########## OS ##########
Distributor ID: Ubuntu
Description: Ubuntu 26.04 LTS
Release: 26.04
Codename: resolute
7.0.0-28-generic
########## SSH CONFIG ##########
[sudo: authenticate] Password: ***************
#Port 22
#PermitRootLogin prohibit-password
#PasswordAuthentication yes
########## AUTH.LOG vs JOURNALD ##########
-rw-r----- 1 syslog adm 8118002 Jul 24 11:52 /var/log/auth.log
########## UFW ##########
Status: active
Logging: on (low)
Default: deny (incoming), allow (outgoing), deny (routed)
New profiles: skip
To Action From
-- ------ ----
22/tcp (OpenSSH) LIMIT IN Anywhere
443/tcp ALLOW IN Anywhere
80/tcp ALLOW IN Anywhere
22/tcp (OpenSSH (v6)) LIMIT IN Anywhere (v6)
443/tcp (v6) ALLOW IN Anywhere (v6)
80/tcp (v6) ALLOW IN Anywhere (v6)
Status: active
To Action From
-- ------ ----
[ 1] OpenSSH LIMIT IN Anywhere
[ 2] 443/tcp ALLOW IN Anywhere
[ 3] 80/tcp ALLOW IN Anywhere
[ 4] OpenSSH (v6) LIMIT IN Anywhere (v6)
[ 5] 443/tcp (v6) ALLOW IN Anywhere (v6)
[ 6] 80/tcp (v6) ALLOW IN Anywhere (v6)
########## FAIL2BAN VERSION ##########
2026-07-24 11:52:27,772 fail2ban [2679824]: ERROR Permission denied to socket: /var/run/fail2ban/fail2ban.sock, (you must be root)
########## FAIL2BAN TEST CONF ##########
OK: configuration test is successful
########## FAIL2BAN JAILS ##########
Status
|- Number of jail: 1
`- Jail list: sshd
----- jail: sshd -----
Status for the jail: sshd
|- Filter
| |- Currently failed: 5
| |- Total failed: 6182
| `- Journal matches: _SYSTEMD_UNIT=ssh.service + _COMM=sshd
`- Actions
|- Currently banned: 1
|- Total banned: 942
`- Banned IP list: 102.54.246.130
----- jail: nginx-botsearch -----
Sorry but the jail 'nginx-botsearch' does not exist
(absent)
----- jail: nginx-http-auth -----
Sorry but the jail 'nginx-http-auth' does not exist
(absent)
----- jail: nginx-limit-req -----
Sorry but the jail 'nginx-limit-req' does not exist
(absent)
----- jail: recidive -----
Sorry but the jail 'recidive' does not exist
(absent)
########## FAIL2BAN CONF EFFECTIVE ##########
['set', 'syslogsocket', 'auto']
['set', 'loglevel', 'INFO']
['set', 'logtarget', '/var/log/fail2ban.log']
['set', 'allowipv6', 'auto']
['set', 'dbfile', '/var/lib/fail2ban/fail2ban.sqlite3']
['set', 'dbmaxmatches', 10]
['set', 'dbpurgeage', '1d']
['add', 'sshd', 'systemd']
['set', 'sshd', 'usedns', 'warn']
['set', 'sshd', 'prefregex', '^\\s*(?:\\S+\\s+)?(?:sshd(?:-session)?(?:\\[\\d+\\])?:?\\s+)?(?:kernel:\\s?\\[ *\\d+\\.\\d+\\]:?\\s+)?(?:(?:error|fatal): (?:PAM: )?)?.+$']
['set', 'sshd', 'maxlines', 1]
['multi-set', 'sshd', 'addfailregex', ['^[aA]uthentication (?:failure|error|failed) for .*? (?:from )?( via \\S+)?(?: (?:port \\d+|on \\S+|\\[preauth\\])){0,3}\\s*$', '^User not known to the underlying authentication module for .*? (?:from )?(?: (?:port \\d+|on \\S+|\\[preauth\\])){0,3}\\s*$', '^Failed publickey for invalid user (?P\\S+)|(?:(?! from ).)*? from (?: (?:port \\d+|on \\S+)){0,2}(?: ssh\\d*)?(?(cond_user): |(?:(?:(?! from ).)*)$)', '^Failed (?:publickey|\\S+) for (?Pinvalid user )?(?P\\S+)|(?(cond_inv)(?:(?! from ).)*?|[^:]+) from (?: (?:port \\d+|on \\S+)){0,2}(?: ssh\\d*)?(?(cond_user): |(?:(?:(?! from ).)*)$)', '^ROOT LOGIN REFUSED FROM ', '^[iI](?:llegal|nvalid) user .