# ============================================================================= # PREUVE DE PASSIVITÉ — Phase 1 # Audit non-intrusif / État du système observé sans modification # Serveur : test.08.ma (217.160.192.96) # Date : 2026-07-11 21:45:31 UTC # Principe: Toutes les commandes ci-dessous sont en LECTURE SEULE. # Aucune modification du système n'est effectuée. # Aucun scan réseau actif, aucun envoi de paquets. # ============================================================================= ================================================================================ SECTION A : IDENTIFICATION DU SYSTÈME (lecture seule) ================================================================================ [A.1] Hostname odata odata.taile8443b.ts.net [A.2] Kernel & OS Linux odata 6.8.0-117-generic #117-Ubuntu SMP PREEMPT_DYNAMIC Tue May 5 19:26:24 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux PRETTY_NAME="Ubuntu 24.04.4 LTS" NAME="Ubuntu" VERSION_ID="24.04" VERSION="24.04.4 LTS (Noble Numbat)" VERSION_CODENAME=noble ID=ubuntu ID_LIKE=debian HOME_URL="https://www.ubuntu.com/" SUPPORT_URL="https://help.ubuntu.com/" BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/" PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy" UBUNTU_CODENAME=noble LOGO=ubuntu-logo [A.3] Uptime 21:45:31 up 8 days, 6:37, 0 user, load average: 0.20, 0.24, 0.26 [A.4] Date système (UTC) Sat Jul 11 09:45:31 PM UTC 2026 [A.5] Architecture x86_64 amd64 ================================================================================ SECTION B : RESSOURCES SYSTÈME (lecture seule) ================================================================================ [B.1] CPU Architecture: x86_64 CPU op-mode(s): 32-bit, 64-bit Address sizes: 40 bits physical, 48 bits virtual Byte Order: Little Endian CPU(s): 6 On-line CPU(s) list: 0-5 Vendor ID: AuthenticAMD BIOS Vendor ID: QEMU Model name: AMD EPYC-Milan Processor BIOS Model name: pc-i440fx-6.1 CPU @ 2.0GHz BIOS CPU family: 1 CPU family: 25 Model: 1 Thread(s) per core: 2 Core(s) per socket: 3 Socket(s): 1 Stepping: 1 BogoMIPS: 5192.87 Flags: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ht syscall nx mmxext fxsr_opt pdpe1gb rdtscp lm rep_good nopl cpuid extd_apicid tsc_known_freq pni pclmulqdq ssse3 fma cx16 pcid sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm cmp_legacy svm cr8_legacy abm sse4a misalignsse 3dnowprefetch osvw topoext perfctr_core ssbd ibrs ibpb stibp vmmcall fsgsbase bmi1 avx2 smep bmi2 invpcid rdseed adx smap clflushopt clwb sha_ni xsaveopt xsavec xgetbv1 xsaves clzero xsaveerptr wbnoinvd arat npt nrip_save umip pku ospke vaes vpclmulqdq rdpid Virtualization: AMD-V Cœurs logiques : 6 [B.2] Mémoire total used free shared buff/cache available Mem: 7.7Gi 2.6Gi 2.7Gi 22Mi 2.8Gi 5.1Gi Swap: 6.0Gi 4.4Gi 1.6Gi [B.3] Disques Filesystem Size Used Avail Use% Mounted on tmpfs 788M 1.5M 786M 1% /run /dev/vda1 232G 118G 114G 51% / tmpfs 3.9G 1.1M 3.9G 1% /dev/shm tmpfs 5.0M 0 5.0M 0% /run/lock /dev/vda16 881M 117M 703M 15% /boot /dev/vda15 105M 6.2M 99M 6% /boot/efi tmpfs 788M 20K 788M 1% /run/user/0 overlay 232G 118G 114G 51% /var/lib/docker/rootfs/overlayfs/6486ea51cefe93c5f1100c2253ff58a921c98d64c7d73913f9d82a8224db9933 NAME SIZE TYPE MOUNTPOINT FSTYPE vda 240G disk ├─vda1 239G part / ext4 ├─vda14 4M part ├─vda15 106M part /boot/efi vfat └─vda16 913M part /boot ext4 [B.4] Inodes Filesystem Inodes IUsed IFree IUse% Mounted on tmpfs 1007640 947 1006693 1% /run /dev/vda1 31326208 2037200 29289008 7% / tmpfs 1007640 13 1007627 1% /dev/shm tmpfs 1007640 3 1007637 1% /run/lock /dev/vda16 58496 604 57892 2% /boot /dev/vda15 0 0 0 - /boot/efi tmpfs 201528 47 201481 1% /run/user/0 overlay 31326208 2037200 29289008 7% /var/lib/docker/rootfs/overlayfs/6486ea51cefe93c5f1100c2253ff58a921c98d64c7d73913f9d82a8224db9933 ================================================================================ SECTION C : RÉSEAU — ÉTAT PASSIF (lecture seule, aucun scan) ================================================================================ [C.1] Interfaces réseau 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever inet6 ::1/128 scope host noprefixroute valid_lft forever preferred_lft forever 2: ens6: mtu 1500 qdisc fq_codel state UP group default qlen 1000 link/ether 02:01:cc:ae:b2:5c brd ff:ff:ff:ff:ff:ff altname enp0s6 inet 217.160.192.96/32 metric 100 scope global dynamic ens6 valid_lft 446sec preferred_lft 446sec inet6 fe80::1:ccff:feae:b25c/64 scope link valid_lft forever preferred_lft forever 3: tailscale0: mtu 1280 qdisc fq_codel state UNKNOWN group default qlen 500 link/none inet 100.94.9.37/32 scope global tailscale0 valid_lft forever preferred_lft forever inet6 fd7a:115c:a1e0::2c38:926/128 scope global valid_lft forever preferred_lft forever inet6 fe80::39a3:cc2f:72ce:1dad/64 scope link stable-privacy valid_lft forever preferred_lft forever 4: docker0: mtu 1500 qdisc noqueue state DOWN group default link/ether 56:72:a1:d6:f0:c1 brd ff:ff:ff:ff:ff:ff inet 172.17.0.1/16 brd 172.17.255.255 scope global docker0 valid_lft forever preferred_lft forever [C.2] Routes default via 217.160.192.1 dev ens6 proto dhcp src 217.160.192.96 metric 100 prohibit 169.254.169.254 172.17.0.0/16 dev docker0 proto kernel scope link src 172.17.0.1 linkdown 212.227.123.16 via 217.160.192.1 dev ens6 proto dhcp src 217.160.192.96 metric 100 212.227.123.17 via 217.160.192.1 dev ens6 proto dhcp src 217.160.192.96 metric 100 217.160.192.1 dev ens6 proto dhcp scope link src 217.160.192.96 metric 100 [C.3] Connexions actives (LISTEN/ESTABLISHED — aucun scan) Netid State Recv-Q Send-Q Local Address:Port Peer Address:Port Process udp UNCONN 0 0 127.0.0.1:323 0.0.0.0:* users:(("chronyd",pid=1254,fd=5)) udp UNCONN 0 0 0.0.0.0:443 0.0.0.0:* users:(("nginx",pid=520624,fd=74),("nginx",pid=520623,fd=74),("nginx",pid=520622,fd=74),("nginx",pid=520621,fd=74),("nginx",pid=520620,fd=74),("nginx",pid=520619,fd=74),("nginx",pid=2014,fd=74)) udp UNCONN 0 0 0.0.0.0:443 0.0.0.0:* users:(("nginx",pid=520624,fd=73),("nginx",pid=520623,fd=73),("nginx",pid=520622,fd=73),("nginx",pid=520621,fd=73),("nginx",pid=520620,fd=73),("nginx",pid=520619,fd=73),("nginx",pid=2014,fd=73)) udp UNCONN 0 0 0.0.0.0:443 0.0.0.0:* users:(("nginx",pid=520624,fd=72),("nginx",pid=520623,fd=72),("nginx",pid=520622,fd=72),("nginx",pid=520621,fd=72),("nginx",pid=520620,fd=72),("nginx",pid=520619,fd=72),("nginx",pid=2014,fd=72)) udp UNCONN 0 0 0.0.0.0:443 0.0.0.0:* users:(("nginx",pid=520624,fd=71),("nginx",pid=520623,fd=71),("nginx",pid=520622,fd=71),("nginx",pid=520621,fd=71),("nginx",pid=520620,fd=71),("nginx",pid=520619,fd=71),("nginx",pid=2014,fd=71)) udp UNCONN 0 0 0.0.0.0:443 0.0.0.0:* users:(("nginx",pid=520624,fd=70),("nginx",pid=520623,fd=70),("nginx",pid=520622,fd=70),("nginx",pid=520621,fd=70),("nginx",pid=520620,fd=70),("nginx",pid=520619,fd=70),("nginx",pid=2014,fd=70)) udp UNCONN 0 0 0.0.0.0:443 0.0.0.0:* users:(("nginx",pid=520624,fd=66),("nginx",pid=520623,fd=66),("nginx",pid=520622,fd=66),("nginx",pid=520621,fd=66),("nginx",pid=520620,fd=66),("nginx",pid=520619,fd=66),("nginx",pid=2014,fd=66)) udp UNCONN 0 0 0.0.0.0:53749 0.0.0.0:* users:(("avahi-daemon",pid=790,fd=14)) udp UNCONN 0 0 0.0.0.0:41641 0.0.0.0:* users:(("tailscaled",pid=1097,fd=23)) udp UNCONN 0 0 217.160.192.96:5060 0.0.0.0:* users:(("freeswitch",pid=3936,fd=35)) udp UNCONN 0 0 217.160.192.96:5080 0.0.0.0:* users:(("freeswitch",pid=3936,fd=34)) udp UNCONN 0 0 217.160.192.96:17582 0.0.0.0:* users:(("freeswitch",pid=3936,fd=64)) udp UNCONN 0 0 0.0.0.0:5353 0.0.0.0:* users:(("avahi-daemon",pid=790,fd=12)) udp UNCONN 0 0 0.0.0.0:1337 0.0.0.0:* users:(("freeswitch",pid=3936,fd=46)) udp ESTAB 0 0 127.0.0.1:34181 127.0.0.53:53 users:(("freeswitch",pid=3936,fd=40)) udp UNCONN 0 0 127.0.0.54:53 0.0.0.0:* users:(("systemd-resolve",pid=672,fd=16)) udp UNCONN 0 0 127.0.0.53%lo:53 0.0.0.0:* users:(("systemd-resolve",pid=672,fd=14)) udp UNCONN 0 0 217.160.192.96%ens6:68 0.0.0.0:* users:(("systemd-network",pid=758,fd=11)) udp UNCONN 0 0 [::1]:323 [::]:* users:(("chronyd",pid=1254,fd=6)) udp UNCONN 0 0 [::]:443 [::]:* users:(("nginx",pid=520624,fd=67),("nginx",pid=520623,fd=67),("nginx",pid=520622,fd=67),("nginx",pid=520621,fd=67),("nginx",pid=520620,fd=67),("nginx",pid=520619,fd=67),("nginx",pid=2014,fd=67)) udp UNCONN 0 0 [::]:443 [::]:* users:(("nginx",pid=520624,fd=75),("nginx",pid=520623,fd=75),("nginx",pid=520622,fd=75),("nginx",pid=520621,fd=75),("nginx",pid=520620,fd=75),("nginx",pid=520619,fd=75),("nginx",pid=2014,fd=75)) udp UNCONN 0 0 [::]:443 [::]:* users:(("nginx",pid=520624,fd=76),("nginx",pid=520623,fd=76),("nginx",pid=520622,fd=76),("nginx",pid=520621,fd=76),("nginx",pid=520620,fd=76),("nginx",pid=520619,fd=76),("nginx",pid=2014,fd=76)) udp UNCONN 0 0 [::]:443 [::]:* users:(("nginx",pid=520624,fd=77),("nginx",pid=520623,fd=77),("nginx",pid=520622,fd=77),("nginx",pid=520621,fd=77),("nginx",pid=520620,fd=77),("nginx",pid=520619,fd=77),("nginx",pid=2014,fd=77)) udp UNCONN 0 0 [::]:443 [::]:* users:(("nginx",pid=520624,fd=78),("nginx",pid=520623,fd=78),("nginx",pid=520622,fd=78),("nginx",pid=520621,fd=78),("nginx",pid=520620,fd=78),("nginx",pid=520619,fd=78),("nginx",pid=2014,fd=78)) udp UNCONN 0 0 [::]:443 [::]:* users:(("nginx",pid=520624,fd=79),("nginx",pid=520623,fd=79),("nginx",pid=520622,fd=79),("nginx",pid=520621,fd=79),("nginx",pid=520620,fd=79),("nginx",pid=520619,fd=79),("nginx",pid=2014,fd=79)) udp UNCONN 0 0 [::]:41641 [::]:* users:(("tailscaled",pid=1097,fd=19)) udp UNCONN 0 0 [::1]:5060 [::]:* users:(("freeswitch",pid=3936,fd=26)) udp UNCONN 0 0 [::]:5353 [::]:* users:(("avahi-daemon",pid=790,fd=13)) udp UNCONN 0 0 [::]:58862 [::]:* users:(("avahi-daemon",pid=790,fd=15)) tcp LISTEN 0 5 0.0.0.0:5580 