🛡️ Security Report

Monday, July 20, 2026 — 22:00 ICT
ssdnode-kitkit
💾
48G/473G
Disk
💻
6%
Memory
2.59, 2.14, 1.88
Load Avg
1 week, 4 days, 6 hours, 7 minutes
Uptime
active🛡 Fail2ban
7,934🚫 UFW Blocks
23📡 Ports
11🐣 Containers

📡 Open Ports

✓ ufw-docker active Docker ports on 0.0.0.0 are blocked from external access

Cross-referenced with Docker port mappings and UFW rules

Local AddressServiceType
0.0.0.0:443docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
0.0.0.0:80docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
100.80.139.9:8443tailscaled Tailscale
0.0.0.0:8080docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
10.0.0.1:22sshd
127.0.0.54:53systemd-resolve
10.0.1.1:22sshd
100.80.139.9:6002docker-proxy Docker internal
100.80.139.9:6001docker-proxy Docker internal
127.0.0.1:22sshd loopback
100.80.139.9:8000docker-proxy Docker internal
127.0.0.53%lo:53systemd-resolve
100.80.139.9:22sshd Tailscale
127.0.0.1:24543moshi-hook loopback
127.0.0.1:8000docker-proxy loopback
127.0.0.1:6012cloudflared loopback
100.80.139.9:36486tailscaled Tailscale
[::]:443docker-proxy Docker internal
[::]:80docker-proxy Docker internal
[::]:8080docker-proxy Docker internal
[fd7a:115c:a1e0::533b:8b09]:22sshd Tailscale
[fd7a:115c:a1e0::533b:8b09]:43591tailscaled Tailscale
[fd7a:115c:a1e0::533b:8b09]:8443tailscaled Tailscale

🔥 Firewall (UFW)

Status: active · 12 rules

RuleActionInterfaceFromNote
41641/udpALLOWAnywhere
22/tcpALLOWtailscale0AnywhereSSH via Tailscale only
AnywhereALLOWtailscale0Anywhere
60000:61000/udpALLOWtailscale0AnywhereMosh via Tailscale
22/tcpALLOWdocker0Anywhere
41642/udpALLOWAnywhereTailscale peer relay
41641/udp (v6)ALLOWAnywhere (v6)
22/tcp (v6)ALLOWtailscale0Anywhere (v6)SSH via Tailscale only
Anywhere (v6)ALLOWtailscale0Anywhere (v6)
60000:61000/udp (v6)ALLOWtailscale0Anywhere (v6)Mosh via Tailscale
22/tcp (v6)ALLOWdocker0Anywhere (v6)
41642/udp (v6)ALLOWAnywhere (v6)Tailscale peer relay

🔐 SSH Activity

0
Failed (24h)
2644
Sessions (24h)

🔑 Other SSH Logins (last 10)

TimeIPHostPort
07/20 21:0110.0.0.210.0.0.252806
07/20 21:0710.0.0.210.0.0.242690
07/20 21:1310.0.0.210.0.0.249740
07/20 21:1910.0.0.210.0.0.241272
07/20 21:2510.0.0.210.0.0.254258
07/20 21:3110.0.0.210.0.0.252208
07/20 21:3710.0.0.210.0.0.240010
07/20 21:4310.0.0.210.0.0.255586
07/20 21:4910.0.0.210.0.0.251062
07/20 21:5510.0.0.210.0.0.253668

🔍 Processes

⚠ High CPU (>50%)

UserPIDCPUCommand
99991392279102%/usr/local/bin/php

✓ No high memory processes

🌐 Tailscale

9/18 online

NodeOSStatus
ssdnodethis machinelinuxOnline
appletvtvOSOnline
boxlinuxOnline
contabolinuxOnline
glkvmlinuxOnline
hkrouterlinuxOnline
ipadproiOSOnline
iphoneairiOSOnline
kitailinuxOnline
tencentlinuxOnline
ipad13tviOSOffline
iphone-14-pro-maxiOSOffline
kitmacOSOffline
kitlegiongowindowsOffline
kitmbp16macOSOffline
kits-macbook-airmacOSOffline
mobilerouterlinuxOffline
nodeiOSOffline
virtualkitmacOSOffline

🐣 Docker

✓ No TCP daemon exposure

ContainerStatusPorts
coolify-sentinelUp 8 days (healthy)
so13t9jiakgbyzwp863dmvzu-103035573499Up 11 days3000/tcp
lijg3ncf0yp8on32jagmeg0yUp 11 days (healthy)5432/tcp
lkn2msiqhoymcuyaa64cnazj-065012572847Up 11 days3000/tcp
ithh2dbx1jyjl6dejr3mre1kUp 11 days (healthy)5432/tcp
enthri8p43s4atofatobcunp-232449789422Up 11 days3000/tcp
coolifyUp 11 days (healthy)8000/tcp, 8443/tcp, 9000/tcp, 100.80.139.9:8000->8080/tcp, 127.0.0.1:8000->8080/tcp
coolify-proxyUp 11 days (healthy)0.0.0.0:80->80/tcp, [::]:80->80/tcp, 0.0.0.0:443->443/tcp, [::]:443->443/tcp, 0.0.0.0:8080->8080/tcp, [::]:8080->8080/tcp, 0.0.0.0:443->443/udp, [::]:443->443/udp
coolify-realtimeUp 11 days (healthy)100.80.139.9:6001-6002->6001-6002/tcp
coolify-dbUp 11 days (healthy)5432/tcp
coolify-redisUp 11 days (healthy)6379/tcp

🚫 UFW Blocks (24h)

Top Source IPs

2192 10.0.0.3
    901 10.0.0.2
    261 2001
    257 2
    166 67.220.180.114
    161 20.253.95.3
    134 20.102.39.57
     95 79.124.62.230
     89 89.31.120.238
     89 79.124.62.134

Top Targeted Ports

2198 8000
    901 23517
    198 23
     41 22
     40 2221
     34 3389
     20 5060
     19 8443
     18 2222
     14 5432

☁️ Cloudflare Tunnel

Uptime: Thu 2026-07-09 08:53:26 UTC · 0 domains routed

4
HA Connections
4
Edge Locations
16
Request Errors
0
Active Sessions

Edges: sin12, sin15, sin16, sin18

DomainStatus

⚠ Attack Attempts (7d) 16

TypeCount
Other16

📋 History