*? (?:from )?(?: (?:port \\d+|on \\S+|\\[preauth\\])){0,3}\\s*$', '^User \\S+|.*? (?:from )? not allowed because not listed in AllowUsers(?: (?:port \\d+|on \\S+|\\[preauth\\])){0,3}\\s*$', '^User \\S+|.*? (?:from )? not allowed because listed in DenyUsers(?: (?:port \\d+|on \\S+|\\[preauth\\])){0,3}\\s*$', '^User \\S+|.*? (?:from )? not allowed because not in any group(?: (?:port \\d+|on \\S+|\\[preauth\\])){0,3}\\s*$', '^refused connect from \\S+ \\(\\)', '^Received disconnect from (?: (?:port \\d+|on \\S+)){0,2}:\\s*3: .*: Auth fail(?: (?:port \\d+|on \\S+|\\[preauth\\])){0,3}\\s*$', '^User \\S+|.*? (?:from )? not allowed because a group is listed in DenyGroups(?: (?:port \\d+|on \\S+|\\[preauth\\])){0,3}\\s*$', "^User \\S+|.*? (?:from )? not allowed because none of user's groups are listed in AllowGroups(?: (?:port \\d+|on \\S+|\\[preauth\\])){0,3}\\s*$", '^pam_[a-z]+\\(sshd:auth\\):\\s+authentication failure;(?:\\s+(?:(?:logname|e?uid|tty)=\\S*)){0,4}\\s+ruser=\\S*\\s+rhost=(?:\\s+user=\\S*)?(?: (?:port \\d+|on \\S+|\\[preauth\\])){0,3}\\s*$', '^maximum authentication attempts exceeded for (?:invalid user )?.*? (?:from )?(?: (?:port \\d+|on \\S+)){0,2}(?: ssh\\d*)?(?: (?:port \\d+|on \\S+|\\[preauth\\])){0,3}\\s*$', '^User \\S+|.*? not allowed because account is locked(?: (?:port \\d+|on \\S+|\\[preauth\\])){0,3}\\s*', '^Disconnecting(?: from)?(?: (?:invalid|authenticating)) user \\S+ (?: (?:port \\d+|on \\S+)){0,2}:\\s*Change of username or service not allowed:\\s*.*\\[preauth\\]\\s*$', '^Disconnecting: Too many authentication failures(?: for \\S+|.*?)?(?: (?:port \\d+|on \\S+|\\[preauth\\])){0,3}\\s*$', '^Received disconnect from (?: (?:port \\d+|on \\S+)){0,2}:\\s*11:', '^(?:Connection (?:closed|reset)|Disconnect(?:ed|ing))(?: (?:by|from))?(?: (?:invalid|authenticating) user \\S+|.*?)?(?: from)? (?: (?:port \\d+|on \\S+)){0,2}(?:: (?!Too many authentication failures)[^\\[]+)?(?: \\[preauth\\])?\\s*$', '^Accepted \\w+ for \\S+ from (?:\\s|$)', '^Connection from ']]
['set', 'sshd', 'datepattern', '{^LN-BEG}']
['set', 'sshd', 'addjournalmatch', '_SYSTEMD_UNIT=ssh.service', '+', '_COMM=sshd']
['set', 'sshd', 'maxretry', 5]
['set', 'sshd', 'maxmatches', 5]
['set', 'sshd', 'findtime', '10m']
['set', 'sshd', 'bantime', '10m']
['set', 'sshd', 'ignorecommand', '']
['set', 'sshd', 'logencoding', 'auto']
['set', 'sshd', 'addaction', 'iptables-multiport']
['multi-set', 'sshd', 'action', 'iptables-multiport', [['actionstart', "{ -C f2b-sshd -j RETURN >/dev/null 2>&1; } || { -N f2b-sshd || true; -A f2b-sshd -j RETURN; }\nfor proto in $(echo 'tcp' | sed 's/,/ /g'); do\n{ -C INPUT -p $proto -m multiport --dports ssh -j f2b-sshd >/dev/null 2>&1; } || { -I INPUT -p $proto -m multiport --dports ssh -j f2b-sshd; }\ndone"], ['actionstop', "for proto in $(echo 'tcp' | sed 's/,/ /g'); do\n -D INPUT -p $proto -m multiport --dports ssh -j f2b-sshd\ndone\n -F f2b-sshd\n -X f2b-sshd"], ['actionflush', ' -F f2b-sshd'], ['actioncheck', "for proto in $(echo 'tcp' | sed 's/,/ /g'); do\n -C INPUT -p $proto -m multiport --dports ssh -j f2b-sshd\ndone"], ['actionban', ' -I f2b-sshd 1 -s -j '], ['actionunban', ' -D f2b-sshd -s -j '], ['port', 'ssh'], ['protocol', 'tcp'], ['chain', ''], ['name', 'sshd'], ['actname', 'iptables-multiport'], ['blocktype', 'REJECT --reject-with icmp-port-unreachable'], ['returntype', 'RETURN'], ['lockingopt', '-w'], ['iptables', 'iptables '], ['blocktype?family=inet6', 'REJECT --reject-with icmp6-port-unreachable'], ['iptables?family=inet6', 'ip6tables ']]]
