# Nmap 7.98 scan initiated Sun Apr 5 12:03:03 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/node-red.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/node-red.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml node-red.lan.ddnsgeek.com Nmap scan report for node-red.lan.ddnsgeek.com (167.179.167.166) Host is up, received user-set (0.024s latency). rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net Scanned at 2026-04-05 12:03:08 UTC for 526s PORT STATE SERVICE REASON VERSION 443/tcp open ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API) | http-auth: | HTTP/1.1 401 Unauthorized\x0D |_ Server returned status 401 but no WWW-Authenticate header. | ssl-cert: Subject: commonName=node-red.lan.ddnsgeek.com | Subject Alternative Name: DNS:node-red.lan.ddnsgeek.com | Issuer: commonName=R12/organizationName=Let's Encrypt/countryName=US | Public Key type: rsa | Public Key bits: 4096 | Signature Algorithm: sha256WithRSAEncryption | Not valid before: 2026-03-30T03:53:05 | Not valid after: 2026-06-28T03:53:04 | MD5: 6dc3 7a5d c5b9 be5d f213 5c5b 0890 6a88 | SHA-1: 354a ab70 529c f23e 5d23 4421 23a3 3a6d a4ab 42cc | SHA-256: 2abb 62eb 07ac e739 0613 7388 aa4c 07a6 e25f b810 18ad 9934 6b5a 4aba 3db8 4985 | -----BEGIN CERTIFICATE----- | MIIGDTCCBPWgAwIBAgISBYuh2CNCTMlOsV8YsLlXiHMCMA0GCSqGSIb3DQEBCwUA | MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD | EwNSMTIwHhcNMjYwMzMwMDM1MzA1WhcNMjYwNjI4MDM1MzA0WjAkMSIwIAYDVQQD | Exlub2RlLXJlZC5sYW4uZGRuc2dlZWsuY29tMIICIjANBgkqhkiG9w0BAQEFAAOC | Ag8AMIICCgKCAgEA4DWlMCgHOwwakhHGS8aLtqdwNWS3qITlUEy8UnYMBEULB94P | pBfjH4TaBFbaGPGj6lD4Kes3nFx2LESt6DnyJtK0Sv/+f69GQnk1ECQW8n8IQAYz | xnF3iV7XG5Z7IJ0wddazMxDRNMrT+DhMHA03jIutv1ddrNacjgvYhfJ0847anf7s | /iBDFi8anuQMII2ZknzgNmMsGKpTYEj5wBoh0NMPPJVvbhEH5YkeRzNX44dKdxYe | 6EAb6Nu//XuYYUM+LlHZNsU8JTenDRf9V9bw5pHbTwIRiN8MYOFRg93mfKTXOlWf | 0Fps/aXuYIiF8hHce6wxeJjG8asF5SGXUKlHhftzp7cReHTLbt63JLI5UP82uSkD | cwvd3UPZPjJ039v5owPqao7+UJWzQJrFuA15N22JCCzklBZETmFPAvi3HngjpaSR | 4eFQJhMwRVe+j/LrN7IGC3a8Pdo0odlXe+IZx+wxdUBN071bgupDwTDB8GYD9NzZ | HDbL5Uqg29acS1owKGTBCICNWBvk7qswICir0ebylA/2K1Hstiwb9qbbeihIh4Bz | w1g86PVkqbquSj0taCgXtCfjFiuQEohVFpKdrt3eNg5e56caZxPBwGA1lNUtrevr | d9uaI0cZPnoopVYLwPo1vtsJWX5TDPJhPJxiXPDoJuaxi8cpNl7Wo7Gh5IkCAwEA | AaOCAigwggIkMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAM | BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQZgODpauiyR6GHF9jFmx7pYP8+/zAfBgNV | HSMEGDAWgBQAtSnyLY5vMeibTK14Pvrc6QzR0jAzBggrBgEFBQcBAQQnMCUwIwYI | KwYBBQUHMAKGF2h0dHA6Ly9yMTIuaS5sZW5jci5vcmcvMCQGA1UdEQQdMBuCGW5v | ZGUtcmVkLmxhbi5kZG5zZ2Vlay5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwLQYD | VR0fBCYwJDAioCCgHoYcaHR0cDovL3IxMi5jLmxlbmNyLm9yZy8zLmNybDCCAQ4G | CisGAQQB1nkCBAIEgf8EgfwA+gB3AJaXZL9VWJet90OHaDcIQnfp8DrV9qTzNm5G | pD8PyqnGAAABnT0VPfIAAAQDAEgwRgIhAL+uyPr8K5ZVjKoT4MOiPaVob7hPsUH0 | cVw2hhPMR5yhAiEAjsbNtSpjfKnnVAosDnI/qkyQXCF7OQYfmbUprrMbfzcAfwBs | /lAZQ6heqRa8UtEz5NzJHvFBHH0lhCDRc4CeGBjrOgAAAZ09FUBWAAgAAAUABODh | HQQDAEgwRgIhAJ8XN6QIAzFYlt4i3dD/nVPqDfyaucMUE/v78i2se9l9AiEAit3n | RoMXVn6obrZ0ZfH2aGNGxcBZz/cVGYfaILv71oswDQYJKoZIhvcNAQELBQADggEB | AMMxjfb2GcWLumpBWMMct7FIb3y8Woqw/5Ba5H9F/HJkZNswgM9vlihdOlm8BC+l | vMtPBUyQPqx5f+0FAom3gqtK5tNjY9GzHYvAHz86V8x4LtljmFJocO105gwSx46Z | Atna2yHbAELVdz4+6tTk5lUUP3V18zyL7AdzXVXqPNpPznqjcz17Lgk0O6vOu/FO | Jy2PXgHizyu2jhC1Qr9XvxkCwP9cWh/KDxDl5NhEb6lJZaaiOAy8Ub6POKX9Mbfz | o/brZBy6MMIowzx2NP28RVQdeFvW87fhD86tL9blWObcd2KKvf0NNmOCP8A/LJ2k | OOW4KrORI+K/CkCGO+mjO0o= |_-----END CERTIFICATE----- | http-errors: | Spidering limited to: maxpagecount=40; withinhost=node-red.lan.ddnsgeek.com | Found the following