# Nmap 7.99 scan initiated Tue Apr 14 03:45:04 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/monitor-kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/monitor-kuma.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml monitor-kuma.lan.ddnsgeek.com
Nmap scan report for monitor-kuma.lan.ddnsgeek.com (167.179.167.166)
Host is up, received user-set (0.023s latency).
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
Scanned at 2026-04-14 03:45:15 UTC for 434s

PORT    STATE SERVICE   REASON         VERSION
443/tcp open  ssl/https syn-ack ttl 55
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
| http-useragent-tester: 
|   Status for browser useragent: 404
|   Allowed User Agents: 
|     Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
|     libwww
|     lwp-trivial
|     libcurl-agent/1.0
|     PHP/
|     Python-urllib/2.5
|     GT::WWW
|     Snoopy
|     MFC_Tear_Sample
|     HTTP::Lite
|     PHPCrawl
|     URI::Fetch
|     Zend_Http_Client
|     http client
|     PECL::HTTP
|     Wget/1.13.4 (linux-gnu)
|_    WWW-Mechanize/1.34
|_http-malware-host: Host appears to be clean
|_http-date: Tue, 14 Apr 2026 03:48:47 GMT; 0s from local time.
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
| http-headers: 
|   Content-Type: text/plain; charset=utf-8
|   X-Content-Type-Options: nosniff
|   Date: Tue, 14 Apr 2026 03:48:49 GMT
|   Content-Length: 19
|   Connection: close
|   
|_  (Request type: GET)
| http-sitemap-generator: 
|   Directory structure:
|   Longest directory structure:
|     Depth: 0
|     Dir: /
|   Total files found (by extension):
|_    
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
| ssl-enum-ciphers: 
|   TLSv1.2: 
|     ciphers: 
|       TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A
|       TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A
|       TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A
|       TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A
|       TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
|     compressors: 
|       NULL
|     cipher preference: client
|     warnings: 
|       Key exchange (secp256r1) of lower strength than certificate key
|   TLSv1.3: 
|     ciphers: 
|       TLS_AKE_WITH_AES_128_GCM_SHA256 (X25519MLKEM768) - A
|       TLS_AKE_WITH_AES_256_GCM_SHA384 (X25519MLKEM768) - A
|       TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A
|     cipher preference: server
|_  least strength: A
|_http-csrf: Couldn't find any CSRF vulnerabilities.
| ssl-cert: Subject: commonName=monitor-kuma.lan.ddnsgeek.com
| Subject Alternative Name: DNS:monitor-kuma.lan.ddnsgeek.com
| Issuer: commonName=R12/organizationName=Let's Encrypt/countryName=US
| Public Key type: rsa
| Public Key bits: 4096
| Signature Algorithm: sha256WithRSAEncryption
| Not valid before: 2026-02-16T08:17:50
| Not valid after:  2026-05-17T08:17:49
| MD5:     ec6c 1b16 27ff 4f78 41e8 8fea 77c4 6c1f
| SHA-1:   204e 574f 678e a6ac 2b43 3391 8a6c 8a2c d16f e1a2
| SHA-256: d7f3 395c 4185 95fa 966a bce5 cb58 5f03 7a6b a931 6fcf 99df 7f68 d1fa 1d7c e3ac
| -----BEGIN CERTIFICATE-----
| MIIGFDCCBPygAwIBAgISBn5e0uF5fviZdYbmtrMH72GSMA0GCSqGSIb3DQEBCwUA
| MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
| EwNSMTIwHhcNMjYwMjE2MDgxNzUwWhcNMjYwNTE3MDgxNzQ5WjAoMSYwJAYDVQQD
| Ex1tb25pdG9yLWt1bWEubGFuLmRkbnNnZWVrLmNvbTCCAiIwDQYJKoZIhvcNAQEB