########## NGINX TEST ##########
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful
########## NGINX LOGS ##########
-rw-r----- 1 www-data adm 385K Jul 24 11:45 /var/log/nginx/access.log
-rw-r----- 1 www-data adm 868 Jul 24 11:03 /var/log/nginx/error.log
########## NGINX real_ip/limit_req ##########
/etc/nginx/sites-available/dashboard.seoinsight.app.bak: access_log off;
/etc/nginx/sites-available/dash.seoinsight.app: access_log off;
/etc/nginx/sites-enabled/dash.seoinsight.app: access_log off;
/etc/nginx/nginx.conf: access_log /var/log/nginx/access.log;
########## DOCKER PS ##########
NAMES IMAGE PORTS STATUS
firecrawl-api-1 ghcr.io/firecrawl/firecrawl 127.0.0.1:3002->3002/tcp, 8080/tcp Up 44 hours (healthy)
firecrawl-redis-1 redis:alpine 6379/tcp Up 44 hours
firecrawl-rabbitmq-1 rabbitmq:3-management 4369/tcp, 5671-5672/tcp, 15671-15672/tcp, 15691-15692/tcp, 25672/tcp Up 44 hours (healthy)
firecrawl-nuq-postgres-1 ghcr.io/firecrawl/nuq-postgres:latest 5432/tcp Up 44 hours (healthy)
firecrawl-playwright-service-1 ghcr.io/firecrawl/playwright-service:latest Up 44 hours
firecrawl-searxng-1 searxng/searxng:latest 8080/tcp Up 44 hours
########## LISTEN HÔTE (ss) ##########
State Recv-Q Send-Q Local Address:Port Peer Address:Port Process
LISTEN 0 10 127.0.0.1:53 0.0.0.0:* users:(("named",pid=924551,fd=160))
LISTEN 0 10 127.0.0.1:53 0.0.0.0:* users:(("named",pid=924551,fd=157))
LISTEN 0 10 127.0.0.1:53 0.0.0.0:* users:(("named",pid=924551,fd=158))
LISTEN 0 10 127.0.0.1:53 0.0.0.0:* users:(("named",pid=924551,fd=155))
LISTEN 0 10 127.0.0.1:53 0.0.0.0:* users:(("named",pid=924551,fd=153))
LISTEN 0 10 127.0.0.1:53 0.0.0.0:* users:(("named",pid=924551,fd=150))
LISTEN 0 10 127.0.0.1:53 0.0.0.0:* users:(("named",pid=924551,fd=148))
LISTEN 0 10 127.0.0.1:53 0.0.0.0:* users:(("named",pid=924551,fd=147))
LISTEN 0 10 127.0.0.1:53 0.0.0.0:* users:(("named",pid=924551,fd=145))
LISTEN 0 10 127.0.0.1:53 0.0.0.0:* users:(("named",pid=924551,fd=143))
LISTEN 0 10 127.0.0.1:53 0.0.0.0:* users:(("named",pid=924551,fd=142))
LISTEN 0 10 127.0.0.1:53 0.0.0.0:* users:(("named",pid=924551,fd=140))
LISTEN 0 511 0.0.0.0:80 0.0.0.0:* users:(("nginx",pid=2564178,fd=7),("nginx",pid=2564177,fd=7),("nginx",pid=2564176,fd=7),("nginx",pid=2564175,fd=7),("nginx",pid=2564174,fd=7),("nginx",pid=2564173,fd=7),("nginx",pid=2564172,fd=7),("nginx",pid=2564171,fd=7),("nginx",pid=2564170,fd=7),("nginx",pid=2564169,fd=7),("nginx",pid=2564168,fd=7),("nginx",pid=2564167,fd=7),("nginx",pid=202822,fd=7))
LISTEN 0 5 127.0.0.1:953 0.0.0.0:* users:(("named",pid=924551,fd=453))
LISTEN 0 4096 0.0.0.0:22 0.0.0.0:* users:(("sshd",pid=924558,fd=3),("systemd",pid=1,fd=211))
LISTEN 0 511 0.0.0.0:443 0.0.0.0:* users:(("nginx",pid=2564178,fd=5),("nginx",pid=2564177,fd=5),("nginx",pid=2564176,fd=5),("nginx",pid=2564175,fd=5),("nginx",pid=2564174,fd=5),("nginx",pid=2564173,fd=5),("nginx",pid=2564172,fd=5),("nginx",pid=2564171,fd=5),("nginx",pid=2564170,fd=5),("nginx",pid=2564169,fd=5),("nginx",pid=2564168,fd=5),("nginx",pid=2564167,fd=5),("nginx",pid=202822,fd=5))