0.0.0.0:* users:(("python3",pid=1112,fd=3)) tcp LISTEN 0 512 127.0.0.1:3306 0.0.0.0:* users:(("mysqld",pid=1363068,fd=20)) tcp LISTEN 0 4096 127.0.0.54:53 0.0.0.0:* users:(("systemd-resolve",pid=672,fd=17)) tcp LISTEN 0 4096 127.0.0.1:20000 0.0.0.0:* users:(("php-fpm8.5",pid=1088,fd=10)) tcp LISTEN 0 4096 127.0.0.1:20001 0.0.0.0:* users:(("php-fpm8.5",pid=1088,fd=8)) tcp LISTEN 0 4096 127.0.0.1:20002 0.0.0.0:* users:(("php-fpm8.5",pid=1088,fd=9)) tcp LISTEN 0 4096 127.0.0.1:20003 0.0.0.0:* users:(("php-fpm8.5",pid=1088,fd=11)) tcp LISTEN 0 4096 127.0.0.1:7880 0.0.0.0:* users:(("livekit-server",pid=1308,fd=8)) tcp LISTEN 0 5 127.0.0.1:7882 0.0.0.0:* users:(("python3",pid=1313,fd=3)) tcp LISTEN 0 128 0.0.0.0:8660 0.0.0.0:* users:(("python3",pid=1363225,fd=6),("python3",pid=1363225,fd=5),("python3",pid=1363222,fd=5)) tcp LISTEN 0 128 0.0.0.0:8652 0.0.0.0:* users:(("python3",pid=1096,fd=3)) tcp LISTEN 0 511 0.0.0.0:443 0.0.0.0:* users:(("nginx",pid=520624,fd=64),("nginx",pid=520623,fd=64),("nginx",pid=520622,fd=64),("nginx",pid=520621,fd=64),("nginx",pid=520620,fd=64),("nginx",pid=520619,fd=64),("nginx",pid=2014,fd=64)) tcp LISTEN 0 64 217.160.192.96:5060 0.0.0.0:* users:(("freeswitch",pid=3936,fd=36)) tcp LISTEN 0 64 217.160.192.96:5080 0.0.0.0:* users:(("freeswitch",pid=3936,fd=33)) tcp LISTEN 0 4096 0.0.0.0:4369 0.0.0.0:* users:(("epmd",pid=3935,fd=3)) tcp LISTEN 0 511 0.0.0.0:8443 0.0.0.0:* users:(("nginx",pid=1135,fd=6),("nginx",pid=1127,fd=6),("nginx",pid=1126,fd=6),("nginx",pid=1125,fd=6),("nginx",pid=1124,fd=6),("nginx",pid=1123,fd=6),("nginx",pid=1118,fd=6)) tcp LISTEN 0 2048 0.0.0.0:8400 0.0.0.0:* users:(("python3",pid=1463713,fd=14)) tcp LISTEN 0 2048 0.0.0.0:8300 0.0.0.0:* users:(("python",pid=1463738,fd=14)) tcp LISTEN 0 511 0.0.0.0:80 0.0.0.0:* users:(("nginx",pid=520624,fd=62),("nginx",pid=520623,fd=62),("nginx",pid=520622,fd=62),("nginx",pid=520621,fd=62),("nginx",pid=520620,fd=62),("nginx",pid=520619,fd=62),("nginx",pid=2014,fd=62)) tcp LISTEN 0 511 127.0.0.1:6379 0.0.0.0:* users:(("redis-server",pid=1092,fd=6)) tcp LISTEN 0 100 0.0.0.0:25 0.0.0.0:* users:(("master",pid=2686,fd=13)) tcp LISTEN 0 128 0.0.0.0:21 0.0.0.0:* users:(("proftpd",pid=386077,fd=0)) tcp LISTEN 0 4096 0.0.0.0:22 0.0.0.0:* users:(("sshd",pid=5293,fd=3),("systemd",pid=1,fd=459)) tcp LISTEN 0 128 0.0.0.0:5095 0.0.0.0:* users:(("python",pid=1099,fd=5)) tcp LISTEN 0 128 0.0.0.0:5090 0.0.0.0:* users:(("python",pid=1363184,fd=6),("python",pid=1363184,fd=5),("python",pid=1056,fd=5)) tcp LISTEN 0 128 0.0.0.0:5050 0.0.0.0:* users:(("python",pid=1080,fd=3)) tcp LISTEN 0 511 127.0.0.1:3000 0.0.0.0:* users:(("node",pid=2799,fd=21)) tcp LISTEN 0 1024 127.0.0.1:11211 0.0.0.0:* users:(("memcached",pid=1083,fd=26)) tcp LISTEN 0 5 0.0.0.0:8765 0.0.0.0:* users:(("python3",pid=3501,fd=3)) tcp LISTEN 0 200 127.0.0.1:5432 0.0.0.0:* users:(("postgres",pid=1281,fd=6)) tcp LISTEN 0 4096 100.94.9.37:46502 0.0.0.0:* users:(("tailscaled",pid=1097,fd=26)) tcp LISTEN 0 5 0.0.0.0:44321 0.0.0.0:* users:(("pmcd",pid=1481,fd=0)) tcp LISTEN 0 4096 217.160.192.96:8081 0.0.0.0:* users:(("freeswitch",pid=3936,fd=42)) tcp LISTEN 0 4096 217.160.192.96:8082 0.0.0.0:* users:(("freeswitch",pid=3936,fd=45)) tcp LISTEN 0 128 0.0.0.0:44323 0.0.0.0:* users:(("pmproxy",pid=1530,fd=15)) tcp LISTEN 0 128 0.0.0.0:44322 0.0.0.0:* users:(("pmproxy",pid=1530,fd=13)) tcp LISTEN 0 5 127.0.0.1:5199 0.0.0.0:* users:(("python3",pid=1896258,fd=4)) tcp LISTEN 0 2048 127.0.0.1:5300 0.0.0.0:* users:(("gunicorn",pid=90344,fd=4),("gunicorn",pid=90343,fd=4),("gunicorn",pid=90342,fd=4),("gunicorn",pid=90341,fd=4),("gunicorn",pid=90338,fd=4)) tcp LISTEN 0 5 127.0.0.1:9999 0.0.0.0:* users:(("python3",pid=21084,fd=4)) tcp LISTEN 0 4096 127.0.0.53%lo:53 0.0.0.0:* users:(("systemd-resolve",pid=672,fd=15)) tcp LISTEN 0 511 0.0.0.0:8080 0.0.0.0:* users:(("nginx",pid=520624,fd=68),("nginx",pid=520623,fd=68),("nginx",pid=520622,fd=68),("nginx",pid=520621,fd=68),("nginx",pid=520620,fd=68),("nginx",pid=520619,fd=68),("nginx",pid=2014,fd=68)) tcp LISTEN 0 128 127.0.0.1:8642 0.0.0.0:* users:(("python",pid=989,fd=31)) tcp LISTEN 0 2048 127.0.0.1:8650 0.0.0.0:* users:(("python",pid=1076,fd=14)) tcp LISTEN 0 128 127.0.0.1:8651 0.0.0.0:* users:(("python3",pid=1364185,fd=3)) tcp LISTEN 0 2048 127.0.0.1:8310 0.0.0.0:* users:(("uvicorn",pid=1090,fd=14)) tcp LISTEN 0 2048 127.0.0.1:8315 0.0.0.0:* users:(("uvicorn",pid=1075,fd=14)) tcp LISTEN 0 128 127.0.0.1:8282 0.0.0.0:* users:(("python3",pid=1084,fd=3)) tcp LISTEN 0 128 127.0.0.1:8283 0.0.0.0:* users:(("python",pid=1079,fd=4)) tcp LISTEN 0 5 127.0.0.1:8401 0.0.0.0:* users:(("python3",pid=3058547,fd=3)) tcp LISTEN 0 5 127.0.0.1:8402 0.0.0.0:* users:(("python3",pid=3111755,fd=3)) tcp LISTEN 0 128 127.0.0.1:8405 0.0.0.0:* users:(("python",pid=197472,fd=4)) tcp LISTEN 0 128 127.0.0.1:8406 0.0.0.0:* users:(("python",pid=174250,fd=4)) tcp LISTEN 0 4096 127.0.0.1:9000 0.0.0.0:* users:(("listmonk",pid=2899,fd=8)) tcp LISTEN 0 511 0.0.0.0:3003 0.0.0.0:* users:(("next-server (v1",pid=1073,fd=21)) tcp LISTEN 0 4096 127.0.0.1:9100 0.0.0.0:* users:(("node_exporter",pid=1086,fd=3)) tcp LISTEN 0 2048 127.0.0.1:5091 0.0.0.0:* users:(("gunicorn",pid=1341,fd=4),("gunicorn",pid=1289,fd=4),("gunicorn",pid=1272,fd=4),("gunicorn",pid=1226,fd=4),("gunicorn",pid=1070,fd=4)) tcp LISTEN 0 2048 127.0.0.1:5092 0.0.0.0:* users:(("gunicorn",pid=1376,fd=4),("gunicorn",pid=1329,fd=4),("gunicorn",pid=1095,fd=4)) tcp LISTEN 0 128 127.0.0.1:5093 0.0.0.0:* users:(("python3",pid=1082,fd=3)) tcp LISTEN 0 128 127.0.0.1:5096 0.0.0.0:* users:(("python3",pid=1057,fd=4)) tcp LISTEN 0 2048 127.0.0.1:5100 0.0.0.0:* users:(("gunicorn",pid=1122,fd=4),("gunicorn",pid=1111,fd=4),("gunicorn",pid=1100,fd=4),("gunicorn",pid=1093,fd=4),("gunicorn",pid=1060,fd=4)) tcp LISTEN 0 2048 127.0.0.1:5104 0.0.0.0:* users:(("gunicorn",pid=1279,fd=5),("gunicorn",pid=1248,fd=5),("gunicorn",pid=1071,fd=5)) tcp TIME-WAIT 0 0 127.0.0.1:39144 127.0.0.1:8651 tcp TIME-WAIT 0 0 127.0.0.1:56816 127.0.0.1:8282 tcp TIME-WAIT 0 0 127.0.0.1:54328 127.0.0.1:3001 tcp ESTAB 0 0 217.160.192.96:47330 199.165.136.100:443 users:(("tailscaled",pid=1097,fd=11)) tcp ESTAB 0 0 217.160.192.96:53072 149.154.166.110:443 users:(("python",pid=989,fd=38)) tcp TIME-WAIT 0 0 127.0.0.1:54874 127.0.0.1:8300 tcp TIME-WAIT 0 0 127.0.0.1:58110 127.0.0.1:8650 tcp TIME-WAIT 0 0 127.0.0.1:5091 127.0.0.1:48832 tcp CLOSE-WAIT 25 0 217.160.192.96:57056 99.86.253.14:443 users:(("python",pid=989,fd=34)) tcp TIME-WAIT 0 0 127.0.0.1:45808 127.0.0.1:3002 tcp TIME-WAIT 0 0 127.0.0.1:50276 127.0.0.1:5093 tcp TIME-WAIT 0 0 127.0.0.1:54338 127.0.0.1:3001 tcp TIME-WAIT 0 0 127.0.0.1:49782 127.0.0.1:3000 tcp TIME-WAIT 0 0 127.0.0.1:60094 127.0.0.1:5300 tcp TIME-WAIT 0 0 127.0.0.1:59300 127.0.0.1:3003 tcp TIME-WAIT 0 0 127.0.0.1:60092 127.0.0.1:5300 tcp TIME-WAIT 0 0 127.0.0.1:5580 127.0.0.1:51100 tcp TIME-WAIT 0 0 127.0.0.1:56818 127.0.0.1:8282 tcp TIME-WAIT 0 0 217.160.192.96:443 217.160.192.96:42560 tcp TIME-WAIT 0 0 127.0.0.1:8300 127.0.0.1:39264 tcp TIME-WAIT 0 0 127.0.0.1:34786 127.0.0.1:8300 tcp ESTAB 0 0 127.0.0.1:6379 127.0.0.1:48584 users:(("redis-server",pid=1092,fd=10)) tcp TIME-WAIT 0 0 127.0.0.1:48736 127.0.0.1:9090 tcp TIME-WAIT 0 0 127.0.0.1:51364 127.0.0.1:8652 tcp TIME-WAIT 0 0 217.160.192.96:443 217.160.192.96:60214 tcp CLOSE-WAIT 25 0 217.160.192.96:43386 3.173.21.63:443 users:(("python",pid=989,fd=27)) tcp TIME-WAIT 0 0 217.160.192.96:443 217.160.192.96:41412 tcp TIME-WAIT 0 0 100.94.9.37:34470 100.127.229.57:5000 tcp TIME-WAIT 0 0 127.0.0.1:52610 127.0.0.1:8300 tcp TIME-WAIT 0 0 127.0.0.1:37804 127.0.0.1:3000 tcp TIME-WAIT 0 0 217.160.192.96:443 217.160.192.96:38952 tcp TIME-WAIT 0 0 127.0.0.1:60084 127.0.0.1:8283 tcp TIME-WAIT 0 0 127.0.0.1:40048 127.0.0.1:8080 tcp TIME-WAIT 0 0 127.0.0.1:58732 127.0.0.1:9000 tcp ESTAB 0 0 127.0.0.1:56426 127.0.0.1:5432 users:(("listmonk",pid=2899,fd=6)) tcp TIME-WAIT 0 0 127.0.0.1:5580 127.0.0.1:52778 tcp TIME-WAIT 0 0 127.0.0.1:54584 127.0.0.1:5100 tcp TIME-WAIT 0 0 127.0.0.1:52280 127.0.0.1:5096 tcp TIME-WAIT 0 0 127.0.0.1:60092 127.0.0.1:8283 tcp ESTAB 0 0 217.160.192.96:48566 192.200.0.114:443 users:(("tailscaled",pid=1097,fd=20)) tcp TIME-WAIT 0 0 127.0.0.1:41386 127.0.0.1:8400 tcp ESTAB 0 0 217.160.192.96:57148 185.40.234.176:443 users:(("tailscaled",pid=1097,fd=36)) tcp TIME-WAIT 0 0 127.0.0.1:39238 127.0.0.1:8300 tcp TIME-WAIT 0 0 127.0.0.1:5092 127.0.0.1:51650 tcp ESTAB 0 0 127.0.0.1:48568 127.0.0.1:6379 users:(("livekit-server",pid=1308,fd=6)) tcp ESTAB 0 0 127.0.0.1:58368 127.0.0.1:5432 users:(("MainThread",pid=831010,fd=29)) tcp TIME-WAIT 0 0 127.0.0.1:5580 127.0.0.1:51112 tcp TIME-WAIT 0 0 127.0.0.1:34782 127.0.0.1:8300 tcp TIME-WAIT 0 0 127.0.0.1:60232 127.0.0.1:8443 tcp ESTAB 0 0 217.160.192.96:44606 149.154.166.110:443 users:(("python",pid=989,fd=83)) tcp ESTAB 0 0 127.0.0.1:6379 127.0.0.1:48568 users:(("redis-server",pid=1092,fd=9)) tcp TIME-WAIT 0 0 127.0.0.1:40038 127.0.0.1:8080 tcp ESTAB 0 0 217.160.192.96:46948 176.58.90.104:443 users:(("tailscaled",pid=1097,fd=29)) tcp TIME-WAIT 0 0 217.160.192.96:443 216.73.216.251:36817 tcp ESTAB 0 0 127.0.0.1:38214 127.0.0.1:6379 users:(("livekit-server",pid=1308,fd=3)) tcp ESTAB 0 0 217.160.192.96:443 62.23.86.94:50620 users:(("nginx",pid=520620,fd=15)) tcp TIME-WAIT 0 0 127.0.0.1:58120 127.0.0.1:8650 tcp TIME-WAIT 0 0 127.0.0.1:51622 127.0.0.1:8300 tcp TIME-WAIT 0 0 127.0.0.1:39156 127.0.0.1:8651 tcp TIME-WAIT 0 0 127.0.0.1:54570 127.0.0.1:5100 tcp TIME-WAIT 0 0 127.0.0.1:51370 127.0.0.1:8652 tcp TIME-WAIT 0 0 217.160.192.96:443 217.160.192.96:46078 tcp TIME-WAIT 0 0 127.0.0.1:5091 127.0.0.1:54928 tcp TIME-WAIT 0 0 127.0.0.1:48334 127.0.0.1:8660 tcp ESTAB 0 0 127.0.0.1:6379 127.0.0.1:38214 