Security Report - 2026-06-08

💻 System Health

32G/473G

Disk Used

1.4Gi/30Gi

Memory (5%)

1.22, 1.04, 1.12

Load Average

1 week, 5 days, 13 hours, 16 minutes

Uptime

Fail2ban: active · UFW Blocks (24h): 4,747

📡 Open Ports

Local Address	Service
`100.80.139.9:36486`	tailscaled
`10.0.1.1:22`	sshd
`100.80.139.9:22`	sshd
`100.80.139.9:8000`	docker-proxy
`10.0.0.1:22`	sshd
`100.80.139.9:6002`	docker-proxy
`100.80.139.9:6001`	docker-proxy
`127.0.0.54:53`	systemd-resolve
`0.0.0.0:8080`	docker-proxy
`127.0.0.1:24543`	moshi-hook
`127.0.0.1:8000`	docker-proxy
`100.80.139.9:8443`	tailscaled
`127.0.0.1:20241`	cloudflared
`127.0.0.53%lo:53`	systemd-resolve
`127.0.0.1:22`	sshd
`0.0.0.0:80`	docker-proxy
`0.0.0.0:443`	docker-proxy
`[fd7a:115c:a1e0::533b:8b09]:43591`	tailscaled
`[fd7a:115c:a1e0::533b:8b09]:8443`	tailscaled
`[::]:8080`	docker-proxy
`[fd7a:115c:a1e0::533b:8b09]:22`	sshd
`[::]:80`	docker-proxy
`[::]:443`	docker-proxy

⚠ External

Local Address	Service
`10.0.1.1:22`	sshd
`10.0.0.1:22`	sshd
`127.0.0.54:53`	systemd-resolve
`0.0.0.0:8080`	docker-proxy
`127.0.0.53%lo:53`	systemd-resolve
`0.0.0.0:80`	docker-proxy
`0.0.0.0:443`	docker-proxy
`[::]:8080`	docker-proxy
`[::]:80`	docker-proxy
`[::]:443`	docker-proxy

🔥 Firewall (UFW)

Status: active

To                         Action      From
--                         ------      ----
41641/udp                  ALLOW       Anywhere                  
22/tcp on tailscale0       ALLOW       Anywhere                   # SSH via Tailscale only
Anywhere on tailscale0     ALLOW       Anywhere                  
60000:61000/udp on tailscale0 ALLOW       Anywhere                   # Mosh via Tailscale
41641/udp (v6)             ALLOW       Anywhere (v6)             
22/tcp (v6) on tailscale0  ALLOW       Anywhere (v6)              # SSH via Tailscale only
Anywhere (v6) on tailscale0 ALLOW       Anywhere (v6)             
60000:61000/udp (v6) on tailscale0 ALLOW       Anywhere (v6)              # Mosh via Tailscale

🔐 SSH Activity

0

Failed Attempts (24h)

5787

New Sessions (24h)

Recent SSH Logins (last 10)

Time	IP	Host	Port	Source
06/08 21:31	`10.0.1.10`	10.0.1.10	53258	🔑 sshd
06/08 21:34	`10.0.1.10`	10.0.1.10	59330	🔑 sshd
06/08 21:37	`10.0.1.10`	10.0.1.10	38370	🔑 sshd
06/08 21:40	`10.0.1.10`	10.0.1.10	55558	🔑 sshd
06/08 21:43	`10.0.1.10`	10.0.1.10	48496	🔑 sshd
06/08 21:46	`10.0.1.10`	10.0.1.10	34946	🔑 sshd
06/08 21:49	`10.0.1.10`	10.0.1.10	46990	🔑 sshd
06/08 21:52	`10.0.1.10`	10.0.1.10	56188	🔑 sshd
06/08 21:55	`10.0.1.10`	10.0.1.10	41782	🔑 sshd
06/08 21:58	`10.0.1.10`	10.0.1.10	42888	🔑 sshd

🔍 Processes

⚠ High CPU (>50%)

User	PID	CPU	Command
9999	985834	116%	/usr/local/bin/php9999\|985806\|100%\|/usr/local/bin/php

✓ No high memory processes

🌐 Tailscale

10/14 peers online

Node	OS	IP	Status
ssdnode this machine	linux	`100.80.139.9`	✓ Online
box	linux	`100.86.226.66`	✓ Online
contabo	linux	`100.111.135.6`	✓ Online
hkrouter	linux	`100.66.31.7`	✓ Online
ipad13tv	iOS	`100.117.146.121`	✓ Online
ipadpro	iOS	`100.65.224.43`	✓ Online
iphoneair	iOS	`100.95.106.126`	✓ Online
kitai	linux	`100.97.4.90`	✓ Online
kitmbp16	macOS	`100.123.239.87`	✓ Online
kits-macbook-air	macOS	`100.127.101.27`	✓ Online
tencent	linux	`100.109.227.19`	✓ Online
appletv	tvOS	`100.108.161.6`	✗ Offline
iphone-14-pro-max	iOS	`100.92.136.103`	✗ Offline
kitlegiongo	windows	`100.67.231.89`	✗ Offline
mobilerouter	linux	`100.127.101.21`	✗ Offline

🐣 Docker

✓ No TCP daemon exposure

Container	Status	Ports
coolify-sentinel	Up 23 hours (healthy)
so13t9jiakgbyzwp863dmvzu-103035573499	Up 23 hours	`3000/tcp`
lijg3ncf0yp8on32jagmeg0y	Up 23 hours (healthy)	`5432/tcp`
lkn2msiqhoymcuyaa64cnazj-065012572847	Up 23 hours	`3000/tcp`
ithh2dbx1jyjl6dejr3mre1k	Up 23 hours (healthy)	`5432/tcp`
enthri8p43s4atofatobcunp-232449789422	Up 23 hours	`3000/tcp`
coolify	Up 23 hours (healthy)	`8000/tcp, 8443/tcp, 9000/tcp, 100.80.139.9:8000->8080/tcp, 127.0.0.1:8000->8080/tcp`
coolify-proxy	Up 23 hours (healthy)	`0.0.0.0:80->80/tcp, [::]:80->80/tcp, 0.0.0.0:443->443/tcp, [::]:443->443/tcp, 0.0.0.0:8080->8080/tcp, [::]:8080->8080/tcp, 0.0.0.0:443->443/udp, [::]:443->443/udp`
coolify-realtime	Up 23 hours (healthy)	`100.80.139.9:6001-6002->6001-6002/tcp`
coolify-db	Up 23 hours (healthy)	`5432/tcp`
coolify-redis	Up 23 hours (healthy)	`6379/tcp`

🚫 UFW Block Details (24h)

Top Source IPs

752 10.0.1.10
    714 10.0.0.2
    319 41.168.10.139
    305 160.119.76.34
    177 2
    154 2001
    138 2604
    118 67.220.180.114
     90 193.32.162.211
     44 2404

Top Targeted Ports

🛡️ Security Report