🛡️ Security Report

Wednesday, July 08, 2026 — 22:00 ICT
ssdnode-kitkit
💾
46G/473G
Disk
💻
5%
Memory
1.57, 1.68, 1.80
Load Avg
3 weeks, 6 days, 10 hours, 31 minutes
Uptime
active🛡 Fail2ban
16,993🚫 UFW Blocks
23📡 Ports
11🐣 Containers

📡 Open Ports

✓ ufw-docker active Docker ports on 0.0.0.0 are blocked from external access

Cross-referenced with Docker port mappings and UFW rules

Local AddressServiceType
100.80.139.9:8000docker-proxy Docker internal
10.0.1.1:22sshd
0.0.0.0:443docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
0.0.0.0:80docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
100.80.139.9:6002docker-proxy Docker internal
100.80.139.9:6001docker-proxy Docker internal
127.0.0.1:22sshd loopback
100.80.139.9:36486tailscaled Tailscale
127.0.0.1:8000docker-proxy loopback
127.0.0.1:24543moshi-hook loopback
127.0.0.1:6012cloudflared loopback
0.0.0.0:8080docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
127.0.0.54:53systemd-resolve
100.80.139.9:22sshd Tailscale
127.0.0.53%lo:53systemd-resolve
10.0.0.1:22sshd
100.80.139.9:8443tailscaled Tailscale
[::]:443docker-proxy Docker internal
[::]:80docker-proxy Docker internal
[fd7a:115c:a1e0::533b:8b09]:22sshd Tailscale
[::]:8080docker-proxy Docker internal
[fd7a:115c:a1e0::533b:8b09]:8443tailscaled Tailscale
[fd7a:115c:a1e0::533b:8b09]:43591tailscaled Tailscale

🔥 Firewall (UFW)

Status: active · 12 rules

RuleActionInterfaceFromNote
41641/udpALLOWAnywhere
22/tcpALLOWtailscale0AnywhereSSH via Tailscale only
AnywhereALLOWtailscale0Anywhere
60000:61000/udpALLOWtailscale0AnywhereMosh via Tailscale
22/tcpALLOWdocker0Anywhere
41642/udpALLOWAnywhereTailscale peer relay
41641/udp (v6)ALLOWAnywhere (v6)
22/tcp (v6)ALLOWtailscale0Anywhere (v6)SSH via Tailscale only
Anywhere (v6)ALLOWtailscale0Anywhere (v6)
60000:61000/udp (v6)ALLOWtailscale0Anywhere (v6)Mosh via Tailscale
22/tcp (v6)ALLOWdocker0Anywhere (v6)
41642/udp (v6)ALLOWAnywhere (v6)Tailscale peer relay

🔐 SSH Activity

0
Failed (24h)
6091
Sessions (24h)

🔑 Other SSH Logins (last 10)

TimeIPHostPort
07/08 21:0110.0.0.210.0.0.234594
07/08 21:0710.0.0.210.0.0.247788
07/08 21:1310.0.0.210.0.0.236076
07/08 21:1910.0.0.210.0.0.257898
07/08 21:2510.0.0.210.0.0.253386
07/08 21:3110.0.0.210.0.0.256930
07/08 21:3710.0.0.210.0.0.257284
07/08 21:4310.0.0.210.0.0.245690
07/08 21:4910.0.0.210.0.0.235210
07/08 21:5510.0.0.210.0.0.248620

🔍 Processes

⚠ High CPU (>50%)

UserPIDCPUCommand
root2192089155%/bin/sh
root219207764.2%[runc]

✓ No high memory processes

🌐 Tailscale

11/17 online

NodeOSStatus
ssdnodethis machinelinuxOnline
appletvtvOSOnline
boxlinuxOnline
contabolinuxOnline
glkvmlinuxOnline
hkrouterlinuxOnline
ipad13tviOSOnline
ipadproiOSOnline
iphone-14-pro-maxiOSOnline
iphoneairiOSOnline
kitailinuxOnline
tencentlinuxOnline
kitmacOSOffline
kitlegiongowindowsOffline
kits-macbook-airmacOSOffline
kits-macbook-pro-9h4ymacOSOffline
mobilerouterlinuxOffline
nodeiOSOffline

🐣 Docker

✓ No TCP daemon exposure

ContainerStatusPorts
coolify-sentinelUp 3 days (healthy)
so13t9jiakgbyzwp863dmvzu-103035573499Up 3 days3000/tcp
lijg3ncf0yp8on32jagmeg0yUp 3 days (healthy)5432/tcp
lkn2msiqhoymcuyaa64cnazj-065012572847Up 3 days3000/tcp
ithh2dbx1jyjl6dejr3mre1kUp 3 days (healthy)5432/tcp
enthri8p43s4atofatobcunp-232449789422Up 3 days3000/tcp
coolifyUp 3 days (healthy)8000/tcp, 8443/tcp, 9000/tcp, 100.80.139.9:8000->8080/tcp, 127.0.0.1:8000->8080/tcp
coolify-proxyUp 3 days (healthy)0.0.0.0:80->80/tcp, [::]:80->80/tcp, 0.0.0.0:443->443/tcp, [::]:443->443/tcp, 0.0.0.0:8080->8080/tcp, [::]:8080->8080/tcp, 0.0.0.0:443->443/udp, [::]:443->443/udp
coolify-realtimeUp 3 days (healthy)100.80.139.9:6001-6002->6001-6002/tcp
coolify-dbUp 3 days (healthy)5432/tcp
coolify-redisUp 3 days (healthy)6379/tcp

🚫 UFW Blocks (24h)

Top Source IPs

4941 10.0.0.3
   2234 10.0.0.2
    585 2
    582 107.150.146.69
    534 2001
    342 79.124.62.134
    304 79.124.62.230
    283 79.124.62.126
    146 2607
     88 2604

Top Targeted Ports

4961 8000
   2234 23517
    694 23
    180 2221
     85 3389
     79 22
     72 8443
     40 53
     37 5060
     30 3000

☁️ Cloudflare Tunnel

Uptime: Thu 2026-06-11 04:29:24 UTC · 0 domains routed

4
HA Connections
4
Edge Locations
539
Request Errors
0
Active Sessions

Edges: sin02, sin13, sin17, sin20

DomainStatus

⚠ Attack Attempts (7d) 44

TypeCount
Other35
AWS credential probe5
App probe3
Path traversal1

📋 History