users:(("redis-server",pid=1092,fd=8)) tcp TIME-WAIT 0 0 217.160.192.96:443 217.160.192.96:38876 tcp CLOSE-WAIT 25 0 217.160.192.96:40330 99.86.253.81:443 users:(("python",pid=1099,fd=4)) tcp ESTAB 0 0 127.0.0.1:5432 127.0.0.1:56426 users:(("postgres",pid=830268,fd=9)) tcp TIME-WAIT 0 0 127.0.0.1:51610 127.0.0.1:8300 tcp ESTAB 0 0 127.0.0.1:48584 127.0.0.1:6379 users:(("pmproxy",pid=1530,fd=17)) tcp ESTAB 0 0 127.0.0.1:5432 127.0.0.1:58368 users:(("postgres",pid=831032,fd=9)) tcp TIME-WAIT 0 0 127.0.0.1:39248 127.0.0.1:8300 tcp ESTAB 0 0 127.0.0.1:5432 127.0.0.1:58378 users:(("postgres",pid=831033,fd=9)) tcp TIME-WAIT 0 0 127.0.0.1:60216 127.0.0.1:8443 tcp TIME-WAIT 0 0 127.0.0.1:52622 127.0.0.1:8300 tcp TIME-WAIT 0 0 127.0.0.1:54880 127.0.0.1:8300 tcp ESTAB 0 0 127.0.0.1:58378 127.0.0.1:5432 users:(("MainThread",pid=831010,fd=30)) tcp LISTEN 0 511 [::]:443 [::]:* users:(("nginx",pid=520624,fd=65),("nginx",pid=520623,fd=65),("nginx",pid=520622,fd=65),("nginx",pid=520621,fd=65),("nginx",pid=520620,fd=65),("nginx",pid=520619,fd=65),("nginx",pid=2014,fd=65)) tcp LISTEN 0 70 *:33060 *:* users:(("mysqld",pid=1363068,fd=18)) tcp LISTEN 0 4096 [::]:4369 [::]:* users:(("epmd",pid=3935,fd=4)) tcp LISTEN 0 511 [::]:8443 [::]:* users:(("nginx",pid=1135,fd=7),("nginx",pid=1127,fd=7),("nginx",pid=1126,fd=7),("nginx",pid=1125,fd=7),("nginx",pid=1124,fd=7),("nginx",pid=1123,fd=7),("nginx",pid=1118,fd=7)) tcp LISTEN 0 511 [::]:80 [::]:* users:(("nginx",pid=520624,fd=63),("nginx",pid=520623,fd=63),("nginx",pid=520622,fd=63),("nginx",pid=520621,fd=63),("nginx",pid=520620,fd=63),("nginx",pid=520619,fd=63),("nginx",pid=2014,fd=63)) tcp LISTEN 0 100 [::]:25 [::]:* users:(("master",pid=2686,fd=14)) tcp LISTEN 0 4096 [::]:22 [::]:* users:(("sshd",pid=5293,fd=4),("systemd",pid=1,fd=460)) tcp LISTEN 0 64 [::1]:5060 [::]:* users:(("freeswitch",pid=3936,fd=30)) tcp LISTEN 0 4096 *:9090 *:* users:(("cockpit-tls",pid=988096,fd=3),("systemd",pid=1,fd=307)) tcp LISTEN 0 5 [::]:44321 [::]:* users:(("pmcd",pid=1481,fd=3)) tcp LISTEN 0 128 [::]:44323 [::]:* users:(("pmproxy",pid=1530,fd=16)) tcp LISTEN 0 128 [::]:44322 [::]:* users:(("pmproxy",pid=1530,fd=14)) tcp LISTEN 0 4096 [::1]:8082 [::]:* users:(("freeswitch",pid=3936,fd=44)) tcp LISTEN 0 4096 [::1]:8081 [::]:* users:(("freeswitch",pid=3936,fd=43)) tcp LISTEN 0 511 [::]:8080 [::]:* users:(("nginx",pid=520624,fd=69),("nginx",pid=520623,fd=69),("nginx",pid=520622,fd=69),("nginx",pid=520621,fd=69),("nginx",pid=520620,fd=69),("nginx",pid=520619,fd=69),("nginx",pid=2014,fd=69)) tcp LISTEN 0 5 *:8021 *:* users:(("freeswitch",pid=3936,fd=67)) tcp LISTEN 0 4096 *:7881 *:* users:(("livekit-server",pid=1308,fd=7)) tcp LISTEN 0 4096 [fd7a:115c:a1e0::2c38:926]:54158 [::]:* users:(("tailscaled",pid=1097,fd=27)) tcp LISTEN 0 511 [::1]:6379 [::]:* users:(("redis-server",pid=1092,fd=7)) tcp LISTEN 0 1024 [::1]:11211 [::]:* users:(("memcached",pid=1083,fd=27)) tcp LISTEN 0 511 *:3001 *:* users:(("uptime-kuma",pid=2677815,fd=24)) tcp LISTEN 0 511 *:3002 *:* users:(("next-server (v1",pid=2278,fd=21)) tcp LISTEN 0 511 [::1]:3000 [::]:* users:(("node",pid=2799,fd=22)) [C.4] DNS (résolveurs configurés) # This is /run/systemd/resolve/stub-resolv.conf managed by man:systemd-resolved(8). # Do not edit. # # This file might be symlinked as /etc/resolv.conf. If you're looking at # /etc/resolv.conf and seeing this text, you have followed the symlink. # # This is a dynamic resolv.conf file for connecting local clients to the # internal DNS stub resolver of systemd-resolved. This file lists all # configured search domains. # # Run "resolvectl status" to see details about the uplink DNS servers # currently in use. # # Third party programs should typically not access this file directly, but only # through the symlink at /etc/resolv.conf. To manage man:resolv.conf(5) in a # different way, replace this symlink by a static file or a different symlink. # # See man:systemd-resolved.service(8) for details about the supported modes of # operation for /etc/resolv.conf. nameserver 127.0.0.53 options edns0 trust-ad search taile8443b.ts.net [C.5] ARP cache (observation passive) Address HWtype HWaddress Flags Mask Iface 217.160.192.1 ether 82:01:cc:ae:b2:5c C ens6 ================================================================================ SECTION D : SERVICES & PROCESSUS (lecture seule) ================================================================================ [D.1] Processus en cours d'exécution USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 2 0.0 0.0 0 0 ? S Jul03 0:00 [kthreadd] root 3 0.0 0.0 0 0 ? S Jul03 0:00 \_ [pool_workqueue_release] root 4 0.0 0.0 0 0 ? I< Jul03 0:00 \_ [kworker/R-rcu_g] root 5 0.0 0.0 0 0 ? I< Jul03 0:00 \_ [kworker/R-rcu_p] root 6 0.0 0.0 0 0 ? I< Jul03 0:00 \_ [kworker/R-slub_] root 7 0.0 0.0 0 0 ? I< Jul03 0:00 \_ [kworker/R-netns] root 10 0.0 0.0 0 0 ? I< Jul03 0:00 \_ [kworker/0:0H-events_highpri] root 12 0.0 0.0 0 0 ? I< Jul03 0:00 \_ [kworker/R-mm_pe] root 13 0.0 0.0 0 0 ? I Jul03 0:00 \_ [rcu_tasks_kthread] root 14 0.0 0.0 0 0 ? I Jul03 0:00 \_ [rcu_tasks_rude_kthread] root 15 0.0 0.0 0 0 ? I Jul03 0:00 \_ [rcu_tasks_trace_kthread] root 16 0.0 0.0 0 0 ? S Jul03 0:17 \_ [ksoftirqd/0] root 17 0.0 0.0 0 0 ? I Jul03 7:06 \_ [rcu_preempt] root 18 0.0 0.0 0 0 ? S Jul03 0:02 \_ [migration/0] root 19 0.0 0.0 0 0 ? S Jul03 0:00 \_ [idle_inject/0] root 20 0.0 0.0 0 0 ? S Jul03 0:00 \_ [cpuhp/0] root 21 0.0 0.0 0 0 ? S Jul03 0:00 \_ [cpuhp/2] root 22 0.0 0.0 0 0 ? S Jul03 0:00 \_ [idle_inject/2] root 23 0.0 0.0 0 0 ? S Jul03 0:02 \_ [migration/2] root 24 0.0 0.0 0 0 ? S Jul03 0:12 \_ [ksoftirqd/2] root 26 0.0 0.0 0 0 ? I< Jul03 0:00 \_ [kworker/2:0H-events_highpri] root 27 0.0 0.0 0 0 ? S Jul03 0:00 \_ [cpuhp/4] root 28 0.0 0.0 0 0 ? S Jul03 0:00 \_ [idle_inject/4] root 29 0.0 0.0 0 0 ? S Jul03 0:02 \_ [migration/4] root 30 0.0 0.0 0 0 ? S Jul03 0:12 \_ [ksoftirqd/4] root 32 0.0 0.0 0 0 ? I< Jul03 0:00 \_ [kworker/4:0H-events_highpri] root 33 0.0 0.0 0 0 ? S Jul03 0:00 \_ [cpuhp/1] root 34 0.0 0.0 0 0 ? S Jul03 0:00 \_ [idle_inject/1] root 35 0.0 0.0 0 0 ? S Jul03 0:02 \_ [migration/1] root 36 0.0 0.0 0 0 ? S Jul03 0:13 \_ [ksoftirqd/1] root 38 0.0 0.0 0 0 ? I< Jul03 0:00 \_ [kworker/1:0H-events_highpri] root 39 0.0 0.0 0 0 ? S Jul03 0:00 \_ [cpuhp/3] root 40 0.0 0.0 0 0 ? S Jul03 0:00 \_ [idle_inject/3] root 41 0.0 0.0 0 0 ? S Jul03 0:02 \_ [migration/3] root 42 0.0 0.0 0 0 ? S Jul03 0:10 \_ [ksoftirqd/3] root 44 0.0 0.0 0 0 ? I< Jul03 0:00 \_ [kworker/3:0H-events_highpri] root 45 0.0 0.0 0 0 ? S Jul03 0:00 \_ [cpuhp/5] root 46 0.0 0.0 0 0 ? S Jul03 0:00 \_ [idle_inject/5] root 47 0.0 0.0 0 0 ? S Jul03 0:02 \_ [migration/5] [D.2] Services systemd actifs UNIT LOAD ACTIVE SUB DESCRIPTION 08-services.service loaded active running 08.Services Flask App 0data-blog.service loaded active running 0DATA Blog Server agents-command-center.service loaded active running 0DATA Agent Command Center avahi-daemon.service loaded active running Avahi mDNS/DNS-SD Stack bo-08.service loaded active running 08 Platform - Back Office chrony.service loaded active running chrony, an NTP client/server clp-agent.service loaded active running clp-agent clp-nginx.service loaded active running A high performance web server and a reverse proxy server clp-php-fpm.service loaded active running The CLP PHP 8.1 FastCGI Process Manager cockpit-wsinstance-https@e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855.service loaded active running Cockpit Web Service https instance e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 cockpit.service loaded active running Cockpit Web Service command-center.service loaded active running 08 Command Center containerd.service loaded active running containerd container runtime cron.service loaded active running Regular background program processing daemon dbus.service loaded active running D-Bus System Message Bus devis-app.service loaded active running 08.Devis - Chatbot devis intelligent docker.service loaded active running Docker Application Container Engine enroll-api.service loaded active running NOVA Enrollment API fail2ban.service loaded active running Fail2Ban Service forge-app.service loaded active running 0DATA Forge — Next.js Application (standalone) freeswitch-zero.service loaded active running FreeSWITCH ZERO Telecom galaxy-visio-token.service loaded active running Galaxy Visio Token API — LiveKit galaxy.service loaded active running 0DATA Galaxy — WebSocket Hub getty@tty1.service loaded active running Getty on tty1 hermes-voice.service loaded active running Hermes Voice Chat — 0DATA hermes-workspace.service loaded active running Hermes Workspace homepage.service loaded active running Homepage Dashboard 08.ma kenza-dashboard.service loaded active running Kenza Dashboard - k.08.ma kod-pool.service loaded active running KOD QUANTUM Pool API v2 ================================================================================ SECTION E : UTILISATEURS & SESSIONS (lecture seule) ================================================================================ [E.1] Utilisateurs connectés 21:45:31 up 8 days, 6:37, 0 user, load average: 0.20, 0.24, 0.26 USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT [E.2] Dernières connexions wtmp begins Fri Jul 10 23:58:02 2026 [E.3] Utilisateurs système (liste) root daemon bin sys sync games man lp mail news uucp proxy www-data backup list irc _apt nobody systemd-network systemd-timesync dhcpcd messagebus syslog systemd-resolve uuidd tss sshd pollinate tcpdump landscape fwupd-refresh polkitd _chrony redis postfix mysql clp memcache proftpd ftp varnish vcache varnishlog admin08-a admin08-d admin08-c admin08-k r2d2 admin08-h admin08-b admin08b admin0data adminodata admin08 ollama node_exporter