| BQADggIPADCCAgoCggIBALqtNqX0SNENyHOLkTUeqN3wL0L8y9DEim28fxjGlSER
| 29BbsNWaPbqR1NLOqnhb2Won10Ocb5kSEIXxqnQVnSulwRUTWMeJLiYxoVbtjTZt
| 5tS4O7kINjTVf1EwHNXpMRhpVDlwSNgdaHbsOE29X8eWqGPg0ZaTNvfUbHd0E5fR
| Rp29kEcWZT3UQIgyAGA04D+lHjZj3njiAwaY0eXFqhQjN5w+2zMUQBU/4Rg2tv76
| tIP4dhc70pV/UxE4palreRsWnohNGvjr0LtidqdjMc3ntERbzlqKs12Sj+C51/Ts
| khqtU+d1/SlRZSSb2rskgduJABN0wjTJTwIZueU6fTN0zkSbrU9QYTlMiuNj+wAo
| 09baAIjK0/MmpIWEKh7lydRYV6sjYV7S5a07bFxnUkdv3X7viO1gMFjDLs82bpys
| Q7hfiTpI5555Hgdl+xefwp/bhCLd6UWMvhagzX0tmERar7tlC7MrzrE1z3QCa0dV
| /+OUh3uU9aYC8EhidPMwiGEGcnoKHNALng24tyO8Zr0qfpfW8kzrlV4GVtiYWFKs
| O1hn9krHglbkYTTDfDQBaiG+Krw+s3IwTJ6OGygn1TJEeEZqz74ZzBhfDuUlwV4e
| DMRWKediqg0Soni6wCr8Kvdagp2g6/gor+EcvFI1KwFvsWJTAAwi/LxeGR6nZ8aJ
| AgMBAAGjggIrMIICJzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUH
| AwEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUu6cNgdWxrMiRMCEWov9bEGClLcYw
| HwYDVR0jBBgwFoAUALUp8i2ObzHom0yteD763OkM0dIwMwYIKwYBBQUHAQEEJzAl
| MCMGCCsGAQUFBzAChhdodHRwOi8vcjEyLmkubGVuY3Iub3JnLzAoBgNVHREEITAf
| gh1tb25pdG9yLWt1bWEubGFuLmRkbnNnZWVrLmNvbTATBgNVHSAEDDAKMAgGBmeB
| DAECATAuBgNVHR8EJzAlMCOgIaAfhh1odHRwOi8vcjEyLmMubGVuY3Iub3JnLzE5
| LmNybDCCAQwGCisGAQQB1nkCBAIEgf0EgfoA+AB1AJaXZL9VWJet90OHaDcIQnfp
| 8DrV9qTzNm5GpD8PyqnGAAABnGW8h/YAAAQDAEYwRAIgd21v0+zvMSe47Sbt8ONb
| MtFnjFQbZ/k1BTblbYGdCA8CIElRr+FAoQdykqxtk/mCLWQso0Wc0XSRklCH6UO3
| au8VAH8AcX6V88I4im2x44RJPTHhWqliCHYtQgDgBQzQZ7WmYeIAAAGcZbyIOAAI
| AAAFAAmVFhAEAwBIMEYCIQDSqw3sFHaH9EICTzyAyeIk1xD3BTSs8xBRrmbN17mi
| xgIhALXQSw0vsbOdvaH6AKAKyCWYADhl+5qMokBS5sIIapptMA0GCSqGSIb3DQEB
| CwUAA4IBAQAW1nYKtFasFPe8JA15C72y4EkIz3rx+8Qg06cvPTrRo+Sz0lZU1MLH
| zbDIIbt8v8SEXk4Ha1FRmQHsxBgWFJjNdmW1FRBLe0mv63aQh9vKbYj8yJke9pXU
| FJ5/gXsj1O/isOnYMVpn5b6MLyPGdtisbybUWmG8f0cgpGgh+blIfVAYSFiPVJar
| UEq27l9U7agrWCWL4Yp41WXtjcsRMjexK/93EzyEkS3TKpOhv/AB4TPz6SQF5KHR
| gubLUVhPetDd+FyLz51dLh8bXEtq8Lp/ficAUj+X5hfuLLDtZCN/gzUDLzWdQBsK
| jsAhAJl8edhVJ3pBDFn/HBmj+2YKYz2J
|_-----END CERTIFICATE-----
|_ssl-date: TLS randomness does not represent time
| http-vhosts: 
|_128 names had status 404
|_http-referer-checker: Couldn't find any cross-domain scripts.
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|_http-comments-displayer: Couldn't find any comments.
|_http-fetch: Please enter the complete path of the directory to save data in.
| http-security-headers: 
|   Strict_Transport_Security: 
|     HSTS not configured in HTTPS Server
|   X_Content_Type_Options: 
|     Header: X-Content-Type-Options: nosniff
|_    Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type. 
|_http-chrono: Request times for /; avg: 714.58ms; min: 419.12ms; max: 1278.12ms
|_http-title: Site doesn't have a title (text/plain; charset=utf-8).
|_http-feed: Couldn't find any feeds.
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
| http-errors: 
| Spidering limited to: maxpagecount=40; withinhost=monitor-kuma.lan.ddnsgeek.com
|   Found the following error pages: 
|   
|   Error Code: 404
|_  	http://monitor-kuma.lan.ddnsgeek.com:443/
|_http-mobileversion-checker: No mobile version detected.
|_http-dombased-xss: Couldn't find any DOM based XSS.
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)

Read data files from: /usr/share/nmap
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Tue Apr 14 03:52:30 2026 -- 1 IP address (1 host up) scanned in 446.63 seconds
