```bash nmap -vv --reason -Pn -T4 -sV -p 80 --script="banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt" -oX "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml" nextcloud.lan.ddnsgeek.com ``` [/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt](file:///root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt): ``` # Nmap 7.98 scan initiated Sun Apr 5 08:15:02 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml nextcloud.lan.ddnsgeek.com Nmap scan report for nextcloud.lan.ddnsgeek.com (167.179.167.166) Host is up, received user-set (0.015s latency). rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net Scanned at 2026-04-05 08:15:16 UTC for 1235s Bug in http-security-headers: no string output. PORT STATE SERVICE REASON VERSION 80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API) |_http-dombased-xss: Couldn't find any DOM based XSS. | http-traceroute: | Status Code | Hop #1: 301 | Hop #2: 301 | Hop #3: 404 | content-type | Hop #1 | Hop #2 | Hop #3: text/plain; charset=utf-8 | content-length | Hop #1: 17 | Hop #2: 17 | Hop #3: 19 | location | Hop #1: https://nextcloud.lan.ddnsgeek.com/ | Hop #2: https://nextcloud.lan.ddnsgeek.com/ |_ Hop #3 | http-useragent-tester: | Status for browser useragent: 200 | Redirected To: https://nextcloud.lan.ddnsgeek.com/index.php/login | Allowed User Agents: | Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html) | libwww | lwp-trivial | libcurl-agent/1.0 | PHP/ | Python-urllib/2.5 | GT::WWW | Snoopy | MFC_Tear_Sample | HTTP::Lite | PHPCrawl | URI::Fetch | Zend_Http_Client | http client | PECL::HTTP | Wget/1.13.4 (linux-gnu) |_ WWW-Mechanize/1.34 | http-methods: |_ Supported Methods: GET HEAD POST OPTIONS |_http-csrf: Couldn't find any CSRF vulnerabilities. |_http-title: Did not follow redirect to https://nextcloud.lan.ddnsgeek.com/ |_http-stored-xss: Couldn't find any stored XSS vulnerabilities. |_http-date: Sun, 05 Apr 2026 08:16:39 GMT; -2m03s from local time. |_http-referer-checker: Couldn't find any cross-domain scripts. | http-headers: | Location: https://nextcloud.lan.ddnsgeek.com/ | Date: Sun, 05 Apr 2026 08:18:48 GMT | Content-Length: 17 | Connection: close | |_ (Request type: GET) |_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit= for deeper analysis) |_http-jsonp-detection: Couldn't find any JSONP endpoints. |_http-errors: Couldn't find any error pages. |_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable |_http-mobileversion-checker: No mobile version detected. |_http-comments-displayer: Couldn't find any comments. |_http-fetch: Please enter the complete path of the directory to save data in. | http-vhosts: | 126 names had status 308 | news.lan.ddnsgeek.com : 404 |_intra.lan.ddnsgeek.com : 404 |_http-malware-host: Host appears to be clean |_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number= for deeper analysis) |_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php |_http-feed: Couldn't find any feeds. |_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages. |_http-chrono: Request times for /; avg: 1469.81ms; min: 1340.59ms; max: 1702.87ms | http-sitemap-generator: | Directory structure: | Longest directory structure: | Depth: 0 | Dir: / | Total files found (by extension): |_ Read data files from: /usr/share/nmap Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . # Nmap done at Sun Apr 5 08:35:52 2026 -- 1 IP address (1 host up) scanned in 1251.73 seconds ```