LISTEN 0 4096 127.0.0.53%lo:53 0.0.0.0:* users:(("systemd-resolve",pid=1381,fd=17))
LISTEN 0 512 127.0.0.1:3000 0.0.0.0:* users:(("node",pid=2621113,fd=13))
LISTEN 0 4096 127.0.0.1:3002 0.0.0.0:* users:(("docker-proxy",pid=10061,fd=8))
LISTEN 0 200 127.0.0.1:5432 0.0.0.0:* users:(("postgres",pid=924605,fd=6))
LISTEN 0 10 163.172.71.169:53 0.0.0.0:* users:(("named",pid=924551,fd=186))
LISTEN 0 10 163.172.71.169:53 0.0.0.0:* users:(("named",pid=924551,fd=187))
LISTEN 0 10 163.172.71.169:53 0.0.0.0:* users:(("named",pid=924551,fd=185))
LISTEN 0 10 163.172.71.169:53 0.0.0.0:* users:(("named",pid=924551,fd=184))
LISTEN 0 10 163.172.71.169:53 0.0.0.0:* users:(("named",pid=924551,fd=183))
LISTEN 0 10 163.172.71.169:53 0.0.0.0:* users:(("named",pid=924551,fd=182))
LISTEN 0 10 163.172.71.169:53 0.0.0.0:* users:(("named",pid=924551,fd=181))
LISTEN 0 10 163.172.71.169:53 0.0.0.0:* users:(("named",pid=924551,fd=180))
LISTEN 0 10 163.172.71.169:53 0.0.0.0:* users:(("named",pid=924551,fd=179))
LISTEN 0 10 163.172.71.169:53 0.0.0.0:* users:(("named",pid=924551,fd=178))
LISTEN 0 10 163.172.71.169:53 0.0.0.0:* users:(("named",pid=924551,fd=177))
LISTEN 0 10 163.172.71.169:53 0.0.0.0:* users:(("named",pid=924551,fd=176))
LISTEN 0 10 172.18.0.1:53 0.0.0.0:* users:(("named",pid=924551,fd=235))
LISTEN 0 10 172.18.0.1:53 0.0.0.0:* users:(("named",pid=924551,fd=234))
LISTEN 0 10 172.18.0.1:53 0.0.0.0:* users:(("named",pid=924551,fd=233))
LISTEN 0 10 172.18.0.1:53 0.0.0.0:* users:(("named",pid=924551,fd=232))
LISTEN 0 10 172.18.0.1:53 0.0.0.0:* users:(("named",pid=924551,fd=230))
LISTEN 0 10 172.18.0.1:53 0.0.0.0:* users:(("named",pid=924551,fd=231))
LISTEN 0 10 172.18.0.1:53 0.0.0.0:* users:(("named",pid=924551,fd=229))
LISTEN 0 10 172.18.0.1:53 0.0.0.0:* users:(("named",pid=924551,fd=227))
LISTEN 0 10 172.18.0.1:53 0.0.0.0:* users:(("named",pid=924551,fd=228))
LISTEN 0 10 172.18.0.1:53 0.0.0.0:* users:(("named",pid=924551,fd=226))
LISTEN 0 10 172.18.0.1:53 0.0.0.0:* users:(("named",pid=924551,fd=225))
LISTEN 0 10 172.18.0.1:53 0.0.0.0:* users:(("named",pid=924551,fd=224))
LISTEN 0 512 127.0.0.1:8787 0.0.0.0:* users:(("bun",pid=2621118,fd=12))
LISTEN 0 4096 127.0.0.54:53 0.0.0.0:* users:(("systemd-resolve",pid=1381,fd=19))
LISTEN 0 10 172.17.0.1:53 0.0.0.0:* users:(("named",pid=924551,fd=211))
LISTEN 0 10 172.17.0.1:53 0.0.0.0:* users:(("named",pid=924551,fd=210))
LISTEN 0 10 172.17.0.1:53 0.0.0.0:* users:(("named",pid=924551,fd=209))
LISTEN 0 10 172.17.0.1:53 0.0.0.0:* users:(("named",pid=924551,fd=208))
LISTEN 0 10 172.17.0.1:53 0.0.0.0:* users:(("named",pid=924551,fd=206))
LISTEN 0 10 172.17.0.1:53 0.0.0.0:* users:(("named",pid=924551,fd=207))
LISTEN 0 10 172.17.0.1:53 0.0.0.0:* users:(("named",pid=924551,fd=205))
LISTEN 0 10 172.17.0.1:53 0.0.0.0:* users:(("named",pid=924551,fd=203))
LISTEN 0 10 172.17.0.1:53 0.0.0.0:* users:(("named",pid=924551,fd=204))
LISTEN 0 10 172.17.0.1:53 0.0.0.0:* users:(("named",pid=924551,fd=202))
LISTEN 0 10 172.17.0.1:53 0.0.0.0:* users:(("named",pid=924551,fd=201))