dnsmasq cockpit-ws cockpit-wsinstance pcp admin postgres avahi geoclue ================================================================================ SECTION F : LOGS & AUDIT (lecture seule) ================================================================================ [F.1] Derniers logs kernel (dmesg) [Sat Jul 11 18:45:45 2026] [UFW BLOCK] IN=ens6 OUT= MAC=02:01:cc:ae:b2:5c:82:01:cc:ae:b2:5c:08:00 SRC=162.217.100.196 DST=217.160.192.96 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=54321 PROTO=TCP SPT=54670 DPT=8443 WINDOW=65535 RES=0x00 SYN URGP=0 [Sat Jul 11 18:51:29 2026] [UFW BLOCK] IN=ens6 OUT= MAC=02:01:cc:ae:b2:5c:82:01:cc:ae:b2:5c:08:00 SRC=176.65.144.44 DST=217.160.192.96 LEN=44 TOS=0x00 PREC=0x00 TTL=247 ID=11457 PROTO=TCP SPT=53180 DPT=8443 WINDOW=1025 RES=0x00 SYN URGP=0 [Sat Jul 11 19:02:25 2026] [UFW BLOCK] IN=ens6 OUT= MAC=02:01:cc:ae:b2:5c:82:01:cc:ae:b2:5c:08:00 SRC=151.243.11.232 DST=217.160.192.96 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=54321 PROTO=TCP SPT=55370 DPT=8443 WINDOW=65535 RES=0x00 SYN URGP=0 [Sat Jul 11 19:41:45 2026] [UFW BLOCK] IN=ens6 OUT= MAC=02:01:cc:ae:b2:5c:82:01:cc:ae:b2:5c:08:00 SRC=45.198.224.244 DST=217.160.192.96 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=54321 PROTO=TCP SPT=60950 DPT=8443 WINDOW=65535 RES=0x00 SYN URGP=0 [Sat Jul 11 20:03:24 2026] [UFW BLOCK] IN=ens6 OUT= MAC=02:01:cc:ae:b2:5c:82:01:cc:ae:b2:5c:08:00 SRC=156.225.1.10 DST=217.160.192.96 LEN=44 TOS=0x00 PREC=0x00 TTL=240 ID=26108 PROTO=TCP SPT=58914 DPT=8443 WINDOW=1024 RES=0x00 SYN URGP=0 [Sat Jul 11 20:05:58 2026] [UFW BLOCK] IN=ens6 OUT= MAC=02:01:cc:ae:b2:5c:82:01:cc:ae:b2:5c:08:00 SRC=66.132.195.37 DST=217.160.192.96 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=515 DF PROTO=TCP SPT=20146 DPT=8443 WINDOW=21900 RES=0x00 SYN URGP=0 [Sat Jul 11 20:05:59 2026] [UFW BLOCK] IN=ens6 OUT= MAC=02:01:cc:ae:b2:5c:82:01:cc:ae:b2:5c:08:00 SRC=66.132.195.37 DST=217.160.192.96 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=516 DF PROTO=TCP SPT=20146 DPT=8443 WINDOW=21900 RES=0x00 SYN URGP=0 [Sat Jul 11 20:06:01 2026] [UFW BLOCK] IN=ens6 OUT= MAC=02:01:cc:ae:b2:5c:82:01:cc:ae:b2:5c:08:00 SRC=66.132.195.37 DST=217.160.192.96 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=517 DF PROTO=TCP SPT=20146 DPT=8443 WINDOW=21900 RES=0x00 SYN URGP=0 [Sat Jul 11 20:06:05 2026] [UFW BLOCK] IN=ens6 OUT= MAC=02:01:cc:ae:b2:5c:82:01:cc:ae:b2:5c:08:00 SRC=66.132.195.37 DST=217.160.192.96 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=518 DF PROTO=TCP SPT=20146 DPT=8443 WINDOW=21900 RES=0x00 SYN URGP=0 [Sat Jul 11 20:06:14 2026] [UFW BLOCK] IN=ens6 OUT= MAC=02:01:cc:ae:b2:5c:82:01:cc:ae:b2:5c:08:00 SRC=66.132.195.37 DST=217.160.192.96 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=55539 DF PROTO=TCP SPT=59428 DPT=8443 WINDOW=21900 RES=0x00 SYN URGP=0 [Sat Jul 11 20:06:15 2026] [UFW BLOCK] IN=ens6 OUT= MAC=02:01:cc:ae:b2:5c:82:01:cc:ae:b2:5c:08:00 SRC=66.132.195.37 DST=217.160.192.96 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=55540 DF PROTO=TCP SPT=59428 DPT=8443 WINDOW=21900 RES=0x00 SYN URGP=0 [Sat Jul 11 20:06:17 2026] [UFW BLOCK] IN=ens6 OUT= MAC=02:01:cc:ae:b2:5c:82:01:cc:ae:b2:5c:08:00 SRC=66.132.195.37 DST=217.160.192.96 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=55541 DF PROTO=TCP SPT=59428 DPT=8443 WINDOW=21900 RES=0x00 SYN URGP=0 [Sat Jul 11 20:06:21 2026] [UFW BLOCK] IN=ens6 OUT= MAC=02:01:cc:ae:b2:5c:82:01:cc:ae:b2:5c:08:00 SRC=66.132.195.37 DST=217.160.192.96 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=55542 DF PROTO=TCP SPT=59428 DPT=8443 WINDOW=21900 RES=0x00 SYN URGP=0 [Sat Jul 11 20:06:33 2026] [UFW BLOCK] IN=ens6 OUT= MAC=02:01:cc:ae:b2:5c:82:01:cc:ae:b2:5c:08:00 SRC=66.132.195.37 DST=217.160.192.96 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=34334 DF PROTO=TCP SPT=51814 DPT=8443 WINDOW=21900 RES=0x00 SYN URGP=0 [Sat Jul 11 20:06:34 2026] [UFW BLOCK] IN=ens6 OUT= MAC=02:01:cc:ae:b2:5c:82:01:cc:ae:b2:5c:08:00 SRC=66.132.195.37 DST=217.160.192.96 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=34335 DF PROTO=TCP SPT=51814 DPT=8443 WINDOW=21900 RES=0x00 SYN URGP=0 [Sat Jul 11 20:06:36 2026] [UFW BLOCK] IN=ens6 OUT= MAC=02:01:cc:ae:b2:5c:82:01:cc:ae:b2:5c:08:00 SRC=66.132.195.37 DST=217.160.192.96 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=34336 DF PROTO=TCP SPT=51814 DPT=8443 WINDOW=21900 RES=0x00 SYN URGP=0 [Sat Jul 11 20:06:40 2026] [UFW BLOCK] IN=ens6 OUT= MAC=02:01:cc:ae:b2:5c:82:01:cc:ae:b2:5c:08:00 SRC=66.132.195.37 DST=217.160.192.96 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=34337 DF PROTO=TCP SPT=51814 DPT=8443 WINDOW=21900 RES=0x00 SYN URGP=0 [Sat Jul 11 20:07:08 2026] [UFW BLOCK] IN=ens6 OUT= MAC=02:01:cc:ae:b2:5c:82:01:cc:ae:b2:5c:08:00 SRC=66.132.195.37 DST=217.160.192.96 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=42638 DF PROTO=TCP SPT=34362 DPT=8443 WINDOW=21900 RES=0x00 SYN URGP=0 [Sat Jul 11 20:07:24 2026] [UFW BLOCK] IN=ens6 OUT= MAC=02:01:cc:ae:b2:5c:82:01:cc:ae:b2:5c:08:00 SRC=66.132.195.37 DST=217.160.192.96 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=42642 DF PROTO=TCP SPT=34362 DPT=8443 WINDOW=21900 RES=0x00 SYN URGP=0 [Sat Jul 11 20:07:47 2026] [UFW BLOCK] IN=ens6 OUT= MAC=02:01:cc:ae:b2:5c:82:01:cc:ae:b2:5c:08:00 SRC=66.132.195.37 DST=217.160.192.96 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=21003 DF PROTO=TCP SPT=28272 DPT=8443 WINDOW=21900 RES=0x00 SYN URGP=0 [Sat Jul 11 20:26:46 2026] [UFW BLOCK] IN=ens6 OUT= MAC=02:01:cc:ae:b2:5c:82:01:cc:ae:b2:5c:08:00 SRC=62.60.211.145 DST=217.160.192.96 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=33688 DF PROTO=TCP SPT=36622 DPT=8443 WINDOW=27200 RES=0x00 SYN URGP=0 [Sat Jul 11 20:44:09 2026] [UFW BLOCK] IN=ens6 OUT= MAC=02:01:cc:ae:b2:5c:82:01:cc:ae:b2:5c:08:00 SRC=34.34.103.195 DST=217.160.192.96 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=62865 PROTO=TCP SPT=42652 DPT=8443 WINDOW=1024 RES=0x00 SYN URGP=0 [Sat Jul 11 20:45:52 2026] [UFW BLOCK] IN=ens6 OUT= MAC=02:01:cc:ae:b2:5c:82:01:cc:ae:b2:5c:08:00 SRC=198.235.24.169 DST=217.160.192.96 LEN=44 TOS=0x00 PREC=0x00 TTL=248 ID=38639 PROTO=TCP SPT=49563 DPT=8443 WINDOW=1024 RES=0x00 SYN URGP=0 [Sat Jul 11 20:59:35 2026] [UFW BLOCK] IN=ens6 OUT= MAC=02:01:cc:ae:b2:5c:82:01:cc:ae:b2:5c:08:00 SRC=172.202.118.18 DST=217.160.192.96 LEN=52 TOS=0x00 PREC=0x00 TTL=42 ID=15075 PROTO=TCP SPT=60212 DPT=8443 WINDOW=65535 RES=0x00 SYN URGP=0 [Sat Jul 11 21:04:50 2026] [UFW BLOCK] IN=ens6 OUT= MAC=02:01:cc:ae:b2:5c:82:01:cc:ae:b2:5c:08:00 SRC=162.144.250.188 DST=217.160.192.96 LEN=52 TOS=0x00 PREC=0x00 TTL=54 ID=55910 DF PROTO=TCP SPT=50420 DPT=80 WINDOW=115 RES=0x00 ACK FIN URGP=0 [Sat Jul 11 21:04:50 2026] [UFW BLOCK] IN=ens6 OUT= MAC=02:01:cc:ae:b2:5c:82:01:cc:ae:b2:5c:08:00 SRC=162.144.250.188 DST=217.160.192.96 LEN=52 TOS=0x00 PREC=0x00 TTL=54 ID=3994 DF PROTO=TCP SPT=44300 DPT=443 WINDOW=115 RES=0x00 ACK FIN URGP=0 [Sat Jul 11 21:05:01 2026] [UFW BLOCK] IN=ens6 OUT= MAC=02:01:cc:ae:b2:5c:82:01:cc:ae:b2:5c:08:00 SRC=162.144.250.188 DST=217.160.192.96 LEN=52 TOS=0x00 PREC=0x00 TTL=54 ID=55911 DF PROTO=TCP SPT=50420 DPT=80 WINDOW=115 RES=0x00 ACK FIN URGP=0 [Sat Jul 11 21:05:25 2026] [UFW BLOCK] IN=ens6 OUT= MAC=02:01:cc:ae:b2:5c:82:01:cc:ae:b2:5c:08:00 SRC=162.144.250.188 DST=217.160.192.96 LEN=52 TOS=0x00 PREC=0x00 TTL=54 ID=3996 DF PROTO=TCP SPT=44300 DPT=443 WINDOW=115 RES=0x00 ACK FIN URGP=0 [Sat Jul 11 21:07:49 2026] [UFW BLOCK] IN=ens6 OUT= MAC=02:01:cc:ae:b2:5c:82:01:cc:ae:b2:5c:08:00 SRC=80.87.206.19 DST=217.160.192.96 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=51284 PROTO=TCP SPT=45476 DPT=8443 WINDOW=1024 RES=0x00 SYN URGP=0 [Sat Jul 11 21:20:54 2026] [UFW BLOCK] IN=ens6 OUT= MAC=02:01:cc:ae:b2:5c:82:01:cc:ae:b2:5c:08:00 SRC=62.60.211.145 DST=217.160.192.96 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=19715 DF PROTO=TCP SPT=51326 DPT=8443 WINDOW=27200 RES=0x00 SYN URGP=0 [F.2] Dernières erreurs journalctl Jul 11 09:45:46 odata sshd[598948]: error: kex_protocol_error: type 20 seq 4 [preauth] Jul 11 09:45:46 odata sshd[598948]: error: kex_protocol_error: type 30 seq 5 [preauth] Jul 11 09:45:48 odata sshd[598948]: error: kex_protocol_error: type 20 seq 6 [preauth] Jul 11 09:45:48 odata sshd[598948]: error: kex_protocol_error: type 30 seq 7 [preauth] Jul 11 15:24:04 odata sshd[700855]: error: kex_exchange_identification: read: Connection reset by peer Jul 11 16:59:26 odata sshd[729955]: error: kex_protocol_error: type 20 seq 2 [preauth] Jul 11 16:59:26 odata sshd[729955]: error: kex_protocol_error: type 30 seq 3 [preauth] Jul 11 16:59:27 odata sshd[729955]: error: kex_protocol_error: type 20 seq 4 [preauth] Jul 11 16:59:27 odata sshd[729955]: error: kex_protocol_error: type 30 seq 5 [preauth] Jul 11 16:59:29 odata sshd[729955]: error: kex_protocol_error: type 20 seq 6 [preauth] Jul 11 16:59:29 odata sshd[729955]: error: kex_protocol_error: type 30 seq 7 [preauth] Jul 11 17:06:20 odata sshd[731826]: error: kex_exchange_identification: read: Connection reset by peer Jul 11 17:06:33 odata sshd[731865]: fatal: userauth_pubkey: parse publickey packet: incomplete message [preauth] Jul 11 17:22:18 odata systemd[1]: Failed to start motd-news.service - Message of the Day. Jul 11 18:41:04 odata sshd[761486]: error: kex_exchange_identification: read: Connection reset by peer Jul 11 19:37:31 odata sshd[781168]: error: kex_exchange_identification: read: Connection reset by peer Jul 11 19:50:44 odata sshd[787416]: error: kex_exchange_identification: read: Connection reset by peer Jul 11 20:38:54 odata sshd[805458]: error: kex_exchange_identification: read: Connection reset by peer Jul 11 21:28:39 odata sshd[823557]: error: kex_exchange_identification: read: