54.231.153)
7 1.91 ms bundle-ether12.hay-core30.sydney.telstra.net (203.50.11.172)
8 0.82 ms ae10.ken-ice301.sydney.telstra.net (203.50.61.81)
9 5.08 ms gateway.nb10.sydney.asp.telstra.net (58.162.26.74)
9 0.87 ms gateway.nb10.sydney.asp.telstra.net (58.162.26.74)
10 ... 30
Read data files from: /usr/share/nmap
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 08:28:57 2026 -- 1 IP address (1 host up) scanned in 1430.00 seconds
# Nmap done at Tue Apr 14 04:09:09 2026 -- 1 IP address (1 host up) scanned in 1488.91 seconds
@@ -1,12 +0,0 @@
HTTP/2 200
content-type: text/plain; charset=utf-8
date: Sun, 05 Apr 2026 08:05:10 GMT
etag: W/"19-2NTlN/votVlrfMtAaltZ799LfR0"
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 25
User-agent: *
Disallow: /
@@ -1,12 +0,0 @@
HTTP/2 302
content-type: text/plain; charset=utf-8
date: Sun, 05 Apr 2026 08:05:10 GMT
location: /dashboard
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Accept
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 32
Found. Redirecting to /dashboard
@@ -283,19 +283,3 @@ Configuration {
unique: false,
response_size_limit: 4194304,
}
302 GET 1l 4w 89c https://kuma.lan.ddnsgeek.com/.well-known/change-password => https://github.com/louislam/uptime-kuma/wiki/Reset-Password-via-CLI
200 GET 4l 33w 29264c https://kuma.lan.ddnsgeek.com/favicon.ico
200 GET 2l 4w 25c https://kuma.lan.ddnsgeek.com/robots.txt
200 GET 1l 1w 141c https://kuma.lan.ddnsgeek.com/api/status-page/default/manifest.json
200 GET 9l 104w 1168c https://kuma.lan.ddnsgeek.com/icon.svg
200 GET 1l 2912w 155329c https://kuma.lan.ddnsgeek.com/assets/polyfills-legacy-CC6RtsPR.js
200 GET 6l 2770w 163840c https://kuma.lan.ddnsgeek.com/assets/index-BBxTfFCS.js
200 GET 1l 4307w 196608c https://kuma.lan.ddnsgeek.com/assets/index-legacy-DAPjczQA.js
200 GET 6l 3493w 163840c https://kuma.lan.ddnsgeek.com/assets/index-bOVKKa1O.css
200 GET 41l 139w 4221c https://kuma.lan.ddnsgeek.com/status
404 GET 1l 3w 15c https://kuma.lan.ddnsgeek.com/upload/
401 GET 0l 0w 0c https://kuma.lan.ddnsgeek.com/metrics
200 GET 41l 139w 4221c https://kuma.lan.ddnsgeek.com/STATUS
200 GET 2l 4w 25c https://kuma.lan.ddnsgeek.com/Robots.txt
200 GET 41l 139w 4221c https://kuma.lan.ddnsgeek.com/Status
401 GET 0l 0w 0c https://kuma.lan.ddnsgeek.com/Metrics
@@ -1,48 +0,0 @@
HTTP/2 200
content-type: text/html; charset=utf-8
date: Sun, 05 Apr 2026 08:05:09 GMT
etag: W/"98c-RxUaxZHFr+/FSabMqXO58T7mz+U"
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 2444
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0, viewport-fit=cover" />
<link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png">
<link rel="icon" type="image/svg+xml" href="/icon.svg" />
<link rel="manifest" href="/manifest.json" />
<meta name="theme-color" id="theme-color" content="" />
<meta name="description" content="Uptime Kuma monitoring tool" />
<title>Uptime Kuma</title>
<style> .noscript-message {
font-size: 20px;
text-align: center;
padding: 10px;
max-width: 500px;
margin: 0 auto;
}
</style>
<script type="module" crossorigin src="/assets/index-BBxTfFCS.js"></script>
<link rel="stylesheet" crossorigin href="/assets/index-bOVKKa1O.css">
<script type="module">import.meta.url;import("_").catch(()=>1);async function* g(){};if(location.protocol!="file:"){window.__vite_is_modern_browser=true}</script>
<script type="module">!function(){if(window.__vite_is_modern_browser)return;console.warn("vite: loading legacy chunks, syntax error above and the same error below should be ignored");var e=document.getElementById("vite-legacy-polyfill"),n=document.createElement("script");n.src=e.src,n.onload=function(){System.import(document.getElementById('vite-legacy-entry').getAttribute('data-src'))},document.body.appendChild(n)}();</script>
</head>
<body>
<noscript>
<div class="noscript-message">
Sorry, you don't seem to have JavaScript enabled or your browser
doesn't support it.<br />This website requires JavaScript to function.
Please enable JavaScript in your browser settings to continue.
</div>
</noscript>
<div id="app"></div>
<script nomodule>!function(){var e=document,t=e.createElement("script");if(!("noModule"in t)&&"onbeforeload"in t){var n=!1;e.addEventListener("beforeload",(function(e){if(e.target===t)n=!0;else if(!e.target.hasAttribute("nomodule")||!n)return;e.preventDefault()}),!0),t.type="module",t.src=".",e.head.appendChild(t),t.remove()}}();</script>
<script nomodule crossorigin id="vite-legacy-polyfill" src="/assets/polyfills-legacy-CC6RtsPR.js"></script>
<script nomodule crossorigin id="vite-legacy-entry" data-src="/assets/index-legacy-DAPjczQA.js">System.import(document.getElementById('vite-legacy-entry').getAttribute('data-src'))</script>
</body>
</html>
@@ -1,145 +1,23 @@
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
LANGUAGE = (unset),
LC_ALL = (unset),
LC_CTYPE = (unset),
LC_NUMERIC = "en_AU.UTF-8",
LC_COLLATE = (unset),
LC_TIME = "en_AU.UTF-8",
LC_MESSAGES = (unset),
LC_MONETARY = "en_AU.UTF-8",
LC_ADDRESS = "en_AU.UTF-8",
LC_IDENTIFICATION = "en_AU.UTF-8",
LC_MEASUREMENT = "en_AU.UTF-8",
LC_PAPER = "en_AU.UTF-8",
LC_TELEPHONE = "en_AU.UTF-8",
LC_NAME = "en_AU.UTF-8",
LANG = "en_US.UTF-8"
are supported and installed on your system.
perl: warning: Falling back to a fallback locale ("en_US.UTF-8").
- Nikto v2.6.0
---------------------------------------------------------------------------
+ Your Nikto installation is out of date.
+ Target IP: 101.180.16.105
+ Target Hostname: kuma.lan.ddnsgeek.com
+ Target Port: 443
---------------------------------------------------------------------------
+ SSL Info: Subject: /CN=kuma.lan.ddnsgeek.com
CN: kuma.lan.ddnsgeek.com
SAN: kuma.lan.ddnsgeek.com
Ciphers: TLS_CHACHA20_POLY1305_SHA256
Issuer: /C=US/O=Let's Encrypt/CN=R13
+ Platform: Unknown
+ Start Time: 2026-04-05 08:06:30 (GMT0)
---------------------------------------------------------------------------
+ Server: No banner retrieved
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 79 requests (~1% complete, ~1.8 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 81 requests (~1% complete, ~1.8 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 83 requests (~1% complete, ~1.7 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 85 requests (~1% complete, ~1.7 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 87 requests (~1% complete, ~1.7 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 89 requests (~1% complete, ~1.7 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 91 requests (~1% complete, ~1.6 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 93 requests (~1% complete, ~1.6 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 95 requests (~1% complete, ~1.6 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 97 requests (~1% complete, ~1.6 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 99 requests (~1% complete, ~1.6 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 101 requests (~1% complete, ~1.5 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 103 requests (~2% complete, ~1.5 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 105 requests (~2% complete, ~1.5 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 107 requests (~2% complete, ~1.5 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 109 requests (~2% complete, ~1.5 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 111 requests (~2% complete, ~1.5 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 113 requests (~2% complete, ~1.5 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 115 requests (~2% complete, ~1.4 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 117 requests (~2% complete, ~1.4 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 119 requests (~2% complete, ~1.4 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 121 requests (~2% complete, ~1.4 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 123 requests (~2% complete, ~1.4 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 125 requests (~2% complete, ~1.4 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 127 requests (~2% complete, ~1.4 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 129 requests (~2% complete, ~1.4 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 131 requests (~2% complete, ~1.3 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 133 requests (~2% complete, ~1.3 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 135 requests (~2% complete, ~1.3 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 137 requests (~2% complete, ~1.3 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
- STATUS: Completed 139 requests (~2% complete, ~1.3 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
- STATUS: Running average: Not enough data.
+ Scan terminated: 50 errors and 0 items reported on the remote host
+ End Time: 2026-04-05 08:07:23 (GMT0) (53 seconds)
---------------------------------------------------------------------------
+ 1 host(s) tested
+ [FAIL] Unable to connect to kuma.lan.ddnsgeek.com:443.
@@ -1,166 +1,12 @@
# Nmap 7.98 scan initiated Sun Apr 5 08:05:15 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml kuma.lan.ddnsgeek.com
# Nmap 7.99 scan initiated Tue Apr 14 03:42:34 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml kuma.lan.ddnsgeek.com
Nmap scan report for kuma.lan.ddnsgeek.com (101.180.16.105)
Host is up, received user-set (0.035s latency).
Host is up, received user-set (0.037s latency).
rDNS record for 101.180.16.105: cpe-101-180-16-105.nb10.nsw.asp.telstra.net
Scanned at 2026-04-05 08:05:54 UTC for 467s
Scanned at 2026-04-14 03:42:37 UTC for 357s
PORT STATE SERVICE REASON VERSION
443/tcp open ssl/http syn-ack ttl 53 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|_http-dombased-xss: Couldn't find any DOM based XSS.
| http-useragent-tester:
| Status for browser useragent: 200
| Redirected To: /dashboard
| Allowed User Agents:
| libwww
| lwp-trivial
| libcurl-agent/1.0
| Python-urllib/2.5
| GT::WWW
| Snoopy
| MFC_Tear_Sample
| HTTP::Lite
| URI::Fetch
| Zend_Http_Client
| http client
| PECL::HTTP
| Wget/1.13.4 (linux-gnu)
| WWW-Mechanize/1.34
| Change in Status Code:
| PHP/: 404
| PHPCrawl: 404
|_ Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html): 404
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|_ssl-date: TLS randomness does not represent time
|_http-favicon: Unknown favicon MD5: 5EA4B467D984433398E1037469F13214
| http-drupal-enum:
| Modules:
| views
| token
| ctools
| pathauto
| libraries
| entity
| admin_menu
| date
| imce
| jquery_update
| ckeditor
| wysiwyg
| link
| webform
| backup_migrate
| rules
| module_filter
| google_analytics
| views_slideshow
| features
| xmlsitemap
| metatag
| captcha
| colorbox
| media
| entityreference
| panels
| field_group
| devel
| views_bulk_operations
| menu_block
| transliteration
| l10n_update
| imce_wysiwyg
| globalredirect
| variable
| i18n
| context
| imageapi
| advanced_help
| filefield
| email
| page_title
| lightbox2
| ds
| strongarm
| superfish
| imagefield
| calendar
| imagecache
| references
| field_collection
| block_class
| job_scheduler
| menu_attributes
| redirect
| addressfield
| mailsystem
| nice_menus
| diff
| flexslider
| taxonomy_menu
| file_entity
| feeds
| media_youtube
| node_clone
| admin_views
| smtp
| special_menu_items
| auto_nodetitle
| jquery_ui
| insert
| cck
| quicktabs
| mimemail
| views_php
| content_access
| jcarousel
| print
| plupload
| votingapi
| poormanscron
| simplenews
| filefield_sources
| extlink
| honeypot
| facetapi
| logintoboggan
| search_api
| uuid
| commerce
| custom_breadcrumbs
| views_data_export
| oauth
| better_formats
| site_verify
| location
| fontyourface
| masquerade
|_ imce_mkdir
| http-sitemap-generator:
| Directory structure:
| /
| Other: 1; json: 1; png: 1; svg: 1
| /assets/
| css: 1; js: 2
| Longest directory structure:
| Depth: 1
| Dir: /assets/
| Total files found (by extension):
|_ Other: 1; css: 1; js: 2; json: 1; png: 1; svg: 1
|_http-majordomo2-dir-traversal: ERROR: Script execution failed (use -d to debug)
|_http-mobileversion-checker: No mobile version detected.
|_http-referer-checker: Couldn't find any cross-domain scripts.
|_http-errors: ERROR: Script execution failed (use -d to debug)
|_http-comments-displayer: Couldn't find any comments.
| http-methods:
|_ Supported Methods: GET HEAD POST
|_http-trane-info: Problem with XML parsing of /evox/about
|_http-php-version: Credits query returned unknown hash 3b299781d582f5b522a0a6f14dfd9268
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|_http-date: Sun, 05 Apr 2026 08:06:30 GMT; -1s from local time.
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
| http-vhosts:
|_128 names had status 404
|_http-malware-host: Host appears to be clean
PORT STATE SERVICE REASON VERSION
443/tcp open ssl/https syn-ack ttl 53
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
| ssl-enum-ciphers:
| TLSv1.2:
| ciphers:
@@ -181,38 +27,63 @@ PORT STATE SERVICE REASON VERSION
| TLS_AKE_WITH_AES_256_GCM_SHA384 (X25519MLKEM768) - A
| cipher preference: server
|_ least strength: A
|_http-fetch: Please enter the complete path of the directory to save data in.
|_http-feed: Couldn't find any feeds.
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|_http-date: Tue, 14 Apr 2026 03:42:53 GMT; -5s from local time.
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
| http-security-headers:
| Strict_Transport_Security:
| Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
| X_Frame_Options:
| Header: X-Frame-Options: SAMEORIGIN
| Description: The browser must not display this content in any frame from a page of different origin than the content itself.
| X_XSS_Protection:
| Header: X-XSS-Protection: 1; mode=block
| Description: The browser will prevent the rendering of the page when XSS is detected.
| HSTS not configured in HTTPS Server
| X_Content_Type_Options:
| Header: X-Content-Type-Options: nosniff
|_ Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type.
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
| http-headers:
| Content-Length: 2444
| Content-Type: text/html; charset=utf-8
| Date: Sun, 05 Apr 2026 08:07:06 GMT
| Etag: W/"98c-RxUaxZHFr+/FSabMqXO58T7mz+U"
| Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
| X-Content-Type-Options: nosniff
| X-Frame-Options: SAMEORIGIN
| X-Xss-Protection: 1; mode=block
| Connection: close
| http-errors:
| Spidering limited to: maxpagecount=40; withinhost=kuma.lan.ddnsgeek.com
| Found the following error pages:
|
|_ (Request type: HEAD)
|_http-chrono: Request times for /; avg: 33701.34ms; min: 1061.83ms; max: 134159.26ms
| http-robots.txt: 1 disallowed entry
|_/
| http-title: Uptime Kuma
|_Requested resource was /dashboard
| Error Code: 404
|_ http://kuma.lan.ddnsgeek.com:443/
| http-sitemap-generator:
| Directory structure:
| Longest directory structure:
| Depth: 0
| Dir: /
| Total files found (by extension):
|_
| http-vhosts:
|_128 names had status 404
| http-useragent-tester:
| Status for browser useragent: 404
| Allowed User Agents:
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
| libwww
| lwp-trivial
| libcurl-agent/1.0
| PHP/
| Python-urllib/2.5
| GT::WWW
| Snoopy
| MFC_Tear_Sample
| HTTP::Lite
| PHPCrawl
| URI::Fetch
| Zend_Http_Client
| http client
| PECL::HTTP
| Wget/1.13.4 (linux-gnu)
|_ WWW-Mechanize/1.34
|_http-chrono: Request times for /; avg: 501.71ms; min: 433.96ms; max: 693.82ms
|_http-malware-host: Host appears to be clean
|_http-referer-checker: Couldn't find any cross-domain scripts.
|_http-fetch: Please enter the complete path of the directory to save data in.
|_http-mobileversion-checker: No mobile version detected.
|_http-dombased-xss: Couldn't find any DOM based XSS.
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|_ssl-date: TLS randomness does not represent time
|_http-title: Site doesn't have a title (text/plain; charset=utf-8).
|_http-comments-displayer: Couldn't find any comments.
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
| ssl-cert: Subject: commonName=kuma.lan.ddnsgeek.com
| Subject Alternative Name: DNS:kuma.lan.ddnsgeek.com
| Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
@@ -259,10 +130,17 @@ PORT STATE SERVICE REASON VERSION
| nq9c8G6psGHa8K0O0t+cPwXHZQlZi2nAVN2UhV3GrwfAakzw3Bu31z8nS8OoFxRv
| ssZpBGM=
|_-----END CERTIFICATE-----
| http-waf-detect: IDS/IPS/WAF detected:
|_kuma.lan.ddnsgeek.com:443/?p4yl04d3=<script>alert(document.cookie)</script>
|_http-feed: Couldn't find any feeds.
| http-headers:
| Content-Type: text/plain; charset=utf-8
| X-Content-Type-Options: nosniff
| Date: Tue, 14 Apr 2026 03:43:08 GMT
| Content-Length: 19
| Connection: close
|
|_ (Request type: GET)
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
Read data files from: /usr/share/nmap
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 08:13:42 2026 -- 1 IP address (1 host up) scanned in 509.39 seconds
# Nmap done at Tue Apr 14 03:48:35 2026 -- 1 IP address (1 host up) scanned in 361.55 seconds
@@ -1,124 +1 @@
WhatWeb report for https://kuma.lan.ddnsgeek.com:443
Status : 302 Found
Title : <None>
IP : 101.180.16.105
Country : AUSTRALIA, AU
Summary : RedirectLocation[/dashboard], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[x-content-type-options], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
Detected Plugins:
[ RedirectLocation ]
HTTP Server string location. used with http-status 301 and
302
String : /dashboard (from location)
[ Strict-Transport-Security ]
Strict-Transport-Security is an HTTP header that restricts
a web browser from accessing a website without the security
of the HTTPS protocol.
String : max-age=15552000; includeSubDomains; preload
[ UncommonHeaders ]
Uncommon HTTP server headers. The blacklist includes all
the standard headers and many non standard but common ones.
Interesting but fairly common headers should have their own
plugins, eg. x-powered-by, server and x-aspnet-version.
Info about headers can be found at www.http-stats.com
String : x-content-type-options (from headers)
[ X-Frame-Options ]
This plugin retrieves the X-Frame-Options value from the
HTTP header. - More Info:
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
aspx
String : SAMEORIGIN
[ X-XSS-Protection ]
This plugin retrieves the X-XSS-Protection value from the
HTTP header. - More Info:
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
aspx
String : 1; mode=block
HTTP Headers:
HTTP/1.1 302 Found
Content-Length: 32
Content-Type: text/plain; charset=utf-8
Date: Sun, 05 Apr 2026 08:07:00 GMT
Location: /dashboard
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
Vary: Accept
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Connection: close
WhatWeb report for https://kuma.lan.ddnsgeek.com/dashboard
Status : 200 OK
Title : Uptime Kuma
IP : 101.180.16.105
Country : AUSTRALIA, AU
Summary : HTML5, Script[module], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[x-content-type-options], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
Detected Plugins:
[ HTML5 ]
HTML version 5, detected by the doctype declaration
[ Script ]
This plugin detects instances of script HTML elements and
returns the script language/type.
String : module
[ Strict-Transport-Security ]
Strict-Transport-Security is an HTTP header that restricts
a web browser from accessing a website without the security
of the HTTPS protocol.
String : max-age=15552000; includeSubDomains; preload
[ UncommonHeaders ]
Uncommon HTTP server headers. The blacklist includes all
the standard headers and many non standard but common ones.
Interesting but fairly common headers should have their own
plugins, eg. x-powered-by, server and x-aspnet-version.