LISTEN 0 10 172.17.0.1:53 0.0.0.0:* users:(("named",pid=924551,fd=200))
LISTEN 0 10 [fe80::d016:5dff:fe4f:d8fd]%vetha4cd538:53 [::]:* users:(("named",pid=924551,fd=368))
LISTEN 0 10 [fe80::d016:5dff:fe4f:d8fd]%vetha4cd538:53 [::]:* users:(("named",pid=924551,fd=369))
LISTEN 0 10 [fe80::d016:5dff:fe4f:d8fd]%vetha4cd538:53 [::]:* users:(("named",pid=924551,fd=370))
LISTEN 0 10 [fe80::d016:5dff:fe4f:d8fd]%vetha4cd538:53 [::]:* users:(("named",pid=924551,fd=371))
LISTEN 0 10 [fe80::d016:5dff:fe4f:d8fd]%vetha4cd538:53 [::]:* users:(("named",pid=924551,fd=372))
LISTEN 0 10 [fe80::d016:5dff:fe4f:d8fd]%vetha4cd538:53 [::]:* users:(("named",pid=924551,fd=373))
LISTEN 0 10 [fe80::d016:5dff:fe4f:d8fd]%vetha4cd538:53 [::]:* users:(("named",pid=924551,fd=374))
LISTEN 0 10 [fe80::d016:5dff:fe4f:d8fd]%vetha4cd538:53 [::]:* users:(("named",pid=924551,fd=375))
LISTEN 0 10 [fe80::d016:5dff:fe4f:d8fd]%vetha4cd538:53 [::]:* users:(("named",pid=924551,fd=376))
LISTEN 0 10 [fe80::d016:5dff:fe4f:d8fd]%vetha4cd538:53 [::]:* users:(("named",pid=924551,fd=378))
LISTEN 0 10 [fe80::d016:5dff:fe4f:d8fd]%vetha4cd538:53 [::]:* users:(("named",pid=924551,fd=377))
LISTEN 0 10 [fe80::d016:5dff:fe4f:d8fd]%vetha4cd538:53 [::]:* users:(("named",pid=924551,fd=379))
LISTEN 0 10 [fe80::f42f:d2ff:fe19:ac84]%vethd6654cc:53 [::]:* users:(("named",pid=924551,fd=320))
LISTEN 0 10 [fe80::f42f:d2ff:fe19:ac84]%vethd6654cc:53 [::]:* users:(("named",pid=924551,fd=321))
LISTEN 0 10 [fe80::f42f:d2ff:fe19:ac84]%vethd6654cc:53 [::]:* users:(("named",pid=924551,fd=322))
LISTEN 0 10 [fe80::f42f:d2ff:fe19:ac84]%vethd6654cc:53 [::]:* users:(("named",pid=924551,fd=323))
LISTEN 0 10 [fe80::f42f:d2ff:fe19:ac84]%vethd6654cc:53 [::]:* users:(("named",pid=924551,fd=324))
LISTEN 0 10 [fe80::f42f:d2ff:fe19:ac84]%vethd6654cc:53 [::]:* users:(("named",pid=924551,fd=325))
LISTEN 0 10 [fe80::f42f:d2ff:fe19:ac84]%vethd6654cc:53 [::]:* users:(("named",pid=924551,fd=327))
LISTEN 0 10 [fe80::f42f:d2ff:fe19:ac84]%vethd6654cc:53 [::]:* users:(("named",pid=924551,fd=326))
LISTEN 0 10 [fe80::f42f:d2ff:fe19:ac84]%vethd6654cc:53 [::]:* users:(("named",pid=924551,fd=328))
LISTEN 0 10 [fe80::f42f:d2ff:fe19:ac84]%vethd6654cc:53 [::]:* users:(("named",pid=924551,fd=329))
LISTEN 0 10 [fe80::f42f:d2ff:fe19:ac84]%vethd6654cc:53 [::]:* users:(("named",pid=924551,fd=330))
LISTEN 0 10 [fe80::f42f:d2ff:fe19:ac84]%vethd6654cc:53 [::]:* users:(("named",pid=924551,fd=331))
LISTEN 0 511 [::]:80 [::]:* users:(("nginx",pid=2564178,fd=8),("nginx",pid=2564177,fd=8),("nginx",pid=2564176,fd=8),("nginx",pid=2564175,fd=8),("nginx",pid=2564174,fd=8),("nginx",pid=2564173,fd=8),("nginx",pid=2564172,fd=8),("nginx",pid=2564171,fd=8),("nginx",pid=2564170,fd=8),("nginx",pid=2564169,fd=8),("nginx",pid=2564168,fd=8),("nginx",pid=2564167,fd=8),("nginx",pid=202822,fd=8))
LISTEN 0 4096 [::]:22 [::]:* users:(("sshd",pid=924558,fd=4),("systemd",pid=1,fd=215))
LISTEN 0 511 [::]:443 [::]:* users:(("nginx",pid=2564178,fd=6),("nginx",pid=2564177,fd=6),("nginx",pid=2564176,fd=6),("nginx",pid=2564175,fd=6),("nginx",pid=2564174,fd=6),("nginx",pid=2564173,fd=6),("nginx",pid=2564172,fd=6),("nginx",pid=2564171,fd=6),("nginx",pid=2564170,fd=6),("nginx",pid=2564169,fd=6),("nginx",pid=2564168,fd=6),("nginx",pid=2564167,fd=6),("nginx",pid=202822,fd=6))