Connection reset by peer Jul 11 21:28:40 odata sshd[823558]: error: kex_exchange_identification: read: Connection reset by peer ================================================================================ SECTION G : SÉCURITÉ — ÉTAT PASSIF (lecture seule) ================================================================================ [G.1] Firewall iptables (lecture seule) Chain INPUT (policy DROP 2427 packets, 138K bytes) pkts bytes target prot opt in out source destination 114M 73G ts-input 0 -- * * 0.0.0.0/0 0.0.0.0/0 112M 73G ufw-before-logging-input 0 -- * * 0.0.0.0/0 0.0.0.0/0 112M 73G ufw-before-input 0 -- * * 0.0.0.0/0 0.0.0.0/0 2913 170K ufw-after-input 0 -- * * 0.0.0.0/0 0.0.0.0/0 2913 170K ufw-after-logging-input 0 -- * * 0.0.0.0/0 0.0.0.0/0 2913 170K ufw-reject-input 0 -- * * 0.0.0.0/0 0.0.0.0/0 2913 170K ufw-track-input 0 -- * * 0.0.0.0/0 0.0.0.0/0 0 0 DROP 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:8300 Chain FORWARD (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 DOCKER-USER 0 -- * * 0.0.0.0/0 0.0.0.0/0 0 0 DOCKER-FORWARD 0 -- * * 0.0.0.0/0 0.0.0.0/0 0 0 ts-forward 0 -- * * 0.0.0.0/0 0.0.0.0/0 0 0 ufw-before-logging-forward 0 -- * * 0.0.0.0/0 0.0.0.0/0 0 0 ufw-before-forward 0 -- * * 0.0.0.0/0 0.0.0.0/0 0 0 ufw-after-forward 0 -- * * 0.0.0.0/0 0.0.0.0/0 0 0 ufw-after-logging-forward 0 -- * * 0.0.0.0/0 0.0.0.0/0 0 0 ufw-reject-forward 0 -- * * 0.0.0.0/0 0.0.0.0/0 0 0 ufw-track-forward 0 -- * * 0.0.0.0/0 0.0.0.0/0 Chain OUTPUT (policy ACCEPT 4331 packets, 235K bytes) pkts bytes target prot opt in out source destination 116M 54G ufw-before-logging-output 0 -- * * 0.0.0.0/0 0.0.0.0/0 116M 54G ufw-before-output 0 -- * * 0.0.0.0/0 0.0.0.0/0 11M 906M ufw-after-output 0 -- * * 0.0.0.0/0 0.0.0.0/0 11M 906M ufw-after-logging-output 0 -- * * 0.0.0.0/0 0.0.0.0/0 11M 906M ufw-reject-output 0 -- * * 0.0.0.0/0 0.0.0.0/0 11M 906M ufw-track-output 0 -- * * 0.0.0.0/0 0.0.0.0/0 Chain DOCKER (1 references) pkts bytes target prot opt in out source destination 0 0 DROP 0 -- !docker0 docker0 0.0.0.0/0 0.0.0.0/0 Chain DOCKER-BRIDGE (1 references) pkts bytes target prot opt in out source destination 0 0 DOCKER 0 -- * docker0 0.0.0.0/0 0.0.0.0/0 Chain DOCKER-CT (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT 0 -- * docker0 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED Chain DOCKER-FORWARD (1 references) pkts bytes target prot opt in out source destination 0 0 DOCKER-CT 0 -- * * 0.0.0.0/0 0.0.0.0/0 0 0 DOCKER-INTERNAL 0 -- * * 0.0.0.0/0 0.0.0.0/0 0 0 DOCKER-BRIDGE 0 -- * * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT 0 -- docker0 * 0.0.0.0/0 0.0.0.0/0 Chain DOCKER-INTERNAL (1 references) pkts bytes target prot opt in out source destination Chain DOCKER-USER (1 references) pkts bytes target prot opt in out source destination Chain ts-forward (1 references) pkts bytes target prot opt in out source destination 0 0 MARK 0 -- tailscale0 * 0.0.0.0/0 0.0.0.0/0 MARK xset 0x40000/0xff0000 0 0 ACCEPT 0 -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x40000/0xff0000 0 0 DROP 0 -- * tailscale0 100.64.0.0/10 0.0.0.0/0 0 0 ACCEPT 0 -- * tailscale0 0.0.0.0/0 0.0.0.0/0 Chain ts-input (1 references) pkts bytes target prot opt in out source destination 14 6226 ACCEPT 0 -- lo * 100.94.9.37 0.0.0.0/0 1861K 290M ACCEPT 0 -- tailscale0 * 0.0.0.0/0 0.0.0.0/0 229K 26M ACCEPT 17 -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:41641 0 0 RETURN 0 -- !tailscale0 * 100.115.92.0/23 0.0.0.0/0 0 0 DROP 0 -- !tailscale0 * 100.64.0.0/10 0.0.0.0/0 Chain ufw-after-forward (1 references) pkts bytes target prot opt in out source destination Chain ufw-after-input (1 references) pkts bytes target prot opt in out source destination 0 0 ufw-skip-to-policy-input 17 -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:137 0 0 ufw-skip-to-policy-input 17 -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:138 0 0 ufw-skip-to-policy-input 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:139 0 0 ufw-skip-to-policy-input 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:445 0 0 ufw-skip-to-policy-input 17 -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:67 0 0 ufw-skip-to-policy-input 17 -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:68 0 0 ufw-skip-to-policy-input 0 -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type BROADCAST Chain ufw-after-logging-forward (1 references) pkts bytes target prot opt in out source destination 0 0 LOG 0 -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 3/min burst 10 LOG flags 0 level 4 prefix "[UFW BLOCK] " Chain ufw-after-logging-input (1 references) pkts bytes target prot opt in out source destination 1536 84320 LOG 0 -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 3/min burst 10 LOG flags 0 level 4 prefix "[UFW BLOCK] " Chain ufw-after-logging-output (1 references) pkts bytes target prot opt in out source destination Chain ufw-after-output (1 references) pkts bytes target prot opt in out source destination Chain ufw-before-forward (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT 0 -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED 0 0 ACCEPT 1 -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 3 0 0 ACCEPT 1 -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 11 0 0 ACCEPT 1 -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 12 0 0 ACCEPT 1 -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 8 0 0 ufw-user-forward 0 -- * * 0.0.0.0/0 0.0.0.0/0 Chain ufw-before-input (1 references) pkts bytes target prot opt in out source destination 82M 43G ACCEPT 0 -- lo * 0.0.0.0/0 0.0.0.0/0 23M 26G ACCEPT 0 -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED 961 52596 ufw-logging-deny 0 -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID 961 52596 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID 0 0 ACCEPT 1 -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 3 0 0 ACCEPT 1 -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 11 0 0 ACCEPT 1 -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 12 0 0 ACCEPT 1 -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 8 0 0 ACCEPT 17 -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:67 dpt:68 62798 3622K ufw-not-local 0 -- * * 0.0.0.0/0 0.0.0.0/0 235 40247 ACCEPT 17 -- * * 0.0.0.0/0 224.0.0.251 udp dpt:5353 0 0 ACCEPT 17 -- * * 0.0.0.0/0 239.255.255.250 udp dpt:1900 62563 3581K ufw-user-input 0 -- * * 0.0.0.0/0 0.0.0.0/0 Chain ufw-before-logging-forward (1 references) pkts bytes target prot opt in out source destination Chain ufw-before-logging-input (1 references) pkts bytes target prot opt in out source destination Chain ufw-before-logging-output (1 references) pkts bytes target prot opt in out source destination Chain ufw-before-output (1 references) pkts bytes target prot opt in out source destination 82M 43G ACCEPT 0 -- * lo 0.0.0.0/0 0.0.0.0/0 17M 7810M ACCEPT 0 -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED 9791K 817M ufw-user-output 0 -- * * 0.0.0.0/0 0.0.0.0/0 Chain ufw-logging-allow (0 references) pkts bytes target prot opt in out source destination 0 0 LOG 0 -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 3/min burst 10 LOG flags 0 level 4 prefix "[UFW ALLOW] " Chain ufw-logging-deny (2 references) pkts bytes target prot opt in out source destination 488 23294 RETURN 0 -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID limit: avg 3/min burst 10 35 1918 LOG 0 -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 3/min burst 10 LOG flags 0 level 4 prefix "[UFW BLOCK] " Chain ufw-not-local (1 references) pkts bytes target prot opt in out source destination 62563 3581K RETURN 0 -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type LOCAL 235 40247 RETURN 0 -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type MULTICAST 0 0 RETURN 0 -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type BROADCAST 0 0 ufw-logging-deny 0 -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 3/min burst 10 0 0 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0 Chain ufw-reject-forward (1 references) pkts bytes target prot opt in out source destination Chain ufw-reject-input (1 references) pkts bytes target prot opt in out source destination Chain ufw-reject-output (1 references) pkts bytes target prot opt in out source destination Chain ufw-skip-to-policy-forward (0 references) pkts bytes target prot opt in out source destination 0 0 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0 Chain ufw-skip-to-policy-input (7 references) pkts bytes target prot opt in out source destination 0 0 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0 Chain ufw-skip-to-policy-output (0 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT 0 -- * * 0.0.0.0/0 0.0.0.0/0 Chain ufw-track-forward (1 references) pkts bytes target prot opt in out source destination Chain ufw-track-input (1 references) pkts bytes target prot opt in out source destination Chain ufw-track-output (1 references) pkts bytes target prot opt in out source destination 3249K 195M ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 ctstate NEW 6538K 622M ACCEPT 17 -- * * 0.0.0.0/0 0.0.0.0/0 ctstate NEW Chain ufw-user-forward (1 references) pkts bytes target prot opt in out source destination Chain ufw-user-input (1 references) pkts bytes target prot opt in out source destination 8742 508K ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 17071 964K ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 34323 1971K ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443 0 0 ACCEPT 17 -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:443 0 0 ACCEPT 17 -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:443 0 0 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:8765 0 0 