🛡️ Security Report

Sunday, July 12, 2026 — 22:00 ICT
ssdnode-kitkit
💾
49G/473G
Disk
💻
6%
Memory
1.12, 0.95, 0.93
Load Avg
3 days, 6 hours, 7 minutes
Uptime
active🛡 Fail2ban
3,010🚫 UFW Blocks
23📡 Ports
11🐣 Containers

📡 Open Ports

✓ ufw-docker active Docker ports on 0.0.0.0 are blocked from external access

Cross-referenced with Docker port mappings and UFW rules

Local AddressServiceType
0.0.0.0:443docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
0.0.0.0:80docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
100.80.139.9:8443tailscaled Tailscale
0.0.0.0:8080docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
10.0.0.1:22sshd
127.0.0.54:53systemd-resolve
10.0.1.1:22sshd
100.80.139.9:6002docker-proxy Docker internal
100.80.139.9:6001docker-proxy Docker internal
127.0.0.1:22sshd loopback
100.80.139.9:8000docker-proxy Docker internal
127.0.0.53%lo:53systemd-resolve
100.80.139.9:22sshd Tailscale
127.0.0.1:24543moshi-hook loopback
127.0.0.1:8000docker-proxy loopback
127.0.0.1:6012cloudflared loopback
100.80.139.9:36486tailscaled Tailscale
[::]:443docker-proxy Docker internal
[::]:80docker-proxy Docker internal
[::]:8080docker-proxy Docker internal
[fd7a:115c:a1e0::533b:8b09]:22sshd Tailscale
[fd7a:115c:a1e0::533b:8b09]:43591tailscaled Tailscale
[fd7a:115c:a1e0::533b:8b09]:8443tailscaled Tailscale

🔥 Firewall (UFW)

Status: active · 12 rules

RuleActionInterfaceFromNote
41641/udpALLOWAnywhere
22/tcpALLOWtailscale0AnywhereSSH via Tailscale only
AnywhereALLOWtailscale0Anywhere
60000:61000/udpALLOWtailscale0AnywhereMosh via Tailscale
22/tcpALLOWdocker0Anywhere
41642/udpALLOWAnywhereTailscale peer relay
41641/udp (v6)ALLOWAnywhere (v6)
22/tcp (v6)ALLOWtailscale0Anywhere (v6)SSH via Tailscale only
Anywhere (v6)ALLOWtailscale0Anywhere (v6)
60000:61000/udp (v6)ALLOWtailscale0Anywhere (v6)Mosh via Tailscale
22/tcp (v6)ALLOWdocker0Anywhere (v6)
41642/udp (v6)ALLOWAnywhere (v6)Tailscale peer relay

🔐 SSH Activity

0
Failed (24h)
1164
Sessions (24h)

🔑 Other SSH Logins (last 10)

TimeIPHostPort
07/12 21:0110.0.0.210.0.0.245716
07/12 21:0710.0.0.210.0.0.243964
07/12 21:1310.0.0.210.0.0.232856
07/12 21:1910.0.0.210.0.0.234396
07/12 21:2510.0.0.210.0.0.236132
07/12 21:3110.0.0.210.0.0.237856
07/12 21:3710.0.0.210.0.0.252580
07/12 21:4310.0.0.210.0.0.257054
07/12 21:4910.0.0.210.0.0.238728
07/12 21:5510.0.0.210.0.0.254172

🔍 Processes

⚠ High CPU (>50%)

UserPIDCPUCommand
99993681332550%/usr/local/bin/php
9999368117961.5%/usr/local/bin/php

✓ No high memory processes

🌐 Tailscale

11/17 online

NodeOSStatus
ssdnodethis machinelinuxOnline
appletvtvOSOnline
boxlinuxOnline
contabolinuxOnline
glkvmlinuxOnline
hkrouterlinuxOnline
ipad13tviOSOnline
ipadproiOSOnline
iphoneairiOSOnline
kitailinuxOnline
kitmbp16macOSOnline
tencentlinuxOnline
iphone-14-pro-maxiOSOffline
kitmacOSOffline
kitlegiongowindowsOffline
kits-macbook-airmacOSOffline
mobilerouterlinuxOffline
nodeiOSOffline

🐣 Docker

✓ No TCP daemon exposure

ContainerStatusPorts
coolify-sentinelUp 10 hours (healthy)
so13t9jiakgbyzwp863dmvzu-103035573499Up 3 days3000/tcp
lijg3ncf0yp8on32jagmeg0yUp 3 days (healthy)5432/tcp
lkn2msiqhoymcuyaa64cnazj-065012572847Up 3 days3000/tcp
ithh2dbx1jyjl6dejr3mre1kUp 3 days (healthy)5432/tcp
enthri8p43s4atofatobcunp-232449789422Up 3 days3000/tcp
coolifyUp 3 days (healthy)8000/tcp, 8443/tcp, 9000/tcp, 100.80.139.9:8000->8080/tcp, 127.0.0.1:8000->8080/tcp
coolify-proxyUp 3 days (healthy)0.0.0.0:80->80/tcp, [::]:80->80/tcp, 0.0.0.0:443->443/tcp, [::]:443->443/tcp, 0.0.0.0:8080->8080/tcp, [::]:8080->8080/tcp, 0.0.0.0:443->443/udp, [::]:443->443/udp
coolify-realtimeUp 3 days (healthy)100.80.139.9:6001-6002->6001-6002/tcp
coolify-dbUp 3 days (healthy)5432/tcp
coolify-redisUp 3 days (healthy)6379/tcp

🚫 UFW Blocks (24h)

Top Source IPs

1012 10.0.0.3
    303 10.0.0.2
    130 2001
    103 2
     62 79.124.62.134
     58 2607
     57 79.124.62.230
     39 79.124.62.126
     25 176.65.148.243
     19 13.92.135.230

Top Targeted Ports

1018 8000
    303 23517
     34 23
     33 2221
     13 3389
      9 22
      8 1080
      7 82
      7 81
      7 8081

☁️ Cloudflare Tunnel

Uptime: Thu 2026-07-09 08:53:26 UTC · 0 domains routed

4
HA Connections
4
Edge Locations
0
Request Errors
0
Active Sessions

Edges: sin07, sin09, sin11, sin21

DomainStatus

⚠ Attack Attempts (7d) 30

TypeCount
Other24
AWS credential probe3
App probe2
Path traversal1

📋 History