LISTEN 0 10 [fe80::3c22:5fff:fe3f:4ea0]%vethb7e9d62:53 [::]:* users:(("named",pid=924551,fd=416))
LISTEN 0 10 [fe80::3c22:5fff:fe3f:4ea0]%vethb7e9d62:53 [::]:* users:(("named",pid=924551,fd=417))
LISTEN 0 10 [fe80::3c22:5fff:fe3f:4ea0]%vethb7e9d62:53 [::]:* users:(("named",pid=924551,fd=418))
LISTEN 0 10 [fe80::3c22:5fff:fe3f:4ea0]%vethb7e9d62:53 [::]:* users:(("named",pid=924551,fd=420))
LISTEN 0 10 [fe80::3c22:5fff:fe3f:4ea0]%vethb7e9d62:53 [::]:* users:(("named",pid=924551,fd=419))
LISTEN 0 10 [fe80::3c22:5fff:fe3f:4ea0]%vethb7e9d62:53 [::]:* users:(("named",pid=924551,fd=421))
LISTEN 0 10 [fe80::3c22:5fff:fe3f:4ea0]%vethb7e9d62:53 [::]:* users:(("named",pid=924551,fd=423))
LISTEN 0 10 [fe80::3c22:5fff:fe3f:4ea0]%vethb7e9d62:53 [::]:* users:(("named",pid=924551,fd=422))
LISTEN 0 10 [fe80::3c22:5fff:fe3f:4ea0]%vethb7e9d62:53 [::]:* users:(("named",pid=924551,fd=424))
LISTEN 0 10 [fe80::3c22:5fff:fe3f:4ea0]%vethb7e9d62:53 [::]:* users:(("named",pid=924551,fd=425))
LISTEN 0 10 [fe80::3c22:5fff:fe3f:4ea0]%vethb7e9d62:53 [::]:* users:(("named",pid=924551,fd=426))
LISTEN 0 10 [fe80::3c22:5fff:fe3f:4ea0]%vethb7e9d62:53 [::]:* users:(("named",pid=924551,fd=427))
LISTEN 0 10 [fe80::6817:88ff:fe50:e80c]%veth113daf2:53 [::]:* users:(("named",pid=924551,fd=392))
LISTEN 0 10 [fe80::6817:88ff:fe50:e80c]%veth113daf2:53 [::]:* users:(("named",pid=924551,fd=393))
LISTEN 0 10 [fe80::6817:88ff:fe50:e80c]%veth113daf2:53 [::]:* users:(("named",pid=924551,fd=394))
LISTEN 0 10 [fe80::6817:88ff:fe50:e80c]%veth113daf2:53 [::]:* users:(("named",pid=924551,fd=395))
LISTEN 0 10 [fe80::6817:88ff:fe50:e80c]%veth113daf2:53 [::]:* users:(("named",pid=924551,fd=396))
LISTEN 0 10 [fe80::6817:88ff:fe50:e80c]%veth113daf2:53 [::]:* users:(("named",pid=924551,fd=397))
LISTEN 0 10 [fe80::6817:88ff:fe50:e80c]%veth113daf2:53 [::]:* users:(("named",pid=924551,fd=399))
LISTEN 0 10 [fe80::6817:88ff:fe50:e80c]%veth113daf2:53 [::]:* users:(("named",pid=924551,fd=398))
LISTEN 0 10 [fe80::6817:88ff:fe50:e80c]%veth113daf2:53 [::]:* users:(("named",pid=924551,fd=400))
LISTEN 0 10 [fe80::6817:88ff:fe50:e80c]%veth113daf2:53 [::]:* users:(("named",pid=924551,fd=401))
LISTEN 0 10 [fe80::6817:88ff:fe50:e80c]%veth113daf2:53 [::]:* users:(("named",pid=924551,fd=402))
LISTEN 0 10 [fe80::6817:88ff:fe50:e80c]%veth113daf2:53 [::]:* users:(("named",pid=924551,fd=403))
LISTEN 0 10 [fe80::a826:dcff:fe24:982f]%br-26c287533dd3:53 [::]:* users:(("named",pid=924551,fd=296))
LISTEN 0 10 [fe80::a826:dcff:fe24:982f]%br-26c287533dd3:53 [::]:* users:(("named",pid=924551,fd=297))
LISTEN 0 10 [fe80::a826:dcff:fe24:982f]%br-26c287533dd3:53 [::]:* users:(("named",pid=924551,fd=298))
LISTEN 0 10 [fe80::a826:dcff:fe24:982f]%br-26c287533dd3:53 [::]:* users:(("named",pid=924551,fd=299))
LISTEN 0 10 [fe80::a826:dcff:fe24:982f]%br-26c287533dd3:53 [::]:* users:(("named",pid=924551,fd=300))
LISTEN 0 10 [fe80::a826:dcff:fe24:982f]%br-26c287533dd3:53 [::]:* users:(("named",pid=924551,fd=301))
LISTEN 0 10 [fe80::a826:dcff:fe24:982f]%br-26c287533dd3:53 [::]:* users:(("named",pid=924551,fd=302))