Info about headers can be found at www.http-stats.com
String : x-content-type-options (from headers)
[ X-Frame-Options ]
This plugin retrieves the X-Frame-Options value from the
HTTP header. - More Info:
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
aspx
String : SAMEORIGIN
[ X-XSS-Protection ]
This plugin retrieves the X-XSS-Protection value from the
HTTP header. - More Info:
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
aspx
String : 1; mode=block
HTTP Headers:
HTTP/1.1 200 OK
Content-Length: 2444
Content-Type: text/html; charset=utf-8
Date: Sun, 05 Apr 2026 08:07:15 GMT
Etag: W/"98c-RxUaxZHFr+/FSabMqXO58T7mz+U"
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Connection: close
@@ -1,5 +1,5 @@
Version: 2.1.5
OpenSSL 3.5.3 16 Sep 2025
OpenSSL 3.5.5 27 Jan 2026
Connected to 101.180.16.105
@@ -1,207 +1,73 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE nmaprun>
<?xml-stylesheet href="file:///usr/share/nmap/nmap.xsl" type="text/xsl"?>
<!-- Nmap 7.98 scan initiated Sun Apr 5 08:05:15 2026 as: /usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sV -p 443 &quot;-&#45;script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)&quot; -oN /root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml kuma.lan.ddnsgeek.com -->
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sV -p 443 &quot;-&#45;script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)&quot; -oN /root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml kuma.lan.ddnsgeek.com" start="1775376315" startstr="Sun Apr 5 08:05:15 2026" version="7.98" xmloutputversion="1.05">
<!-- Nmap 7.99 scan initiated Tue Apr 14 03:42:34 2026 as: /usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sV -p 443 &quot;-&#45;script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)&quot; -oN /root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml kuma.lan.ddnsgeek.com -->
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sV -p 443 &quot;-&#45;script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)&quot; -oN /root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml kuma.lan.ddnsgeek.com" start="1776138154" startstr="Tue Apr 14 03:42:34 2026" version="7.99" xmloutputversion="1.05">
<scaninfo type="syn" protocol="tcp" numservices="1" services="443"/>
<verbose level="2"/>
<debugging level="0"/>
<taskbegin task="NSE" time="1775376353"/>
<taskend task="NSE" time="1775376353"/>
<taskbegin task="NSE" time="1775376353"/>
<taskend task="NSE" time="1775376353"/>
<taskbegin task="NSE" time="1775376353"/>
<taskend task="NSE" time="1775376353"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1775376354"/>
<taskend task="Parallel DNS resolution of 1 host." time="1775376354"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1775376354"/>
<taskend task="Parallel DNS resolution of 1 host." time="1775376354"/>
<taskbegin task="SYN Stealth Scan" time="1775376354"/>
<taskend task="SYN Stealth Scan" time="1775376354" extrainfo="1 total ports"/>
<taskbegin task="Service scan" time="1775376359"/>
<taskend task="Service scan" time="1775376374" extrainfo="1 service on 1 host"/>
<taskbegin task="NSE" time="1775376375"/>
<taskprogress task="NSE" time="1775376406" percent="53.61" remaining="27" etc="1775376433"/>
<taskprogress task="NSE" time="1775376436" percent="85.67" remaining="11" etc="1775376446"/>
<taskprogress task="NSE" time="1775376466" percent="88.60" remaining="12" etc="1775376478"/>
<taskprogress task="NSE" time="1775376497" percent="88.93" remaining="16" etc="1775376512"/>
<taskprogress task="NSE" time="1775376592" percent="88.93" remaining="28" etc="1775376619"/>
<taskprogress task="NSE" time="1775376624" percent="89.58" remaining="29" etc="1775376653"/>
<taskprogress task="NSE" time="1775376654" percent="92.53" remaining="23" etc="1775376677"/>
<taskprogress task="NSE" time="1775376684" percent="94.82" remaining="17" etc="1775376701"/>
<taskprogress task="NSE" time="1775376714" percent="96.12" remaining="14" etc="1775376728"/>
<taskprogress task="NSE" time="1775376744" percent="98.71" remaining="5" etc="1775376749"/>
<taskprogress task="NSE" time="1775376774" percent="99.35" remaining="3" etc="1775376777"/>
<taskprogress task="NSE" time="1775376804" percent="99.68" remaining="2" etc="1775376805"/>
<taskend task="NSE" time="1775376807"/>
<taskbegin task="NSE" time="1775376807"/>
<taskend task="NSE" time="1775376820"/>
<taskbegin task="NSE" time="1775376820"/>
<taskend task="NSE" time="1775376821"/>
<host starttime="1775376354" endtime="1775376821"><status state="up" reason="user-set" reason_ttl="0"/>
<taskbegin task="NSE" time="1776138157"/>
<taskend task="NSE" time="1776138157"/>
<taskbegin task="NSE" time="1776138157"/>
<taskend task="NSE" time="1776138157"/>
<taskbegin task="NSE" time="1776138157"/>
<taskend task="NSE" time="1776138157"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1776138157"/>
<taskend task="Parallel DNS resolution of 1 host." time="1776138157"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1776138157"/>
<taskend task="Parallel DNS resolution of 1 host." time="1776138157"/>
<taskbegin task="SYN Stealth Scan" time="1776138157"/>
<taskend task="SYN Stealth Scan" time="1776138157" extrainfo="1 total ports"/>
<taskbegin task="Service scan" time="1776138158"/>
<taskend task="Service scan" time="1776138170" extrainfo="1 service on 1 host"/>
<taskbegin task="NSE" time="1776138170"/>
<taskprogress task="NSE" time="1776138201" percent="99.35" remaining="1" etc="1776138201"/>
<taskprogress task="NSE" time="1776138231" percent="99.68" remaining="1" etc="1776138231"/>
<taskprogress task="NSE" time="1776138261" percent="99.68" remaining="1" etc="1776138261"/>
<taskprogress task="NSE" time="1776138291" percent="99.68" remaining="1" etc="1776138291"/>
<taskprogress task="NSE" time="1776138321" percent="99.68" remaining="1" etc="1776138321"/>
<taskprogress task="NSE" time="1776138351" percent="99.68" remaining="1" etc="1776138352"/>
<taskprogress task="NSE" time="1776138385" percent="99.68" remaining="1" etc="1776138386"/>
<taskprogress task="NSE" time="1776138415" percent="99.68" remaining="1" etc="1776138416"/>
<taskprogress task="NSE" time="1776138445" percent="99.68" remaining="1" etc="1776138446"/>
<taskprogress task="NSE" time="1776138475" percent="99.68" remaining="1" etc="1776138476"/>
<taskend task="NSE" time="1776138483"/>
<taskbegin task="NSE" time="1776138484"/>
<taskend task="NSE" time="1776138514"/>
<taskbegin task="NSE" time="1776138514"/>
<taskend task="NSE" time="1776138514"/>
<host starttime="1776138157" endtime="1776138514"><status state="up" reason="user-set" reason_ttl="0"/>
<address addr="101.180.16.105" addrtype="ipv4"/>
<hostnames>
<hostname name="kuma.lan.ddnsgeek.com" type="user"/>
<hostname name="cpe-101-180-16-105.nb10.nsw.asp.telstra.net" type="PTR"/>
</hostnames>
<ports><port protocol="tcp" portid="443"><state state="open" reason="syn-ack" reason_ttl="53"/><service name="http" product="Golang net/http server" extrainfo="Go-IPFS json-rpc or InfluxDB API" tunnel="ssl" method="probed" conf="10"><cpe>cpe:/a:protocol_labs:go-ipfs</cpe></service><script id="http-dombased-xss" output="Couldn&apos;t find any DOM based XSS."/><script id="http-useragent-tester" output="&#xa; Status for browser useragent: 200&#xa; Redirected To: /dashboard&#xa; Allowed User Agents: &#xa; libwww&#xa; lwp-trivial&#xa; libcurl-agent/1.0&#xa; Python-urllib/2.5&#xa; GT::WWW&#xa; Snoopy&#xa; MFC_Tear_Sample&#xa; HTTP::Lite&#xa; URI::Fetch&#xa; Zend_Http_Client&#xa; http client&#xa; PECL::HTTP&#xa; Wget/1.13.4 (linux-gnu)&#xa; WWW-Mechanize/1.34&#xa; Change in Status Code: &#xa; PHP/: 404&#xa; PHPCrawl: 404&#xa; Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html): 404"><elem key="Status for browser useragent">200</elem>
<elem key="Redirected To">/dashboard</elem>
<table key="Allowed User Agents">
<elem>libwww</elem>
<elem>lwp-trivial</elem>
<elem>libcurl-agent/1.0</elem>
<elem>Python-urllib/2.5</elem>
<elem>GT::WWW</elem>
<elem>Snoopy</elem>
<elem>MFC_Tear_Sample</elem>
<elem>HTTP::Lite</elem>
<elem>URI::Fetch</elem>
<elem>Zend_Http_Client</elem>
<elem>http client</elem>
<elem>PECL::HTTP</elem>
<elem>Wget/1.13.4 (linux-gnu)</elem>
<elem>WWW-Mechanize/1.34</elem>
</table>
<table key="Change in Status Code">
<elem key="PHP/">404</elem>
<elem key="PHPCrawl">404</elem>
<elem key="Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)">404</elem>
</table>
</script><script id="http-csrf" output="Couldn&apos;t find any CSRF vulnerabilities."/><script id="ssl-date" output="TLS randomness does not represent time"></script><script id="http-favicon" output="Unknown favicon MD5: 5EA4B467D984433398E1037469F13214"/><script id="http-drupal-enum" output="&#xa; Modules: &#xa; views&#xa; token&#xa; ctools&#xa; pathauto&#xa; libraries&#xa; entity&#xa; admin_menu&#xa; date&#xa; imce&#xa; jquery_update&#xa; ckeditor&#xa; wysiwyg&#xa; link&#xa; webform&#xa; backup_migrate&#xa; rules&#xa; module_filter&#xa; google_analytics&#xa; views_slideshow&#xa; features&#xa; xmlsitemap&#xa; metatag&#xa; captcha&#xa; colorbox&#xa; media&#xa; entityreference&#xa; panels&#xa; field_group&#xa; devel&#xa; views_bulk_operations&#xa; menu_block&#xa; transliteration&#xa; l10n_update&#xa; imce_wysiwyg&#xa; globalredirect&#xa; variable&#xa; i18n&#xa; context&#xa; imageapi&#xa; advanced_help&#xa; filefield&#xa; email&#xa; page_title&#xa; lightbox2&#xa; ds&#xa; strongarm&#xa; superfish&#xa; imagefield&#xa; calendar&#xa; imagecache&#xa; references&#xa; field_collection&#xa; block_class&#xa; job_scheduler&#xa; menu_attributes&#xa; redirect&#xa; addressfield&#xa; mailsystem&#xa; nice_menus&#xa; diff&#xa; flexslider&#xa; taxonomy_menu&#xa; file_entity&#xa; feeds&#xa; media_youtube&#xa; node_clone&#xa; admin_views&#xa; smtp&#xa; special_menu_items&#xa; auto_nodetitle&#xa; jquery_ui&#xa; insert&#xa; cck&#xa; quicktabs&#xa; mimemail&#xa; views_php&#xa; content_access&#xa; jcarousel&#xa; print&#xa; plupload&#xa; votingapi&#xa; poormanscron&#xa; simplenews&#xa; filefield_sources&#xa; extlink&#xa; honeypot&#xa; facetapi&#xa; logintoboggan&#xa; search_api&#xa; uuid&#xa; commerce&#xa; custom_breadcrumbs&#xa; views_data_export&#xa; oauth&#xa; better_formats&#xa; site_verify&#xa; location&#xa; fontyourface&#xa; masquerade&#xa; imce_mkdir"><table key="Modules">
<elem>views</elem>
<elem>token</elem>
<elem>ctools</elem>
<elem>pathauto</elem>
<elem>libraries</elem>
<elem>entity</elem>
<elem>admin_menu</elem>
<elem>date</elem>
<elem>imce</elem>
<elem>jquery_update</elem>
<elem>ckeditor</elem>
<elem>wysiwyg</elem>
<elem>link</elem>
<elem>webform</elem>
<elem>backup_migrate</elem>
<elem>rules</elem>
<elem>module_filter</elem>
<elem>google_analytics</elem>
<elem>views_slideshow</elem>
<elem>features</elem>
<elem>xmlsitemap</elem>
<elem>metatag</elem>
<elem>captcha</elem>
<elem>colorbox</elem>
<elem>media</elem>
<elem>entityreference</elem>
<elem>panels</elem>
<elem>field_group</elem>
<elem>devel</elem>
<elem>views_bulk_operations</elem>
<elem>menu_block</elem>
<elem>transliteration</elem>
<elem>l10n_update</elem>
<elem>imce_wysiwyg</elem>
<elem>globalredirect</elem>
<elem>variable</elem>
<elem>i18n</elem>
<elem>context</elem>
<elem>imageapi</elem>
<elem>advanced_help</elem>
<elem>filefield</elem>
<elem>email</elem>
<elem>page_title</elem>
<elem>lightbox2</elem>
<elem>ds</elem>
<elem>strongarm</elem>
<elem>superfish</elem>
<elem>imagefield</elem>
<elem>calendar</elem>
<elem>imagecache</elem>
<elem>references</elem>
<elem>field_collection</elem>
<elem>block_class</elem>
<elem>job_scheduler</elem>
<elem>menu_attributes</elem>
<elem>redirect</elem>
<elem>addressfield</elem>
<elem>mailsystem</elem>
<elem>nice_menus</elem>
<elem>diff</elem>
<elem>flexslider</elem>
<elem>taxonomy_menu</elem>
<elem>file_entity</elem>
<elem>feeds</elem>
<elem>media_youtube</elem>
<elem>node_clone</elem>
<elem>admin_views</elem>
<elem>smtp</elem>
<elem>special_menu_items</elem>
<elem>auto_nodetitle</elem>
<elem>jquery_ui</elem>
<elem>insert</elem>
<elem>cck</elem>
<elem>quicktabs</elem>
<elem>mimemail</elem>
<elem>views_php</elem>
<elem>content_access</elem>
<elem>jcarousel</elem>
<elem>print</elem>
<elem>plupload</elem>
<elem>votingapi</elem>
<elem>poormanscron</elem>
<elem>simplenews</elem>
<elem>filefield_sources</elem>
<elem>extlink</elem>
<elem>honeypot</elem>
<elem>facetapi</elem>
<elem>logintoboggan</elem>
<elem>search_api</elem>
<elem>uuid</elem>
<elem>commerce</elem>
<elem>custom_breadcrumbs</elem>
<elem>views_data_export</elem>
<elem>oauth</elem>
<elem>better_formats</elem>
<elem>site_verify</elem>
<elem>location</elem>
<elem>fontyourface</elem>
<elem>masquerade</elem>
<elem>imce_mkdir</elem>
</table>
</script><script id="http-sitemap-generator" output="&#xa; Directory structure:&#xa; /&#xa; Other: 1; json: 1; png: 1; svg: 1&#xa; /assets/&#xa; css: 1; js: 2&#xa; Longest directory structure:&#xa; Depth: 1&#xa; Dir: /assets/&#xa; Total files found (by extension):&#xa; Other: 1; css: 1; js: 2; json: 1; png: 1; svg: 1&#xa;"/><script id="http-majordomo2-dir-traversal" output="ERROR: Script execution failed (use -d to debug)"/><script id="http-mobileversion-checker" output="No mobile version detected."/><script id="http-referer-checker" output="Couldn&apos;t find any cross-domain scripts."/><script id="http-errors" output="ERROR: Script execution failed (use -d to debug)"/><script id="http-comments-displayer" output="Couldn&apos;t find any comments."/><script id="http-methods" output="&#xa; Supported Methods: GET HEAD POST"><table key="Supported Methods">
<elem>GET</elem>
<elem>HEAD</elem>
<elem>POST</elem>
</table>
</script><script id="http-trane-info" output="Problem with XML parsing of /evox/about"/><script id="http-php-version" output="Credits query returned unknown hash 3b299781d582f5b522a0a6f14dfd9268"/><script id="http-devframework" output="Couldn&apos;t determine the underlying framework or CMS. Try increasing &apos;httpspider.maxpagecount&apos; value to spider more pages."/><script id="http-date" output="Sun, 05 Apr 2026 08:06:30 GMT; -1s from local time."><elem key="date">2026-04-05T08:06:30+00:00</elem>
<elem key="delta">-1.0</elem>
</script><script id="http-wordpress-users" output="[Error] Wordpress installation was not found. We couldn&apos;t find wp-login.php"/><script id="http-litespeed-sourcecode-download" output="Request with null byte did not work. This web server might not be vulnerable"/><script id="http-vhosts" output="&#xa;128 names had status 404"/><script id="http-malware-host" output="Host appears to be clean"/><script id="ssl-enum-ciphers" output="&#xa; TLSv1.2: &#xa; ciphers: &#xa; TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A&#xa; TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A&#xa; TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A&#xa; TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A&#xa; TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A&#xa; compressors: &#xa; NULL&#xa; cipher preference: server&#xa; warnings: &#xa; Key exchange (secp256r1) of lower strength than certificate key&#xa; TLSv1.3: &#xa; ciphers: &#xa; TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A&#xa; TLS_AKE_WITH_AES_128_GCM_SHA256 (X25519MLKEM768) - A&#xa; TLS_AKE_WITH_AES_256_GCM_SHA384 (X25519MLKEM768) - A&#xa; cipher preference: server&#xa; least strength: A"><table key="TLSv1.2">
<ports><port protocol="tcp" portid="443"><state state="open" reason="syn-ack" reason_ttl="53"/><service name="https" tunnel="ssl" method="probed" conf="10"/><script id="http-jsonp-detection" output="Couldn&apos;t find any JSONP endpoints."/><script id="ssl-enum-ciphers" output="&#xa; TLSv1.2: &#xa; ciphers: &#xa; TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A&#xa; TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A&#xa; TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A&#xa; TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A&#xa; TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A&#xa; compressors: &#xa; NULL&#xa; cipher preference: server&#xa; warnings: &#xa; Key exchange (secp256r1) of lower strength than certificate key&#xa; TLSv1.3: &#xa; ciphers: &#xa; TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A&#xa; TLS_AKE_WITH_AES_128_GCM_SHA256 (X25519MLKEM768) - A&#xa; TLS_AKE_WITH_AES_256_GCM_SHA384 (X25519MLKEM768) - A&#xa; cipher preference: server&#xa; least strength: A"><table key="TLSv1.2">
<table key="ciphers">
<table>
<elem key="kex_info">secp256r1</elem>
<elem key="strength">A</elem>
<elem key="name">TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256</elem>
<elem key="kex_info">secp256r1</elem>
</table>
<table>
<elem key="kex_info">secp256r1</elem>
<elem key="strength">A</elem>
<elem key="name">TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256</elem>
<elem key="kex_info">secp256r1</elem>
</table>
<table>
<elem key="kex_info">secp256r1</elem>
<elem key="strength">A</elem>
<elem key="name">TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384</elem>
<elem key="kex_info">secp256r1</elem>
</table>
<table>
<elem key="kex_info">secp256r1</elem>
<elem key="strength">A</elem>
<elem key="name">TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA</elem>
<elem key="kex_info">secp256r1</elem>
</table>
<table>
<elem key="kex_info">secp256r1</elem>
<elem key="strength">A</elem>
<elem key="name">TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA</elem>
<elem key="kex_info">secp256r1</elem>
</table>
</table>
<table key="compressors">
@@ -215,43 +81,55 @@
<table key="TLSv1.3">
<table key="ciphers">
<table>
<elem key="kex_info">X25519MLKEM768</elem>
<elem key="strength">A</elem>
<elem key="name">TLS_AKE_WITH_CHACHA20_POLY1305_SHA256</elem>
<elem key="kex_info">X25519MLKEM768</elem>
</table>
<table>
<elem key="kex_info">X25519MLKEM768</elem>
<elem key="strength">A</elem>
<elem key="name">TLS_AKE_WITH_AES_128_GCM_SHA256</elem>
<elem key="kex_info">X25519MLKEM768</elem>
</table>
<table>
<elem key="kex_info">X25519MLKEM768</elem>
<elem key="strength">A</elem>
<elem key="name">TLS_AKE_WITH_AES_256_GCM_SHA384</elem>
<elem key="kex_info">X25519MLKEM768</elem>
</table>
</table>
<elem key="cipher preference">server</elem>
</table>
<elem key="least strength">A</elem>
</script><script id="http-fetch" output="Please enter the complete path of the directory to save data in."><elem key="ERROR">Please enter the complete path of the directory to save data in.</elem>
</script><script id="http-feed" output="Couldn&apos;t find any feeds."/><script id="http-security-headers" output="&#xa; Strict_Transport_Security: &#xa; Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload&#xa; X_Frame_Options: &#xa; Header: X-Frame-Options: SAMEORIGIN&#xa; Description: The browser must not display this content in any frame from a page of different origin than the content itself.&#xa; X_XSS_Protection: &#xa; Header: X-XSS-Protection: 1; mode=block&#xa; Description: The browser will prevent the rendering of the page when XSS is detected.&#xa; X_Content_Type_Options: &#xa; Header: X-Content-Type-Options: nosniff&#xa; Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type. "><table key="Strict_Transport_Security">
<elem>Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload</elem>
</table>
<table key="X_Frame_Options">
<elem>Header: X-Frame-Options: SAMEORIGIN</elem>
<elem>Description: The browser must not display this content in any frame from a page of different origin than the content itself.</elem>
</table>
<table key="X_XSS_Protection">
<elem>Header: X-XSS-Protection: 1; mode=block</elem>
<elem>Description: The browser will prevent the rendering of the page when XSS is detected.</elem>
</script><script id="http-csrf" output="Couldn&apos;t find any CSRF vulnerabilities."/><script id="http-date" output="Tue, 14 Apr 2026 03:42:53 GMT; -5s from local time."><elem key="date">2026-04-14T03:42:53+00:00</elem>
<elem key="delta">-5.0</elem>
