🛡️ Security Report

Sunday, July 05, 2026 — 22:00 ICT
ssdnode-kitkit
💾
49G/473G
Disk
💻
4%
Memory
1.88, 1.74, 1.78
Load Avg
3 weeks, 3 days, 10 hours, 31 minutes
Uptime
active🛡 Fail2ban
2,852🚫 UFW Blocks
23📡 Ports
11🐣 Containers

📡 Open Ports

✓ ufw-docker active Docker ports on 0.0.0.0 are blocked from external access

Cross-referenced with Docker port mappings and UFW rules

Local AddressServiceType
100.80.139.9:8000docker-proxy Docker internal
10.0.1.1:22sshd
0.0.0.0:443docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
0.0.0.0:80docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
100.80.139.9:6002docker-proxy Docker internal
100.80.139.9:6001docker-proxy Docker internal
127.0.0.1:22sshd loopback
100.80.139.9:36486tailscaled Tailscale
127.0.0.1:8000docker-proxy loopback
127.0.0.1:24543moshi-hook loopback
127.0.0.1:6012cloudflared loopback
0.0.0.0:8080docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
127.0.0.54:53systemd-resolve
100.80.139.9:22sshd Tailscale
127.0.0.53%lo:53systemd-resolve
10.0.0.1:22sshd
100.80.139.9:8443tailscaled Tailscale
[::]:443docker-proxy Docker internal
[::]:80docker-proxy Docker internal
[fd7a:115c:a1e0::533b:8b09]:22sshd Tailscale
[::]:8080docker-proxy Docker internal
[fd7a:115c:a1e0::533b:8b09]:8443tailscaled Tailscale
[fd7a:115c:a1e0::533b:8b09]:43591tailscaled Tailscale

🔥 Firewall (UFW)

Status: active · 12 rules

RuleActionInterfaceFromNote
41641/udpALLOWAnywhere
22/tcpALLOWtailscale0AnywhereSSH via Tailscale only
AnywhereALLOWtailscale0Anywhere
60000:61000/udpALLOWtailscale0AnywhereMosh via Tailscale
22/tcpALLOWdocker0Anywhere
41642/udpALLOWAnywhereTailscale peer relay
41641/udp (v6)ALLOWAnywhere (v6)
22/tcp (v6)ALLOWtailscale0Anywhere (v6)SSH via Tailscale only
Anywhere (v6)ALLOWtailscale0Anywhere (v6)
60000:61000/udp (v6)ALLOWtailscale0Anywhere (v6)Mosh via Tailscale
22/tcp (v6)ALLOWdocker0Anywhere (v6)
41642/udp (v6)ALLOWAnywhere (v6)Tailscale peer relay

🔐 SSH Activity

0
Failed (24h)
1120
Sessions (24h)

🔒 Tailscale SSH Logins (last 10)

TimeIPHostTailscale UserNode
07/05 13:15100.117.146.121ipad13tvtagged-devicesipad13tv
07/05 13:16100.117.146.121ipad13tv--
07/05 13:19100.117.146.121ipad13tvtagged-devicesipad13tv

🔑 Other SSH Logins (last 10)

TimeIPHostPort
07/05 21:0110.0.0.210.0.0.242214
07/05 21:0710.0.0.210.0.0.260928
07/05 21:1310.0.0.210.0.0.235920
07/05 21:1910.0.0.210.0.0.257868
07/05 21:2510.0.0.210.0.0.253204
07/05 21:3110.0.0.210.0.0.257064
07/05 21:3710.0.0.210.0.0.254730
07/05 21:4310.0.0.210.0.0.254096
07/05 21:4910.0.0.210.0.0.234094
07/05 21:5510.0.0.210.0.0.245048

🔍 Processes

⚠ High CPU (>50%)

UserPIDCPUCommand
9999359290172.3%[php]
9999359290766.9%/usr/local/bin/php

✓ No high memory processes

🌐 Tailscale

11/16 online

NodeOSStatus
ssdnodethis machinelinuxOnline
appletvtvOSOnline
boxlinuxOnline
contabolinuxOnline
glkvmlinuxOnline
hkrouterlinuxOnline
ipad13tviOSOnline
ipadproiOSOnline
iphoneairiOSOnline
kitailinuxOnline
kits-macbook-airmacOSOnline
tencentlinuxOnline
iphone-14-pro-maxiOSOffline
kitmacOSOffline
kitlegiongowindowsOffline
kits-macbook-pro-9h4ymacOSOffline
mobilerouterlinuxOffline

🐣 Docker

✓ No TCP daemon exposure

ContainerStatusPorts
coolify-sentinelUp 12 hours (healthy)
so13t9jiakgbyzwp863dmvzu-103035573499Up 12 hours3000/tcp
lijg3ncf0yp8on32jagmeg0yUp 12 hours (healthy)5432/tcp
lkn2msiqhoymcuyaa64cnazj-065012572847Up 12 hours3000/tcp
ithh2dbx1jyjl6dejr3mre1kUp 12 hours (healthy)5432/tcp
enthri8p43s4atofatobcunp-232449789422Up 12 hours3000/tcp
coolifyUp 12 hours (healthy)8000/tcp, 8443/tcp, 9000/tcp, 100.80.139.9:8000->8080/tcp, 127.0.0.1:8000->8080/tcp
coolify-proxyUp 12 hours (healthy)0.0.0.0:80->80/tcp, [::]:80->80/tcp, 0.0.0.0:443->443/tcp, [::]:443->443/tcp, 0.0.0.0:8080->8080/tcp, [::]:8080->8080/tcp, 0.0.0.0:443->443/udp, [::]:443->443/udp
coolify-realtimeUp 12 hours (healthy)100.80.139.9:6001-6002->6001-6002/tcp
coolify-dbUp 12 hours (healthy)5432/tcp
coolify-redisUp 12 hours (healthy)6379/tcp

🚫 UFW Blocks (24h)

Top Source IPs

798 10.0.0.3
    395 10.0.0.2
    122 2001
     94 2
     55 79.124.62.134
     48 79.124.62.230
     42 79.124.62.126
     37 161.97.169.9
     29 34.47.243.40
     19 2607

Top Targeted Ports

802 8000
    395 23517
     32 2221
     18 23
     17 3389
     12 22
      8 8443
      8 123
      7 2222
      6 8090

☁️ Cloudflare Tunnel

Uptime: Thu 2026-06-11 04:29:24 UTC · 0 domains routed

4
HA Connections
4
Edge Locations
509
Request Errors
0
Active Sessions

Edges: sin02, sin11, sin19, sin20

DomainStatus

⚠ Attack Attempts (7d) 14

TypeCount
Other11
AWS credential probe2
App probe1

📋 History