🛡️ Security Report

Tuesday, July 14, 2026 — 22:00 ICT
ssdnode-kitkit
💾
47G/473G
Disk
💻
5%
Memory
2.01, 1.44, 1.33
Load Avg
5 days, 6 hours, 7 minutes
Uptime
active🛡 Fail2ban
12,659🚫 UFW Blocks
23📡 Ports
11🐣 Containers

📡 Open Ports

✓ ufw-docker active Docker ports on 0.0.0.0 are blocked from external access

Cross-referenced with Docker port mappings and UFW rules

Local AddressServiceType
0.0.0.0:443docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
0.0.0.0:80docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
100.80.139.9:8443tailscaled Tailscale
0.0.0.0:8080docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
10.0.0.1:22sshd
127.0.0.54:53systemd-resolve
10.0.1.1:22sshd
100.80.139.9:6002docker-proxy Docker internal
100.80.139.9:6001docker-proxy Docker internal
127.0.0.1:22sshd loopback
100.80.139.9:8000docker-proxy Docker internal
127.0.0.53%lo:53systemd-resolve
100.80.139.9:22sshd Tailscale
127.0.0.1:24543moshi-hook loopback
127.0.0.1:8000docker-proxy loopback
127.0.0.1:6012cloudflared loopback
100.80.139.9:36486tailscaled Tailscale
[::]:443docker-proxy Docker internal
[::]:80docker-proxy Docker internal
[::]:8080docker-proxy Docker internal
[fd7a:115c:a1e0::533b:8b09]:22sshd Tailscale
[fd7a:115c:a1e0::533b:8b09]:43591tailscaled Tailscale
[fd7a:115c:a1e0::533b:8b09]:8443tailscaled Tailscale

🔥 Firewall (UFW)

Status: active · 12 rules

RuleActionInterfaceFromNote
41641/udpALLOWAnywhere
22/tcpALLOWtailscale0AnywhereSSH via Tailscale only
AnywhereALLOWtailscale0Anywhere
60000:61000/udpALLOWtailscale0AnywhereMosh via Tailscale
22/tcpALLOWdocker0Anywhere
41642/udpALLOWAnywhereTailscale peer relay
41641/udp (v6)ALLOWAnywhere (v6)
22/tcp (v6)ALLOWtailscale0Anywhere (v6)SSH via Tailscale only
Anywhere (v6)ALLOWtailscale0Anywhere (v6)
60000:61000/udp (v6)ALLOWtailscale0Anywhere (v6)Mosh via Tailscale
22/tcp (v6)ALLOWdocker0Anywhere (v6)
41642/udp (v6)ALLOWAnywhere (v6)Tailscale peer relay

🔐 SSH Activity

0
Failed (24h)
4482
Sessions (24h)

🔑 Other SSH Logins (last 10)

TimeIPHostPort
07/14 21:0110.0.0.210.0.0.237220
07/14 21:0710.0.0.210.0.0.238466
07/14 21:1310.0.0.210.0.0.239660
07/14 21:1910.0.0.210.0.0.256262
07/14 21:2510.0.0.210.0.0.235308
07/14 21:3110.0.0.210.0.0.235874
07/14 21:3710.0.0.210.0.0.254530
07/14 21:4310.0.0.210.0.0.250728
07/14 21:4910.0.0.210.0.0.245230
07/14 21:5510.0.0.210.0.0.249176

🔍 Processes

⚠ High CPU (>50%)

UserPIDCPUCommand
99994139911113%/usr/local/bin/php

✓ No high memory processes

🌐 Tailscale

12/18 online

NodeOSStatus
ssdnodethis machinelinuxOnline
appletvtvOSOnline
boxlinuxOnline
contabolinuxOnline
glkvmlinuxOnline
hkrouterlinuxOnline
ipad13tviOSOnline
ipadproiOSOnline
iphone-14-pro-maxiOSOnline
iphoneairiOSOnline
kitailinuxOnline
kitmbp16macOSOnline
tencentlinuxOnline
kitmacOSOffline
kitlegiongowindowsOffline
kits-macbook-airmacOSOffline
mobilerouterlinuxOffline
nodeiOSOffline
virtualkitmacOSOffline

🐣 Docker

✓ No TCP daemon exposure

ContainerStatusPorts
coolify-sentinelUp 2 days (healthy)
so13t9jiakgbyzwp863dmvzu-103035573499Up 5 days3000/tcp
lijg3ncf0yp8on32jagmeg0yUp 5 days (healthy)5432/tcp
lkn2msiqhoymcuyaa64cnazj-065012572847Up 5 days3000/tcp
ithh2dbx1jyjl6dejr3mre1kUp 5 days (healthy)5432/tcp
enthri8p43s4atofatobcunp-232449789422Up 5 days3000/tcp
coolifyUp 5 days (healthy)8000/tcp, 8443/tcp, 9000/tcp, 100.80.139.9:8000->8080/tcp, 127.0.0.1:8000->8080/tcp
coolify-proxyUp 5 days (healthy)0.0.0.0:80->80/tcp, [::]:80->80/tcp, 0.0.0.0:443->443/tcp, [::]:443->443/tcp, 0.0.0.0:8080->8080/tcp, [::]:8080->8080/tcp, 0.0.0.0:443->443/udp, [::]:443->443/udp
coolify-realtimeUp 5 days (healthy)100.80.139.9:6001-6002->6001-6002/tcp
coolify-dbUp 5 days (healthy)5432/tcp
coolify-redisUp 5 days (healthy)6379/tcp

🚫 UFW Blocks (24h)

Top Source IPs

3817 10.0.0.3
   1503 10.0.0.2
    451 2
    408 2001
    263 79.124.62.134
    256 79.124.62.230
    248 2607
    168 79.124.62.126
     89 2604
     67 2600

Top Targeted Ports

3834 8000
   1503 23517
    124 23
     86 2221
     61 3389
     59 22
     35 8443
     30 2087
     29 53
     26 3306

☁️ Cloudflare Tunnel

Uptime: Thu 2026-07-09 08:53:26 UTC · 0 domains routed

4
HA Connections
3
Edge Locations
0
Request Errors
0
Active Sessions

Edges: sin07, sin12, sin21

DomainStatus

✓ No attack attempts logged

📋 History