</script><script id="http-wordpress-enum" output="Nothing found amongst the top 100 resources,use -&#45;script-args search-limit=&lt;number|all&gt; for deeper analysis)"/><script id="http-security-headers" output="&#xa; Strict_Transport_Security: &#xa; HSTS not configured in HTTPS Server&#xa; X_Content_Type_Options: &#xa; Header: X-Content-Type-Options: nosniff&#xa; Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type. "><table key="Strict_Transport_Security">
<elem>HSTS not configured in HTTPS Server</elem>
</table>
<table key="X_Content_Type_Options">
<elem>Header: X-Content-Type-Options: nosniff</elem>
<elem>Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type. </elem>
</table>
</script><script id="http-jsonp-detection" output="Couldn&apos;t find any JSONP endpoints."/><script id="http-headers" output="&#xa; Content-Length: 2444&#xa; Content-Type: text/html; charset=utf-8&#xa; Date: Sun, 05 Apr 2026 08:07:06 GMT&#xa; Etag: W/&quot;98c-RxUaxZHFr+/FSabMqXO58T7mz+U&quot;&#xa; Strict-Transport-Security: max-age=15552000; includeSubDomains; preload&#xa; X-Content-Type-Options: nosniff&#xa; X-Frame-Options: SAMEORIGIN&#xa; X-Xss-Protection: 1; mode=block&#xa; Connection: close&#xa; &#xa; (Request type: HEAD)&#xa;"/><script id="http-chrono" output="Request times for /; avg: 33701.34ms; min: 1061.83ms; max: 134159.26ms"/><script id="http-robots.txt" output="1 disallowed entry &#xa;/"/><script id="http-title" output="Uptime Kuma&#xa;Requested resource was /dashboard"><elem key="title">Uptime Kuma</elem>
<elem key="redirect_url">/dashboard</elem>
</script><script id="ssl-cert" output="Subject: commonName=kuma.lan.ddnsgeek.com&#xa;Subject Alternative Name: DNS:kuma.lan.ddnsgeek.com&#xa;Issuer: commonName=R13/organizationName=Let&apos;s Encrypt/countryName=US&#xa;Public Key type: rsa&#xa;Public Key bits: 4096&#xa;Signature Algorithm: sha256WithRSAEncryption&#xa;Not valid before: 2026-04-01T19:44:43&#xa;Not valid after: 2026-06-30T19:44:42&#xa;MD5: 4503 8f10 fe7f f545 fff2 813b 5a8f 7631&#xa;SHA-1: a08d 7799 f3ef cb17 9052 958c 43c5 eeb5 d6b5 59c1&#xa;SHA-256: 0c92 3f5e b861 8c91 b8a8 f4bf 1cb8 7d80 f07a ddc8 3c4b 8ed9 5478 90cf b482 512b&#xa;-&#45;&#45;&#45;&#45;BEGIN CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;MIIGATCCBOmgAwIBAgISBYYKHnpmPDpUPJjaOPK93fSHMA0GCSqGSIb3DQEBCwUA&#xa;MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD&#xa;EwNSMTMwHhcNMjYwNDAxMTk0NDQzWhcNMjYwNjMwMTk0NDQyWjAgMR4wHAYDVQQD&#xa;ExVrdW1hLmxhbi5kZG5zZ2Vlay5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAw&#xa;ggIKAoICAQC2bNy5QjaE52KGlHDyiggwMm0YUU1SlAUrH1Awn3efLnnU2CKuF/NT&#xa;pLP2ahkt7Js/bURSHJgISI7D8tQ3uT1+D7ZZjljYkaXQhdrLRdCSNCNDi3cmBEcR&#xa;WUD8cnS2jXZgwV6C9sU2nXgxiDNEnFy3AOJppuUo6TU2eipfYMHwsz+FIz/ghD3Z&#xa;lTf+T8HO70cGQLBRQP/4cu1Kc5sL+xDOk88SB/91j6FapUmXrsLaIaLeX7EQm7Yy&#xa;2pBkaXe/6UxzNuCAAPqxtkuMPi9Tcmm7X9fqo3ErMcc8BtZqeGcp2Zwm1sg3pYjF&#xa;MjTLTsGAcxfMBWvQi8nhQ92Ah+Vm7O0SddUEFNRvoOioG9dR32C+v6w0E004Upt+&#xa;BY0UWt9EgUrC4I8awGBrL4/E5qgnl6Hi5ho2Q6Px28ybIuoSQ7aeJtS8g5nBjCzp&#xa;5n81UcTtD98lhZKWRRJObFPh9YP/lxYz41GSIrRgBg6PtxU/1nJ0rZZvfwiuigxr&#xa;NdoMo561ghayd607GVZ0JPKvY7sbxEkJ6XQ45E2MP5KF8EaPdvc+V2rP9Djy80+D&#xa;XUq5FsmhM+YK1FfCw6S9cN7JRD9F1wZYmdHtHdS7Nmpag2/8w42UJQgN93WsflEx&#xa;JKdNOuS9JWj95j84WmLkgWugWjZcrgk11PL6WkN6cecDt8+jbmWjvQIDAQABo4IC&#xa;IDCCAhwwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1Ud&#xa;EwEB/wQCMAAwHQYDVR0OBBYEFFXeRi9gTjL3dXj8UCJJQeJ90UeeMB8GA1UdIwQY&#xa;MBaAFOernw8sM6BT015PeMiyhA471pIzMDMGCCsGAQUFBwEBBCcwJTAjBggrBgEF&#xa;BQcwAoYXaHR0cDovL3IxMy5pLmxlbmNyLm9yZy8wIAYDVR0RBBkwF4IVa3VtYS5s&#xa;YW4uZGRuc2dlZWsuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMC0GA1UdHwQmMCQw&#xa;IqAgoB6GHGh0dHA6Ly9yMTMuYy5sZW5jci5vcmcvOC5jcmwwggEKBgorBgEEAdZ5&#xa;AgQCBIH7BIH4APYAdQAWgy2r8KklDw/wOqVF/8i/yCPQh0v2BCkn+OcfMxP1+gAA&#xa;AZ1KyTc0AAAEAwBGMEQCIFgwfeRhONb6T5LOG5a3CEnv5uU9GgHReu3FgCbNWvaO&#xa;AiB4qoUik6olE6a7XgyMymRtow3pT+b51p8jdt+BaxswPAB9AKgmy+MKxjUSRlM/&#xa;4GXxTxnZbhkIE8Qd2W15ALMSPFUnAAABnUrJOMEACAAABQAFK3PIBAMARjBEAiAh&#xa;2KriLcSsAzvAqrucXzHSrZgfFf5tgwdSAYBbsUQxgAIgMhTKcEpKu31cvaY5rjEI&#xa;3CRiSD0zRDpz0muR3ED0Vi0wDQYJKoZIhvcNAQELBQADggEBADbjfbibh5H8hw6L&#xa;2KKxOcEGi787TIgm058gYlsm/2skqK1VqvS3Qmoj5IA05Yr5QpMFQFf6Z1kAy78P&#xa;DH8qfadIgAU2Nbe1cK9o5f4LhTU9wM58C9Ti7e5aiNHA1UCsrwnvJnH523uxEVcG&#xa;HCrne4Bewvtpfyb6M1RoRp3W4lHS4d7thHm6LXLEEJgBCFA5Yz6ez6mtainST5sU&#xa;6j4s+Jt5BQ2zTka2y2ao18OTfkeLtGqUDfB3oZWMNqK/m6m90FKTKYSTyoBtdESc&#xa;nq9c8G6psGHa8K0O0t+cPwXHZQlZi2nAVN2UhV3GrwfAakzw3Bu31z8nS8OoFxRv&#xa;ssZpBGM=&#xa;-&#45;&#45;&#45;&#45;END CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;"><table key="subject">
</script><script id="http-errors" output="&#xa;Spidering limited to: maxpagecount=40; withinhost=kuma.lan.ddnsgeek.com&#xa; Found the following error pages: &#xa; &#xa; Error Code: 404&#xa; &#x9;http://kuma.lan.ddnsgeek.com:443/&#xa;"/><script id="http-sitemap-generator" output="&#xa; Directory structure:&#xa; Longest directory structure:&#xa; Depth: 0&#xa; Dir: /&#xa; Total files found (by extension):&#xa; &#xa;"/><script id="http-vhosts" output="&#xa;128 names had status 404"/><script id="http-useragent-tester" output="&#xa; Status for browser useragent: 404&#xa; Allowed User Agents: &#xa; Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)&#xa; libwww&#xa; lwp-trivial&#xa; libcurl-agent/1.0&#xa; PHP/&#xa; Python-urllib/2.5&#xa; GT::WWW&#xa; Snoopy&#xa; MFC_Tear_Sample&#xa; HTTP::Lite&#xa; PHPCrawl&#xa; URI::Fetch&#xa; Zend_Http_Client&#xa; http client&#xa; PECL::HTTP&#xa; Wget/1.13.4 (linux-gnu)&#xa; WWW-Mechanize/1.34"><elem key="Status for browser useragent">404</elem>
<table key="Allowed User Agents">
<elem>Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)</elem>
<elem>libwww</elem>
<elem>lwp-trivial</elem>
<elem>libcurl-agent/1.0</elem>
<elem>PHP/</elem>
<elem>Python-urllib/2.5</elem>
<elem>GT::WWW</elem>
<elem>Snoopy</elem>
<elem>MFC_Tear_Sample</elem>
<elem>HTTP::Lite</elem>
<elem>PHPCrawl</elem>
<elem>URI::Fetch</elem>
<elem>Zend_Http_Client</elem>
<elem>http client</elem>
<elem>PECL::HTTP</elem>
<elem>Wget/1.13.4 (linux-gnu)</elem>
<elem>WWW-Mechanize/1.34</elem>
</table>
</script><script id="http-chrono" output="Request times for /; avg: 501.71ms; min: 433.96ms; max: 693.82ms"/><script id="http-malware-host" output="Host appears to be clean"/><script id="http-referer-checker" output="Couldn&apos;t find any cross-domain scripts."/><script id="http-fetch" output="Please enter the complete path of the directory to save data in."><elem key="ERROR">Please enter the complete path of the directory to save data in.</elem>
</script><script id="http-mobileversion-checker" output="No mobile version detected."/><script id="http-dombased-xss" output="Couldn&apos;t find any DOM based XSS."/><script id="http-wordpress-users" output="[Error] Wordpress installation was not found. We couldn&apos;t find wp-login.php"/><script id="ssl-date" output="TLS randomness does not represent time"></script><script id="http-title" output="Site doesn&apos;t have a title (text/plain; charset=utf-8)."></script><script id="http-comments-displayer" output="Couldn&apos;t find any comments."/><script id="http-litespeed-sourcecode-download" output="Request with null byte did not work. This web server might not be vulnerable"/><script id="http-devframework" output="Couldn&apos;t determine the underlying framework or CMS. Try increasing &apos;httpspider.maxpagecount&apos; value to spider more pages."/><script id="http-drupal-enum" output="Nothing found amongst the top 100 resources,use -&#45;script-args number=&lt;number|all&gt; for deeper analysis)"/><script id="ssl-cert" output="Subject: commonName=kuma.lan.ddnsgeek.com&#xa;Subject Alternative Name: DNS:kuma.lan.ddnsgeek.com&#xa;Issuer: commonName=R13/organizationName=Let&apos;s Encrypt/countryName=US&#xa;Public Key type: rsa&#xa;Public Key bits: 4096&#xa;Signature Algorithm: sha256WithRSAEncryption&#xa;Not valid before: 2026-04-01T19:44:43&#xa;Not valid after: 2026-06-30T19:44:42&#xa;MD5: 4503 8f10 fe7f f545 fff2 813b 5a8f 7631&#xa;SHA-1: a08d 7799 f3ef cb17 9052 958c 43c5 eeb5 d6b5 59c1&#xa;SHA-256: 0c92 3f5e b861 8c91 b8a8 f4bf 1cb8 7d80 f07a ddc8 3c4b 8ed9 5478 90cf b482 512b&#xa;-&#45;&#45;&#45;&#45;BEGIN CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;MIIGATCCBOmgAwIBAgISBYYKHnpmPDpUPJjaOPK93fSHMA0GCSqGSIb3DQEBCwUA&#xa;MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD&#xa;EwNSMTMwHhcNMjYwNDAxMTk0NDQzWhcNMjYwNjMwMTk0NDQyWjAgMR4wHAYDVQQD&#xa;ExVrdW1hLmxhbi5kZG5zZ2Vlay5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAw&#xa;ggIKAoICAQC2bNy5QjaE52KGlHDyiggwMm0YUU1SlAUrH1Awn3efLnnU2CKuF/NT&#xa;pLP2ahkt7Js/bURSHJgISI7D8tQ3uT1+D7ZZjljYkaXQhdrLRdCSNCNDi3cmBEcR&#xa;WUD8cnS2jXZgwV6C9sU2nXgxiDNEnFy3AOJppuUo6TU2eipfYMHwsz+FIz/ghD3Z&#xa;lTf+T8HO70cGQLBRQP/4cu1Kc5sL+xDOk88SB/91j6FapUmXrsLaIaLeX7EQm7Yy&#xa;2pBkaXe/6UxzNuCAAPqxtkuMPi9Tcmm7X9fqo3ErMcc8BtZqeGcp2Zwm1sg3pYjF&#xa;MjTLTsGAcxfMBWvQi8nhQ92Ah+Vm7O0SddUEFNRvoOioG9dR32C+v6w0E004Upt+&#xa;BY0UWt9EgUrC4I8awGBrL4/E5qgnl6Hi5ho2Q6Px28ybIuoSQ7aeJtS8g5nBjCzp&#xa;5n81UcTtD98lhZKWRRJObFPh9YP/lxYz41GSIrRgBg6PtxU/1nJ0rZZvfwiuigxr&#xa;NdoMo561ghayd607GVZ0JPKvY7sbxEkJ6XQ45E2MP5KF8EaPdvc+V2rP9Djy80+D&#xa;XUq5FsmhM+YK1FfCw6S9cN7JRD9F1wZYmdHtHdS7Nmpag2/8w42UJQgN93WsflEx&#xa;JKdNOuS9JWj95j84WmLkgWugWjZcrgk11PL6WkN6cecDt8+jbmWjvQIDAQABo4IC&#xa;IDCCAhwwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1Ud&#xa;EwEB/wQCMAAwHQYDVR0OBBYEFFXeRi9gTjL3dXj8UCJJQeJ90UeeMB8GA1UdIwQY&#xa;MBaAFOernw8sM6BT015PeMiyhA471pIzMDMGCCsGAQUFBwEBBCcwJTAjBggrBgEF&#xa;BQcwAoYXaHR0cDovL3IxMy5pLmxlbmNyLm9yZy8wIAYDVR0RBBkwF4IVa3VtYS5s&#xa;YW4uZGRuc2dlZWsuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMC0GA1UdHwQmMCQw&#xa;IqAgoB6GHGh0dHA6Ly9yMTMuYy5sZW5jci5vcmcvOC5jcmwwggEKBgorBgEEAdZ5&#xa;AgQCBIH7BIH4APYAdQAWgy2r8KklDw/wOqVF/8i/yCPQh0v2BCkn+OcfMxP1+gAA&#xa;AZ1KyTc0AAAEAwBGMEQCIFgwfeRhONb6T5LOG5a3CEnv5uU9GgHReu3FgCbNWvaO&#xa;AiB4qoUik6olE6a7XgyMymRtow3pT+b51p8jdt+BaxswPAB9AKgmy+MKxjUSRlM/&#xa;4GXxTxnZbhkIE8Qd2W15ALMSPFUnAAABnUrJOMEACAAABQAFK3PIBAMARjBEAiAh&#xa;2KriLcSsAzvAqrucXzHSrZgfFf5tgwdSAYBbsUQxgAIgMhTKcEpKu31cvaY5rjEI&#xa;3CRiSD0zRDpz0muR3ED0Vi0wDQYJKoZIhvcNAQELBQADggEBADbjfbibh5H8hw6L&#xa;2KKxOcEGi787TIgm058gYlsm/2skqK1VqvS3Qmoj5IA05Yr5QpMFQFf6Z1kAy78P&#xa;DH8qfadIgAU2Nbe1cK9o5f4LhTU9wM58C9Ti7e5aiNHA1UCsrwnvJnH523uxEVcG&#xa;HCrne4Bewvtpfyb6M1RoRp3W4lHS4d7thHm6LXLEEJgBCFA5Yz6ez6mtainST5sU&#xa;6j4s+Jt5BQ2zTka2y2ao18OTfkeLtGqUDfB3oZWMNqK/m6m90FKTKYSTyoBtdESc&#xa;nq9c8G6psGHa8K0O0t+cPwXHZQlZi2nAVN2UhV3GrwfAakzw3Bu31z8nS8OoFxRv&#xa;ssZpBGM=&#xa;-&#45;&#45;&#45;&#45;END CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;"><table key="subject">
<elem key="commonName">kuma.lan.ddnsgeek.com</elem>
</table>
<table key="issuer">
@@ -318,16 +196,16 @@
<elem key="sha1">a08d7799f3efcb179052958c43c5eeb5d6b559c1</elem>
<elem key="sha256">0c923f5eb8618c91b8a8f4bf1cb87d80f07addc83c4b8ed9547890cfb482512b</elem>
<elem key="pem">-&#45;&#45;&#45;&#45;BEGIN CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;MIIGATCCBOmgAwIBAgISBYYKHnpmPDpUPJjaOPK93fSHMA0GCSqGSIb3DQEBCwUA&#xa;MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD&#xa;EwNSMTMwHhcNMjYwNDAxMTk0NDQzWhcNMjYwNjMwMTk0NDQyWjAgMR4wHAYDVQQD&#xa;ExVrdW1hLmxhbi5kZG5zZ2Vlay5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAw&#xa;ggIKAoICAQC2bNy5QjaE52KGlHDyiggwMm0YUU1SlAUrH1Awn3efLnnU2CKuF/NT&#xa;pLP2ahkt7Js/bURSHJgISI7D8tQ3uT1+D7ZZjljYkaXQhdrLRdCSNCNDi3cmBEcR&#xa;WUD8cnS2jXZgwV6C9sU2nXgxiDNEnFy3AOJppuUo6TU2eipfYMHwsz+FIz/ghD3Z&#xa;lTf+T8HO70cGQLBRQP/4cu1Kc5sL+xDOk88SB/91j6FapUmXrsLaIaLeX7EQm7Yy&#xa;2pBkaXe/6UxzNuCAAPqxtkuMPi9Tcmm7X9fqo3ErMcc8BtZqeGcp2Zwm1sg3pYjF&#xa;MjTLTsGAcxfMBWvQi8nhQ92Ah+Vm7O0SddUEFNRvoOioG9dR32C+v6w0E004Upt+&#xa;BY0UWt9EgUrC4I8awGBrL4/E5qgnl6Hi5ho2Q6Px28ybIuoSQ7aeJtS8g5nBjCzp&#xa;5n81UcTtD98lhZKWRRJObFPh9YP/lxYz41GSIrRgBg6PtxU/1nJ0rZZvfwiuigxr&#xa;NdoMo561ghayd607GVZ0JPKvY7sbxEkJ6XQ45E2MP5KF8EaPdvc+V2rP9Djy80+D&#xa;XUq5FsmhM+YK1FfCw6S9cN7JRD9F1wZYmdHtHdS7Nmpag2/8w42UJQgN93WsflEx&#xa;JKdNOuS9JWj95j84WmLkgWugWjZcrgk11PL6WkN6cecDt8+jbmWjvQIDAQABo4IC&#xa;IDCCAhwwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1Ud&#xa;EwEB/wQCMAAwHQYDVR0OBBYEFFXeRi9gTjL3dXj8UCJJQeJ90UeeMB8GA1UdIwQY&#xa;MBaAFOernw8sM6BT015PeMiyhA471pIzMDMGCCsGAQUFBwEBBCcwJTAjBggrBgEF&#xa;BQcwAoYXaHR0cDovL3IxMy5pLmxlbmNyLm9yZy8wIAYDVR0RBBkwF4IVa3VtYS5s&#xa;YW4uZGRuc2dlZWsuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMC0GA1UdHwQmMCQw&#xa;IqAgoB6GHGh0dHA6Ly9yMTMuYy5sZW5jci5vcmcvOC5jcmwwggEKBgorBgEEAdZ5&#xa;AgQCBIH7BIH4APYAdQAWgy2r8KklDw/wOqVF/8i/yCPQh0v2BCkn+OcfMxP1+gAA&#xa;AZ1KyTc0AAAEAwBGMEQCIFgwfeRhONb6T5LOG5a3CEnv5uU9GgHReu3FgCbNWvaO&#xa;AiB4qoUik6olE6a7XgyMymRtow3pT+b51p8jdt+BaxswPAB9AKgmy+MKxjUSRlM/&#xa;4GXxTxnZbhkIE8Qd2W15ALMSPFUnAAABnUrJOMEACAAABQAFK3PIBAMARjBEAiAh&#xa;2KriLcSsAzvAqrucXzHSrZgfFf5tgwdSAYBbsUQxgAIgMhTKcEpKu31cvaY5rjEI&#xa;3CRiSD0zRDpz0muR3ED0Vi0wDQYJKoZIhvcNAQELBQADggEBADbjfbibh5H8hw6L&#xa;2KKxOcEGi787TIgm058gYlsm/2skqK1VqvS3Qmoj5IA05Yr5QpMFQFf6Z1kAy78P&#xa;DH8qfadIgAU2Nbe1cK9o5f4LhTU9wM58C9Ti7e5aiNHA1UCsrwnvJnH523uxEVcG&#xa;HCrne4Bewvtpfyb6M1RoRp3W4lHS4d7thHm6LXLEEJgBCFA5Yz6ez6mtainST5sU&#xa;6j4s+Jt5BQ2zTka2y2ao18OTfkeLtGqUDfB3oZWMNqK/m6m90FKTKYSTyoBtdESc&#xa;nq9c8G6psGHa8K0O0t+cPwXHZQlZi2nAVN2UhV3GrwfAakzw3Bu31z8nS8OoFxRv&#xa;ssZpBGM=&#xa;-&#45;&#45;&#45;&#45;END CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;</elem>
</script><script id="http-waf-detect" output="IDS/IPS/WAF detected:&#xa;kuma.lan.ddnsgeek.com:443/?p4yl04d3=&lt;script&gt;alert(document.cookie)&lt;/script&gt;"/><script id="http-stored-xss" output="Couldn&apos;t find any stored XSS vulnerabilities."/></port>
</script><script id="http-feed" output="Couldn&apos;t find any feeds."/><script id="http-headers" output="&#xa; Content-Type: text/plain; charset=utf-8&#xa; X-Content-Type-Options: nosniff&#xa; Date: Tue, 14 Apr 2026 03:43:08 GMT&#xa; Content-Length: 19&#xa; Connection: close&#xa; &#xa; (Request type: GET)&#xa;"/><script id="http-stored-xss" output="Couldn&apos;t find any stored XSS vulnerabilities."/></port>
</ports>
<times srtt="34863" rttvar="34863" to="174315"/>
<times srtt="36904" rttvar="36904" to="184520"/>
</host>
<taskbegin task="NSE" time="1775376821"/>
<taskend task="NSE" time="1775376821"/>
<taskbegin task="NSE" time="1775376821"/>
<taskend task="NSE" time="1775376821"/>
<taskbegin task="NSE" time="1775376821"/>
<taskend task="NSE" time="1775376821"/>
<runstats><finished time="1775376822" timestr="Sun Apr 5 08:13:42 2026" summary="Nmap done at Sun Apr 5 08:13:42 2026; 1 IP address (1 host up) scanned in 509.39 seconds" elapsed="509.39" exit="success"/><hosts up="1" down="0" total="1"/>
<taskbegin task="NSE" time="1776138515"/>
<taskend task="NSE" time="1776138515"/>
<taskbegin task="NSE" time="1776138515"/>
<taskend task="NSE" time="1776138515"/>
<taskbegin task="NSE" time="1776138515"/>
<taskend task="NSE" time="1776138515"/>
<runstats><finished time="1776138515" timestr="Tue Apr 14 03:48:35 2026" summary="Nmap done at Tue Apr 14 03:48:35 2026; 1 IP address (1 host up) scanned in 361.55 seconds" elapsed="361.55" exit="success"/><hosts up="1" down="0" total="1"/>
</runstats>
</nmaprun>
@@ -1,6 +1,6 @@
HTTP/1.1 301 Moved Permanently
Location: https://kuma.lan.ddnsgeek.com/robots.txt
Date: Sun, 05 Apr 2026 08:05:08 GMT
Date: Tue, 14 Apr 2026 03:42:33 GMT
Content-Length: 17
Moved Permanently
@@ -1,6 +1,6 @@
HTTP/1.1 301 Moved Permanently
Location: https://kuma.lan.ddnsgeek.com/
Date: Sun, 05 Apr 2026 08:05:08 GMT
Date: Tue, 14 Apr 2026 03:42:33 GMT
Content-Length: 17
Moved Permanently
@@ -283,43 +283,3 @@ Configuration {
unique: false,
response_size_limit: 4194304,
}
302 GET 1l 4w 89c https://kuma.lan.ddnsgeek.com/.well-known/change-password => https://github.com/louislam/uptime-kuma/wiki/Reset-Password-via-CLI
200 GET 4l 33w 29264c https://kuma.lan.ddnsgeek.com/favicon.ico
200 GET 2l 4w 25c https://kuma.lan.ddnsgeek.com/robots.txt
200 GET 1l 1w 141c https://kuma.lan.ddnsgeek.com/api/status-page/default/manifest.json
200 GET 9l 104w 1168c https://kuma.lan.ddnsgeek.com/icon.svg
200 GET 6l 2252w 131072c https://kuma.lan.ddnsgeek.com/assets/index-BBxTfFCS.js
200 GET 1l 2817w 114688c https://kuma.lan.ddnsgeek.com/assets/index-legacy-DAPjczQA.js
200 GET 6l 4304w 229376c https://kuma.lan.ddnsgeek.com/assets/index-bOVKKa1O.css
200 GET 1l 2525w 131072c https://kuma.lan.ddnsgeek.com/assets/polyfills-legacy-CC6RtsPR.js
200 GET 41l 139w 4221c https://kuma.lan.ddnsgeek.com/status
404 GET 1l 3w 15c https://kuma.lan.ddnsgeek.com/upload/
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/[ => https://kuma.lan.ddnsgeek.com/[
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/] => https://kuma.lan.ddnsgeek.com/]
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/[.txt => https://kuma.lan.ddnsgeek.com/[.txt
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/].txt => https://kuma.lan.ddnsgeek.com/].txt
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/[.html => https://kuma.lan.ddnsgeek.com/[.html
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/].html => https://kuma.lan.ddnsgeek.com/].html
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/[.php => https://kuma.lan.ddnsgeek.com/[.php
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/[.asp => https://kuma.lan.ddnsgeek.com/[.asp
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/[.aspx => https://kuma.lan.ddnsgeek.com/[.aspx
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/[.jsp => https://kuma.lan.ddnsgeek.com/[.jsp
401 GET 0l 0w 0c https://kuma.lan.ddnsgeek.com/metrics
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/plain] => https://kuma.lan.ddnsgeek.com/plain]
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/plain].txt => https://kuma.lan.ddnsgeek.com/plain].txt
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/plain].html => https://kuma.lan.ddnsgeek.com/plain].html
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/plain].php => https://kuma.lan.ddnsgeek.com/plain].php
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/plain].asp => https://kuma.lan.ddnsgeek.com/plain].asp
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/plain].aspx => https://kuma.lan.ddnsgeek.com/plain].aspx
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/plain].jsp => https://kuma.lan.ddnsgeek.com/plain].jsp
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/quote] => https://kuma.lan.ddnsgeek.com/quote]
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/quote].txt => https://kuma.lan.ddnsgeek.com/quote].txt
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/quote].html => https://kuma.lan.ddnsgeek.com/quote].html
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/quote].php => https://kuma.lan.ddnsgeek.com/quote].php
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/quote].asp => https://kuma.lan.ddnsgeek.com/quote].asp
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/quote].aspx => https://kuma.lan.ddnsgeek.com/quote].aspx
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/quote].jsp => https://kuma.lan.ddnsgeek.com/quote].jsp
200 GET 41l 139w 4221c https://kuma.lan.ddnsgeek.com/STATUS
200 GET 2l 4w 25c https://kuma.lan.ddnsgeek.com/Robots.txt
200 GET 41l 139w 4221c https://kuma.lan.ddnsgeek.com/Status
401 GET 0l 0w 0c https://kuma.lan.ddnsgeek.com/Metrics
@@ -1,6 +1,6 @@
HTTP/1.1 301 Moved Permanently
Location: https://kuma.lan.ddnsgeek.com/.well-known/security.txt
Date: Sun, 05 Apr 2026 08:05:08 GMT
Date: Tue, 14 Apr 2026 03:42:33 GMT
Content-Length: 17
Moved Permanently
@@ -1,3 +1,22 @@
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
LANGUAGE = (unset),
LC_ALL = (unset),
LC_CTYPE = (unset),
LC_NUMERIC = "en_AU.UTF-8",
LC_COLLATE = (unset),
LC_TIME = "en_AU.UTF-8",
LC_MESSAGES = (unset),
LC_MONETARY = "en_AU.UTF-8",
LC_ADDRESS = "en_AU.UTF-8",
LC_IDENTIFICATION = "en_AU.UTF-8",
LC_MEASUREMENT = "en_AU.UTF-8",
LC_PAPER = "en_AU.UTF-8",
LC_TELEPHONE = "en_AU.UTF-8",
LC_NAME = "en_AU.UTF-8",
LANG = "en_US.UTF-8"
are supported and installed on your system.
perl: warning: Falling back to a fallback locale ("en_US.UTF-8").
