Editing Ov.430.ch Host Reconnaissance Report (section)

== Local Listening Sockets ==

<code>ss -ltnup</code> showed:

<pre>
udp 0.0.0.0:5355       systemd-resolve
udp [::]:5355          systemd-resolve
udp *:20151            java
udp *:6567             java
udp *:443              caddy

tcp 0.0.0.0:22         sshd
tcp 127.0.0.1:2019     caddy admin API
tcp 127.0.0.1:36489    containerd
tcp 127.0.0.53:53      systemd-resolve
tcp 127.0.0.54:53      systemd-resolve
tcp 0.0.0.0:5355       systemd-resolve
tcp [::]:5355          systemd-resolve
tcp 0.0.0.0:8080       docker-proxy
tcp [::]:8080          docker-proxy
tcp [::]:22            sshd
tcp *:80               caddy
tcp *:443              caddy
tcp *:6567             java
tcp [::ffff:127.0.0.1]:6859 java
</pre>

Interpretation:

* <code>5355</code> exposure is from <code>systemd-resolved</code> LLMNR.
* <code>6567</code> and <code>20151</code> are from the Java/Mindustry server.
* <code>6859</code> is a Mindustry console bound to loopback only.
* <code>8080</code> is Docker's published MediaWiki backend.
* Caddy's admin API is loopback-only on <code>127.0.0.1:2019</code>.