LISTEN 0 10 [fe80::a826:dcff:fe24:982f]%br-26c287533dd3:53 [::]:* users:(("named",pid=924551,fd=303))
LISTEN 0 10 [fe80::a826:dcff:fe24:982f]%br-26c287533dd3:53 [::]:* users:(("named",pid=924551,fd=304))
LISTEN 0 10 [fe80::a826:dcff:fe24:982f]%br-26c287533dd3:53 [::]:* users:(("named",pid=924551,fd=305))
LISTEN 0 10 [fe80::a826:dcff:fe24:982f]%br-26c287533dd3:53 [::]:* users:(("named",pid=924551,fd=306))
LISTEN 0 10 [fe80::a826:dcff:fe24:982f]%br-26c287533dd3:53 [::]:* users:(("named",pid=924551,fd=307))
LISTEN 0 10 [fe80::609f:aeff:fefb:a1a4]%vetha3ff056:53 [::]:* users:(("named",pid=924551,fd=344))
LISTEN 0 10 [fe80::609f:aeff:fefb:a1a4]%vetha3ff056:53 [::]:* users:(("named",pid=924551,fd=345))
LISTEN 0 10 [fe80::609f:aeff:fefb:a1a4]%vetha3ff056:53 [::]:* users:(("named",pid=924551,fd=346))
LISTEN 0 10 [fe80::609f:aeff:fefb:a1a4]%vetha3ff056:53 [::]:* users:(("named",pid=924551,fd=347))
LISTEN 0 10 [fe80::609f:aeff:fefb:a1a4]%vetha3ff056:53 [::]:* users:(("named",pid=924551,fd=348))
LISTEN 0 10 [fe80::609f:aeff:fefb:a1a4]%vetha3ff056:53 [::]:* users:(("named",pid=924551,fd=349))
LISTEN 0 10 [fe80::609f:aeff:fefb:a1a4]%vetha3ff056:53 [::]:* users:(("named",pid=924551,fd=350))
LISTEN 0 10 [fe80::609f:aeff:fefb:a1a4]%vetha3ff056:53 [::]:* users:(("named",pid=924551,fd=351))
LISTEN 0 10 [fe80::609f:aeff:fefb:a1a4]%vetha3ff056:53 [::]:* users:(("named",pid=924551,fd=352))
LISTEN 0 10 [fe80::609f:aeff:fefb:a1a4]%vetha3ff056:53 [::]:* users:(("named",pid=924551,fd=353))
LISTEN 0 10 [fe80::609f:aeff:fefb:a1a4]%vetha3ff056:53 [::]:* users:(("named",pid=924551,fd=354))
LISTEN 0 10 [fe80::609f:aeff:fefb:a1a4]%vetha3ff056:53 [::]:* users:(("named",pid=924551,fd=355))
LISTEN 0 10 [fe80::ec4:7aff:fe86:7f9a]%eno1:53 [::]:* users:(("named",pid=924551,fd=272))
LISTEN 0 10 [fe80::ec4:7aff:fe86:7f9a]%eno1:53 [::]:* users:(("named",pid=924551,fd=273))
LISTEN 0 10 [fe80::ec4:7aff:fe86:7f9a]%eno1:53 [::]:* users:(("named",pid=924551,fd=274))
LISTEN 0 10 [fe80::ec4:7aff:fe86:7f9a]%eno1:53 [::]:* users:(("named",pid=924551,fd=275))
LISTEN 0 10 [fe80::ec4:7aff:fe86:7f9a]%eno1:53 [::]:* users:(("named",pid=924551,fd=276))
LISTEN 0 10 [fe80::ec4:7aff:fe86:7f9a]%eno1:53 [::]:* users:(("named",pid=924551,fd=277))
LISTEN 0 10 [fe80::ec4:7aff:fe86:7f9a]%eno1:53 [::]:* users:(("named",pid=924551,fd=278))
LISTEN 0 10 [fe80::ec4:7aff:fe86:7f9a]%eno1:53 [::]:* users:(("named",pid=924551,fd=279))
LISTEN 0 10 [fe80::ec4:7aff:fe86:7f9a]%eno1:53 [::]:* users:(("named",pid=924551,fd=280))
LISTEN 0 10 [fe80::ec4:7aff:fe86:7f9a]%eno1:53 [::]:* users:(("named",pid=924551,fd=281))
LISTEN 0 10 [fe80::ec4:7aff:fe86:7f9a]%eno1:53 [::]:* users:(("named",pid=924551,fd=282))
LISTEN 0 10 [fe80::ec4:7aff:fe86:7f9a]%eno1:53 [::]:* users:(("named",pid=924551,fd=283))
LISTEN 0 10 [::1]:53 [::]:* users:(("named",pid=924551,fd=248))
LISTEN 0 10 [::1]:53 [::]:* users:(("named",pid=924551,fd=249))
LISTEN 0 10 [::1]:53 [::]:* users:(("named",pid=924551,fd=250))
LISTEN 0 10 [::1]:53 [::]:* users:(("named",pid=924551,fd=252))
LISTEN 0 10 [::1]:53 [::]:* users:(("named",pid=924551,fd=251))
LISTEN 0 10 [::1]:53 [::]:* users:(("named",pid=924551,fd=253))
LISTEN 0 10 [::1]:53 [::]:* users:(("named",pid=924551,fd=254))