- Nikto v2.6.0
---------------------------------------------------------------------------
+ Your Nikto installation is out of date.
@@ -5,19 +24,19 @@
+ Target Hostname: kuma.lan.ddnsgeek.com
+ Target Port: 80
+ Platform: Unknown
+ Start Time: 2026-04-05 08:06:25 (GMT0)
+ Start Time: 2026-04-14 03:42:40 (GMT0)
---------------------------------------------------------------------------
+ Server: No banner retrieved
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
+ [013587] /: Suggested security header missing: strict-transport-security. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
+ [013587] /: Suggested security header missing: x-content-type-options. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
+ [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
+ [013587] /: Suggested security header missing: strict-transport-security. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
+ [999979] http://100.100.100.200/latest/meta-data/: IP address found in the 'location' header. The IP is "100.100.100.200". See: https://portswigger.net/kb/issues/00600300_private-ip-addresses-disclosed
+ [007342] /: X-Frame-Options header is deprecated and was replaced with the Content-Security-Policy HTTP header with the frame-ancestors directive. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-Frame-Options
+ [007352] /: The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type. See: https://www.netsparker.com/web-vulnerability-scanner/vulnerabilities/missing-content-type-header/
+ 7900 requests: 16 errors and 8 items reported on the remote host
+ End Time: 2026-04-05 08:47:07 (GMT0) (2442 seconds)
+ End Time: 2026-04-14 04:08:35 (GMT0) (1555 seconds)
---------------------------------------------------------------------------
+ 1 host(s) tested
@@ -1,17 +1,25 @@
# Nmap 7.98 scan initiated Sun Apr 5 08:05:09 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/kuma.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml kuma.lan.ddnsgeek.com
# Nmap 7.99 scan initiated Tue Apr 14 03:42:33 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/kuma.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml kuma.lan.ddnsgeek.com
Nmap scan report for kuma.lan.ddnsgeek.com (101.180.16.105)
Host is up, received user-set (0.042s latency).
Host is up, received user-set (0.030s latency).
rDNS record for 101.180.16.105: cpe-101-180-16-105.nb10.nsw.asp.telstra.net
Scanned at 2026-04-05 08:05:50 UTC for 797s
Scanned at 2026-04-14 03:42:36 UTC for 207s
Bug in http-security-headers: no string output.
PORT STATE SERVICE REASON VERSION
80/tcp open http syn-ack ttl 53 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|_http-chrono: Request times for /; avg: 1116.60ms; min: 752.39ms; max: 1373.17ms
|_http-malware-host: Host appears to be clean
|_http-date: Tue, 14 Apr 2026 03:42:49 GMT; -1s from local time.
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|_http-title: Did not follow redirect to https://kuma.lan.ddnsgeek.com/
|_http-comments-displayer: Couldn't find any comments.
|_http-errors: Couldn't find any error pages.
|_http-chrono: Request times for /; avg: 339.90ms; min: 222.68ms; max: 427.92ms
|_http-feed: Couldn't find any feeds.
|_http-fetch: Please enter the complete path of the directory to save data in.
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|_http-mobileversion-checker: No mobile version detected.
| http-useragent-tester:
| Status for browser useragent: 404
| Redirected To: /dashboard
| Status for browser useragent: false
| Redirected To: https://kuma.lan.ddnsgeek.com/
| Allowed User Agents:
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
| libwww
@@ -30,19 +38,21 @@ PORT STATE SERVICE REASON VERSION
| PECL::HTTP
| Wget/1.13.4 (linux-gnu)
|_ WWW-Mechanize/1.34
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|_http-fetch: Please enter the complete path of the directory to save data in.
|_http-comments-displayer: Couldn't find any comments.
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
| http-headers:
| Location: https://kuma.lan.ddnsgeek.com/
| Date: Tue, 14 Apr 2026 03:42:52 GMT
| Content-Length: 17
| Connection: close
|
|_ (Request type: GET)
| http-vhosts:
|_128 names had status 308
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
|_http-malware-host: Host appears to be clean
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|_http-date: Sun, 05 Apr 2026 08:06:35 GMT; -5s from local time.
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|_http-dombased-xss: Couldn't find any DOM based XSS.
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|_http-mobileversion-checker: No mobile version detected.
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|_http-errors: Couldn't find any error pages.
|_http-csrf: Couldn't find any CSRF vulnerabilities.
| http-sitemap-generator:
| Directory structure:
| Longest directory structure:
@@ -50,22 +60,12 @@ PORT STATE SERVICE REASON VERSION
| Dir: /
| Total files found (by extension):
|_
| http-vhosts:
|_128 names had status 308
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
|_http-title: Did not follow redirect to https://kuma.lan.ddnsgeek.com/
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
| http-headers:
| Location: https://kuma.lan.ddnsgeek.com/
| Date: Sun, 05 Apr 2026 08:06:53 GMT
| Content-Length: 17
| Connection: close
|
|_ (Request type: GET)
|_http-feed: Couldn't find any feeds.
|_http-dombased-xss: Couldn't find any DOM based XSS.
|_http-referer-checker: Couldn't find any cross-domain scripts.
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
Read data files from: /usr/share/nmap
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 08:19:08 2026 -- 1 IP address (1 host up) scanned in 840.61 seconds
# Nmap done at Tue Apr 14 03:46:32 2026 -- 1 IP address (1 host up) scanned in 239.03 seconds
@@ -16,131 +16,8 @@ Detected Plugins:
HTTP Headers:
HTTP/1.1 301 Moved Permanently
Location: https://kuma.lan.ddnsgeek.com/
Date: Sun, 05 Apr 2026 08:06:59 GMT
Date: Tue, 14 Apr 2026 03:42:46 GMT
Content-Length: 17
Connection: close
WhatWeb report for https://kuma.lan.ddnsgeek.com/
Status : 302 Found
Title : <None>
IP : 101.180.16.105
Country : AUSTRALIA, AU
Summary : RedirectLocation[/dashboard], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[x-content-type-options], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
Detected Plugins:
[ RedirectLocation ]
HTTP Server string location. used with http-status 301 and
302
String : /dashboard (from location)
[ Strict-Transport-Security ]
Strict-Transport-Security is an HTTP header that restricts
a web browser from accessing a website without the security
of the HTTPS protocol.
String : max-age=15552000; includeSubDomains; preload
[ UncommonHeaders ]
Uncommon HTTP server headers. The blacklist includes all
the standard headers and many non standard but common ones.
Interesting but fairly common headers should have their own
plugins, eg. x-powered-by, server and x-aspnet-version.
Info about headers can be found at www.http-stats.com
String : x-content-type-options (from headers)
[ X-Frame-Options ]
This plugin retrieves the X-Frame-Options value from the
HTTP header. - More Info:
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
aspx
String : SAMEORIGIN
[ X-XSS-Protection ]
This plugin retrieves the X-XSS-Protection value from the
HTTP header. - More Info:
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
aspx
String : 1; mode=block
HTTP Headers:
HTTP/1.1 302 Found
Content-Length: 32
Content-Type: text/plain; charset=utf-8
Date: Sun, 05 Apr 2026 08:07:14 GMT
Location: /dashboard
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
Vary: Accept
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Connection: close
WhatWeb report for https://kuma.lan.ddnsgeek.com/dashboard
Status : 200 OK
Title : Uptime Kuma
IP : 101.180.16.105
Country : AUSTRALIA, AU
Summary : HTML5, Script[module], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[x-content-type-options], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
Detected Plugins:
[ HTML5 ]
HTML version 5, detected by the doctype declaration
[ Script ]
This plugin detects instances of script HTML elements and
returns the script language/type.
String : module
[ Strict-Transport-Security ]
Strict-Transport-Security is an HTTP header that restricts
a web browser from accessing a website without the security
of the HTTPS protocol.
String : max-age=15552000; includeSubDomains; preload
[ UncommonHeaders ]
Uncommon HTTP server headers. The blacklist includes all
the standard headers and many non standard but common ones.
Interesting but fairly common headers should have their own
plugins, eg. x-powered-by, server and x-aspnet-version.
Info about headers can be found at www.http-stats.com
String : x-content-type-options (from headers)
[ X-Frame-Options ]
This plugin retrieves the X-Frame-Options value from the
HTTP header. - More Info:
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
aspx
String : SAMEORIGIN
[ X-XSS-Protection ]
This plugin retrieves the X-XSS-Protection value from the
HTTP header. - More Info:
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
aspx
String : 1; mode=block
HTTP Headers:
HTTP/1.1 200 OK
Content-Length: 2444
Content-Type: text/html; charset=utf-8
Date: Sun, 05 Apr 2026 08:07:30 GMT
Etag: W/"98c-RxUaxZHFr+/FSabMqXO58T7mz+U"
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Connection: close
@@ -1,65 +1,48 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE nmaprun>
<?xml-stylesheet href="file:///usr/share/nmap/nmap.xsl" type="text/xsl"?>
<!-- Nmap 7.98 scan initiated Sun Apr 5 08:05:09 2026 as: /usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sV -p 80 &quot;-&#45;script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)&quot; -oN /root/results/kuma.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml kuma.lan.ddnsgeek.com -->
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sV -p 80 &quot;-&#45;script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)&quot; -oN /root/results/kuma.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml kuma.lan.ddnsgeek.com" start="1775376309" startstr="Sun Apr 5 08:05:09 2026" version="7.98" xmloutputversion="1.05">
<!-- Nmap 7.99 scan initiated Tue Apr 14 03:42:33 2026 as: /usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sV -p 80 &quot;-&#45;script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)&quot; -oN /root/results/kuma.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml kuma.lan.ddnsgeek.com -->
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sV -p 80 &quot;-&#45;script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)&quot; -oN /root/results/kuma.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml kuma.lan.ddnsgeek.com" start="1776138153" startstr="Tue Apr 14 03:42:33 2026" version="7.99" xmloutputversion="1.05">
<scaninfo type="syn" protocol="tcp" numservices="1" services="80"/>
<verbose level="2"/>
<debugging level="0"/>
<taskbegin task="NSE" time="1775376349"/>
<taskend task="NSE" time="1775376349"/>
<taskbegin task="NSE" time="1775376349"/>
<taskend task="NSE" time="1775376349"/>
<taskbegin task="NSE" time="1775376349"/>
<taskend task="NSE" time="1775376349"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1775376350"/>
<taskend task="Parallel DNS resolution of 1 host." time="1775376350"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1775376350"/>
<taskend task="Parallel DNS resolution of 1 host." time="1775376350"/>
<taskbegin task="SYN Stealth Scan" time="1775376350"/>
<taskend task="SYN Stealth Scan" time="1775376350" extrainfo="1 total ports"/>
<taskbegin task="Service scan" time="1775376355"/>
<taskend task="Service scan" time="1775376362" extrainfo="1 service on 1 host"/>
<taskbegin task="NSE" time="1775376363"/>
<taskprogress task="NSE" time="1775376394" percent="55.17" remaining="26" etc="1775376419"/>
<taskprogress task="NSE" time="1775376424" percent="93.51" remaining="5" etc="1775376428"/>
<taskprogress task="NSE" time="1775376454" percent="99.03" remaining="1" etc="1775376455"/>
<taskprogress task="NSE" time="1775376484" percent="99.68" remaining="1" etc="1775376484"/>
<taskprogress task="NSE" time="1775376514" percent="99.68" remaining="1" etc="1775376514"/>
<taskprogress task="NSE" time="1775376544" percent="99.68" remaining="1" etc="1775376545"/>
<taskprogress task="NSE" time="1775376574" percent="99.68" remaining="1" etc="1775376575"/>
<taskprogress task="NSE" time="1775376604" percent="99.68" remaining="1" etc="1775376605"/>
<taskprogress task="NSE" time="1775376634" percent="99.68" remaining="1" etc="1775376635"/>
<taskprogress task="NSE" time="1775376664" percent="99.68" remaining="1" etc="1775376665"/>
<taskprogress task="NSE" time="1775376694" percent="99.68" remaining="2" etc="1775376695"/>
<taskprogress task="NSE" time="1775376724" percent="99.68" remaining="2" etc="1775376725"/>
<taskprogress task="NSE" time="1775376754" percent="99.68" remaining="2" etc="1775376755"/>
<taskprogress task="NSE" time="1775376784" percent="99.68" remaining="2" etc="1775376785"/>
<taskprogress task="NSE" time="1775376814" percent="99.68" remaining="2" etc="1775376815"/>
<taskprogress task="NSE" time="1775376844" percent="99.68" remaining="2" etc="1775376846"/>
<taskprogress task="NSE" time="1775376874" percent="99.68" remaining="2" etc="1775376876"/>
<taskprogress task="NSE" time="1775376904" percent="99.68" remaining="2" etc="1775376906"/>
<taskprogress task="NSE" time="1775376934" percent="99.68" remaining="2" etc="1775376936"/>
<taskprogress task="NSE" time="1775376964" percent="99.68" remaining="2" etc="1775376966"/>
<taskprogress task="NSE" time="1775376994" percent="99.68" remaining="3" etc="1775376996"/>
<taskprogress task="NSE" time="1775377024" percent="99.68" remaining="3" etc="1775377026"/>
<taskprogress task="NSE" time="1775377054" percent="99.68" remaining="3" etc="1775377056"/>
<taskprogress task="NSE" time="1775377084" percent="99.68" remaining="3" etc="1775377086"/>
<taskprogress task="NSE" time="1775377114" percent="99.68" remaining="3" etc="1775377116"/>
<taskprogress task="NSE" time="1775377144" percent="99.68" remaining="3" etc="1775377147"/>
<taskend task="NSE" time="1775377145"/>
<taskbegin task="NSE" time="1775377145"/>
<taskend task="NSE" time="1775377147"/>
<taskbegin task="NSE" time="1775377147"/>
<taskend task="NSE" time="1775377147"/>
<host starttime="1775376350" endtime="1775377147"><status state="up" reason="user-set" reason_ttl="0"/>
<taskbegin task="NSE" time="1776138155"/>
<taskend task="NSE" time="1776138155"/>
<taskbegin task="NSE" time="1776138155"/>
<taskend task="NSE" time="1776138155"/>
<taskbegin task="NSE" time="1776138155"/>
<taskend task="NSE" time="1776138156"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1776138156"/>
<taskend task="Parallel DNS resolution of 1 host." time="1776138156"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1776138156"/>
<taskend task="Parallel DNS resolution of 1 host." time="1776138156"/>
<taskbegin task="SYN Stealth Scan" time="1776138156"/>
<taskend task="SYN Stealth Scan" time="1776138156" extrainfo="1 total ports"/>
<taskbegin task="Service scan" time="1776138157"/>
<taskend task="Service scan" time="1776138164" extrainfo="1 service on 1 host"/>
<taskbegin task="NSE" time="1776138164"/>
<taskprogress task="NSE" time="1776138195" percent="99.68" remaining="1" etc="1776138195"/>
<taskprogress task="NSE" time="1776138225" percent="99.68" remaining="1" etc="1776138225"/>
<taskprogress task="NSE" time="1776138255" percent="99.68" remaining="1" etc="1776138255"/>
<taskprogress task="NSE" time="1776138285" percent="99.68" remaining="1" etc="1776138285"/>
<taskprogress task="NSE" time="1776138315" percent="99.68" remaining="1" etc="1776138315"/>
<taskend task="NSE" time="1776138331"/>
<taskbegin task="NSE" time="1776138332"/>
<taskend task="NSE" time="1776138361"/>
<taskbegin task="NSE" time="1776138362"/>
<taskend task="NSE" time="1776138363"/>
<host starttime="1776138156" endtime="1776138363"><status state="up" reason="user-set" reason_ttl="0"/>
<address addr="101.180.16.105" addrtype="ipv4"/>
<hostnames>
<hostname name="kuma.lan.ddnsgeek.com" type="user"/>
<hostname name="cpe-101-180-16-105.nb10.nsw.asp.telstra.net" type="PTR"/>
</hostnames>
<ports><port protocol="tcp" portid="80"><state state="open" reason="syn-ack" reason_ttl="53"/><service name="http" product="Golang net/http server" extrainfo="Go-IPFS json-rpc or InfluxDB API" method="probed" conf="10"><cpe>cpe:/a:protocol_labs:go-ipfs</cpe></service><script id="http-chrono" output="Request times for /; avg: 1116.60ms; min: 752.39ms; max: 1373.17ms"/><script id="http-malware-host" output="Host appears to be clean"/><script id="http-useragent-tester" output="&#xa; Status for browser useragent: 404&#xa; Redirected To: /dashboard&#xa; Allowed User Agents: &#xa; Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)&#xa; libwww&#xa; lwp-trivial&#xa; libcurl-agent/1.0&#xa; PHP/&#xa; Python-urllib/2.5&#xa; GT::WWW&#xa; Snoopy&#xa; MFC_Tear_Sample&#xa; HTTP::Lite&#xa; PHPCrawl&#xa; URI::Fetch&#xa; Zend_Http_Client&#xa; http client&#xa; PECL::HTTP&#xa; Wget/1.13.4 (linux-gnu)&#xa; WWW-Mechanize/1.34"><elem key="Status for browser useragent">404</elem>
<elem key="Redirected To">/dashboard</elem>
<ports><port protocol="tcp" portid="80"><state state="open" reason="syn-ack" reason_ttl="53"/><service name="http" product="Golang net/http server" extrainfo="Go-IPFS json-rpc or InfluxDB API" method="probed" conf="10"><cpe>cpe:/a:protocol_labs:go-ipfs</cpe></service><script id="http-security-headers" output=""></script><script id="http-date" output="Tue, 14 Apr 2026 03:42:49 GMT; -1s from local time."><elem key="date">2026-04-14T03:42:49+00:00</elem>
<elem key="delta">-1.0</elem>
</script><script id="http-litespeed-sourcecode-download" output="Request with null byte did not work. This web server might not be vulnerable"/><script id="http-title" output="Did not follow redirect to https://kuma.lan.ddnsgeek.com/"><elem key="redirect_url">https://kuma.lan.ddnsgeek.com/</elem>