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:9090 0 0 ACCEPT 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:14433 0 0 ACCEPT 17 -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:5060 0 0 ACCEPT 17 -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:5080 0 0 DROP 6 -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:8300 Chain ufw-user-limit (0 references) pkts bytes target prot opt in out source destination 0 0 LOG 0 -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 3/min burst 5 LOG flags 0 level 4 prefix "[UFW LIMIT BLOCK] " 0 0 REJECT 0 -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable Chain ufw-user-limit-accept (0 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT 0 -- * * 0.0.0.0/0 0.0.0.0/0 Chain ufw-user-logging-forward (0 references) pkts bytes target prot opt in out source destination Chain ufw-user-logging-input (0 references) pkts bytes target prot opt in out source destination Chain ufw-user-logging-output (0 references) pkts bytes target prot opt in out source destination Chain ufw-user-output (1 references) pkts bytes target prot opt in out source destination [G.2] Firewall nftables (lecture seule) table ip filter { chain ufw-before-logging-input { } chain ufw-before-logging-output { } chain ufw-before-logging-forward { } chain ufw-before-input { iifname "lo" counter packets 82276728 bytes 42736033381 accept ct state related,established counter packets 23092228 bytes 25501551964 accept ct state invalid counter packets 961 bytes 52596 jump ufw-logging-deny ct state invalid counter packets 961 bytes 52596 drop ip protocol icmp icmp type destination-unreachable counter packets 0 bytes 0 accept ip protocol icmp icmp type time-exceeded counter packets 0 bytes 0 accept ip protocol icmp icmp type parameter-problem counter packets 0 bytes 0 accept ip protocol icmp icmp type echo-request counter packets 0 bytes 0 accept udp sport 67 udp dport 68 counter packets 0 bytes 0 accept counter packets 62798 bytes 3621660 jump ufw-not-local ip daddr 224.0.0.251 udp dport 5353 counter packets 235 bytes 40247 accept ip daddr 239.255.255.250 udp dport 1900 counter packets 0 bytes 0 accept counter packets 62563 bytes 3581413 jump ufw-user-input } chain ufw-before-output { oifname "lo" counter packets 82404688 bytes 42755487399 accept ct state related,established counter packets 17304644 bytes 7810168585 accept counter packets 9790787 bytes 816681877 jump ufw-user-output } chain ufw-before-forward { ct state related,established counter packets 0 bytes 0 accept ip protocol icmp icmp type destination-unreachable counter packets 0 bytes 0 accept ip protocol icmp icmp type time-exceeded counter packets 0 bytes 0 accept ip protocol icmp icmp type parameter-problem counter packets 0 bytes 0 accept ip protocol icmp icmp type echo-request counter packets 0 bytes 0 accept counter packets 0 bytes 0 jump ufw-user-forward } chain ufw-after-input { udp dport 137 counter packets 0 bytes 0 jump ufw-skip-to-policy-input udp dport 138 counter packets 0 bytes 0 jump ufw-skip-to-policy-input tcp dport 139 counter packets 0 bytes 0 jump ufw-skip-to-policy-input tcp dport 445 counter packets 0 bytes 0 jump ufw-skip-to-policy-input udp dport 67 counter packets 0 bytes 0 jump ufw-skip-to-policy-input udp dport 68 counter packets 0 bytes 0 jump ufw-skip-to-policy-input fib daddr type broadcast counter packets 0 bytes 0 jump ufw-skip-to-policy-input } chain ufw-after-output { } chain ufw-after-forward { } chain ufw-after-logging-input { limit rate 3/minute burst 10 packets counter packets 1536 bytes 84320 log prefix "[UFW BLOCK] " } chain ufw-after-logging-output { } chain ufw-after-logging-forward { limit rate 3/minute burst 10 packets counter packets 0 bytes 0 log prefix "[UFW BLOCK] " } chain ufw-reject-input { } chain ufw-reject-output { } chain ufw-reject-forward { } chain ufw-track-input { } chain ufw-track-output { ip protocol tcp ct state new counter packets 3248565 bytes 194946032 accept ip protocol udp ct state new counter packets 6537891 bytes 621500839 accept } chain ufw-track-forward { } chain INPUT { type filter hook input priority filter; policy drop; counter packets 113922459 bytes 72892651995 jump ts-input counter packets 111832936 bytes 72576983190 jump ufw-before-logging-input counter packets 111832936 bytes 72576983190 jump ufw-before-input counter packets 2913 bytes 170270 jump ufw-after-input counter packets 2913 bytes 170270 jump ufw-after-logging-input counter packets 2913 bytes 170270 jump ufw-reject-input counter packets 2913 bytes 170270 jump ufw-track-input tcp dport 8300 counter packets 0 bytes 0 drop } chain OUTPUT { type filter hook output priority filter; policy accept; counter packets 116416960 bytes 53509955306 jump ufw-before-logging-output counter packets 116416960 bytes 53509955306 jump ufw-before-output counter packets 11009186 bytes 905980098 jump ufw-after-output counter packets 11009186 bytes 905980098 jump ufw-after-logging-output counter packets 11009186 bytes 905980098 jump ufw-reject-output counter packets 11009186 bytes 905980098 jump ufw-track-output } chain FORWARD { type filter hook forward priority filter; policy drop; counter packets 0 bytes 0 jump DOCKER-USER counter packets 0 bytes 0 jump DOCKER-FORWARD counter packets 0 bytes 0 jump ts-forward counter packets 0 bytes 0 jump ufw-before-logging-forward counter packets 0 bytes 0 jump ufw-before-forward counter packets 0 bytes 0 jump ufw-after-forward counter packets 0 bytes 0 jump ufw-after-logging-forward counter packets 0 bytes 0 jump ufw-reject-forward counter packets 0 bytes 0 jump ufw-track-forward } chain ts-input { ip saddr 100.94.9.37 iifname "lo" counter packets 14 bytes 6226 accept iifname "tailscale0" counter packets 1861179 bytes 290199764 accept udp dport 41641 counter packets 228602 bytes 25526252 accept ip saddr 100.115.92.0/23 iifname != "tailscale0" counter packets 0 bytes 0 return ip saddr 100.64.0.0/10 iifname != "tailscale0" counter packets 0 bytes 0 drop } chain ts-forward { iifname "tailscale0" counter packets 0 bytes 0 meta mark set mark and 0xff00ffff xor 0x40000 meta mark & 0x00ff0000 == 0x00040000 counter packets 0 bytes 0 accept ip saddr 100.64.0.0/10 oifname "tailscale0" counter packets 0 bytes 0 drop oifname "tailscale0" counter packets 0 bytes 0 accept } chain DOCKER { iifname != "docker0" oifname "docker0" counter packets 0 bytes 0 drop } chain DOCKER-FORWARD { counter packets 0 bytes 0 jump DOCKER-CT counter packets 0 bytes 0 jump DOCKER-INTERNAL counter packets 0 bytes 0 jump DOCKER-BRIDGE iifname "docker0" counter packets 0 bytes 0 accept } chain DOCKER-BRIDGE { oifname "docker0" counter packets 0 bytes 0 jump DOCKER } chain DOCKER-CT { oifname "docker0" ct state related,established counter packets 0 bytes 0 accept } chain DOCKER-INTERNAL { } chain DOCKER-USER { } chain ufw-logging-deny { ct state invalid limit rate 3/minute burst 10 packets counter packets 488 bytes 23294 return limit rate 3/minute burst 10 packets counter packets 35 bytes 1918 log prefix "[UFW BLOCK] " } chain ufw-logging-allow { limit rate 3/minute burst 10 packets counter packets 0 bytes 0 log prefix "[UFW ALLOW] " } chain ufw-skip-to-policy-input { counter packets 0 bytes 0 drop } chain ufw-skip-to-policy-output { counter packets 0 bytes 0 accept } chain ufw-skip-to-policy-forward { counter packets 0 bytes 0 drop } chain ufw-not-local { fib daddr type local counter packets 62563 bytes 3581413 return fib daddr type multicast counter packets 235 bytes 40247 return fib daddr type broadcast counter packets 0 bytes 0 return limit rate 3/minute burst 10 packets counter packets 0 bytes 0 jump ufw-logging-deny counter packets 0 bytes 0 drop } chain ufw-user-input { tcp dport 22 counter packets 8742 bytes 508240 accept tcp dport 80 counter packets 17071 bytes 964255 accept tcp dport 443 counter packets 34323 bytes 1971170 accept udp dport 443 counter packets 0 bytes 0 accept udp dport 443 counter packets 0 bytes 0 accept tcp dport 8765 counter packets 0 bytes 0 accept tcp dport 9090 counter packets 0 bytes 0 accept tcp dport 14433 counter packets 0 bytes 0 accept udp dport 5060 counter packets 0 bytes 0 accept udp dport 5080 counter packets 0 bytes 0 accept tcp dport 8300 counter packets 0 bytes 0 drop } chain ufw-user-output { } chain ufw-user-forward { } chain ufw-user-logging-input { } chain ufw-user-logging-output { } chain ufw-user-logging-forward { } chain ufw-user-limit { limit rate 3/minute burst 5 packets counter packets 0 bytes 0 log prefix "[UFW LIMIT BLOCK] " counter packets 0 bytes 0 reject } chain ufw-user-limit-accept { counter packets 0 bytes 0 accept } } table ip6 filter { chain ufw6-before-logging-input { } chain ufw6-before-logging-output { } chain ufw6-before-logging-forward { } chain ufw6-before-input { iifname "lo" counter packets 2575 bytes 612573 accept rt type 0 counter packets 0 bytes 0 drop ct state related,established counter packets 0 bytes 0 accept meta l4proto ipv6-icmp icmpv6 type echo-reply counter packets 0 bytes 0 accept ct state invalid counter packets 0 bytes 0 jump ufw6-logging-deny ct state invalid counter packets 0 bytes 0 drop meta l4proto ipv6-icmp icmpv6 type destination-unreachable counter packets 0 bytes 0 accept meta l4proto ipv6-icmp icmpv6 type packet-too-big counter packets 0 bytes 0 accept meta l4proto ipv6-icmp icmpv6 type time-exceeded counter packets 0 bytes 0 accept meta l4proto ipv6-icmp icmpv6 type parameter-problem counter packets 0 bytes 0 accept meta l4proto ipv6-icmp icmpv6 type echo-request counter packets 0 bytes 0 accept meta l4proto ipv6-icmp icmpv6 type nd-router-solicit ip6 hoplimit 255 counter packets 0 bytes 0 accept meta l4proto ipv6-icmp icmpv6 type nd-router-advert ip6 hoplimit 255 counter packets 