LISTEN 0 10 [::1]:53 [::]:* users:(("named",pid=924551,fd=255))
LISTEN 0 10 [::1]:53 [::]:* users:(("named",pid=924551,fd=256))
LISTEN 0 10 [::1]:53 [::]:* users:(("named",pid=924551,fd=257))
LISTEN 0 10 [::1]:53 [::]:* users:(("named",pid=924551,fd=258))
LISTEN 0 10 [::1]:53 [::]:* users:(("named",pid=924551,fd=259))
LISTEN 0 10 [fe80::50e7:71ff:fe6e:f0fc]%vethfe72f8f:53 [::]:* users:(("named",pid=924551,fd=440))
LISTEN 0 10 [fe80::50e7:71ff:fe6e:f0fc]%vethfe72f8f:53 [::]:* users:(("named",pid=924551,fd=441))
LISTEN 0 10 [fe80::50e7:71ff:fe6e:f0fc]%vethfe72f8f:53 [::]:* users:(("named",pid=924551,fd=442))
LISTEN 0 10 [fe80::50e7:71ff:fe6e:f0fc]%vethfe72f8f:53 [::]:* users:(("named",pid=924551,fd=443))
LISTEN 0 10 [fe80::50e7:71ff:fe6e:f0fc]%vethfe72f8f:53 [::]:* users:(("named",pid=924551,fd=444))
LISTEN 0 10 [fe80::50e7:71ff:fe6e:f0fc]%vethfe72f8f:53 [::]:* users:(("named",pid=924551,fd=445))
LISTEN 0 10 [fe80::50e7:71ff:fe6e:f0fc]%vethfe72f8f:53 [::]:* users:(("named",pid=924551,fd=446))
LISTEN 0 10 [fe80::50e7:71ff:fe6e:f0fc]%vethfe72f8f:53 [::]:* users:(("named",pid=924551,fd=447))
LISTEN 0 10 [fe80::50e7:71ff:fe6e:f0fc]%vethfe72f8f:53 [::]:* users:(("named",pid=924551,fd=448))
LISTEN 0 10 [fe80::50e7:71ff:fe6e:f0fc]%vethfe72f8f:53 [::]:* users:(("named",pid=924551,fd=449))
LISTEN 0 10 [fe80::50e7:71ff:fe6e:f0fc]%vethfe72f8f:53 [::]:* users:(("named",pid=924551,fd=450))
LISTEN 0 10 [fe80::50e7:71ff:fe6e:f0fc]%vethfe72f8f:53 [::]:* users:(("named",pid=924551,fd=451))
LISTEN 0 5 [::1]:953 [::]:* users:(("named",pid=924551,fd=454))
########## TOP IP access.log ##########
260 64.89.160.73
240 124.122.184.71
157 78.189.24.202
156 81.171.72.93
107 34.34.103.195
87 161.118.169.38
87 144.22.42.243
75 31.59.129.193
49 45.148.10.200
49 172.167.131.242
########## TOP 404 paths ##########
41 /
13 /.env
6 /login
5 /SDK/webLanguage
4 /backend/.env
4 /app/.env
4 /api/.env
4 /.env.staging
4 /.env.production
4 /.env.prod
########## Échecs SSH récents ##########
Jul 24 11:49:58 seo-insigght-99 sshd-session[2677058]: Disconnected from invalid user yao 46.147.195.11 port 51322 [preauth]
Jul 24 11:50:04 seo-insigght-99 sshd-session[2677265]: Invalid user nasuser from 2.26.99.220 port 58978
Jul 24 11:50:06 seo-insigght-99 sshd-session[2677265]: Failed password for invalid user nasuser from 2.26.99.220 port 58978 ssh2
Jul 24 11:50:07 seo-insigght-99 sshd-session[2677265]: Disconnected from invalid user nasuser 2.26.99.220 port 58978 [preauth]
Jul 24 11:50:39 seo-insigght-99 sshd-session[2677812]: Failed password for root from 102.54.246.130 port 58802 ssh2
Jul 24 11:50:46 seo-insigght-99 sshd-session[2677934]: Invalid user zabbix from 182.53.207.106 port 41868
Jul 24 11:50:49 seo-insigght-99 sshd-session[2677934]: Failed password for invalid user zabbix from 182.53.207.106 port 41868 ssh2
Jul 24 11:50:51 seo-insigght-99 sshd-session[2677934]: Connection closed by invalid user zabbix 182.53.207.106 port 41868 [preauth]
Jul 24 11:51:43 seo-insigght-99 sshd-session[2678865]: Failed password for root from 46.147.195.11 port 35826 ssh2
Jul 24 11:52:27 seo-insigght-99 sshd-session[2679789]: Failed password for postgres from 2.26.99.220 port 54090 ssh2
Connection to 163.172.71.169 closed.