</script><script id="http-comments-displayer" output="Couldn&apos;t find any comments."/><script id="http-errors" output="Couldn&apos;t find any error pages."/><script id="http-chrono" output="Request times for /; avg: 339.90ms; min: 222.68ms; max: 427.92ms"/><script id="http-feed" output="Couldn&apos;t find any feeds."/><script id="http-fetch" output="Please enter the complete path of the directory to save data in."><elem key="ERROR">Please enter the complete path of the directory to save data in.</elem>
</script><script id="http-stored-xss" output="Couldn&apos;t find any stored XSS vulnerabilities."/><script id="http-mobileversion-checker" output="No mobile version detected."/><script id="http-useragent-tester" output="&#xa; Status for browser useragent: false&#xa; Redirected To: https://kuma.lan.ddnsgeek.com/&#xa; Allowed User Agents: &#xa; Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)&#xa; libwww&#xa; lwp-trivial&#xa; libcurl-agent/1.0&#xa; PHP/&#xa; Python-urllib/2.5&#xa; GT::WWW&#xa; Snoopy&#xa; MFC_Tear_Sample&#xa; HTTP::Lite&#xa; PHPCrawl&#xa; URI::Fetch&#xa; Zend_Http_Client&#xa; http client&#xa; PECL::HTTP&#xa; Wget/1.13.4 (linux-gnu)&#xa; WWW-Mechanize/1.34"><elem key="Status for browser useragent">false</elem>
<elem key="Redirected To">https://kuma.lan.ddnsgeek.com/</elem>
<table key="Allowed User Agents">
<elem>Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)</elem>
<elem>libwww</elem>
@@ -79,26 +62,22 @@
<elem>Wget/1.13.4 (linux-gnu)</elem>
<elem>WWW-Mechanize/1.34</elem>
</table>
</script><script id="http-csrf" output="Couldn&apos;t find any CSRF vulnerabilities."/><script id="http-litespeed-sourcecode-download" output="Request with null byte did not work. This web server might not be vulnerable"/><script id="http-fetch" output="Please enter the complete path of the directory to save data in."><elem key="ERROR">Please enter the complete path of the directory to save data in.</elem>
</script><script id="http-comments-displayer" output="Couldn&apos;t find any comments."/><script id="http-devframework" output="Couldn&apos;t determine the underlying framework or CMS. Try increasing &apos;httpspider.maxpagecount&apos; value to spider more pages."/><script id="http-wordpress-users" output="[Error] Wordpress installation was not found. We couldn&apos;t find wp-login.php"/><script id="http-date" output="Sun, 05 Apr 2026 08:06:35 GMT; -5s from local time."><elem key="date">2026-04-05T08:06:35+00:00</elem>
<elem key="delta">-5.0</elem>
</script><script id="http-wordpress-enum" output="Nothing found amongst the top 100 resources,use -&#45;script-args search-limit=&lt;number|all&gt; for deeper analysis)"/><script id="http-dombased-xss" output="Couldn&apos;t find any DOM based XSS."/><script id="http-jsonp-detection" output="Couldn&apos;t find any JSONP endpoints."/><script id="http-mobileversion-checker" output="No mobile version detected."/><script id="http-drupal-enum" output="Nothing found amongst the top 100 resources,use -&#45;script-args number=&lt;number|all&gt; for deeper analysis)"/><script id="http-errors" output="Couldn&apos;t find any error pages."/><script id="http-sitemap-generator" output="&#xa; Directory structure:&#xa; Longest directory structure:&#xa; Depth: 0&#xa; Dir: /&#xa; Total files found (by extension):&#xa; &#xa;"/><script id="http-vhosts" output="&#xa;128 names had status 308"/><script id="http-methods" output="&#xa; Supported Methods: GET HEAD POST OPTIONS"><table key="Supported Methods">
</script><script id="http-headers" output="&#xa; Location: https://kuma.lan.ddnsgeek.com/&#xa; Date: Tue, 14 Apr 2026 03:42:52 GMT&#xa; Content-Length: 17&#xa; Connection: close&#xa; &#xa; (Request type: GET)&#xa;"/><script id="http-vhosts" output="&#xa;128 names had status 308"/><script id="http-methods" output="&#xa; Supported Methods: GET HEAD POST OPTIONS"><table key="Supported Methods">
<elem>GET</elem>
<elem>HEAD</elem>
<elem>POST</elem>
<elem>OPTIONS</elem>
</table>
</script><script id="http-security-headers" output=""></script><script id="http-title" output="Did not follow redirect to https://kuma.lan.ddnsgeek.com/"><elem key="redirect_url">https://kuma.lan.ddnsgeek.com/</elem>
</script><script id="http-stored-xss" output="Couldn&apos;t find any stored XSS vulnerabilities."/><script id="http-headers" output="&#xa; Location: https://kuma.lan.ddnsgeek.com/&#xa; Date: Sun, 05 Apr 2026 08:06:53 GMT&#xa; Content-Length: 17&#xa; Connection: close&#xa; &#xa; (Request type: GET)&#xa;"/><script id="http-feed" output="Couldn&apos;t find any feeds."/><script id="http-referer-checker" output="Couldn&apos;t find any cross-domain scripts."/></port>
</script><script id="http-malware-host" output="Host appears to be clean"/><script id="http-wordpress-users" output="[Error] Wordpress installation was not found. We couldn&apos;t find wp-login.php"/><script id="http-jsonp-detection" output="Couldn&apos;t find any JSONP endpoints."/><script id="http-csrf" output="Couldn&apos;t find any CSRF vulnerabilities."/><script id="http-sitemap-generator" output="&#xa; Directory structure:&#xa; Longest directory structure:&#xa; Depth: 0&#xa; Dir: /&#xa; Total files found (by extension):&#xa; &#xa;"/><script id="http-dombased-xss" output="Couldn&apos;t find any DOM based XSS."/><script id="http-referer-checker" output="Couldn&apos;t find any cross-domain scripts."/><script id="http-wordpress-enum" output="Nothing found amongst the top 100 resources,use -&#45;script-args search-limit=&lt;number|all&gt; for deeper analysis)"/><script id="http-drupal-enum" output="Nothing found amongst the top 100 resources,use -&#45;script-args number=&lt;number|all&gt; for deeper analysis)"/><script id="http-devframework" output="Couldn&apos;t determine the underlying framework or CMS. Try increasing &apos;httpspider.maxpagecount&apos; value to spider more pages."/></port>
</ports>
<times srtt="42449" rttvar="42449" to="212245"/>
<times srtt="29883" rttvar="29883" to="149415"/>
</host>
<taskbegin task="NSE" time="1775377148"/>
<taskend task="NSE" time="1775377148"/>
<taskbegin task="NSE" time="1775377148"/>
<taskend task="NSE" time="1775377148"/>
<taskbegin task="NSE" time="1775377148"/>
<taskend task="NSE" time="1775377148"/>
<runstats><finished time="1775377148" timestr="Sun Apr 5 08:19:08 2026" summary="Nmap done at Sun Apr 5 08:19:08 2026; 1 IP address (1 host up) scanned in 840.61 seconds" elapsed="840.61" exit="success"/><hosts up="1" down="0" total="1"/>
<taskbegin task="NSE" time="1776138379"/>
<taskend task="NSE" time="1776138380"/>
<taskbegin task="NSE" time="1776138380"/>
<taskend task="NSE" time="1776138380"/>
<taskbegin task="NSE" time="1776138385"/>
<taskend task="NSE" time="1776138387"/>
<runstats><finished time="1776138392" timestr="Tue Apr 14 03:46:32 2026" summary="Nmap done at Tue Apr 14 03:46:32 2026; 1 IP address (1 host up) scanned in 239.03 seconds" elapsed="239.03" exit="success"/><hosts up="1" down="0" total="1"/>
</runstats>
</nmaprun>
@@ -1,42 +1,38 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE nmaprun>
<?xml-stylesheet href="file:///usr/share/nmap/nmap.xsl" type="text/xsl"?>
<!-- Nmap 7.98 scan initiated Sun Apr 5 08:04:44 2026 as: /usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sV -sC -&#45;version-all -A -&#45;osscan-guess -p- -oN /root/results/kuma.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml kuma.lan.ddnsgeek.com -->
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sV -sC -&#45;version-all -A -&#45;osscan-guess -p- -oN /root/results/kuma.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml kuma.lan.ddnsgeek.com" start="1775376284" startstr="Sun Apr 5 08:04:44 2026" version="7.98" xmloutputversion="1.05">
<!-- Nmap 7.99 scan initiated Tue Apr 14 03:42:34 2026 as: /usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sV -sC -&#45;version-all -A -&#45;osscan-guess -p- -oN /root/results/kuma.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml kuma.lan.ddnsgeek.com -->
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sV -sC -&#45;version-all -A -&#45;osscan-guess -p- -oN /root/results/kuma.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml kuma.lan.ddnsgeek.com" start="1776138154" startstr="Tue Apr 14 03:42:34 2026" version="7.99" xmloutputversion="1.05">
<scaninfo type="syn" protocol="tcp" numservices="65535" services="1-65535"/>
<verbose level="2"/>
<debugging level="0"/>
<taskbegin task="NSE" time="1775376290"/>
<taskend task="NSE" time="1775376290"/>
<taskbegin task="NSE" time="1775376290"/>
<taskend task="NSE" time="1775376290"/>
<taskbegin task="NSE" time="1775376290"/>
<taskend task="NSE" time="1775376290"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1775376291"/>
<taskend task="Parallel DNS resolution of 1 host." time="1775376291"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1775376291"/>
<taskend task="Parallel DNS resolution of 1 host." time="1775376291"/>
<taskbegin task="SYN Stealth Scan" time="1775376291"/>
<taskprogress task="SYN Stealth Scan" time="1775376322" percent="14.08" remaining="190" etc="1775376511"/>
<taskprogress task="SYN Stealth Scan" time="1775376352" percent="22.07" remaining="216" etc="1775376567"/>
<taskprogress task="SYN Stealth Scan" time="1775376382" percent="32.99" remaining="185" etc="1775376567"/>
<taskprogress task="SYN Stealth Scan" time="1775376412" percent="44.39" remaining="152" etc="1775376564"/>
<taskprogress task="SYN Stealth Scan" time="1775376442" percent="59.73" remaining="102" etc="1775376544"/>
<taskprogress task="SYN Stealth Scan" time="1775376472" percent="77.45" remaining="53" etc="1775376525"/>
<taskend task="SYN Stealth Scan" time="1775376551" extrainfo="65535 total ports"/>
<taskbegin task="Service scan" time="1775376628"/>
<taskend task="Service scan" time="1775376642" extrainfo="2 services on 1 host"/>
<taskbegin task="Traceroute" time="1775376650"/>
<taskend task="Traceroute" time="1775376650"/>
<taskbegin task="Parallel DNS resolution of 9 hosts." time="1775376650"/>
<taskend task="Parallel DNS resolution of 9 hosts." time="1775376651"/>
<taskbegin task="NSE" time="1775376651"/>
<taskend task="NSE" time="1775376668"/>
<taskbegin task="NSE" time="1775376668"/>
<taskend task="NSE" time="1775376672"/>
<taskbegin task="NSE" time="1775376672"/>
<taskend task="NSE" time="1775376672"/>
<host starttime="1775376291" endtime="1775376672"><status state="up" reason="user-set" reason_ttl="0"/>
<taskbegin task="NSE" time="1776138157"/>
<taskend task="NSE" time="1776138157"/>
<taskbegin task="NSE" time="1776138157"/>
<taskend task="NSE" time="1776138157"/>
<taskbegin task="NSE" time="1776138157"/>
<taskend task="NSE" time="1776138157"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1776138157"/>
<taskend task="Parallel DNS resolution of 1 host." time="1776138157"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1776138157"/>
<taskend task="Parallel DNS resolution of 1 host." time="1776138157"/>
<taskbegin task="SYN Stealth Scan" time="1776138157"/>
<taskprogress task="SYN Stealth Scan" time="1776138188" percent="20.27" remaining="122" etc="1776138310"/>
<taskprogress task="SYN Stealth Scan" time="1776138218" percent="54.59" remaining="51" etc="1776138269"/>
<taskend task="SYN Stealth Scan" time="1776138249" extrainfo="65535 total ports"/>
<taskbegin task="Service scan" time="1776138250"/>
<taskend task="Service scan" time="1776138276" extrainfo="2 services on 1 host"/>
<taskbegin task="Traceroute" time="1776138281"/>
<taskend task="Traceroute" time="1776138281"/>
<taskbegin task="Parallel DNS resolution of 9 hosts." time="1776138281"/>
<taskend task="Parallel DNS resolution of 9 hosts." time="1776138282"/>
<taskbegin task="NSE" time="1776138282"/>
<taskend task="NSE" time="1776138287"/>
<taskbegin task="NSE" time="1776138287"/>
<taskend task="NSE" time="1776138289"/>
<taskbegin task="NSE" time="1776138289"/>
<taskend task="NSE" time="1776138289"/>
<host starttime="1776138157" endtime="1776138289"><status state="up" reason="user-set" reason_ttl="0"/>
<address addr="101.180.16.105" addrtype="ipv4"/>
<hostnames>
<hostname name="kuma.lan.ddnsgeek.com" type="user"/>
@@ -45,7 +41,7 @@
<ports><extraports state="filtered" count="65533">
<extrareasons reason="no-response" count="65533" proto="tcp" ports="1-79,81-442,444-65535"/>
</extraports>
<port protocol="tcp" portid="80"><state state="open" reason="syn-ack" reason_ttl="52"/><service name="http" product="Golang net/http server" extrainfo="Go-IPFS json-rpc or InfluxDB API" method="probed" conf="10"><cpe>cpe:/a:protocol_labs:go-ipfs</cpe></service><script id="http-methods" output="&#xa; Supported Methods: GET HEAD POST OPTIONS"><table key="Supported Methods">
<port protocol="tcp" portid="80"><state state="open" reason="syn-ack" reason_ttl="53"/><service name="http" product="Golang net/http server" extrainfo="Go-IPFS json-rpc or InfluxDB API" method="probed" conf="10"><cpe>cpe:/a:protocol_labs:go-ipfs</cpe></service><script id="http-methods" output="&#xa; Supported Methods: GET HEAD POST OPTIONS"><table key="Supported Methods">
<elem>GET</elem>
<elem>HEAD</elem>
<elem>POST</elem>
@@ -53,12 +49,7 @@
</table>
</script><script id="http-title" output="Did not follow redirect to https://kuma.lan.ddnsgeek.com/"><elem key="redirect_url">https://kuma.lan.ddnsgeek.com/</elem>
</script></port>
<port protocol="tcp" portid="443"><state state="open" reason="syn-ack" reason_ttl="53"/><service name="http" product="Golang net/http server" extrainfo="Go-IPFS json-rpc or InfluxDB API" tunnel="ssl" method="probed" conf="10"><cpe>cpe:/a:protocol_labs:go-ipfs</cpe></service><script id="ssl-date" output="TLS randomness does not represent time"></script><script id="http-methods" output="&#xa; Supported Methods: GET HEAD POST"><table key="Supported Methods">
<elem>GET</elem>
<elem>HEAD</elem>
<elem>POST</elem>
</table>
</script><script id="ssl-cert" output="Subject: commonName=kuma.lan.ddnsgeek.com&#xa;Subject Alternative Name: DNS:kuma.lan.ddnsgeek.com&#xa;Issuer: commonName=R13/organizationName=Let&apos;s Encrypt/countryName=US&#xa;Public Key type: rsa&#xa;Public Key bits: 4096&#xa;Signature Algorithm: sha256WithRSAEncryption&#xa;Not valid before: 2026-04-01T19:44:43&#xa;Not valid after: 2026-06-30T19:44:42&#xa;MD5: 4503 8f10 fe7f f545 fff2 813b 5a8f 7631&#xa;SHA-1: a08d 7799 f3ef cb17 9052 958c 43c5 eeb5 d6b5 59c1&#xa;SHA-256: 0c92 3f5e b861 8c91 b8a8 f4bf 1cb8 7d80 f07a ddc8 3c4b 8ed9 5478 90cf b482 512b&#xa;-&#45;&#45;&#45;&#45;BEGIN CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;MIIGATCCBOmgAwIBAgISBYYKHnpmPDpUPJjaOPK93fSHMA0GCSqGSIb3DQEBCwUA&#xa;MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD&#xa;EwNSMTMwHhcNMjYwNDAxMTk0NDQzWhcNMjYwNjMwMTk0NDQyWjAgMR4wHAYDVQQD&#xa;ExVrdW1hLmxhbi5kZG5zZ2Vlay5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAw&#xa;ggIKAoICAQC2bNy5QjaE52KGlHDyiggwMm0YUU1SlAUrH1Awn3efLnnU2CKuF/NT&#xa;pLP2ahkt7Js/bURSHJgISI7D8tQ3uT1+D7ZZjljYkaXQhdrLRdCSNCNDi3cmBEcR&#xa;WUD8cnS2jXZgwV6C9sU2nXgxiDNEnFy3AOJppuUo6TU2eipfYMHwsz+FIz/ghD3Z&#xa;lTf+T8HO70cGQLBRQP/4cu1Kc5sL+xDOk88SB/91j6FapUmXrsLaIaLeX7EQm7Yy&#xa;2pBkaXe/6UxzNuCAAPqxtkuMPi9Tcmm7X9fqo3ErMcc8BtZqeGcp2Zwm1sg3pYjF&#xa;MjTLTsGAcxfMBWvQi8nhQ92Ah+Vm7O0SddUEFNRvoOioG9dR32C+v6w0E004Upt+&#xa;BY0UWt9EgUrC4I8awGBrL4/E5qgnl6Hi5ho2Q6Px28ybIuoSQ7aeJtS8g5nBjCzp&#xa;5n81UcTtD98lhZKWRRJObFPh9YP/lxYz41GSIrRgBg6PtxU/1nJ0rZZvfwiuigxr&#xa;NdoMo561ghayd607GVZ0JPKvY7sbxEkJ6XQ45E2MP5KF8EaPdvc+V2rP9Djy80+D&#xa;XUq5FsmhM+YK1FfCw6S9cN7JRD9F1wZYmdHtHdS7Nmpag2/8w42UJQgN93WsflEx&#xa;JKdNOuS9JWj95j84WmLkgWugWjZcrgk11PL6WkN6cecDt8+jbmWjvQIDAQABo4IC&#xa;IDCCAhwwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1Ud&#xa;EwEB/wQCMAAwHQYDVR0OBBYEFFXeRi9gTjL3dXj8UCJJQeJ90UeeMB8GA1UdIwQY&#xa;MBaAFOernw8sM6BT015PeMiyhA471pIzMDMGCCsGAQUFBwEBBCcwJTAjBggrBgEF&#xa;BQcwAoYXaHR0cDovL3IxMy5pLmxlbmNyLm9yZy8wIAYDVR0RBBkwF4IVa3VtYS5s&#xa;YW4uZGRuc2dlZWsuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMC0GA1UdHwQmMCQw&#xa;IqAgoB6GHGh0dHA6Ly9yMTMuYy5sZW5jci5vcmcvOC5jcmwwggEKBgorBgEEAdZ5&#xa;AgQCBIH7BIH4APYAdQAWgy2r8KklDw/wOqVF/8i/yCPQh0v2BCkn+OcfMxP1+gAA&#xa;AZ1KyTc0AAAEAwBGMEQCIFgwfeRhONb6T5LOG5a3CEnv5uU9GgHReu3FgCbNWvaO&#xa;AiB4qoUik6olE6a7XgyMymRtow3pT+b51p8jdt+BaxswPAB9AKgmy+MKxjUSRlM/&#xa;4GXxTxnZbhkIE8Qd2W15ALMSPFUnAAABnUrJOMEACAAABQAFK3PIBAMARjBEAiAh&#xa;2KriLcSsAzvAqrucXzHSrZgfFf5tgwdSAYBbsUQxgAIgMhTKcEpKu31cvaY5rjEI&#xa;3CRiSD0zRDpz0muR3ED0Vi0wDQYJKoZIhvcNAQELBQADggEBADbjfbibh5H8hw6L&#xa;2KKxOcEGi787TIgm058gYlsm/2skqK1VqvS3Qmoj5IA05Yr5QpMFQFf6Z1kAy78P&#xa;DH8qfadIgAU2Nbe1cK9o5f4LhTU9wM58C9Ti7e5aiNHA1UCsrwnvJnH523uxEVcG&#xa;HCrne4Bewvtpfyb6M1RoRp3W4lHS4d7thHm6LXLEEJgBCFA5Yz6ez6mtainST5sU&#xa;6j4s+Jt5BQ2zTka2y2ao18OTfkeLtGqUDfB3oZWMNqK/m6m90FKTKYSTyoBtdESc&#xa;nq9c8G6psGHa8K0O0t+cPwXHZQlZi2nAVN2UhV3GrwfAakzw3Bu31z8nS8OoFxRv&#xa;ssZpBGM=&#xa;-&#45;&#45;&#45;&#45;END CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;"><table key="subject">
