🛡️ Security Report

Friday, July 17, 2026 — 22:00 ICT
ssdnode-kitkit
💾
47G/473G
Disk
💻
4%
Memory
2.55, 1.65, 1.39
Load Avg
1 week, 1 day, 6 hours, 7 minutes
Uptime
active🛡 Fail2ban
26,910🚫 UFW Blocks
23📡 Ports
11🐣 Containers

📡 Open Ports

✓ ufw-docker active Docker ports on 0.0.0.0 are blocked from external access

Cross-referenced with Docker port mappings and UFW rules

Local AddressServiceType
0.0.0.0:443docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
0.0.0.0:80docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
100.80.139.9:8443tailscaled Tailscale
0.0.0.0:8080docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
10.0.0.1:22sshd
127.0.0.54:53systemd-resolve
10.0.1.1:22sshd
100.80.139.9:6002docker-proxy Docker internal
100.80.139.9:6001docker-proxy Docker internal
127.0.0.1:22sshd loopback
100.80.139.9:8000docker-proxy Docker internal
127.0.0.53%lo:53systemd-resolve
100.80.139.9:22sshd Tailscale
127.0.0.1:24543moshi-hook loopback
127.0.0.1:8000docker-proxy loopback
127.0.0.1:6012cloudflared loopback
100.80.139.9:36486tailscaled Tailscale
[::]:443docker-proxy Docker internal
[::]:80docker-proxy Docker internal
[::]:8080docker-proxy Docker internal
[fd7a:115c:a1e0::533b:8b09]:22sshd Tailscale
[fd7a:115c:a1e0::533b:8b09]:43591tailscaled Tailscale
[fd7a:115c:a1e0::533b:8b09]:8443tailscaled Tailscale

🔥 Firewall (UFW)

Status: active · 12 rules

RuleActionInterfaceFromNote
41641/udpALLOWAnywhere
22/tcpALLOWtailscale0AnywhereSSH via Tailscale only
AnywhereALLOWtailscale0Anywhere
60000:61000/udpALLOWtailscale0AnywhereMosh via Tailscale
22/tcpALLOWdocker0Anywhere
41642/udpALLOWAnywhereTailscale peer relay
41641/udp (v6)ALLOWAnywhere (v6)
22/tcp (v6)ALLOWtailscale0Anywhere (v6)SSH via Tailscale only
Anywhere (v6)ALLOWtailscale0Anywhere (v6)
60000:61000/udp (v6)ALLOWtailscale0Anywhere (v6)Mosh via Tailscale
22/tcp (v6)ALLOWdocker0Anywhere (v6)
41642/udp (v6)ALLOWAnywhere (v6)Tailscale peer relay

🔐 SSH Activity

0
Failed (24h)
9476
Sessions (24h)

🔑 Other SSH Logins (last 10)

TimeIPHostPort
07/17 21:0110.0.0.210.0.0.260936
07/17 21:0710.0.0.210.0.0.255498
07/17 21:1310.0.0.210.0.0.259506
07/17 21:1910.0.0.210.0.0.257870
07/17 21:2510.0.0.210.0.0.251426
07/17 21:3110.0.0.210.0.0.252402
07/17 21:3710.0.0.210.0.0.260912
07/17 21:4310.0.0.210.0.0.250670
07/17 21:4910.0.0.210.0.0.253688
07/17 21:5510.0.0.210.0.0.257554

🔍 Processes

⚠ High CPU (>50%)

UserPIDCPUCommand
9999276193057.1%[php]
9999276193355.3%/usr/local/bin/php
9999276197554.3%/usr/local/bin/php

✓ No high memory processes

🌐 Tailscale

9/18 online

NodeOSStatus
ssdnodethis machinelinuxOnline
appletvtvOSOnline
boxlinuxOnline
contabolinuxOnline
glkvmlinuxOnline
hkrouterlinuxOnline
ipadproiOSOnline
iphoneairiOSOnline
kitailinuxOnline
tencentlinuxOnline
ipad13tviOSOffline
iphone-14-pro-maxiOSOffline
kitmacOSOffline
kitlegiongowindowsOffline
kitmbp16macOSOffline
kits-macbook-airmacOSOffline
mobilerouterlinuxOffline
nodeiOSOffline
virtualkitmacOSOffline

🐣 Docker

✓ No TCP daemon exposure

ContainerStatusPorts
coolify-sentinelUp 5 days (healthy)
so13t9jiakgbyzwp863dmvzu-103035573499Up 8 days3000/tcp
lijg3ncf0yp8on32jagmeg0yUp 8 days (healthy)5432/tcp
lkn2msiqhoymcuyaa64cnazj-065012572847Up 8 days3000/tcp
ithh2dbx1jyjl6dejr3mre1kUp 8 days (healthy)5432/tcp
enthri8p43s4atofatobcunp-232449789422Up 8 days3000/tcp
coolifyUp 8 days (healthy)8000/tcp, 8443/tcp, 9000/tcp, 100.80.139.9:8000->8080/tcp, 127.0.0.1:8000->8080/tcp
coolify-proxyUp 8 days (healthy)0.0.0.0:80->80/tcp, [::]:80->80/tcp, 0.0.0.0:443->443/tcp, [::]:443->443/tcp, 0.0.0.0:8080->8080/tcp, [::]:8080->8080/tcp, 0.0.0.0:443->443/udp, [::]:443->443/udp
coolify-realtimeUp 8 days (healthy)100.80.139.9:6001-6002->6001-6002/tcp
coolify-dbUp 8 days (healthy)5432/tcp
coolify-redisUp 8 days (healthy)6379/tcp

🚫 UFW Blocks (24h)

Top Source IPs

7286 10.0.0.3
   2998 10.0.0.2
    971 2
    887 2001
    492 79.124.62.230
    442 79.124.62.134
    293 79.124.62.126
    267 2607
    194 2604
    129 2600

Top Targeted Ports

7322 8000
   2998 23517
    200 23
    149 2221
    148 3389
    138 22
    100 8443
     66 2087
     52 53
     50 5060

☁️ Cloudflare Tunnel

Uptime: Thu 2026-07-09 08:53:26 UTC · 0 domains routed

4
HA Connections
4
Edge Locations
2
Request Errors
0
Active Sessions

Edges: sin12, sin15, sin16, sin18

DomainStatus

⚠ Attack Attempts (7d) 2

TypeCount
Other2

📋 History