Linux Server / Networking, SSH & Web Services
Find a Linux daemon listening only on loopback
A service can work from localhost while every remote client fails because its listener binds to the wrong address.
Environment and inputs: Linux server baseline · Ubuntu 24.04 LTS / RHEL 9-style systems. Use the specified distribution, init system and installed tool; service names, privileges and supported options can differ.
Start with this check
Confirm the host, shell and access role. Replace sample names, paths, domains and interfaces with approved targets. These are diagnostic commands; assess policy and workload impact before making changes.
ss -lntp
Read the result
The socket list reports listening TCP endpoints and visible process ownership. Loopback, wildcard and specific-interface bindings have different reachability implications.
Resolve and verify
Match the intended port to the correct daemon, then compare its binding with the approved exposure design. Correct the application configuration and test from the intended client network.
Before changing production
Do not open firewall ports before a required listener exists or expose an administrative service on every interface without review.