Editing Ov.430.ch Host Reconnaissance Report (section)

== Public TCP Scan Results ==

=== IPv4 Full TCP ===

Command:

<pre>
nmap -Pn -sS -T3 -p- --max-retries 2 83.228.241.25 -oN /root/recon-ov430/nmap-ipv4-full.txt
</pre>

Result:

<pre>
PORT     STATE    SERVICE
22/tcp   open     ssh
80/tcp   open     http
443/tcp  open     https
5355/tcp open     llmnr
6567/tcp open     esp
8080/tcp filtered http-proxy
</pre>

Notes:

* Nmap SYN scan saw <code>8080/tcp</code> as <code>filtered</code> on IPv4.
* Local Docker and curl checks show host port <code>8080</code> is published on <code>0.0.0.0</code> and locally reachable via the public IPv4. Treat external IPv4 exposure as ambiguous until checked from a true off-host network.

=== IPv6 Full TCP ===

Command:

<pre>
nmap -Pn -6 -sT -T3 -p- --max-retries 2 2001:1600:18:102::26f -oN /root/recon-ov430/nmap-ipv6-full.txt
</pre>

Result:

<pre>
PORT     STATE SERVICE
22/tcp   open  ssh
80/tcp   open  http
443/tcp  open  https
5355/tcp open  llmnr
6567/tcp open  esp
8080/tcp open  http-proxy
</pre>

IPv6 <code>8080/tcp</code> is clearly open.

=== Service Detection ===

IPv4 service detection:

<pre>
22/tcp   open     ssh        OpenSSH 10.0p2 Debian 7+deb13u4
80/tcp   open     http       Caddy httpd
443/tcp  open     ssl/https?
5355/tcp open     llmnr?
6567/tcp open     esp?
8080/tcp filtered http-proxy
</pre>

IPv6 service detection:

<pre>
22/tcp   open  ssh        OpenSSH 10.0p2 Debian 7+deb13u4
80/tcp   open  http       Caddy httpd
443/tcp  open  ssl/https?
5355/tcp open  llmnr?
6567/tcp open  esp?
8080/tcp open  http       Apache httpd 2.4.67 ((Debian))
</pre>

Nmap did not recognize the Java service on <code>6567/tcp</code>, but the local process mapping identifies it as Mindustry.