<port protocol="tcp" portid="443"><state state="open" reason="syn-ack" reason_ttl="53"/><service name="https" tunnel="ssl" method="probed" conf="10"/><script id="ssl-cert" output="Subject: commonName=kuma.lan.ddnsgeek.com&#xa;Subject Alternative Name: DNS:kuma.lan.ddnsgeek.com&#xa;Issuer: commonName=R13/organizationName=Let&apos;s Encrypt/countryName=US&#xa;Public Key type: rsa&#xa;Public Key bits: 4096&#xa;Signature Algorithm: sha256WithRSAEncryption&#xa;Not valid before: 2026-04-01T19:44:43&#xa;Not valid after: 2026-06-30T19:44:42&#xa;MD5: 4503 8f10 fe7f f545 fff2 813b 5a8f 7631&#xa;SHA-1: a08d 7799 f3ef cb17 9052 958c 43c5 eeb5 d6b5 59c1&#xa;SHA-256: 0c92 3f5e b861 8c91 b8a8 f4bf 1cb8 7d80 f07a ddc8 3c4b 8ed9 5478 90cf b482 512b&#xa;-&#45;&#45;&#45;&#45;BEGIN CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;MIIGATCCBOmgAwIBAgISBYYKHnpmPDpUPJjaOPK93fSHMA0GCSqGSIb3DQEBCwUA&#xa;MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD&#xa;EwNSMTMwHhcNMjYwNDAxMTk0NDQzWhcNMjYwNjMwMTk0NDQyWjAgMR4wHAYDVQQD&#xa;ExVrdW1hLmxhbi5kZG5zZ2Vlay5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAw&#xa;ggIKAoICAQC2bNy5QjaE52KGlHDyiggwMm0YUU1SlAUrH1Awn3efLnnU2CKuF/NT&#xa;pLP2ahkt7Js/bURSHJgISI7D8tQ3uT1+D7ZZjljYkaXQhdrLRdCSNCNDi3cmBEcR&#xa;WUD8cnS2jXZgwV6C9sU2nXgxiDNEnFy3AOJppuUo6TU2eipfYMHwsz+FIz/ghD3Z&#xa;lTf+T8HO70cGQLBRQP/4cu1Kc5sL+xDOk88SB/91j6FapUmXrsLaIaLeX7EQm7Yy&#xa;2pBkaXe/6UxzNuCAAPqxtkuMPi9Tcmm7X9fqo3ErMcc8BtZqeGcp2Zwm1sg3pYjF&#xa;MjTLTsGAcxfMBWvQi8nhQ92Ah+Vm7O0SddUEFNRvoOioG9dR32C+v6w0E004Upt+&#xa;BY0UWt9EgUrC4I8awGBrL4/E5qgnl6Hi5ho2Q6Px28ybIuoSQ7aeJtS8g5nBjCzp&#xa;5n81UcTtD98lhZKWRRJObFPh9YP/lxYz41GSIrRgBg6PtxU/1nJ0rZZvfwiuigxr&#xa;NdoMo561ghayd607GVZ0JPKvY7sbxEkJ6XQ45E2MP5KF8EaPdvc+V2rP9Djy80+D&#xa;XUq5FsmhM+YK1FfCw6S9cN7JRD9F1wZYmdHtHdS7Nmpag2/8w42UJQgN93WsflEx&#xa;JKdNOuS9JWj95j84WmLkgWugWjZcrgk11PL6WkN6cecDt8+jbmWjvQIDAQABo4IC&#xa;IDCCAhwwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1Ud&#xa;EwEB/wQCMAAwHQYDVR0OBBYEFFXeRi9gTjL3dXj8UCJJQeJ90UeeMB8GA1UdIwQY&#xa;MBaAFOernw8sM6BT015PeMiyhA471pIzMDMGCCsGAQUFBwEBBCcwJTAjBggrBgEF&#xa;BQcwAoYXaHR0cDovL3IxMy5pLmxlbmNyLm9yZy8wIAYDVR0RBBkwF4IVa3VtYS5s&#xa;YW4uZGRuc2dlZWsuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMC0GA1UdHwQmMCQw&#xa;IqAgoB6GHGh0dHA6Ly9yMTMuYy5sZW5jci5vcmcvOC5jcmwwggEKBgorBgEEAdZ5&#xa;AgQCBIH7BIH4APYAdQAWgy2r8KklDw/wOqVF/8i/yCPQh0v2BCkn+OcfMxP1+gAA&#xa;AZ1KyTc0AAAEAwBGMEQCIFgwfeRhONb6T5LOG5a3CEnv5uU9GgHReu3FgCbNWvaO&#xa;AiB4qoUik6olE6a7XgyMymRtow3pT+b51p8jdt+BaxswPAB9AKgmy+MKxjUSRlM/&#xa;4GXxTxnZbhkIE8Qd2W15ALMSPFUnAAABnUrJOMEACAAABQAFK3PIBAMARjBEAiAh&#xa;2KriLcSsAzvAqrucXzHSrZgfFf5tgwdSAYBbsUQxgAIgMhTKcEpKu31cvaY5rjEI&#xa;3CRiSD0zRDpz0muR3ED0Vi0wDQYJKoZIhvcNAQELBQADggEBADbjfbibh5H8hw6L&#xa;2KKxOcEGi787TIgm058gYlsm/2skqK1VqvS3Qmoj5IA05Yr5QpMFQFf6Z1kAy78P&#xa;DH8qfadIgAU2Nbe1cK9o5f4LhTU9wM58C9Ti7e5aiNHA1UCsrwnvJnH523uxEVcG&#xa;HCrne4Bewvtpfyb6M1RoRp3W4lHS4d7thHm6LXLEEJgBCFA5Yz6ez6mtainST5sU&#xa;6j4s+Jt5BQ2zTka2y2ao18OTfkeLtGqUDfB3oZWMNqK/m6m90FKTKYSTyoBtdESc&#xa;nq9c8G6psGHa8K0O0t+cPwXHZQlZi2nAVN2UhV3GrwfAakzw3Bu31z8nS8OoFxRv&#xa;ssZpBGM=&#xa;-&#45;&#45;&#45;&#45;END CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;"><table key="subject">
<elem key="commonName">kuma.lan.ddnsgeek.com</elem>
</table>
<table key="issuer">
@@ -125,71 +116,71 @@
<elem key="sha1">a08d7799f3efcb179052958c43c5eeb5d6b559c1</elem>
<elem key="sha256">0c923f5eb8618c91b8a8f4bf1cb87d80f07addc83c4b8ed9547890cfb482512b</elem>
<elem key="pem">-&#45;&#45;&#45;&#45;BEGIN CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;MIIGATCCBOmgAwIBAgISBYYKHnpmPDpUPJjaOPK93fSHMA0GCSqGSIb3DQEBCwUA&#xa;MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD&#xa;EwNSMTMwHhcNMjYwNDAxMTk0NDQzWhcNMjYwNjMwMTk0NDQyWjAgMR4wHAYDVQQD&#xa;ExVrdW1hLmxhbi5kZG5zZ2Vlay5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAw&#xa;ggIKAoICAQC2bNy5QjaE52KGlHDyiggwMm0YUU1SlAUrH1Awn3efLnnU2CKuF/NT&#xa;pLP2ahkt7Js/bURSHJgISI7D8tQ3uT1+D7ZZjljYkaXQhdrLRdCSNCNDi3cmBEcR&#xa;WUD8cnS2jXZgwV6C9sU2nXgxiDNEnFy3AOJppuUo6TU2eipfYMHwsz+FIz/ghD3Z&#xa;lTf+T8HO70cGQLBRQP/4cu1Kc5sL+xDOk88SB/91j6FapUmXrsLaIaLeX7EQm7Yy&#xa;2pBkaXe/6UxzNuCAAPqxtkuMPi9Tcmm7X9fqo3ErMcc8BtZqeGcp2Zwm1sg3pYjF&#xa;MjTLTsGAcxfMBWvQi8nhQ92Ah+Vm7O0SddUEFNRvoOioG9dR32C+v6w0E004Upt+&#xa;BY0UWt9EgUrC4I8awGBrL4/E5qgnl6Hi5ho2Q6Px28ybIuoSQ7aeJtS8g5nBjCzp&#xa;5n81UcTtD98lhZKWRRJObFPh9YP/lxYz41GSIrRgBg6PtxU/1nJ0rZZvfwiuigxr&#xa;NdoMo561ghayd607GVZ0JPKvY7sbxEkJ6XQ45E2MP5KF8EaPdvc+V2rP9Djy80+D&#xa;XUq5FsmhM+YK1FfCw6S9cN7JRD9F1wZYmdHtHdS7Nmpag2/8w42UJQgN93WsflEx&#xa;JKdNOuS9JWj95j84WmLkgWugWjZcrgk11PL6WkN6cecDt8+jbmWjvQIDAQABo4IC&#xa;IDCCAhwwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1Ud&#xa;EwEB/wQCMAAwHQYDVR0OBBYEFFXeRi9gTjL3dXj8UCJJQeJ90UeeMB8GA1UdIwQY&#xa;MBaAFOernw8sM6BT015PeMiyhA471pIzMDMGCCsGAQUFBwEBBCcwJTAjBggrBgEF&#xa;BQcwAoYXaHR0cDovL3IxMy5pLmxlbmNyLm9yZy8wIAYDVR0RBBkwF4IVa3VtYS5s&#xa;YW4uZGRuc2dlZWsuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMC0GA1UdHwQmMCQw&#xa;IqAgoB6GHGh0dHA6Ly9yMTMuYy5sZW5jci5vcmcvOC5jcmwwggEKBgorBgEEAdZ5&#xa;AgQCBIH7BIH4APYAdQAWgy2r8KklDw/wOqVF/8i/yCPQh0v2BCkn+OcfMxP1+gAA&#xa;AZ1KyTc0AAAEAwBGMEQCIFgwfeRhONb6T5LOG5a3CEnv5uU9GgHReu3FgCbNWvaO&#xa;AiB4qoUik6olE6a7XgyMymRtow3pT+b51p8jdt+BaxswPAB9AKgmy+MKxjUSRlM/&#xa;4GXxTxnZbhkIE8Qd2W15ALMSPFUnAAABnUrJOMEACAAABQAFK3PIBAMARjBEAiAh&#xa;2KriLcSsAzvAqrucXzHSrZgfFf5tgwdSAYBbsUQxgAIgMhTKcEpKu31cvaY5rjEI&#xa;3CRiSD0zRDpz0muR3ED0Vi0wDQYJKoZIhvcNAQELBQADggEBADbjfbibh5H8hw6L&#xa;2KKxOcEGi787TIgm058gYlsm/2skqK1VqvS3Qmoj5IA05Yr5QpMFQFf6Z1kAy78P&#xa;DH8qfadIgAU2Nbe1cK9o5f4LhTU9wM58C9Ti7e5aiNHA1UCsrwnvJnH523uxEVcG&#xa;HCrne4Bewvtpfyb6M1RoRp3W4lHS4d7thHm6LXLEEJgBCFA5Yz6ez6mtainST5sU&#xa;6j4s+Jt5BQ2zTka2y2ao18OTfkeLtGqUDfB3oZWMNqK/m6m90FKTKYSTyoBtdESc&#xa;nq9c8G6psGHa8K0O0t+cPwXHZQlZi2nAVN2UhV3GrwfAakzw3Bu31z8nS8OoFxRv&#xa;ssZpBGM=&#xa;-&#45;&#45;&#45;&#45;END CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;</elem>
</script><script id="http-title" output="Uptime Kuma&#xa;Requested resource was /dashboard"><elem key="title">Uptime Kuma</elem>
<elem key="redirect_url">/dashboard</elem>
</script><script id="http-robots.txt" output="1 disallowed entry &#xa;/"/><script id="http-favicon" output="Unknown favicon MD5: 5EA4B467D984433398E1037469F13214"/></port>
</script><script id="ssl-date" output="TLS randomness does not represent time"></script><script id="http-title" output="Site doesn&apos;t have a title (text/plain; charset=utf-8)."></script></port>
</ports>
<os><portused state="open" proto="tcp" portid="80"/>
<osmatch name="Linux 4.15 - 5.19" accuracy="93" line="70534">
<osmatch name="Linux 4.15 - 5.19" accuracy="93" line="71007">
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="4.X" accuracy="93"><cpe>cpe:/o:linux:linux_kernel:4</cpe></osclass>
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="5.X" accuracy="93"><cpe>cpe:/o:linux:linux_kernel:5</cpe></osclass>
</osmatch>
<osmatch name="Linux 4.19" accuracy="93" line="70644">
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="4.X" accuracy="93"><cpe>cpe:/o:linux:linux_kernel:4.19</cpe></osclass>
<osmatch name="Linux 4.19" accuracy="92" line="71117">
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="4.X" accuracy="92"><cpe>cpe:/o:linux:linux_kernel:4.19</cpe></osclass>
</osmatch>
<osmatch name="Linux 5.0 - 5.14" accuracy="93" line="71713">
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="5.X" accuracy="93"><cpe>cpe:/o:linux:linux_kernel:5</cpe></osclass>
<osmatch name="Linux 5.0 - 5.14" accuracy="92" line="72205">
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="5.X" accuracy="92"><cpe>cpe:/o:linux:linux_kernel:5</cpe></osclass>
</osmatch>
<osmatch name="OpenWrt 21.02 (Linux 5.4)" accuracy="93" line="72530">
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="5.X" accuracy="93"><cpe>cpe:/o:linux:linux_kernel:5.4</cpe></osclass>
<osmatch name="OpenWrt 21.02 (Linux 5.4)" accuracy="92" line="73083">
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="5.X" accuracy="92"><cpe>cpe:/o:linux:linux_kernel:5.4</cpe></osclass>
</osmatch>
<osmatch name="MikroTik RouterOS 7.2 - 7.5 (Linux 5.6.3)" accuracy="93" line="91792">
<osclass type="router" vendor="MikroTik" osfamily="RouterOS" osgen="7.X" accuracy="93"><cpe>cpe:/o:mikrotik:routeros:7</cpe></osclass>
<osclass type="router" vendor="Linux" osfamily="Linux" osgen="5.X" accuracy="93"><cpe>cpe:/o:linux:linux_kernel:5.6.3</cpe></osclass>
</osmatch>
<osmatch name="Linux 6.0" accuracy="92" line="72657">
<osmatch name="Linux 6.0" accuracy="92" line="73210">
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="6.X" accuracy="92"><cpe>cpe:/o:linux:linux_kernel:6.0</cpe></osclass>
</osmatch>
<osmatch name="Linux 5.4 - 5.10" accuracy="87" line="72380">
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="5.X" accuracy="87"><cpe>cpe:/o:linux:linux_kernel:5</cpe></osclass>
<osmatch name="MikroTik RouterOS 7.2 - 7.5 (Linux 5.6.3)" accuracy="92" line="92909">
<osclass type="router" vendor="MikroTik" osfamily="RouterOS" osgen="7.X" accuracy="92"><cpe>cpe:/o:mikrotik:routeros:7</cpe></osclass>
<osclass type="router" vendor="Linux" osfamily="Linux" osgen="5.X" accuracy="92"><cpe>cpe:/o:linux:linux_kernel:5.6.3</cpe></osclass>
</osmatch>
<osmatch name="Linux 2.6.32" accuracy="87" line="58659">
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="2.6.X" accuracy="87"><cpe>cpe:/o:linux:linux_kernel:2.6.32</cpe></osclass>
<osmatch name="Linux 6.15" accuracy="89" line="73426">
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="6.X" accuracy="89"><cpe>cpe:/o:linux:linux_kernel:6.15</cpe></osclass>
</osmatch>
<osmatch name="Linux 2.6.32 - 3.13" accuracy="87" line="59907">
<osmatch name="Linux 2.6.32 - 3.13" accuracy="87" line="60380">
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="2.6.X" accuracy="87"><cpe>cpe:/o:linux:linux_kernel:2.6</cpe></osclass>
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="3.X" accuracy="87"><cpe>cpe:/o:linux:linux_kernel:3</cpe></osclass>
</osmatch>
<osmatch name="Linux 3.10" accuracy="87" line="66222">
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="3.X" accuracy="87"><cpe>cpe:/o:linux:linux_kernel:3.10</cpe></osclass>
<osmatch name="Linux 3.2 - 4.14" accuracy="87" line="68905">
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="3.X" accuracy="87"><cpe>cpe:/o:linux:linux_kernel:3</cpe></osclass>
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="4.X" accuracy="87"><cpe>cpe:/o:linux:linux_kernel:4</cpe></osclass>
</osmatch>
<osfingerprint fingerprint="SCAN(V=7.98%E=4%D=4/5%OT=80%CT=%CU=%PV=Y%DS=10%DC=T%G=N%TM=69D21921%P=x86_64-pc-linux-gnu)&#xa;SEQ(SP=103%GCD=1%ISR=10A%TI=Z%TS=A)&#xa;SEQ(SP=103%GCD=1%ISR=10C%TI=Z%TS=A)&#xa;OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)&#xa;WIN(W1=FE88%W2=FE88%W3=FE88%W4=FE88%W5=FE88%W6=FE88)&#xa;ECN(R=Y%DF=Y%TG=40%W=FAF0%O=M5B4NNSNW7%CC=Y%Q=)&#xa;T1(R=Y%DF=Y%TG=40%S=O%A=S+%F=AS%RD=0%Q=)&#xa;T2(R=N)&#xa;T3(R=N)&#xa;T4(R=Y%DF=Y%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)&#xa;U1(R=N)&#xa;IE(R=N)&#xa;"/>
<osmatch name="Linux 2.6.32 - 3.10" accuracy="86" line="60347">
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="2.6.X" accuracy="86"><cpe>cpe:/o:linux:linux_kernel:2.6</cpe></osclass>
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="3.X" accuracy="86"><cpe>cpe:/o:linux:linux_kernel:3</cpe></osclass>
</osmatch>
<osfingerprint fingerprint="SCAN(V=7.99%E=4%D=4/14%OT=80%CT=%CU=%PV=Y%DS=10%DC=T%G=N%TM=69DDB831%P=x86_64-pc-linux-gnu)&#xa;SEQ(SP=102%GCD=1%ISR=10D%TI=Z%TS=A)&#xa;SEQ(SP=F4%GCD=1%ISR=10F%TI=Z%TS=A)&#xa;OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)&#xa;WIN(W1=FE88%W2=FE88%W3=FE88%W4=FE88%W5=FE88%W6=FE88)&#xa;ECN(R=Y%DF=Y%TG=40%W=FAF0%O=M5B4NNSNW7%CC=Y%Q=)&#xa;T1(R=Y%DF=Y%TG=40%S=O%A=S+%F=AS%RD=0%Q=)&#xa;T2(R=N)&#xa;T3(R=N)&#xa;T4(R=Y%DF=Y%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)&#xa;U1(R=N)&#xa;IE(R=N)&#xa;"/>
</os>
<uptime seconds="557085" lastboot="Sun Mar 29 21:26:28 2026"/>
<uptime seconds="3203707" lastboot="Sun Mar 8 01:49:42 2026"/>
<distance value="10"/>
<tcpsequence index="259" difficulty="Good luck!" values="1882BF87,E223B0E5,3D475F85,684C5BAA,29D419F0,A5F66829"/>
<tcpsequence index="258" difficulty="Good luck!" values="5456BE21,7D639071,C1173E9B,392B0A61,868287B4,23E95FA1"/>
<ipidsequence class="All zeros" values="0,0,0,0,0,0"/>
<tcptssequence class="1000HZ" values="21340C3F,21340CA5,21340D09,21340D6C,21340DD1,21340E37"/>
<tcptssequence class="1000HZ" values="BEF48B09,BEF48B6E,BEF48BD3,BEF48C37,BEF48C9C,BEF48D00"/>
<trace port="443" proto="tcp">
<hop ttl="1" ipaddr="10.216.0.161" rtt="0.07"/>
<hop ttl="2" ipaddr="10.216.35.12" rtt="0.23"/>
<hop ttl="3" ipaddr="10.216.32.2" rtt="0.80"/>
<hop ttl="4" ipaddr="172.105.160.102" rtt="10.87" host="lo0-0.gw2.syd1.au.linode.com"/>
<hop ttl="5" ipaddr="104.70.113.22" rtt="0.25" host="ae29.r02.syd01.ien.netarch.akamai.com"/>
<hop ttl="6" ipaddr="203.54.231.153" rtt="1.74" host="Bundle-Ether96.ken-edge903.sydney.telstra.net"/>
<hop ttl="7" ipaddr="203.50.11.172" rtt="2.57" host="bundle-ether12.hay-core30.sydney.telstra.net"/>
<hop ttl="8" ipaddr="203.50.61.81" rtt="0.84" host="ae10.ken-ice301.sydney.telstra.net"/>
<hop ttl="9" ipaddr="58.162.26.74" rtt="0.90" host="gateway.nb10.sydney.asp.telstra.net"/>
<hop ttl="10" ipaddr="101.180.16.105" rtt="38.80" host="cpe-101-180-16-105.nb10.nsw.asp.telstra.net"/>
<hop ttl="1" ipaddr="10.216.0.161" rtt="0.12"/>
<hop ttl="2" ipaddr="10.216.35.12" rtt="0.43"/>
<hop ttl="3" ipaddr="10.216.32.2" rtt="0.81"/>
<hop ttl="4" ipaddr="172.105.160.102" rtt="0.43" host="lo0-0.gw2.syd1.au.linode.com"/>
<hop ttl="5" ipaddr="104.70.113.22" rtt="0.41" host="ae29.r02.syd01.ien.netarch.akamai.com"/>
<hop ttl="6" ipaddr="203.54.231.153" rtt="1.97" host="Bundle-Ether96.ken-edge903.sydney.telstra.net"/>
<hop ttl="7" ipaddr="203.50.11.172" rtt="2.50" host="bundle-ether12.hay-core30.sydney.telstra.net"/>
<hop ttl="8" ipaddr="203.50.61.81" rtt="0.91" host="ae10.ken-ice301.sydney.telstra.net"/>
<hop ttl="9" ipaddr="58.162.26.74" rtt="0.82" host="gateway.nb10.sydney.asp.telstra.net"/>
<hop ttl="10" ipaddr="101.180.16.105" rtt="44.07" host="cpe-101-180-16-105.nb10.nsw.asp.telstra.net"/>
</trace>
<times srtt="53438" rttvar="23111" to="145882"/>
<times srtt="38979" rttvar="3607" to="100000"/>
</host>
<taskbegin task="NSE" time="1775376673"/>
<taskend task="NSE" time="1775376673"/>
<taskbegin task="NSE" time="1775376673"/>
<taskend task="NSE" time="1775376673"/>
<taskbegin task="NSE" time="1775376673"/>
<taskend task="NSE" time="1775376673"/>
<runstats><finished time="1775376673" timestr="Sun Apr 5 08:11:13 2026" summary="Nmap done at Sun Apr 5 08:11:13 2026; 1 IP address (1 host up) scanned in 394.56 seconds" elapsed="394.56" exit="success"/><hosts up="1" down="0" total="1"/>
<taskbegin task="NSE" time="1776138289"/>
<taskend task="NSE" time="1776138289"/>
<taskbegin task="NSE" time="1776138289"/>
<taskend task="NSE" time="1776138289"/>
<taskbegin task="NSE" time="1776138289"/>
<taskend task="NSE" time="1776138289"/>
<runstats><finished time="1776138289" timestr="Tue Apr 14 03:44:49 2026" summary="Nmap done at Tue Apr 14 03:44:49 2026; 1 IP address (1 host up) scanned in 136.35 seconds" elapsed="136.35" exit="success"/><hosts up="1" down="0" total="1"/>
</runstats>
</nmaprun>
@@ -1,36 +1,36 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE nmaprun>
<?xml-stylesheet href="file:///usr/share/nmap/nmap.xsl" type="text/xsl"?>
<!-- Nmap 7.98 scan initiated Sun Apr 5 08:04:18 2026 as: /usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sV -sC -&#45;version-all -A -&#45;osscan-guess -oN /root/results/kuma.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml kuma.lan.ddnsgeek.com -->
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sV -sC -&#45;version-all -A -&#45;osscan-guess -oN /root/results/kuma.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml kuma.lan.ddnsgeek.com" start="1775376258" startstr="Sun Apr 5 08:04:18 2026" version="7.98" xmloutputversion="1.05">
<!-- Nmap 7.99 scan initiated Tue Apr 14 03:41:47 2026 as: /usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sV -sC -&#45;version-all -A -&#45;osscan-guess -oN /root/results/kuma.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml kuma.lan.ddnsgeek.com -->
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sV -sC -&#45;version-all -A -&#45;osscan-guess -oN /root/results/kuma.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml kuma.lan.ddnsgeek.com" start="1776138107" startstr="Tue Apr 14 03:41:47 2026" version="7.99" xmloutputversion="1.05">
<scaninfo type="syn" protocol="tcp" numservices="1000" services="1,3-4,6-7,9,13,17,19-26,30,32-33,37,42-43,49,53,70,79-85,88-90,99-100,106,109-111,113,119,125,135,139,143-144,146,161,163,179,199,211-212,222,254-256,259,264,280,301,306,311,340,366,389,406-407,416-417,425,427,443-445,458,464-465,481,497,500,512-515,524,541,543-545,548,554-555,563,587,593,616-617,625,631,636,646,648,666-668,683,687,691,700,705,711,714,720,722,726,749,765,777,783,787,800-801,808,843,873,880,888,898,900-903,911-912,981,987,990,992-993,995,999-1002,1007,1009-1011,1021-1100,1102,1104-1108,1110-1114,1117,1119,1121-1124,1126,1130-1132,1137-1138,1141,1145,1147-1149,1151-1152,1154,1163-1166,1169,1174-1175,1183,1185-1187,1192,1198-1199,1201,1213,1216-1218,1233-1234,1236,1244,1247-1248,1259,1271-1272,1277,1287,1296,1300-1301,1309-1311,1322,1328,1334,1352,1417,1433-1434,1443,1455,1461,1494,1500-1501,1503,1521,1524,1533,1556,1580,1583,1594,1600,1641,1658,1666,1687-1688,1700,1717-1721,1723,1755,1761,1782-1783,1801,1805,1812,1839-1840,1862-1864,1875,1900,1914,1935,1947,1971-1972,1974,1984,1998-2010,2013,2020-2022,2030,2033-2035,2038,2040-2043,2045-2049,2065,2068,2099-2100,2103,2105-2107,2111,2119,2121,2126,2135,2144,2160-2161,2170,2179,2190-2191,2196,2200,2222,2251,2260,2288,2301,2323,2366,2381-2383,2393-2394,2399,2401,2492,2500,2522,2525,2557,2601-2602,2604-2605,2607-2608,2638,2701-2702,2710,2717-2718,2725,2800,2809,2811,2869,2875,2909-2910,2920,2967-2968,2998,3000-3001,3003,3005-3006,3011,3017,3030-3031,3052,3071,3077,3128,3168,3211,3221,3260-3261,3268-3269,3283,3300-3301,3306,3322-3325,3333,3351,3367,3369-3372,3389-3390,3404,3476,3493,3517,3527,3546,3551,3580,3659,3689-3690,3703,3737,3766,3784,3800-3801,3809,3814,3826-3828,3851,3869,3871,3878,3880,3889,3905,3914,3918,3920,3945,3971,3986,3995,3998,4000-4006,4045,4111,4125-4126,4129,4224,4242,4279,4321,4343,4443-4446,4449,4550,4567,4662,4848,4899-4900,4998,5000-5004,5009,5030,5033,5050-5051,5054,5060-5061,5080,5087,5100-5102,5120,5190,5200,5214,5221-5222,5225-5226,5269,5280,5298,5357,5405,5414,5431-5432,5440,5500,5510,5544,5550,5555,5560,5566,5631,5633,5666,5678-5679,5718,5730,5800-5802,5810-5811,5815,5822,5825,5850,5859,5862,5877,5900-5904,5906-5907,5910-5911,5915,5922,5925,5950,5952,5959-5963,5985-5989,5998-6007,6009,6025,6059,6100-6101,6106,6112,6123,6129,6156,6346,6389,6502,6510,6543,6547,6565-6567,6580,6646,6666-6669,6689,6692,6699,6779,6788-6789,6792,6839,6881,6901,6969,7000-7002,7004,7007,7019,7025,7070,7100,7103,7106,7200-7201,7402,7435,7443,7496,7512,7625,7627,7676,7741,7777-7778,7800,7911,7920-7921,7937-7938,7999-8002,8007-8011,8021-8022,8031,8042,8045,8080-8090,8093,8099-8100,8180-8181,8192-8194,8200,8222,8254,8290-8292,8300,8333,8383,8400,8402,8443,8500,8600,8649,8651-8652,8654,8701,8800,8873,8888,8899,8994,9000-9003,9009-9011,9040,9050,9071,9080-9081,9090-9091,9099-9103,9110-9111,9200,9207,9220,9290,9415,9418,9485,9500,9502-9503,9535,9575,9593-9595,9618,9666,9876-9878,9898,9900,9917,9929,9943-9944,9968,9998-10004,10009-10010,10012,10024-10025,10082,10180,10215,10243,10566,10616-10617,10621,10626,10628-10629,10778,11110-11111,11967,12000,12174,12265,12345,13456,13722,13782-13783,14000,14238,14441-14442,15000,15002-15004,15660,15742,16000-16001,16012,16016,16018,16080,16113,16992-16993,17877,17988,18040,18101,18988,19101,19283,19315,19350,19780,19801,19842,20000,20005,20031,20221-20222,20828,21571,22939,23502,24444,24800,25734-25735,26214,27000,27352-27353,27355-27356,27715,28201,30000,30718,30951,31038,31337,32768-32785,33354,33899,34571-34573,35500,38292,40193,40911,41511,42510,44176,44442-44443,44501,45100,48080,49152-49161,49163,49165,49167,49175-49176,49400,49999-50003,50006,50300,50389,50500,50636,50800,51103,51493,52673,52822,52848,52869,54045,54328,55055-55056,55555,55600,56737-56738,57294,57797,58080,60020,60443,61532,61900,62078,63331,64623,64680,65000,65129,65389"/>