0 bytes 0 accept meta l4proto ipv6-icmp icmpv6 type nd-neighbor-solicit ip6 hoplimit 255 counter packets 0 bytes 0 accept meta l4proto ipv6-icmp icmpv6 type nd-neighbor-advert ip6 hoplimit 255 counter packets 0 bytes 0 accept meta l4proto ipv6-icmp xt match "icmp6" ip6 hoplimit 255 counter packets 0 bytes 0 accept meta l4proto ipv6-icmp xt match "icmp6" ip6 hoplimit 255 counter packets 0 bytes 0 accept ip6 saddr fe80::/10 meta l4proto ipv6-icmp icmpv6 type mld-listener-query counter packets 0 bytes 0 accept ip6 saddr fe80::/10 meta l4proto ipv6-icmp icmpv6 type mld-listener-report counter packets 0 bytes 0 accept ip6 saddr fe80::/10 meta l4proto ipv6-icmp icmpv6 type mld-listener-done counter packets 0 bytes 0 accept ip6 saddr fe80::/10 meta l4proto ipv6-icmp xt match "icmp6" counter packets 0 bytes 0 accept meta l4proto ipv6-icmp xt match "icmp6" ip6 hoplimit 255 counter packets 0 bytes 0 accept meta l4proto ipv6-icmp xt match "icmp6" ip6 hoplimit 255 counter packets 0 bytes 0 accept ip6 saddr fe80::/10 meta l4proto ipv6-icmp xt match "icmp6" ip6 hoplimit 1 counter packets 0 bytes 0 accept ip6 saddr fe80::/10 meta l4proto ipv6-icmp xt match "icmp6" ip6 hoplimit 1 counter packets 0 bytes 0 accept ip6 saddr fe80::/10 meta l4proto ipv6-icmp xt match "icmp6" ip6 hoplimit 1 counter packets 0 bytes 0 accept meta l4proto ipv6-icmp xt match "icmp6" counter packets 0 bytes 0 accept meta l4proto ipv6-icmp xt match "icmp6" counter packets 0 bytes 0 accept meta l4proto ipv6-icmp xt match "icmp6" counter packets 0 bytes 0 accept meta l4proto ipv6-icmp xt match "icmp6" counter packets 0 bytes 0 accept ip6 saddr fe80::/10 ip6 daddr fe80::/10 udp sport 547 udp dport 546 counter packets 0 bytes 0 accept ip6 daddr ff02::fb udp dport 5353 counter packets 0 bytes 0 accept ip6 daddr ff02::f udp dport 1900 counter packets 0 bytes 0 accept counter packets 0 bytes 0 jump ufw6-user-input } chain ufw6-before-output { oifname "lo" counter packets 2575 bytes 612573 accept rt type 0 counter packets 0 bytes 0 drop ct state related,established counter packets 0 bytes 0 accept meta l4proto ipv6-icmp icmpv6 type destination-unreachable counter packets 0 bytes 0 accept meta l4proto ipv6-icmp icmpv6 type packet-too-big counter packets 0 bytes 0 accept meta l4proto ipv6-icmp icmpv6 type time-exceeded counter packets 0 bytes 0 accept meta l4proto ipv6-icmp icmpv6 type parameter-problem counter packets 0 bytes 0 accept meta l4proto ipv6-icmp icmpv6 type echo-request counter packets 0 bytes 0 accept meta l4proto ipv6-icmp icmpv6 type echo-reply counter packets 0 bytes 0 accept meta l4proto ipv6-icmp icmpv6 type nd-router-solicit ip6 hoplimit 255 counter packets 369 bytes 19200 accept meta l4proto ipv6-icmp icmpv6 type nd-neighbor-advert ip6 hoplimit 255 counter packets 0 bytes 0 accept meta l4proto ipv6-icmp icmpv6 type nd-neighbor-solicit ip6 hoplimit 255 counter packets 0 bytes 0 accept meta l4proto ipv6-icmp icmpv6 type nd-router-advert ip6 hoplimit 255 counter packets 0 bytes 0 accept meta l4proto ipv6-icmp xt match "icmp6" ip6 hoplimit 255 counter packets 0 bytes 0 accept meta l4proto ipv6-icmp xt match "icmp6" ip6 hoplimit 255 counter packets 0 bytes 0 accept ip6 saddr fe80::/10 meta l4proto ipv6-icmp icmpv6 type mld-listener-query counter packets 0 bytes 0 accept ip6 saddr fe80::/10 meta l4proto ipv6-icmp icmpv6 type mld-listener-report counter packets 0 bytes 0 accept ip6 saddr fe80::/10 meta l4proto ipv6-icmp icmpv6 type mld-listener-done counter packets 0 bytes 0 accept ip6 saddr fe80::/10 meta l4proto ipv6-icmp xt match "icmp6" counter packets 0 bytes 0 accept meta l4proto ipv6-icmp xt match "icmp6" ip6 hoplimit 255 counter packets 0 bytes 0 accept meta l4proto ipv6-icmp xt match "icmp6" ip6 hoplimit 255 counter packets 0 bytes 0 accept ip6 saddr fe80::/10 meta l4proto ipv6-icmp xt match "icmp6" ip6 hoplimit 1 counter packets 0 bytes 0 accept ip6 saddr fe80::/10 meta l4proto ipv6-icmp xt match "icmp6" ip6 hoplimit 1 counter packets 0 bytes 0 accept ip6 saddr fe80::/10 meta l4proto ipv6-icmp xt match "icmp6" ip6 hoplimit 1 counter packets 0 bytes 0 accept counter packets 32 bytes 2560 jump ufw6-user-output } chain ufw6-before-forward { rt type 0 counter packets 0 bytes 0 drop ct state related,established counter packets 0 bytes 0 accept meta l4proto ipv6-icmp icmpv6 type destination-unreachable counter packets 0 bytes 0 accept meta l4proto ipv6-icmp icmpv6 type packet-too-big counter packets 0 bytes 0 accept meta l4proto ipv6-icmp icmpv6 type time-exceeded counter packets 0 bytes 0 accept meta l4proto ipv6-icmp icmpv6 type parameter-problem counter packets 0 bytes 0 accept meta l4proto ipv6-icmp icmpv6 type echo-request counter packets 0 bytes 0 accept meta l4proto ipv6-icmp icmpv6 type echo-reply counter packets 0 bytes 0 accept counter packets 0 bytes 0 jump ufw6-user-forward } chain ufw6-after-input { udp dport 137 counter packets 0 bytes 0 jump ufw6-skip-to-policy-input udp dport 138 counter packets 0 bytes 0 jump ufw6-skip-to-policy-input tcp dport 139 counter packets 0 bytes 0 jump ufw6-skip-to-policy-input tcp dport 445 counter packets 0 bytes 0 jump ufw6-skip-to-policy-input udp dport 546 counter packets 0 bytes 0 jump ufw6-skip-to-policy-input udp dport 547 counter packets 0 bytes 0 jump ufw6-skip-to-policy-input } chain ufw6-after-output { } chain ufw6-after-forward { } chain ufw6-after-logging-input { limit rate 3/minute burst 10 packets counter packets 0 bytes 0 log prefix "[UFW BLOCK] " } chain ufw6-after-logging-output { } chain ufw6-after-logging-forward { limit rate 3/minute burst 10 packets counter packets 0 bytes 0 log prefix "[UFW BLOCK] " } chain ufw6-reject-input { } chain ufw6-reject-output { } chain ufw6-reject-forward { } chain ufw6-track-input { } chain ufw6-track-output { meta l4proto tcp ct state new counter packets 32 bytes 2560 accept meta l4proto udp ct state new counter packets 0 bytes 0 accept } chain ufw6-track-forward { } chain INPUT { type filter hook input priority filter; policy drop; counter packets 2759 bytes 638600 jump ts-input counter packets 2772 bytes 640313 jump ufw6-before-logging-input counter packets 2772 bytes 640313 jump ufw6-before-input counter packets 0 bytes 0 jump ufw6-after-input counter packets 0 bytes 0 jump ufw6-after-logging-input counter packets 0 bytes 0 jump ufw6-reject-input counter packets 0 bytes 0 jump ufw6-track-input } chain OUTPUT { type filter hook output priority filter; policy accept; counter packets 3219 bytes 664653 jump ufw6-before-logging-output counter packets 3219 bytes 664653 jump ufw6-before-output counter packets 40 bytes 3858 jump ufw6-after-output counter packets 40 bytes 3858 jump ufw6-after-logging-output counter packets 40 bytes 3858 jump ufw6-reject-output counter packets 40 bytes 3858 jump ufw6-track-output } chain FORWARD { type filter hook forward priority filter; policy drop; counter packets 0 bytes 0 jump DOCKER-USER counter packets 0 bytes 0 jump DOCKER-FORWARD counter packets 0 bytes 0 jump ts-forward counter packets 0 bytes 0 jump ufw6-before-logging-forward counter packets 0 bytes 0 jump ufw6-before-forward counter packets 0 bytes 0 jump ufw6-after-forward counter packets 0 bytes 0 jump ufw6-after-logging-forward counter packets 0 bytes 0 jump ufw6-reject-forward counter packets 0 bytes 0 jump ufw6-track-forward } chain ts-input { ip6 saddr fd7a:115c:a1e0::2c38:926 iifname "lo" counter packets 0 bytes 0 accept iifname "tailscale0" counter packets 0 bytes 0 accept udp dport 41641 counter packets 0 bytes 0 accept } chain ts-forward { iifname "tailscale0" counter packets 0 bytes 0 meta mark set mark and 0xff00ffff xor 0x40000 meta mark & 0x00ff0000 == 0x00040000 counter packets 0 bytes 0 accept oifname "tailscale0" counter packets 0 bytes 0 accept } chain DOCKER { } chain DOCKER-FORWARD { counter packets 0 bytes 0 jump DOCKER-CT counter packets 0 bytes 0 jump DOCKER-INTERNAL counter packets 0 bytes 0 jump DOCKER-BRIDGE } chain DOCKER-BRIDGE { } chain DOCKER-CT { } chain DOCKER-INTERNAL { } chain DOCKER-USER { } chain ufw6-logging-deny { ct state invalid limit rate 3/minute burst 10 packets counter packets 0 bytes 0 return limit rate 3/minute burst 10 packets counter packets 0 bytes 0 log prefix "[UFW BLOCK] " } chain ufw6-logging-allow { limit rate 3/minute burst 10 packets counter packets 0 bytes 0 log prefix "[UFW ALLOW] " } chain ufw6-skip-to-policy-input { counter packets 0 bytes 0 drop } chain ufw6-skip-to-policy-output { counter packets 0 bytes 0 accept } chain ufw6-skip-to-policy-forward { counter packets 0 bytes 0 drop } chain ufw6-user-input { tcp dport 22 counter packets 0 bytes 0 accept tcp dport 80 counter packets 0 bytes 0 accept tcp dport 443 counter packets 0 bytes 0 accept udp dport 443 counter packets 0 bytes 0 accept udp dport 443 counter packets 0 bytes 0 accept tcp dport 8765 counter packets 0 bytes 0 accept tcp dport 9090 counter packets 0 bytes 0 accept tcp dport 14433 counter packets 0 bytes 0 accept udp dport 5060 counter packets 0 bytes 0 accept udp dport 5080 counter packets 0 bytes 0 accept tcp dport 8300 counter packets 0 bytes 0 drop } chain ufw6-user-output { } chain ufw6-user-forward { } chain ufw6-user-logging-input { } chain ufw6-user-logging-output { } chain ufw6-user-logging-forward { } chain ufw6-user-limit { limit rate 3/minute burst 5 packets counter packets 0 bytes 0 log prefix "[UFW LIMIT BLOCK] " counter packets 0 bytes 0 reject } chain ufw6-user-limit-accept { counter packets 0 bytes 0 accept } } table ip nat { chain ts-postrouting { meta mark & 0x00ff0000 == 0x00040000 counter packets 0 bytes 0 masquerade } chain POSTROUTING { type nat hook postrouting priority srcnat; policy accept; ip saddr 172.17.0.0/16 oifname != "docker0" counter packets 12 bytes 