🛡️ Security Report

Friday, July 03, 2026 — 22:00 ICT
ssdnode-kitkit
💾
45G/473G
Disk
💻
5%
Memory
2.03, 2.00, 1.97
Load Avg
3 weeks, 1 day, 10 hours, 31 minutes
Uptime
active🛡 Fail2ban
26,606🚫 UFW Blocks
23📡 Ports
11🐣 Containers

📡 Open Ports

✓ ufw-docker active Docker ports on 0.0.0.0 are blocked from external access

Cross-referenced with Docker port mappings and UFW rules

Local AddressServiceType
100.80.139.9:8000docker-proxy Docker internal
10.0.1.1:22sshd
0.0.0.0:443docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
0.0.0.0:80docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
100.80.139.9:6002docker-proxy Docker internal
100.80.139.9:6001docker-proxy Docker internal
127.0.0.1:22sshd loopback
100.80.139.9:36486tailscaled Tailscale
127.0.0.1:8000docker-proxy loopback
127.0.0.1:24543moshi-hook loopback
127.0.0.1:6012cloudflared loopback
0.0.0.0:8080docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
127.0.0.54:53systemd-resolve
100.80.139.9:22sshd Tailscale
127.0.0.53%lo:53systemd-resolve
10.0.0.1:22sshd
100.80.139.9:8443tailscaled Tailscale
[::]:443docker-proxy Docker internal
[::]:80docker-proxy Docker internal
[fd7a:115c:a1e0::533b:8b09]:22sshd Tailscale
[::]:8080docker-proxy Docker internal
[fd7a:115c:a1e0::533b:8b09]:8443tailscaled Tailscale
[fd7a:115c:a1e0::533b:8b09]:43591tailscaled Tailscale

🔥 Firewall (UFW)

Status: active · 12 rules

RuleActionInterfaceFromNote
41641/udpALLOWAnywhere
22/tcpALLOWtailscale0AnywhereSSH via Tailscale only
AnywhereALLOWtailscale0Anywhere
60000:61000/udpALLOWtailscale0AnywhereMosh via Tailscale
22/tcpALLOWdocker0Anywhere
41642/udpALLOWAnywhereTailscale peer relay
41641/udp (v6)ALLOWAnywhere (v6)
22/tcp (v6)ALLOWtailscale0Anywhere (v6)SSH via Tailscale only
Anywhere (v6)ALLOWtailscale0Anywhere (v6)
60000:61000/udp (v6)ALLOWtailscale0Anywhere (v6)Mosh via Tailscale
22/tcp (v6)ALLOWdocker0Anywhere (v6)
41642/udp (v6)ALLOWAnywhere (v6)Tailscale peer relay

🔐 SSH Activity

0
Failed (24h)
9355
Sessions (24h)

🔑 Other SSH Logins (last 10)

TimeIPHostPort
07/03 21:0110.0.0.210.0.0.238640
07/03 21:0710.0.0.210.0.0.239662
07/03 21:1310.0.0.210.0.0.253658
07/03 21:1910.0.0.210.0.0.243142
07/03 21:2510.0.0.210.0.0.244452
07/03 21:3110.0.0.210.0.0.246064
07/03 21:3710.0.0.210.0.0.237164
07/03 21:4310.0.0.210.0.0.255732
07/03 21:4910.0.0.210.0.0.236794
07/03 21:5510.0.0.210.0.0.245368

🔍 Processes

⚠ High CPU (>50%)

UserPIDCPUCommand
99993094687204%/usr/local/bin/php

✓ No high memory processes

🌐 Tailscale

12/16 online

NodeOSStatus
ssdnodethis machinelinuxOnline
appletvtvOSOnline
boxlinuxOnline
contabolinuxOnline
glkvmlinuxOnline
hkrouterlinuxOnline
ipad13tviOSOnline
ipadproiOSOnline
iphone-14-pro-maxiOSOnline
iphoneairiOSOnline
kitailinuxOnline
kits-macbook-airmacOSOnline
tencentlinuxOnline
kitmacOSOffline
kitlegiongowindowsOffline
kits-macbook-pro-9h4ymacOSOffline
mobilerouterlinuxOffline

🐣 Docker

✓ No TCP daemon exposure

ContainerStatusPorts
coolify-sentinelUp 12 days (healthy)
so13t9jiakgbyzwp863dmvzu-103035573499Up 12 days3000/tcp
lijg3ncf0yp8on32jagmeg0yUp 12 days (healthy)5432/tcp
lkn2msiqhoymcuyaa64cnazj-065012572847Up 12 days3000/tcp
ithh2dbx1jyjl6dejr3mre1kUp 12 days (healthy)5432/tcp
enthri8p43s4atofatobcunp-232449789422Up 12 days3000/tcp
coolifyUp 12 days (healthy)8000/tcp, 8443/tcp, 9000/tcp, 100.80.139.9:8000->8080/tcp, 127.0.0.1:8000->8080/tcp
coolify-proxyUp 12 days (healthy)0.0.0.0:80->80/tcp, [::]:80->80/tcp, 0.0.0.0:443->443/tcp, [::]:443->443/tcp, 0.0.0.0:8080->8080/tcp, [::]:8080->8080/tcp, 0.0.0.0:443->443/udp, [::]:443->443/udp
coolify-realtimeUp 12 days (healthy)100.80.139.9:6001-6002->6001-6002/tcp
coolify-dbUp 12 days (healthy)5432/tcp
coolify-redisUp 12 days (healthy)6379/tcp

🚫 UFW Blocks (24h)

Top Source IPs

6481 10.0.0.3
   3607 10.0.0.2
    958 2
    813 2001
    598 79.124.62.230
    527 79.124.62.134
    427 79.124.62.126
    251 2607
    133 193.46.255.155
    107 2604

Top Targeted Ports

6519 8000
   3607 23517
    378 2221
    262 23
    144 3389
    141 22
    117 8443
     62 5060
     56 53
     52 8888

☁️ Cloudflare Tunnel

Uptime: Thu 2026-06-11 04:29:24 UTC · 0 domains routed

4
HA Connections
4
Edge Locations
495
Request Errors
0
Active Sessions

Edges: sin02, sin11, sin19, sin20

DomainStatus

⚠ Attack Attempts (7d) 7

TypeCount
Other5
AWS credential probe1
Path traversal1

📋 History