<verbose level="2"/>
<debugging level="0"/>
<taskbegin task="NSE" time="1775376265"/>
<taskend task="NSE" time="1775376265"/>
<taskbegin task="NSE" time="1775376265"/>
<taskend task="NSE" time="1775376265"/>
<taskbegin task="NSE" time="1775376265"/>
<taskend task="NSE" time="1775376265"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1775376265"/>
<taskend task="Parallel DNS resolution of 1 host." time="1775376265"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1775376265"/>
<taskend task="Parallel DNS resolution of 1 host." time="1775376266"/>
<taskbegin task="SYN Stealth Scan" time="1775376266"/>
<taskend task="SYN Stealth Scan" time="1775376271" extrainfo="1000 total ports"/>
<taskbegin task="Service scan" time="1775376274"/>
<taskend task="Service scan" time="1775376288" extrainfo="2 services on 1 host"/>
<taskbegin task="Traceroute" time="1775376293"/>
<taskend task="Traceroute" time="1775376293"/>
<taskbegin task="Parallel DNS resolution of 9 hosts." time="1775376293"/>
<taskend task="Parallel DNS resolution of 9 hosts." time="1775376294"/>
<taskbegin task="NSE" time="1775376294"/>
<taskend task="NSE" time="1775376302"/>
<taskbegin task="NSE" time="1775376302"/>
<taskend task="NSE" time="1775376305"/>
<taskbegin task="NSE" time="1775376305"/>
<taskend task="NSE" time="1775376305"/>
<host starttime="1775376266" endtime="1775376305"><status state="up" reason="user-set" reason_ttl="0"/>
<taskbegin task="NSE" time="1776138108"/>
<taskend task="NSE" time="1776138108"/>
<taskbegin task="NSE" time="1776138108"/>
<taskend task="NSE" time="1776138108"/>
<taskbegin task="NSE" time="1776138108"/>
<taskend task="NSE" time="1776138108"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1776138108"/>
<taskend task="Parallel DNS resolution of 1 host." time="1776138108"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1776138108"/>
<taskend task="Parallel DNS resolution of 1 host." time="1776138108"/>
<taskbegin task="SYN Stealth Scan" time="1776138108"/>
<taskend task="SYN Stealth Scan" time="1776138114" extrainfo="1000 total ports"/>
<taskbegin task="Service scan" time="1776138115"/>
<taskend task="Service scan" time="1776138140" extrainfo="2 services on 1 host"/>
<taskbegin task="Traceroute" time="1776138144"/>
<taskend task="Traceroute" time="1776138144"/>
<taskbegin task="Parallel DNS resolution of 9 hosts." time="1776138144"/>
<taskend task="Parallel DNS resolution of 9 hosts." time="1776138145"/>
<taskbegin task="NSE" time="1776138145"/>
<taskend task="NSE" time="1776138150"/>
<taskbegin task="NSE" time="1776138150"/>
<taskend task="NSE" time="1776138152"/>
<taskbegin task="NSE" time="1776138152"/>
<taskend task="NSE" time="1776138152"/>
<host starttime="1776138108" endtime="1776138152"><status state="up" reason="user-set" reason_ttl="0"/>
<address addr="101.180.16.105" addrtype="ipv4"/>
<hostnames>
<hostname name="kuma.lan.ddnsgeek.com" type="user"/>
@@ -47,12 +47,7 @@
</table>
</script><script id="http-title" output="Did not follow redirect to https://kuma.lan.ddnsgeek.com/"><elem key="redirect_url">https://kuma.lan.ddnsgeek.com/</elem>
</script></port>
<port protocol="tcp" portid="443"><state state="open" reason="syn-ack" reason_ttl="52"/><service name="http" product="Golang net/http server" extrainfo="Go-IPFS json-rpc or InfluxDB API" tunnel="ssl" method="probed" conf="10"><cpe>cpe:/a:protocol_labs:go-ipfs</cpe></service><script id="http-robots.txt" output="1 disallowed entry &#xa;/"/><script id="http-methods" output="&#xa; Supported Methods: GET HEAD POST"><table key="Supported Methods">
<elem>GET</elem>
<elem>HEAD</elem>
<elem>POST</elem>
</table>
</script><script id="ssl-cert" output="Subject: commonName=kuma.lan.ddnsgeek.com&#xa;Subject Alternative Name: DNS:kuma.lan.ddnsgeek.com&#xa;Issuer: commonName=R13/organizationName=Let&apos;s Encrypt/countryName=US&#xa;Public Key type: rsa&#xa;Public Key bits: 4096&#xa;Signature Algorithm: sha256WithRSAEncryption&#xa;Not valid before: 2026-04-01T19:44:43&#xa;Not valid after: 2026-06-30T19:44:42&#xa;MD5: 4503 8f10 fe7f f545 fff2 813b 5a8f 7631&#xa;SHA-1: a08d 7799 f3ef cb17 9052 958c 43c5 eeb5 d6b5 59c1&#xa;SHA-256: 0c92 3f5e b861 8c91 b8a8 f4bf 1cb8 7d80 f07a ddc8 3c4b 8ed9 5478 90cf b482 512b&#xa;-&#45;&#45;&#45;&#45;BEGIN CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;MIIGATCCBOmgAwIBAgISBYYKHnpmPDpUPJjaOPK93fSHMA0GCSqGSIb3DQEBCwUA&#xa;MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD&#xa;EwNSMTMwHhcNMjYwNDAxMTk0NDQzWhcNMjYwNjMwMTk0NDQyWjAgMR4wHAYDVQQD&#xa;ExVrdW1hLmxhbi5kZG5zZ2Vlay5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAw&#xa;ggIKAoICAQC2bNy5QjaE52KGlHDyiggwMm0YUU1SlAUrH1Awn3efLnnU2CKuF/NT&#xa;pLP2ahkt7Js/bURSHJgISI7D8tQ3uT1+D7ZZjljYkaXQhdrLRdCSNCNDi3cmBEcR&#xa;WUD8cnS2jXZgwV6C9sU2nXgxiDNEnFy3AOJppuUo6TU2eipfYMHwsz+FIz/ghD3Z&#xa;lTf+T8HO70cGQLBRQP/4cu1Kc5sL+xDOk88SB/91j6FapUmXrsLaIaLeX7EQm7Yy&#xa;2pBkaXe/6UxzNuCAAPqxtkuMPi9Tcmm7X9fqo3ErMcc8BtZqeGcp2Zwm1sg3pYjF&#xa;MjTLTsGAcxfMBWvQi8nhQ92Ah+Vm7O0SddUEFNRvoOioG9dR32C+v6w0E004Upt+&#xa;BY0UWt9EgUrC4I8awGBrL4/E5qgnl6Hi5ho2Q6Px28ybIuoSQ7aeJtS8g5nBjCzp&#xa;5n81UcTtD98lhZKWRRJObFPh9YP/lxYz41GSIrRgBg6PtxU/1nJ0rZZvfwiuigxr&#xa;NdoMo561ghayd607GVZ0JPKvY7sbxEkJ6XQ45E2MP5KF8EaPdvc+V2rP9Djy80+D&#xa;XUq5FsmhM+YK1FfCw6S9cN7JRD9F1wZYmdHtHdS7Nmpag2/8w42UJQgN93WsflEx&#xa;JKdNOuS9JWj95j84WmLkgWugWjZcrgk11PL6WkN6cecDt8+jbmWjvQIDAQABo4IC&#xa;IDCCAhwwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1Ud&#xa;EwEB/wQCMAAwHQYDVR0OBBYEFFXeRi9gTjL3dXj8UCJJQeJ90UeeMB8GA1UdIwQY&#xa;MBaAFOernw8sM6BT015PeMiyhA471pIzMDMGCCsGAQUFBwEBBCcwJTAjBggrBgEF&#xa;BQcwAoYXaHR0cDovL3IxMy5pLmxlbmNyLm9yZy8wIAYDVR0RBBkwF4IVa3VtYS5s&#xa;YW4uZGRuc2dlZWsuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMC0GA1UdHwQmMCQw&#xa;IqAgoB6GHGh0dHA6Ly9yMTMuYy5sZW5jci5vcmcvOC5jcmwwggEKBgorBgEEAdZ5&#xa;AgQCBIH7BIH4APYAdQAWgy2r8KklDw/wOqVF/8i/yCPQh0v2BCkn+OcfMxP1+gAA&#xa;AZ1KyTc0AAAEAwBGMEQCIFgwfeRhONb6T5LOG5a3CEnv5uU9GgHReu3FgCbNWvaO&#xa;AiB4qoUik6olE6a7XgyMymRtow3pT+b51p8jdt+BaxswPAB9AKgmy+MKxjUSRlM/&#xa;4GXxTxnZbhkIE8Qd2W15ALMSPFUnAAABnUrJOMEACAAABQAFK3PIBAMARjBEAiAh&#xa;2KriLcSsAzvAqrucXzHSrZgfFf5tgwdSAYBbsUQxgAIgMhTKcEpKu31cvaY5rjEI&#xa;3CRiSD0zRDpz0muR3ED0Vi0wDQYJKoZIhvcNAQELBQADggEBADbjfbibh5H8hw6L&#xa;2KKxOcEGi787TIgm058gYlsm/2skqK1VqvS3Qmoj5IA05Yr5QpMFQFf6Z1kAy78P&#xa;DH8qfadIgAU2Nbe1cK9o5f4LhTU9wM58C9Ti7e5aiNHA1UCsrwnvJnH523uxEVcG&#xa;HCrne4Bewvtpfyb6M1RoRp3W4lHS4d7thHm6LXLEEJgBCFA5Yz6ez6mtainST5sU&#xa;6j4s+Jt5BQ2zTka2y2ao18OTfkeLtGqUDfB3oZWMNqK/m6m90FKTKYSTyoBtdESc&#xa;nq9c8G6psGHa8K0O0t+cPwXHZQlZi2nAVN2UhV3GrwfAakzw3Bu31z8nS8OoFxRv&#xa;ssZpBGM=&#xa;-&#45;&#45;&#45;&#45;END CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;"><table key="subject">
<port protocol="tcp" portid="443"><state state="open" reason="syn-ack" reason_ttl="53"/><service name="https" tunnel="ssl" method="probed" conf="10"/><script id="http-title" output="Site doesn&apos;t have a title (text/plain; charset=utf-8)."></script><script id="ssl-date" output="TLS randomness does not represent time"></script><script id="ssl-cert" output="Subject: commonName=kuma.lan.ddnsgeek.com&#xa;Subject Alternative Name: DNS:kuma.lan.ddnsgeek.com&#xa;Issuer: commonName=R13/organizationName=Let&apos;s Encrypt/countryName=US&#xa;Public Key type: rsa&#xa;Public Key bits: 4096&#xa;Signature Algorithm: sha256WithRSAEncryption&#xa;Not valid before: 2026-04-01T19:44:43&#xa;Not valid after: 2026-06-30T19:44:42&#xa;MD5: 4503 8f10 fe7f f545 fff2 813b 5a8f 7631&#xa;SHA-1: a08d 7799 f3ef cb17 9052 958c 43c5 eeb5 d6b5 59c1&#xa;SHA-256: 0c92 3f5e b861 8c91 b8a8 f4bf 1cb8 7d80 f07a ddc8 3c4b 8ed9 5478 90cf b482 512b&#xa;-&#45;&#45;&#45;&#45;BEGIN CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;MIIGATCCBOmgAwIBAgISBYYKHnpmPDpUPJjaOPK93fSHMA0GCSqGSIb3DQEBCwUA&#xa;MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD&#xa;EwNSMTMwHhcNMjYwNDAxMTk0NDQzWhcNMjYwNjMwMTk0NDQyWjAgMR4wHAYDVQQD&#xa;ExVrdW1hLmxhbi5kZG5zZ2Vlay5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAw&#xa;ggIKAoICAQC2bNy5QjaE52KGlHDyiggwMm0YUU1SlAUrH1Awn3efLnnU2CKuF/NT&#xa;pLP2ahkt7Js/bURSHJgISI7D8tQ3uT1+D7ZZjljYkaXQhdrLRdCSNCNDi3cmBEcR&#xa;WUD8cnS2jXZgwV6C9sU2nXgxiDNEnFy3AOJppuUo6TU2eipfYMHwsz+FIz/ghD3Z&#xa;lTf+T8HO70cGQLBRQP/4cu1Kc5sL+xDOk88SB/91j6FapUmXrsLaIaLeX7EQm7Yy&#xa;2pBkaXe/6UxzNuCAAPqxtkuMPi9Tcmm7X9fqo3ErMcc8BtZqeGcp2Zwm1sg3pYjF&#xa;MjTLTsGAcxfMBWvQi8nhQ92Ah+Vm7O0SddUEFNRvoOioG9dR32C+v6w0E004Upt+&#xa;BY0UWt9EgUrC4I8awGBrL4/E5qgnl6Hi5ho2Q6Px28ybIuoSQ7aeJtS8g5nBjCzp&#xa;5n81UcTtD98lhZKWRRJObFPh9YP/lxYz41GSIrRgBg6PtxU/1nJ0rZZvfwiuigxr&#xa;NdoMo561ghayd607GVZ0JPKvY7sbxEkJ6XQ45E2MP5KF8EaPdvc+V2rP9Djy80+D&#xa;XUq5FsmhM+YK1FfCw6S9cN7JRD9F1wZYmdHtHdS7Nmpag2/8w42UJQgN93WsflEx&#xa;JKdNOuS9JWj95j84WmLkgWugWjZcrgk11PL6WkN6cecDt8+jbmWjvQIDAQABo4IC&#xa;IDCCAhwwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1Ud&#xa;EwEB/wQCMAAwHQYDVR0OBBYEFFXeRi9gTjL3dXj8UCJJQeJ90UeeMB8GA1UdIwQY&#xa;MBaAFOernw8sM6BT015PeMiyhA471pIzMDMGCCsGAQUFBwEBBCcwJTAjBggrBgEF&#xa;BQcwAoYXaHR0cDovL3IxMy5pLmxlbmNyLm9yZy8wIAYDVR0RBBkwF4IVa3VtYS5s&#xa;YW4uZGRuc2dlZWsuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMC0GA1UdHwQmMCQw&#xa;IqAgoB6GHGh0dHA6Ly9yMTMuYy5sZW5jci5vcmcvOC5jcmwwggEKBgorBgEEAdZ5&#xa;AgQCBIH7BIH4APYAdQAWgy2r8KklDw/wOqVF/8i/yCPQh0v2BCkn+OcfMxP1+gAA&#xa;AZ1KyTc0AAAEAwBGMEQCIFgwfeRhONb6T5LOG5a3CEnv5uU9GgHReu3FgCbNWvaO&#xa;AiB4qoUik6olE6a7XgyMymRtow3pT+b51p8jdt+BaxswPAB9AKgmy+MKxjUSRlM/&#xa;4GXxTxnZbhkIE8Qd2W15ALMSPFUnAAABnUrJOMEACAAABQAFK3PIBAMARjBEAiAh&#xa;2KriLcSsAzvAqrucXzHSrZgfFf5tgwdSAYBbsUQxgAIgMhTKcEpKu31cvaY5rjEI&#xa;3CRiSD0zRDpz0muR3ED0Vi0wDQYJKoZIhvcNAQELBQADggEBADbjfbibh5H8hw6L&#xa;2KKxOcEGi787TIgm058gYlsm/2skqK1VqvS3Qmoj5IA05Yr5QpMFQFf6Z1kAy78P&#xa;DH8qfadIgAU2Nbe1cK9o5f4LhTU9wM58C9Ti7e5aiNHA1UCsrwnvJnH523uxEVcG&#xa;HCrne4Bewvtpfyb6M1RoRp3W4lHS4d7thHm6LXLEEJgBCFA5Yz6ez6mtainST5sU&#xa;6j4s+Jt5BQ2zTka2y2ao18OTfkeLtGqUDfB3oZWMNqK/m6m90FKTKYSTyoBtdESc&#xa;nq9c8G6psGHa8K0O0t+cPwXHZQlZi2nAVN2UhV3GrwfAakzw3Bu31z8nS8OoFxRv&#xa;ssZpBGM=&#xa;-&#45;&#45;&#45;&#45;END CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;"><table key="subject">
<elem key="commonName">kuma.lan.ddnsgeek.com</elem>
</table>
<table key="issuer">
@@ -119,73 +114,69 @@
<elem key="sha1">a08d7799f3efcb179052958c43c5eeb5d6b559c1</elem>
<elem key="sha256">0c923f5eb8618c91b8a8f4bf1cb87d80f07addc83c4b8ed9547890cfb482512b</elem>
<elem key="pem">-&#45;&#45;&#45;&#45;BEGIN CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;MIIGATCCBOmgAwIBAgISBYYKHnpmPDpUPJjaOPK93fSHMA0GCSqGSIb3DQEBCwUA&#xa;MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD&#xa;EwNSMTMwHhcNMjYwNDAxMTk0NDQzWhcNMjYwNjMwMTk0NDQyWjAgMR4wHAYDVQQD&#xa;ExVrdW1hLmxhbi5kZG5zZ2Vlay5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAw&#xa;ggIKAoICAQC2bNy5QjaE52KGlHDyiggwMm0YUU1SlAUrH1Awn3efLnnU2CKuF/NT&#xa;pLP2ahkt7Js/bURSHJgISI7D8tQ3uT1+D7ZZjljYkaXQhdrLRdCSNCNDi3cmBEcR&#xa;WUD8cnS2jXZgwV6C9sU2nXgxiDNEnFy3AOJppuUo6TU2eipfYMHwsz+FIz/ghD3Z&#xa;lTf+T8HO70cGQLBRQP/4cu1Kc5sL+xDOk88SB/91j6FapUmXrsLaIaLeX7EQm7Yy&#xa;2pBkaXe/6UxzNuCAAPqxtkuMPi9Tcmm7X9fqo3ErMcc8BtZqeGcp2Zwm1sg3pYjF&#xa;MjTLTsGAcxfMBWvQi8nhQ92Ah+Vm7O0SddUEFNRvoOioG9dR32C+v6w0E004Upt+&#xa;BY0UWt9EgUrC4I8awGBrL4/E5qgnl6Hi5ho2Q6Px28ybIuoSQ7aeJtS8g5nBjCzp&#xa;5n81UcTtD98lhZKWRRJObFPh9YP/lxYz41GSIrRgBg6PtxU/1nJ0rZZvfwiuigxr&#xa;NdoMo561ghayd607GVZ0JPKvY7sbxEkJ6XQ45E2MP5KF8EaPdvc+V2rP9Djy80+D&#xa;XUq5FsmhM+YK1FfCw6S9cN7JRD9F1wZYmdHtHdS7Nmpag2/8w42UJQgN93WsflEx&#xa;JKdNOuS9JWj95j84WmLkgWugWjZcrgk11PL6WkN6cecDt8+jbmWjvQIDAQABo4IC&#xa;IDCCAhwwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1Ud&#xa;EwEB/wQCMAAwHQYDVR0OBBYEFFXeRi9gTjL3dXj8UCJJQeJ90UeeMB8GA1UdIwQY&#xa;MBaAFOernw8sM6BT015PeMiyhA471pIzMDMGCCsGAQUFBwEBBCcwJTAjBggrBgEF&#xa;BQcwAoYXaHR0cDovL3IxMy5pLmxlbmNyLm9yZy8wIAYDVR0RBBkwF4IVa3VtYS5s&#xa;YW4uZGRuc2dlZWsuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMC0GA1UdHwQmMCQw&#xa;IqAgoB6GHGh0dHA6Ly9yMTMuYy5sZW5jci5vcmcvOC5jcmwwggEKBgorBgEEAdZ5&#xa;AgQCBIH7BIH4APYAdQAWgy2r8KklDw/wOqVF/8i/yCPQh0v2BCkn+OcfMxP1+gAA&#xa;AZ1KyTc0AAAEAwBGMEQCIFgwfeRhONb6T5LOG5a3CEnv5uU9GgHReu3FgCbNWvaO&#xa;AiB4qoUik6olE6a7XgyMymRtow3pT+b51p8jdt+BaxswPAB9AKgmy+MKxjUSRlM/&#xa;4GXxTxnZbhkIE8Qd2W15ALMSPFUnAAABnUrJOMEACAAABQAFK3PIBAMARjBEAiAh&#xa;2KriLcSsAzvAqrucXzHSrZgfFf5tgwdSAYBbsUQxgAIgMhTKcEpKu31cvaY5rjEI&#xa;3CRiSD0zRDpz0muR3ED0Vi0wDQYJKoZIhvcNAQELBQADggEBADbjfbibh5H8hw6L&#xa;2KKxOcEGi787TIgm058gYlsm/2skqK1VqvS3Qmoj5IA05Yr5QpMFQFf6Z1kAy78P&#xa;DH8qfadIgAU2Nbe1cK9o5f4LhTU9wM58C9Ti7e5aiNHA1UCsrwnvJnH523uxEVcG&#xa;HCrne4Bewvtpfyb6M1RoRp3W4lHS4d7thHm6LXLEEJgBCFA5Yz6ez6mtainST5sU&#xa;6j4s+Jt5BQ2zTka2y2ao18OTfkeLtGqUDfB3oZWMNqK/m6m90FKTKYSTyoBtdESc&#xa;nq9c8G6psGHa8K0O0t+cPwXHZQlZi2nAVN2UhV3GrwfAakzw3Bu31z8nS8OoFxRv&#xa;ssZpBGM=&#xa;-&#45;&#45;&#45;&#45;END CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;</elem>
</script><script id="ssl-date" output="TLS randomness does not represent time"></script><script id="http-title" output="Uptime Kuma&#xa;Requested resource was /dashboard"><elem key="title">Uptime Kuma</elem>
<elem key="redirect_url">/dashboard</elem>
</script><script id="http-favicon" output="Unknown favicon MD5: 5EA4B467D984433398E1037469F13214"/></port>
</script></port>
</ports>
<os><portused state="open" proto="tcp" portid="80"/>
<osmatch name="Linux 4.15 - 5.19" accuracy="93" line="70534">
<osmatch name="Linux 4.15 - 5.19" accuracy="93" line="71007">
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="4.X" accuracy="93"><cpe>cpe:/o:linux:linux_kernel:4</cpe></osclass>
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="5.X" accuracy="93"><cpe>cpe:/o:linux:linux_kernel:5</cpe></osclass>
</osmatch>
<osmatch name="Linux 5.0 - 5.14" accuracy="93" line="71713">
<osmatch name="Linux 4.19" accuracy="93" line="71117">
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="4.X" accuracy="93"><cpe>cpe:/o:linux:linux_kernel:4.19</cpe></osclass>
</osmatch>
<osmatch name="Linux 5.0 - 5.14" accuracy="93" line="72205">
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="5.X" accuracy="93"><cpe>cpe:/o:linux:linux_kernel:5</cpe></osclass>
</osmatch>
<osmatch name="Linux 4.19" accuracy="92" line="70644">
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="4.X" accuracy="92"><cpe>cpe:/o:linux:linux_kernel:4.19</cpe></osclass>
<osmatch name="OpenWrt 21.02 (Linux 5.4)" accuracy="93" line="73083">
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="5.X" accuracy="93"><cpe>cpe:/o:linux:linux_kernel:5.4</cpe></osclass>
</osmatch>
<osmatch name="OpenWrt 21.02 (Linux 5.4)" accuracy="92" line="72530">
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="5.X" accuracy="92"><cpe>cpe:/o:linux:linux_kernel:5.4</cpe></osclass>
<osmatch name="MikroTik RouterOS 7.2 - 7.5 (Linux 5.6.3)" accuracy="93" line="92909">
<osclass type="router" vendor="MikroTik" osfamily="RouterOS" osgen="7.X" accuracy="93"><cpe>cpe:/o:mikrotik:routeros:7</cpe></osclass>
<osclass type="router" vendor="Linux" osfamily="Linux" osgen="5.X" accuracy="93"><cpe>cpe:/o:linux:linux_kernel:5.6.3</cpe></osclass>
</osmatch>
<osmatch name="MikroTik RouterOS 7.2 - 7.5 (Linux 5.6.3)" accuracy="92" line="91792">
<osclass type="router" vendor="MikroTik" osfamily="RouterOS" osgen="7.X" accuracy="92"><cpe>cpe:/o:mikrotik:routeros:7</cpe></osclass>
<osclass type="router" vendor="Linux" osfamily="Linux" osgen="5.X" accuracy="92"><cpe>cpe:/o:linux:linux_kernel:5.6.3</cpe></osclass>
<osmatch name="Linux 6.0" accuracy="92" line="73210">
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="6.X" accuracy="92"><cpe>cpe:/o:linux:linux_kernel:6.0</cpe></osclass>
</osmatch>
<osmatch name="Linux 6.0" accuracy="90" line="72657">
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="6.X" accuracy="90"><cpe>cpe:/o:linux:linux_kernel:6.0</cpe></osclass>
<osmatch name="Linux 6.15" accuracy="90" line="73426">
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="6.X" accuracy="90"><cpe>cpe:/o:linux:linux_kernel:6.15</cpe></osclass>
</osmatch>
<osmatch name="Linux 2.6.32" accuracy="87" line="58659">
<osmatch name="Linux 5.4 - 5.10" accuracy="87" line="72914">
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="5.X" accuracy="87"><cpe>cpe:/o:linux:linux_kernel:5</cpe></osclass>
</osmatch>
<osmatch name="Linux 2.6.32" accuracy="87" line="59132">
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="2.6.X" accuracy="87"><cpe>cpe:/o:linux:linux_kernel:2.6.32</cpe></osclass>
</osmatch>
<osmatch name="Linux 2.6.32 - 3.13" accuracy="87" line="59907">
<osmatch name="Linux 2.6.32 - 3.13" accuracy="87" line="60380">
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="2.6.X" accuracy="87"><cpe>cpe:/o:linux:linux_kernel:2.6</cpe></osclass>
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="3.X" accuracy="87"><cpe>cpe:/o:linux:linux_kernel:3</cpe></osclass>
</osmatch>
<osmatch name="Linux 3.10 - 4.11" accuracy="87" line="66652">
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="3.X" accuracy="87"><cpe>cpe:/o:linux:linux_kernel:3</cpe></osclass>
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="4.X" accuracy="87"><cpe>cpe:/o:linux:linux_kernel:4</cpe></osclass>
</osmatch>
<osmatch name="Linux 3.2 - 4.14" accuracy="87" line="68432">
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="3.X" accuracy="87"><cpe>cpe:/o:linux:linux_kernel:3</cpe></osclass>
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="4.X" accuracy="87"><cpe>cpe:/o:linux:linux_kernel:4</cpe></osclass>
</osmatch>
