# Nmap 7.98 scan initiated Sun Apr 5 08:05:15 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml kuma.lan.ddnsgeek.com Nmap scan report for kuma.lan.ddnsgeek.com (101.180.16.105) Host is up, received user-set (0.035s latency). rDNS record for 101.180.16.105: cpe-101-180-16-105.nb10.nsw.asp.telstra.net Scanned at 2026-04-05 08:05:54 UTC for 467s PORT STATE SERVICE REASON VERSION 443/tcp open ssl/http syn-ack ttl 53 Golang net/http server (Go-IPFS json-rpc or InfluxDB API) |_http-dombased-xss: Couldn't find any DOM based XSS. | http-useragent-tester: | Status for browser useragent: 200 | Redirected To: /dashboard | Allowed User Agents: | libwww | lwp-trivial | libcurl-agent/1.0 | Python-urllib/2.5 | GT::WWW | Snoopy | MFC_Tear_Sample | HTTP::Lite | URI::Fetch | Zend_Http_Client | http client | PECL::HTTP | Wget/1.13.4 (linux-gnu) | WWW-Mechanize/1.34 | Change in Status Code: | PHP/: 404 | PHPCrawl: 404 |_ Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html): 404 |_http-csrf: Couldn't find any CSRF vulnerabilities. |_ssl-date: TLS randomness does not represent time |_http-favicon: Unknown favicon MD5: 5EA4B467D984433398E1037469F13214 | http-drupal-enum: | Modules: | views | token | ctools | pathauto | libraries | entity | admin_menu | date | imce | jquery_update | ckeditor | wysiwyg | link | webform | backup_migrate | rules | module_filter | google_analytics | views_slideshow | features | xmlsitemap | metatag | captcha | colorbox | media | entityreference | panels | field_group | devel | views_bulk_operations | menu_block | transliteration | l10n_update | imce_wysiwyg | globalredirect | variable | i18n | context | imageapi | advanced_help | filefield | email | page_title | lightbox2 | ds | strongarm | superfish | imagefield | calendar | imagecache | references | field_collection | block_class | job_scheduler | menu_attributes | redirect | addressfield | mailsystem | nice_menus | diff | flexslider | taxonomy_menu | file_entity | feeds | media_youtube | node_clone | admin_views | smtp | special_menu_items | auto_nodetitle | jquery_ui | insert | cck | quicktabs | mimemail | views_php | content_access | jcarousel | print | plupload | votingapi | poormanscron | simplenews | filefield_sources | extlink | honeypot | facetapi | logintoboggan | search_api | uuid | commerce | custom_breadcrumbs | views_data_export | oauth | better_formats | site_verify | location | fontyourface | masquerade |_ imce_mkdir | http-sitemap-generator: | Directory structure: | / | Other: 1; json: 1; png: 1; svg: 1 | /assets/ | css: 1; js: 2 | Longest directory structure: | Depth: 1 | Dir: /assets/ | Total files found (by extension): |_ Other: 1; css: 1; js: 2; json: 1; png: 1; svg: 1 |_http-majordomo2-dir-traversal: ERROR: Script execution failed (use -d to debug) |_http-mobileversion-checker: No mobile version detected. |_http-referer-checker: Couldn't find any cross-domain scripts. |_http-errors: ERROR: Script execution failed (use -d to debug) |_http-comments-displayer: Couldn't find any comments. | http-methods: |_ Supported Methods: GET HEAD POST |_http-trane-info: Problem with XML parsing of /evox/about |_http-php-version: Credits query returned unknown hash 3b299781d582f5b522a0a6f14dfd9268 |_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages. |_http-date: Sun, 05 Apr 2026 08:06:30 GMT; -1s from local time. |_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php |_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable | http-vhosts: |_128 names had status 404 |_http-malware-host: Host appears to be clean | ssl-enum-ciphers: | TLSv1.2: | ciphers: | TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A | TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A | TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A | compressors: | NULL | cipher preference: server | warnings: | Key exchange (secp256r1) of lower strength than certificate key | TLSv1.3: | ciphers: | TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A | TLS_AKE_WITH_AES_128_GCM_SHA256 (X25519MLKEM768) - A | TLS_AKE_WITH_AES_256_GCM_SHA384 (X25519MLKEM768) - A | cipher preference: server |_ least strength: A |_http-fetch: Please enter the complete path of the directory to save data in. |_http-feed: Couldn't find any feeds. | http-security-headers: | Strict_Transport_Security: | Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload | X_Frame_Options: | Header: X-Frame-Options: SAMEORIGIN | Description: The browser must not display this content in any frame from a page of different origin than the content itself. | X_XSS_Protection: | Header: X-XSS-Protection: 1; mode=block | Description: The browser will prevent the rendering of the page when XSS is detected. | X_Content_Type_Options: | Header: X-Content-Type-Options: nosniff |_ Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type. |_http-jsonp-detection: Couldn't find any JSONP endpoints. | http-headers: | Content-Length: 2444 | Content-Type: text/html; charset=utf-8 | Date: Sun, 05 Apr 2026 08:07:06 GMT | Etag: W/"98c-RxUaxZHFr+/FSabMqXO58T7mz+U" | Strict-Transport-Security: max-age=15552000; includeSubDomains; preload | X-Content-Type-Options: nosniff | X-Frame-Options: SAMEORIGIN | X-Xss-Protection: 1; mode=block | Connection: close | |_ (Request type: HEAD) |_http-chrono: Request times for /; avg: 33701.34ms; min: 1061.83ms; max: 134159.26ms | http-robots.txt: 1 disallowed entry |_/ | http-title: Uptime Kuma |_Requested resource was /dashboard | ssl-cert: Subject: commonName=kuma.lan.ddnsgeek.com | Subject Alternative Name: DNS:kuma.lan.ddnsgeek.com | Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US | Public Key type: rsa | Public Key bits: 4096 | Signature Algorithm: sha256WithRSAEncryption | Not valid before: 2026-04-01T19:44:43 | Not valid after: 2026-06-30T19:44:42 | MD5: 4503 8f10 fe7f f545 fff2 813b 5a8f 7631 | SHA-1: a08d 7799 f3ef cb17 9052 958c 43c5 eeb5 d6b5 59c1 | SHA-256: 0c92 3f5e b861 8c91 b8a8 f4bf 1cb8 7d80 f07a ddc8 3c4b 8ed9 5478 90cf b482 512b | -----BEGIN CERTIFICATE----- | MIIGATCCBOmgAwIBAgISBYYKHnpmPDpUPJjaOPK93fSHMA0GCSqGSIb3DQEBCwUA | MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD | EwNSMTMwHhcNMjYwNDAxMTk0NDQzWhcNMjYwNjMwMTk0NDQyWjAgMR4wHAYDVQQD | ExVrdW1hLmxhbi5kZG5zZ2Vlay5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAw | ggIKAoICAQC2bNy5QjaE52KGlHDyiggwMm0YUU1SlAUrH1Awn3efLnnU2CKuF/NT | pLP2ahkt7Js/bURSHJgISI7D8tQ3uT1+D7ZZjljYkaXQhdrLRdCSNCNDi3cmBEcR | WUD8cnS2jXZgwV6C9sU2nXgxiDNEnFy3AOJppuUo6TU2eipfYMHwsz+FIz/ghD3Z | lTf+T8HO70cGQLBRQP/4cu1Kc5sL+xDOk88SB/91j6FapUmXrsLaIaLeX7EQm7Yy | 2pBkaXe/6UxzNuCAAPqxtkuMPi9Tcmm7X9fqo3ErMcc8BtZqeGcp2Zwm1sg3pYjF | MjTLTsGAcxfMBWvQi8nhQ92Ah+Vm7O0SddUEFNRvoOioG9dR32C+v6w0E004Upt+ | BY0UWt9EgUrC4I8awGBrL4/E5qgnl6Hi5ho2Q6Px28ybIuoSQ7aeJtS8g5nBjCzp | 5n81UcTtD98lhZKWRRJObFPh9YP/lxYz41GSIrRgBg6PtxU/1nJ0rZZvfwiuigxr | NdoMo561ghayd607GVZ0JPKvY7sbxEkJ6XQ45E2MP5KF8EaPdvc+V2rP9Djy80+D | XUq5FsmhM+YK1FfCw6S9cN7JRD9F1wZYmdHtHdS7Nmpag2/8w42UJQgN93WsflEx | JKdNOuS9JWj95j84WmLkgWugWjZcrgk11PL6WkN6cecDt8+jbmWjvQIDAQABo4IC | IDCCAhwwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1Ud | EwEB/wQCMAAwHQYDVR0OBBYEFFXeRi9gTjL3dXj8UCJJQeJ90UeeMB8GA1UdIwQY | MBaAFOernw8sM6BT015PeMiyhA471pIzMDMGCCsGAQUFBwEBBCcwJTAjBggrBgEF | BQcwAoYXaHR0cDovL3IxMy5pLmxlbmNyLm9yZy8wIAYDVR0RBBkwF4IVa3VtYS5s | YW4uZGRuc2dlZWsuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMC0GA1UdHwQmMCQw | IqAgoB6GHGh0dHA6Ly9yMTMuYy5sZW5jci5vcmcvOC5jcmwwggEKBgorBgEEAdZ5 | AgQCBIH7BIH4APYAdQAWgy2r8KklDw/wOqVF/8i/yCPQh0v2BCkn+OcfMxP1+gAA | AZ1KyTc0AAAEAwBGMEQCIFgwfeRhONb6T5LOG5a3CEnv5uU9GgHReu3FgCbNWvaO | AiB4qoUik6olE6a7XgyMymRtow3pT+b51p8jdt+BaxswPAB9AKgmy+MKxjUSRlM/ | 4GXxTxnZbhkIE8Qd2W15ALMSPFUnAAABnUrJOMEACAAABQAFK3PIBAMARjBEAiAh | 2KriLcSsAzvAqrucXzHSrZgfFf5tgwdSAYBbsUQxgAIgMhTKcEpKu31cvaY5rjEI | 3CRiSD0zRDpz0muR3ED0Vi0wDQYJKoZIhvcNAQELBQADggEBADbjfbibh5H8hw6L | 2KKxOcEGi787TIgm058gYlsm/2skqK1VqvS3Qmoj5IA05Yr5QpMFQFf6Z1kAy78P | DH8qfadIgAU2Nbe1cK9o5f4LhTU9wM58C9Ti7e5aiNHA1UCsrwnvJnH523uxEVcG | HCrne4Bewvtpfyb6M1RoRp3W4lHS4d7thHm6LXLEEJgBCFA5Yz6ez6mtainST5sU | 6j4s+Jt5BQ2zTka2y2ao18OTfkeLtGqUDfB3oZWMNqK/m6m90FKTKYSTyoBtdESc | nq9c8G6psGHa8K0O0t+cPwXHZQlZi2nAVN2UhV3GrwfAakzw3Bu31z8nS8OoFxRv | ssZpBGM= |_-----END CERTIFICATE----- | http-waf-detect: IDS/IPS/WAF detected: |_kuma.lan.ddnsgeek.com:443/?p4yl04d3= |_http-stored-xss: Couldn't find any stored XSS vulnerabilities. Read data files from: /usr/share/nmap Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . # Nmap done at Sun Apr 5 08:13:42 2026 -- 1 IP address (1 host up) scanned in 509.39 seconds