error pages: | | Error Code: 404 |_ https://node-red.lan.ddnsgeek.com:443/ |_http-feed: Couldn't find any feeds. |_ssl-date: TLS randomness does not represent time |_http-referer-checker: Couldn't find any cross-domain scripts. |_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number= for deeper analysis) | http-sitemap-generator: | Directory structure: | Longest directory structure: | Depth: 0 | Dir: / | Total files found (by extension): |_ |_http-chrono: Request times for /; avg: 535.31ms; min: 413.79ms; max: 796.42ms | http-headers: | Content-Type: text/plain; charset=utf-8 | X-Content-Type-Options: nosniff | Date: Sun, 05 Apr 2026 12:03:40 GMT | Content-Length: 19 | Connection: close | |_ (Request type: GET) |_http-comments-displayer: Couldn't find any comments. |_http-csrf: Couldn't find any CSRF vulnerabilities. |_http-mobileversion-checker: No mobile version detected. |_http-date: Sun, 05 Apr 2026 12:03:40 GMT; 0s from local time. |_http-stored-xss: Couldn't find any stored XSS vulnerabilities. |_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages. | http-useragent-tester: | Status for browser useragent: 401 | Allowed User Agents: | Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html) | libwww | lwp-trivial | libcurl-agent/1.0 | PHP/ | Python-urllib/2.5 | GT::WWW | Snoopy | MFC_Tear_Sample | HTTP::Lite | PHPCrawl | URI::Fetch | Zend_Http_Client | http client | PECL::HTTP | Wget/1.13.4 (linux-gnu) |_ WWW-Mechanize/1.34 | http-waf-detect: IDS/IPS/WAF detected: |_node-red.lan.ddnsgeek.com:443/?p4yl04d3= |_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable | ssl-enum-ciphers: | TLSv1.2: | ciphers: | TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A | TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A | TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A | compressors: | NULL | cipher preference: client | warnings: | Key exchange (secp256r1) of lower strength than certificate key | TLSv1.3: | ciphers: | TLS_AKE_WITH_AES_128_GCM_SHA256 (X25519MLKEM768) - A | TLS_AKE_WITH_AES_256_GCM_SHA384 (X25519MLKEM768) - A | TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A | cipher preference: server |_ least strength: A | http-security-headers: | Strict_Transport_Security: | Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload | X_Frame_Options: | Header: X-Frame-Options: SAMEORIGIN | Description: The browser must not display this content in any frame from a page of different origin than the content itself. | X_XSS_Protection: | Header: X-XSS-Protection: 1; mode=block | Description: The browser will prevent the rendering of the page when XSS is detected. | X_Content_Type_Options: | Header: X-Content-Type-Options: nosniff |_ Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type. |_http-title: Site doesn't have a title (text/plain; charset=utf-8). | http-vhosts: | auth.lan.ddnsgeek.com : 200 |_127 names had status 404 |_http-iis-webdav-vuln: Could not determine vulnerability, since root folder is password protected |_http-dombased-xss: Couldn't find any DOM based XSS. |_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit= for deeper analysis) |_http-malware-host: Host appears to be clean |_http-fetch: Please enter the complete path of the directory to save data in. |_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php | http-enum: |_ /health/: Spring Boot Actuator endpoint |_http-jsonp-detection: Couldn't find any JSONP endpoints. Read data files from: /usr/share/nmap Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . # Nmap done at Sun Apr 5 12:11:54 2026 -- 1 IP address (1 host up) scanned in 531.67 seconds