<osfingerprint fingerprint="SCAN(V=7.98%E=4%D=4/5%OT=80%CT=%CU=%PV=Y%DS=10%DC=T%G=N%TM=69D217B1%P=x86_64-pc-linux-gnu)&#xa;SEQ(SP=105%GCD=1%ISR=101%TI=Z%TS=A)&#xa;SEQ(SP=105%GCD=1%ISR=10C%TI=Z%TS=A)&#xa;OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)&#xa;WIN(W1=FE88%W2=FE88%W3=FE88%W4=FE88%W5=FE88%W6=FE88)&#xa;ECN(R=Y%DF=Y%TG=40%W=FAF0%O=M5B4NNSNW7%CC=Y%Q=)&#xa;T1(R=Y%DF=Y%TG=40%S=O%A=S+%F=AS%RD=0%Q=)&#xa;T2(R=N)&#xa;T3(R=N)&#xa;T4(R=Y%DF=Y%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)&#xa;U1(R=N)&#xa;IE(R=N)&#xa;"/>
<osfingerprint fingerprint="SCAN(V=7.99%E=4%D=4/14%OT=80%CT=%CU=%PV=Y%DS=10%DC=T%G=N%TM=69DDB7A8%P=x86_64-pc-linux-gnu)&#xa;SEQ(SP=102%GCD=1%ISR=10D%TI=Z%TS=A)&#xa;SEQ(SP=104%GCD=1%ISR=109%TI=Z%TS=A)&#xa;OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)&#xa;WIN(W1=FE88%W2=FE88%W3=FE88%W4=FE88%W5=FE88%W6=FE88)&#xa;ECN(R=Y%DF=Y%TG=40%W=FAF0%O=M5B4NNSNW7%CC=Y%Q=)&#xa;T1(R=Y%DF=Y%TG=40%S=O%A=S+%F=AS%RD=0%Q=)&#xa;T2(R=N)&#xa;T3(R=N)&#xa;T4(R=Y%DF=Y%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)&#xa;U1(R=N)&#xa;IE(R=N)&#xa;"/>
</os>
<uptime seconds="556717" lastboot="Sun Mar 29 21:26:28 2026"/>
<uptime seconds="3203570" lastboot="Sun Mar 8 01:49:42 2026"/>
<distance value="10"/>
<tcpsequence index="261" difficulty="Good luck!" values="59FF8C96,9D4DCFBE,96946CE0,31E6D252,CFBDEF83,7BA98389"/>
<tcpsequence index="260" difficulty="Good luck!" values="35D67B07,C6234E83,F5F32B0F,A7A9BD85,8F4A13DC,7738548D"/>
<ipidsequence class="All zeros" values="0,0,0,0,0,0"/>
<tcptssequence class="1000HZ" values="212E9DEC,212E9E54,212E9EB9,212E9F1D,212E9F83,212E9FE9"/>
<tcptssequence class="1000HZ" values="BEF2762A,BEF2768D,BEF276F2,BEF27756,BEF277BA,BEF2781E"/>
<trace port="443" proto="tcp">
<hop ttl="1" ipaddr="10.216.0.161" rtt="0.12"/>
<hop ttl="2" ipaddr="10.216.35.11" rtt="0.25"/>
<hop ttl="3" ipaddr="10.216.32.2" rtt="0.91"/>
<hop ttl="4" ipaddr="172.105.160.101" rtt="0.93" host="lo0-0.gw1.syd1.au.linode.com"/>
<hop ttl="5" ipaddr="104.70.113.22" rtt="0.27" host="ae29.r02.syd01.ien.netarch.akamai.com"/>
<hop ttl="6" ipaddr="203.54.231.153" rtt="1.66" host="Bundle-Ether96.ken-edge903.sydney.telstra.net"/>
<hop ttl="7" ipaddr="203.50.12.130" rtt="1.79" host="bundle-ether50.hay-core30.sydney.telstra.net"/>
<hop ttl="8" ipaddr="203.50.61.81" rtt="0.96" host="ae10.ken-ice301.sydney.telstra.net"/>
<hop ttl="9" ipaddr="58.162.26.74" rtt="0.99" host="gateway.nb10.sydney.asp.telstra.net"/>
<hop ttl="10" ipaddr="101.180.16.105" rtt="41.72" host="cpe-101-180-16-105.nb10.nsw.asp.telstra.net"/>
<hop ttl="1" ipaddr="10.216.0.161" rtt="0.32"/>
<hop ttl="2" ipaddr="10.216.35.12" rtt="0.35"/>
<hop ttl="3" ipaddr="10.216.32.1" rtt="0.85"/>
<hop ttl="4" ipaddr="172.105.160.102" rtt="0.38" host="lo0-0.gw2.syd1.au.linode.com"/>
<hop ttl="5" ipaddr="104.70.113.22" rtt="0.36" host="ae29.r02.syd01.ien.netarch.akamai.com"/>
<hop ttl="6" ipaddr="203.54.231.153" rtt="1.45" host="Bundle-Ether96.ken-edge903.sydney.telstra.net"/>
<hop ttl="7" ipaddr="203.50.12.130" rtt="1.05" host="bundle-ether50.hay-core30.sydney.telstra.net"/>
<hop ttl="8" ipaddr="203.50.61.81" rtt="0.80" host="ae10.ken-ice301.sydney.telstra.net"/>
<hop ttl="9" ipaddr="58.162.26.74" rtt="0.89" host="gateway.nb10.sydney.asp.telstra.net"/>
<hop ttl="10" ipaddr="101.180.16.105" rtt="33.83" host="cpe-101-180-16-105.nb10.nsw.asp.telstra.net"/>
</trace>
<times srtt="40202" rttvar="3040" to="100000"/>
<times srtt="37523" rttvar="3193" to="100000"/>
</host>
<taskbegin task="NSE" time="1775376305"/>
<taskend task="NSE" time="1775376305"/>
<taskbegin task="NSE" time="1775376305"/>
<taskend task="NSE" time="1775376305"/>
<taskbegin task="NSE" time="1775376305"/>
<taskend task="NSE" time="1775376305"/>
<runstats><finished time="1775376305" timestr="Sun Apr 5 08:05:05 2026" summary="Nmap done at Sun Apr 5 08:05:05 2026; 1 IP address (1 host up) scanned in 53.02 seconds" elapsed="53.02" exit="success"/><hosts up="1" down="0" total="1"/>
<taskbegin task="NSE" time="1776138152"/>
<taskend task="NSE" time="1776138152"/>
<taskbegin task="NSE" time="1776138152"/>
<taskend task="NSE" time="1776138152"/>
<taskbegin task="NSE" time="1776138152"/>
<taskend task="NSE" time="1776138152"/>
<runstats><finished time="1776138152" timestr="Tue Apr 14 03:42:32 2026" summary="Nmap done at Tue Apr 14 03:42:32 2026; 1 IP address (1 host up) scanned in 45.09 seconds" elapsed="45.09" exit="success"/><hosts up="1" down="0" total="1"/>
</runstats>
</nmaprun>
@@ -1,70 +1,70 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE nmaprun>
<?xml-stylesheet href="file:///usr/share/nmap/nmap.xsl" type="text/xsl"?>
<!-- Nmap 7.98 scan initiated Sun Apr 5 08:05:19 2026 as: /usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sU -A -&#45;top-ports 100 -oN /root/results/kuma.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml kuma.lan.ddnsgeek.com -->
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sU -A -&#45;top-ports 100 -oN /root/results/kuma.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml kuma.lan.ddnsgeek.com" start="1775376319" startstr="Sun Apr 5 08:05:19 2026" version="7.98" xmloutputversion="1.05">
<!-- Nmap 7.99 scan initiated Tue Apr 14 03:44:21 2026 as: /usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sU -A -&#45;top-ports 100 -oN /root/results/kuma.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml kuma.lan.ddnsgeek.com -->
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sU -A -&#45;top-ports 100 -oN /root/results/kuma.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml kuma.lan.ddnsgeek.com" start="1776138261" startstr="Tue Apr 14 03:44:21 2026" version="7.99" xmloutputversion="1.05">
<scaninfo type="udp" protocol="udp" numservices="100" services="7,9,17,19,49,53,67-69,80,88,111,120,123,135-139,158,161-162,177,427,443,445,497,500,514-515,518,520,593,623,626,631,996-999,1022-1023,1025-1030,1433-1434,1645-1646,1701,1718-1719,1812-1813,1900,2000,2048-2049,2222-2223,3283,3456,3703,4444,4500,5000,5060,5353,5632,9200,10000,17185,20031,30718,31337,32768-32769,32771,32815,33281,49152-49154,49156,49181-49182,49185-49186,49188,49190-49194,49200-49201,65024"/>
<verbose level="2"/>
<debugging level="0"/>
<taskbegin task="NSE" time="1775376353"/>
<taskend task="NSE" time="1775376354"/>
<taskbegin task="NSE" time="1775376354"/>
<taskend task="NSE" time="1775376354"/>
<taskbegin task="NSE" time="1775376354"/>
<taskend task="NSE" time="1775376354"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1775376354"/>
<taskend task="Parallel DNS resolution of 1 host." time="1775376355"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1775376355"/>
<taskend task="Parallel DNS resolution of 1 host." time="1775376355"/>
<taskbegin task="UDP Scan" time="1775376355"/>
<taskend task="UDP Scan" time="1775376371" extrainfo="100 total ports"/>
<taskbegin task="Service scan" time="1775376371"/>
<taskprogress task="Service scan" time="1775376470" percent="1.00" remaining="9802" etc="1775386271"/>
<taskprogress task="Service scan" time="1775376568" percent="31.00" remaining="439" etc="1775377006"/>
<taskprogress task="Service scan" time="1775376667" percent="61.00" remaining="190" etc="1775376856"/>
<taskprogress task="Service scan" time="1775376770" percent="91.00" remaining="40" etc="1775376809"/>
<taskend task="Service scan" time="1775376776" extrainfo="100 services on 1 host"/>
<taskbegin task="Traceroute" time="1775376784"/>
<taskend task="Traceroute" time="1775376793"/>
<taskbegin task="Parallel DNS resolution of 9 hosts." time="1775376793"/>
<taskend task="Parallel DNS resolution of 9 hosts." time="1775376794"/>
<taskbegin task="NSE" time="1775376795"/>
<taskprogress task="NSE" time="1775376829" percent="82.30" remaining="8" etc="1775376836"/>
<taskprogress task="NSE" time="1775376859" percent="91.78" remaining="6" etc="1775376865"/>
<taskprogress task="NSE" time="1775376889" percent="98.87" remaining="2" etc="1775376890"/>
<taskprogress task="NSE" time="1775376919" percent="99.36" remaining="1" etc="1775376920"/>
<taskprogress task="NSE" time="1775376949" percent="99.38" remaining="1" etc="1775376950"/>
<taskprogress task="NSE" time="1775376979" percent="99.40" remaining="2" etc="1775376980"/>
<taskprogress task="NSE" time="1775377009" percent="99.43" remaining="2" etc="1775377010"/>
<taskprogress task="NSE" time="1775377039" percent="99.45" remaining="2" etc="1775377040"/>
<taskprogress task="NSE" time="1775377069" percent="99.47" remaining="2" etc="1775377070"/>
<taskprogress task="NSE" time="1775377099" percent="99.49" remaining="2" etc="1775377101"/>
<taskprogress task="NSE" time="1775377129" percent="99.51" remaining="2" etc="1775377131"/>
<taskprogress task="NSE" time="1775377159" percent="99.54" remaining="2" etc="1775377161"/>
<taskprogress task="NSE" time="1775377189" percent="99.57" remaining="2" etc="1775377191"/>
<taskprogress task="NSE" time="1775377219" percent="99.60" remaining="2" etc="1775377221"/>
<taskprogress task="NSE" time="1775377249" percent="99.62" remaining="2" etc="1775377251"/>
<taskprogress task="NSE" time="1775377279" percent="99.64" remaining="2" etc="1775377281"/>
<taskprogress task="NSE" time="1775377309" percent="99.66" remaining="2" etc="1775377311"/>
<taskprogress task="NSE" time="1775377339" percent="99.69" remaining="2" etc="1775377341"/>
<taskprogress task="NSE" time="1775377369" percent="99.71" remaining="2" etc="1775377371"/>
<taskprogress task="NSE" time="1775377399" percent="99.74" remaining="2" etc="1775377401"/>
<taskprogress task="NSE" time="1775377429" percent="99.76" remaining="2" etc="1775377431"/>
<taskprogress task="NSE" time="1775377459" percent="99.78" remaining="2" etc="1775377460"/>
<taskprogress task="NSE" time="1775377490" percent="99.81" remaining="2" etc="1775377491"/>
<taskprogress task="NSE" time="1775377520" percent="99.83" remaining="2" etc="1775377521"/>
<taskprogress task="NSE" time="1775377550" percent="99.86" remaining="2" etc="1775377551"/>
<taskprogress task="NSE" time="1775377580" percent="99.89" remaining="1" etc="1775377581"/>
<taskprogress task="NSE" time="1775377610" percent="99.91" remaining="1" etc="1775377611"/>
<taskprogress task="NSE" time="1775377640" percent="99.94" remaining="1" etc="1775377641"/>
<taskprogress task="NSE" time="1775377670" percent="99.96" remaining="1" etc="1775377670"/>
<taskprogress task="NSE" time="1775377700" percent="99.99" remaining="1" etc="1775377700"/>
<taskend task="NSE" time="1775377712"/>
<taskbegin task="NSE" time="1775377713"/>
<taskend task="NSE" time="1775377731"/>
<taskbegin task="NSE" time="1775377731"/>
<taskend task="NSE" time="1775377733"/>
<host starttime="1775376360" endtime="1775377733"><status state="up" reason="user-set" reason_ttl="0"/>
<taskbegin task="NSE" time="1776138262"/>
<taskend task="NSE" time="1776138262"/>
<taskbegin task="NSE" time="1776138262"/>
<taskend task="NSE" time="1776138262"/>
<taskbegin task="NSE" time="1776138262"/>
<taskend task="NSE" time="1776138262"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1776138262"/>
<taskend task="Parallel DNS resolution of 1 host." time="1776138262"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1776138262"/>
<taskend task="Parallel DNS resolution of 1 host." time="1776138262"/>
<taskbegin task="UDP Scan" time="1776138262"/>
<taskend task="UDP Scan" time="1776138274" extrainfo="100 total ports"/>
<taskbegin task="Service scan" time="1776138274"/>
<taskprogress task="Service scan" time="1776138392" percent="1.00" remaining="11682" etc="1776150074"/>
<taskprogress task="Service scan" time="1776138511" percent="31.00" remaining="528" etc="1776139039"/>
<taskprogress task="Service scan" time="1776138614" percent="61.00" remaining="218" etc="1776138831"/>
<taskprogress task="Service scan" time="1776138747" percent="91.00" remaining="47" etc="1776138794"/>
<taskend task="Service scan" time="1776138752" extrainfo="100 services on 1 host"/>
<taskbegin task="Traceroute" time="1776138759"/>
<taskend task="Traceroute" time="1776138768"/>
<taskbegin task="Parallel DNS resolution of 9 hosts." time="1776138768"/>
<taskend task="Parallel DNS resolution of 9 hosts." time="1776138768"/>
<taskbegin task="NSE" time="1776138768"/>
<taskprogress task="NSE" time="1776138815" percent="91.75" remaining="5" etc="1776138819"/>
<taskprogress task="NSE" time="1776138891" percent="92.22" remaining="11" etc="1776138901"/>
<taskprogress task="NSE" time="1776138926" percent="92.64" remaining="13" etc="1776138939"/>
<taskprogress task="NSE" time="1776138956" percent="97.96" remaining="4" etc="1776138960"/>
<taskprogress task="NSE" time="1776138986" percent="99.34" remaining="2" etc="1776138987"/>
<taskprogress task="NSE" time="1776139016" percent="99.36" remaining="2" etc="1776139018"/>
<taskprogress task="NSE" time="1776139046" percent="99.38" remaining="2" etc="1776139048"/>
<taskprogress task="NSE" time="1776139076" percent="99.41" remaining="2" etc="1776139078"/>
<taskprogress task="NSE" time="1776139106" percent="99.43" remaining="2" etc="1776139108"/>
<taskprogress task="NSE" time="1776139136" percent="99.45" remaining="3" etc="1776139138"/>
<taskprogress task="NSE" time="1776139167" percent="99.46" remaining="3" etc="1776139169"/>
<taskprogress task="NSE" time="1776139198" percent="99.46" remaining="3" etc="1776139200"/>
<taskprogress task="NSE" time="1776139228" percent="99.49" remaining="3" etc="1776139230"/>
<taskprogress task="NSE" time="1776139258" percent="99.51" remaining="3" etc="1776139260"/>
<taskprogress task="NSE" time="1776139288" percent="99.54" remaining="3" etc="1776139290"/>
<taskprogress task="NSE" time="1776139318" percent="99.58" remaining="3" etc="1776139320"/>
<taskprogress task="NSE" time="1776139348" percent="99.61" remaining="3" etc="1776139350"/>
<taskprogress task="NSE" time="1776139378" percent="99.64" remaining="3" etc="1776139380"/>
<taskprogress task="NSE" time="1776139408" percent="99.66" remaining="3" etc="1776139410"/>
<taskprogress task="NSE" time="1776139438" percent="99.69" remaining="3" etc="1776139440"/>
<taskprogress task="NSE" time="1776139468" percent="99.72" remaining="2" etc="1776139470"/>
<taskprogress task="NSE" time="1776139498" percent="99.75" remaining="2" etc="1776139500"/>
<taskprogress task="NSE" time="1776139528" percent="99.79" remaining="2" etc="1776139530"/>
<taskprogress task="NSE" time="1776139558" percent="99.81" remaining="2" etc="1776139559"/>
<taskprogress task="NSE" time="1776139588" percent="99.84" remaining="2" etc="1776139589"/>
<taskprogress task="NSE" time="1776139618" percent="99.87" remaining="2" etc="1776139619"/>
<taskprogress task="NSE" time="1776139648" percent="99.90" remaining="1" etc="1776139649"/>
<taskprogress task="NSE" time="1776139678" percent="99.93" remaining="1" etc="1776139679"/>
<taskprogress task="NSE" time="1776139708" percent="99.96" remaining="1" etc="1776139708"/>
<taskprogress task="NSE" time="1776139738" percent="99.99" remaining="1" etc="1776139738"/>
<taskend task="NSE" time="1776139741"/>
<taskbegin task="NSE" time="1776139741"/>
<taskend task="NSE" time="1776139749"/>
<taskbegin task="NSE" time="1776139749"/>
<taskend task="NSE" time="1776139749"/>
<host starttime="1776138263" endtime="1776139749"><status state="up" reason="user-set" reason_ttl="0"/>
<address addr="101.180.16.105" addrtype="ipv4"/>
<hostnames>
<hostname name="kuma.lan.ddnsgeek.com" type="user"/>
@@ -74,26 +74,26 @@
<extrareasons reason="no-response" count="100" proto="udp" ports="7,9,17,19,49,53,67-69,80,88,111,120,123,135-139,158,161-162,177,427,443,445,497,500,514-515,518,520,593,623,626,631,996-999,1022-1023,1025-1030,1433-1434,1645-1646,1701,1718-1719,1812-1813,1900,2000,2048-2049,2222-2223,3283,3456,3703,4444,4500,5000,5060,5353,5632,9200,10000,17185,20031,30718,31337,32768-32769,32771,32815,33281,49152-49154,49156,49181-49182,49185-49186,49188,49190-49194,49200-49201,65024"/>
</extraports>
</ports>
<os><osfingerprint fingerprint="SCAN(V=7.98%E=4%D=4/5%OT=%CT=%CU=%PV=Y%G=N%TM=69D21D47%P=x86_64-pc-linux-gnu)&#xa;SEQ()&#xa;U1(R=N)&#xa;IE(R=N)&#xa;"/>
<os><osfingerprint fingerprint="SCAN(V=7.99%E=4%D=4/14%OT=%CT=%CU=%PV=Y%G=N%TM=69DDBDE5%P=x86_64-pc-linux-gnu)&#xa;SEQ()&#xa;U1(R=N)&#xa;IE(R=N)&#xa;"/>
</os>
<trace proto="icmp">
<hop ttl="1" ipaddr="10.216.0.161" rtt="0.08"/>
<hop ttl="2" ipaddr="10.216.35.11" rtt="0.21"/>
<hop ttl="3" ipaddr="10.216.32.2" rtt="0.87"/>
<hop ttl="4" ipaddr="172.105.160.101" rtt="0.38" host="lo0-0.gw1.syd1.au.linode.com"/>
<hop ttl="5" ipaddr="104.70.113.20" rtt="0.32" host="ae19.r01.syd01.ien.netarch.akamai.com"/>
<hop ttl="6" ipaddr="203.54.231.153" rtt="1.35" host="Bundle-Ether96.ken-edge903.sydney.telstra.net"/>
<hop ttl="7" ipaddr="203.50.11.172" rtt="2.29" host="bundle-ether12.hay-core30.sydney.telstra.net"/>
<hop ttl="2" ipaddr="10.216.35.11" rtt="0.19"/>
<hop ttl="3" ipaddr="10.216.32.2" rtt="0.90"/>
<hop ttl="4" ipaddr="172.105.160.101" rtt="0.58" host="lo0-0.gw1.syd1.au.linode.com"/>
<hop ttl="5" ipaddr="104.70.113.20" rtt="0.25" host="ae19.r01.syd01.ien.netarch.akamai.com"/>
<hop ttl="6" ipaddr="203.54.231.153" rtt="1.71" host="Bundle-Ether96.ken-edge903.sydney.telstra.net"/>
<hop ttl="7" ipaddr="203.50.11.172" rtt="1.91" host="bundle-ether12.hay-core30.sydney.telstra.net"/>
<hop ttl="8" ipaddr="203.50.61.81" rtt="0.82" host="ae10.ken-ice301.sydney.telstra.net"/>
<hop ttl="9" ipaddr="58.162.26.74" rtt="5.08" host="gateway.nb10.sydney.asp.telstra.net"/>
<hop ttl="9" ipaddr="58.162.26.74" rtt="0.87" host="gateway.nb10.sydney.asp.telstra.net"/>
</trace>
</host>
<taskbegin task="NSE" time="1775377735"/>
<taskend task="NSE" time="1775377735"/>
<taskbegin task="NSE" time="1775377735"/>
<taskend task="NSE" time="1775377735"/>
<taskbegin task="NSE" time="1775377735"/>
<taskend task="NSE" time="1775377736"/>
<runstats><finished time="1775377737" timestr="Sun Apr 5 08:28:57 2026" summary="Nmap done at Sun Apr 5 08:28:57 2026; 1 IP address (1 host up) scanned in 1430.00 seconds" elapsed="1430.00" exit="success"/><hosts up="1" down="0" total="1"/>
<taskbegin task="NSE" time="1776139749"/>
<taskend task="NSE" time="1776139749"/>
<taskbegin task="NSE" time="1776139749"/>
<taskend task="NSE" time="1776139749"/>
<taskbegin task="NSE" time="1776139749"/>
<taskend task="NSE" time="1776139749"/>
<runstats><finished time="1776139749" timestr="Tue Apr 14 04:09:09 2026" summary="Nmap done at Tue Apr 14 04:09:09 2026; 1 IP address (1 host up) scanned in 1488.91 seconds" elapsed="1488.91" exit="success"/><hosts up="1" down="0" total="1"/>
</runstats>
</nmaprun>