1824 masquerade counter packets 13828872 bytes 1015791993 jump ts-postrouting } chain DOCKER { } chain PREROUTING { type nat hook prerouting priority dstnat; policy accept; fib daddr type local counter packets 103181 bytes 5966463 jump DOCKER } chain OUTPUT { type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 791537 bytes 47492726 jump DOCKER } } table ip6 nat { chain ts-postrouting { meta mark & 0x00ff0000 == 0x00040000 counter packets 0 bytes 0 xt target "MASQUERADE" } chain POSTROUTING { type nat hook postrouting priority srcnat; policy accept; counter packets 147 bytes 11942 jump ts-postrouting } chain DOCKER { } chain PREROUTING { type nat hook prerouting priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump DOCKER } chain OUTPUT { type nat hook output priority dstnat; policy accept; ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump DOCKER } } table ip mangle { chain PREROUTING { type filter hook prerouting priority mangle; policy accept; ct state related,established counter packets 104183229 bytes 72150235612 meta mark set ct mark and 0xff0000 } chain OUTPUT { type route hook output priority mangle; policy accept; ct state new meta mark & 0x00ff0000 != 0x00000000 counter packets 1629674 bytes 244264360 ct mark set mark and 0xff0000 } } table ip6 mangle { chain PREROUTING { type filter hook prerouting priority mangle; policy accept; ct state related,established counter packets 2629 bytes 628123 meta mark set ct mark and 0xff0000 } chain OUTPUT { type route hook output priority mangle; policy accept; ct state new meta mark & 0x00ff0000 != 0x00000000 counter packets 0 bytes 0 ct mark set mark and 0xff0000 } } table inet f2b-table { set addr-set-sshd { type ipv4_addr elements = { 2.57.121.25, 62.133.60.87, 83.172.17.105, 91.92.40.204, 91.92.42.147, 130.51.22.28, 154.90.70.254, 211.37.174.180 } } chain f2b-chain { type filter hook input priority filter - 1; policy accept; tcp dport 22 ip saddr @addr-set-sshd reject with icmp port-unreachable } } [G.3] Fichiers SUID/SGID /usr/bin/sudo /usr/bin/chsh /usr/bin/mount /usr/bin/expiry /usr/bin/ssh-agent /usr/bin/passwd /usr/bin/dotlockfile /usr/bin/mlock /usr/bin/chfn /usr/bin/chage /usr/bin/crontab /usr/bin/fusermount3 /usr/bin/umount /usr/bin/gpasswd /usr/bin/su /usr/bin/newgrp /usr/sbin/postdrop /usr/sbin/pppd /usr/sbin/postqueue /usr/sbin/pam_extrausers_chkpwd [G.4] Fichiers world-writable dans /etc [G.5] SSH — configuration (lecture seule) Include /etc/ssh/sshd_config.d/*.conf PermitRootLogin yes PasswordAuthentication yes KbdInteractiveAuthentication no PermitRootLogin yes UsePAM yes X11Forwarding yes PrintMotd no AcceptEnv LANG LC_* Subsystem sftp /usr/lib/openssh/sftp-server PermitRootLogin yes PasswordAuthentication yes DenyUsers clp [G.6] Certificats SSL/TLS (liste, lecture seule) total 652 drwxr-xr-x 3 root root 20480 Jun 5 19:26 . drwxr-xr-x 4 root root 4096 May 20 04:41 .. lrwxrwxrwx 1 root root 23 Mar 21 13:06 002c0b4f.0 -> GlobalSign_Root_R46.pem lrwxrwxrwx 1 root root 24 Mar 21 13:06 0179095f.0 -> BJCA_Global_Root_CA1.pem lrwxrwxrwx 1 root root 45 Mar 21 13:06 02265526.0 -> Entrust_Root_Certification_Authority_-_G2.pem lrwxrwxrwx 1 root root 27 Mar 21 13:06 062cdee6.0 -> GlobalSign_Root_CA_-_R3.pem lrwxrwxrwx 1 root root 25 Mar 21 13:06 064e0aa9.0 -> QuoVadis_Root_CA_2_G3.pem lrwxrwxrwx 1 root root 50 Mar 21 13:06 06dc52d5.0 -> SSL.com_EV_Root_Certification_Authority_RSA_R2.pem lrwxrwxrwx 1 root root 34 Mar 21 13:06 08063a00.0 -> Security_Communication_RootCA3.pem ================================================================================ SECTION H : APPLICATIONS & SERVICES WEB (lecture seule) ================================================================================ [H.1] Apache/Nginx — statut # configuration file /etc/nginx/nginx.conf: user root; worker_processes auto; pid /run/nginx.pid; worker_rlimit_nofile 8192; include /etc/nginx/modules-enabled/*.conf; events { worker_connections 2000; # multi_accept on; } http { ## # Basic Settings ## geoip_country /etc/nginx/geoip/GeoIP.dat; # the country IP database geoip_city /etc/nginx/geoip/GeoLiteCity.dat; # the city IP database real_ip_recursive on; set_real_ip_from 127.0.0.1; set_real_ip_from 10.0.0.0/8; set_real_ip_from 172.16.0.0/12; set_real_ip_from 192.168.0.0/16; set_real_ip_from 0.0.0.0/0; #real_ip_header X-Forwarded-For; [H.2] Sites web configurés total 60 drwxr-xr-x 15 root root 4096 Jul 7 21:36 . drwxr-xr-x 14 root root 4096 May 20 18:10 .. drwxr-xr-x 2 root root 4096 Jun 24 22:45 0data drwxr-xr-x 3 root root 4096 Jun 22 13:55 html drwxr-xr-x 3 root root 4096 Jun 27 15:08 hub drwxr-xr-x 4 root root 4096 Jun 16 21:08 hub.08.ma lrwxrwxrwx 1 root root 20 Jun 6 20:57 i.08.ma -> /opt/web/it-landing/ drwxr-xr-x 3 root root 4096 Jun 10 23:46 jean-demo.08.ma drwxr-xr-x 3 root root 4096 Jun 10 23:46 jean-test-v2.08.ma drwxr-xr-x 2 root root 4096 Jul 7 21:38 lab.0data.fr drwxrwxr-x 3 root root 4096 Jun 7 20:39 mail.odata.fr drwxr-xr-x 3 root root 4096 Jun 10 23:46 paul-test.08.ma drwxr-xr-x 3 root root 4096 Jun 10 23:46 sophie-demo.08.ma drwxr-xr-x 8 root root 4096 Jul 11 21:41 test.08.ma drwxrwxr-x 3 root root 4096 Jun 7 20:39 testodata.08.ma drwxr-xr-x 3 root root 4096 Jun 10 23:46 toto.08.ma [H.3] PHP — version PHP 8.4.21 (cli) (built: May 11 2026 07:08:08) (NTS) Copyright (c) The PHP Group Built by Ubuntu [H.4] Bases de données (détection passive) mysql Ver 8.4.8-8 for Linux on x86_64 (Percona Server (GPL), Release '8', Revision '1c288264') ================================================================================ SECTION I : DOCKER & CONTAINERS (lecture seule) ================================================================================ [I.1] Docker — version Docker version 29.5.3, build d1c06ef [I.2] Containers en cours CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES 6486ea51cefe safarov/freeswitch:latest "/docker-entrypoint.…" 8 days ago Up 8 days (healthy) freeswitch-zero [I.3] Images Docker IMAGE ID DISK USAGE CONTENT SIZE EXTRA docuseal/docuseal:latest cd61aa21395d 782MB 230MB invoiceninja/invoiceninja:latest e94b961c4c11 2.64GB 597MB mariadb:10 5a5c675881ef 458MB 109MB nextcloud:stable 330c866bf5ab 2.06GB 503MB postgres:15 c2ca90969ca2 633MB 164MB safarov/freeswitch:latest b31c743f4c91 382MB 113MB U tiredofit/freescout:latest 07734b3730a6 871MB 231MB twentycrm/twenty:latest a2b79b8fd6fd 1.7GB 243MB ================================================================================ SECTION J : PACKAGES & VERSIONS (lecture seule) ================================================================================ [J.1] Packages installés (comptage) Nombre de paquets : 1836 [J.2] Mises à jour disponibles (vérification passive) Listing... alsa-ucm-conf/noble-updates 1.2.10-1ubuntu5.11 all [upgradable from: 1.2.10-1ubuntu5.10] apparmor/noble-updates 4.0.1really4.0.1-0ubuntu0.24.04.7 amd64 [upgradable from: 4.0.1really4.0.1-0ubuntu0.24.04.6] bind9-dnsutils/noble-updates,noble-security 1:9.18.39-0ubuntu0.24.04.5 amd64 [upgradable from: 1:9.18.39-0ubuntu0.24.04.3] bind9-host/noble-updates,noble-security 1:9.18.39-0ubuntu0.24.04.5 amd64 [upgradable from: 1:9.18.39-0ubuntu0.24.04.3] bind9-libs/noble-updates,noble-security 1:9.18.39-0ubuntu0.24.04.5 amd64 [upgradable from: 1:9.18.39-0ubuntu0.24.04.3] ca-certificates/noble-updates,noble-security 20260601~24.04.1 all [upgradable from: 20240203] cloud-init/noble-updates 26.1-0ubuntu1~24.04.1 all [upgradable from: 25.3-0ubuntu1~24.04.1] cloudpanel/unknown 2.5.4-1+clp-noble all [upgradable from: 2.5.3-1+clp-noble] containerd.io/noble 2.2.5-1~ubuntu.24.04~noble amd64 [upgradable from: 2.2.4-1~ubuntu.24.04~noble] curl/noble-updates,noble-security 8.5.0-2ubuntu10.10 amd64 [upgradable from: 8.5.0-2ubuntu10.9] docker-buildx-plugin/noble 0.35.0-1~ubuntu.24.04~noble amd64 [upgradable from: 0.34.1-1~ubuntu.24.04~noble] docker-ce-cli/noble 5:29.6.1-1~ubuntu.24.04~noble amd64 [upgradable from: 5:29.5.3-1~ubuntu.24.04~noble] docker-ce-rootless-extras/noble 5:29.6.1-1~ubuntu.24.04~noble amd64 [upgradable from: 5:29.5.3-1~ubuntu.24.04~noble] docker-ce/noble 5:29.6.1-1~ubuntu.24.04~noble amd64 [upgradable from: 5:29.5.3-1~ubuntu.24.04~noble] docker-compose-plugin/noble 5.3.0-1~ubuntu.24.04~noble amd64 [upgradable from: 5.1.4-1~ubuntu.24.04~noble] docker-model-plugin/noble 1.2.5-1~ubuntu.24.04~noble amd64 [upgradable from: 1.2.1-1~ubuntu.24.04~noble] fwupd/noble-updates 2.0.20-1ubuntu2~24.04.1 amd64 [upgradable from: 1.9.34-0ubuntu1~24.04.1] i965-va-driver/noble-updates,noble-security 2.4.1+dfsg1-1ubuntu0.2 amd64 [upgradable from: 2.4.1+dfsg1-1ubuntu0.1] inetutils-telnet/noble-updates,noble-security 2:2.5-3ubuntu4.2 amd64 [upgradable from: 2:2.5-3ubuntu4.1] ================================================================================ ATTESTATION DE PASSIVITÉ ================================================================================ Je soussigné, l'agent d'audit Hermes, atteste que l'ensemble des informations ci-dessus a été collecté en mode STRICTEMENT PASSIF : - Aucun paquet réseau n'a été émis vers des cibles externes. - Aucun scan de ports (nmap, masscan, etc.) n'a été exécuté. - Aucune connexion sortante non sollicitée n'a été établie. - Toutes les commandes utilisées sont en lecture seule. - Aucune modification du système de fichiers, des processus ou de la configuration. - Principe de minimisation respecté (RGPD Art. 5.1.c). Méthodologie : Observation passive, interrogation locale Conformité : RGPD Art. 5.1.c (minimisation), Art. 25 (protection dès la conception) Date : 2026-07-11 21:45:32 UTC Serveur : test.08.ma (217.160.192.96) FIN DE LA PREUVE DE PASSIVITÉ ================================================================================ ✅ Génération terminée.