🛡️ Security Report

Thursday, July 09, 2026 — 22:00 ICT
ssdnode-kitkit
💾
46G/473G
Disk
💻
4%
Memory
1.42, 1.22, 1.36
Load Avg
6 hours, 7 minutes
Uptime
active🛡 Fail2ban
21,735🚫 UFW Blocks
23📡 Ports
11🐣 Containers

📡 Open Ports

✓ ufw-docker active Docker ports on 0.0.0.0 are blocked from external access

Cross-referenced with Docker port mappings and UFW rules

Local AddressServiceType
0.0.0.0:443docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
0.0.0.0:80docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
100.80.139.9:8443tailscaled Tailscale
0.0.0.0:8080docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
10.0.0.1:22sshd
127.0.0.54:53systemd-resolve
10.0.1.1:22sshd
100.80.139.9:6002docker-proxy Docker internal
100.80.139.9:6001docker-proxy Docker internal
127.0.0.1:22sshd loopback
100.80.139.9:8000docker-proxy Docker internal
127.0.0.53%lo:53systemd-resolve
100.80.139.9:22sshd Tailscale
127.0.0.1:24543moshi-hook loopback
127.0.0.1:8000docker-proxy loopback
127.0.0.1:6012cloudflared loopback
100.80.139.9:36486tailscaled Tailscale
[::]:443docker-proxy Docker internal
[::]:80docker-proxy Docker internal
[::]:8080docker-proxy Docker internal
[fd7a:115c:a1e0::533b:8b09]:22sshd Tailscale
[fd7a:115c:a1e0::533b:8b09]:43591tailscaled Tailscale
[fd7a:115c:a1e0::533b:8b09]:8443tailscaled Tailscale

🔥 Firewall (UFW)

Status: active · 12 rules

RuleActionInterfaceFromNote
41641/udpALLOWAnywhere
22/tcpALLOWtailscale0AnywhereSSH via Tailscale only
AnywhereALLOWtailscale0Anywhere
60000:61000/udpALLOWtailscale0AnywhereMosh via Tailscale
22/tcpALLOWdocker0Anywhere
41642/udpALLOWAnywhereTailscale peer relay
41641/udp (v6)ALLOWAnywhere (v6)
22/tcp (v6)ALLOWtailscale0Anywhere (v6)SSH via Tailscale only
Anywhere (v6)ALLOWtailscale0Anywhere (v6)
60000:61000/udp (v6)ALLOWtailscale0Anywhere (v6)Mosh via Tailscale
22/tcp (v6)ALLOWdocker0Anywhere (v6)
41642/udp (v6)ALLOWAnywhere (v6)Tailscale peer relay

🔐 SSH Activity

0
Failed (24h)
7790
Sessions (24h)

🔑 Other SSH Logins (last 10)

TimeIPHostPort
07/09 21:0110.0.0.210.0.0.241154
07/09 21:0710.0.0.210.0.0.233782
07/09 21:1310.0.0.210.0.0.248322
07/09 21:1910.0.0.210.0.0.258350
07/09 21:2510.0.0.210.0.0.257354
07/09 21:3110.0.0.210.0.0.234144
07/09 21:3710.0.0.210.0.0.244158
07/09 21:4310.0.0.210.0.0.237756
07/09 21:4910.0.0.210.0.0.242548
07/09 21:5510.0.0.210.0.0.235640

🔍 Processes

⚠ High CPU (>50%)

UserPIDCPUCommand
root621606900%runc
root621591133%runc

✓ No high memory processes

🌐 Tailscale

12/17 online

NodeOSStatus
ssdnodethis machinelinuxOnline
appletvtvOSOnline
boxlinuxOnline
contabolinuxOnline
glkvmlinuxOnline
hkrouterlinuxOnline
ipad13tviOSOnline
ipadproiOSOnline
iphone-14-pro-maxiOSOnline
iphoneairiOSOnline
kitailinuxOnline
kits-macbook-airmacOSOnline
tencentlinuxOnline
kitmacOSOffline
kitlegiongowindowsOffline
kits-macbook-pro-9h4ymacOSOffline
mobilerouterlinuxOffline
nodeiOSOffline

🐣 Docker

✓ No TCP daemon exposure

ContainerStatusPorts
coolify-sentinelUp 6 hours (healthy)
so13t9jiakgbyzwp863dmvzu-103035573499Up 6 hours3000/tcp
lijg3ncf0yp8on32jagmeg0yUp 6 hours (healthy)5432/tcp
lkn2msiqhoymcuyaa64cnazj-065012572847Up 6 hours3000/tcp
ithh2dbx1jyjl6dejr3mre1kUp 6 hours (healthy)5432/tcp
enthri8p43s4atofatobcunp-232449789422Up 6 hours3000/tcp
coolifyUp 6 hours (healthy)8000/tcp, 8443/tcp, 9000/tcp, 100.80.139.9:8000->8080/tcp, 127.0.0.1:8000->8080/tcp
coolify-proxyUp 6 hours (healthy)0.0.0.0:80->80/tcp, [::]:80->80/tcp, 0.0.0.0:443->443/tcp, [::]:443->443/tcp, 0.0.0.0:8080->8080/tcp, [::]:8080->8080/tcp, 0.0.0.0:443->443/udp, [::]:443->443/udp
coolify-realtimeUp 6 hours (healthy)100.80.139.9:6001-6002->6001-6002/tcp
coolify-dbUp 6 hours (healthy)5432/tcp
coolify-redisUp 6 hours (healthy)6379/tcp

🚫 UFW Blocks (24h)

Top Source IPs

6310 10.0.0.3
   2828 10.0.0.2
    749 2
    672 2001
    582 107.150.146.69
    408 79.124.62.134
    395 79.124.62.230
    346 79.124.62.126
    179 2607
    118 2604

Top Targeted Ports

6335 8000
   2828 23517
    711 23
    212 2221
    112 3389
    100 22
     96 8443
     51 53
     46 5060
     36 2087

☁️ Cloudflare Tunnel

Uptime: Thu 2026-07-09 08:53:26 UTC · 0 domains routed

4
HA Connections
4
Edge Locations
0
Request Errors
0
Active Sessions

Edges: sin07, sin09, sin11, sin21

DomainStatus

⚠ Attack Attempts (7d) 44

TypeCount
Other35
AWS credential probe5
App probe3
Path traversal1

📋 History