🛡️ Security Report

Thursday, July 23, 2026 — 22:00 ICT
ssdnode-kitkit
💾
48G/473G
Disk
💻
5%
Memory
3.08, 2.16, 1.75
Load Avg
2 days, 6 hours, 9 minutes
Uptime
active🛡 Fail2ban
22,230🚫 UFW Blocks
23📡 Ports
11🐣 Containers

📡 Open Ports

✓ ufw-docker active Docker ports on 0.0.0.0 are blocked from external access

Cross-referenced with Docker port mappings and UFW rules

Local AddressServiceType
127.0.0.54:53systemd-resolve
127.0.0.53%lo:53systemd-resolve
10.0.0.1:22sshd
100.80.139.9:8443tailscaled Tailscale
127.0.0.1:22sshd loopback
127.0.0.1:8000docker-proxy loopback
127.0.0.1:24543moshi-hook loopback
127.0.0.1:6012cloudflared loopback
100.80.139.9:22sshd Tailscale
100.80.139.9:36486tailscaled Tailscale
10.0.1.1:22sshd
0.0.0.0:443docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
0.0.0.0:80docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
100.80.139.9:6002docker-proxy Docker internal
100.80.139.9:6001docker-proxy Docker internal
0.0.0.0:8080docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
100.80.139.9:8000docker-proxy Docker internal
[fd7a:115c:a1e0::533b:8b09]:22sshd Tailscale
[::]:443docker-proxy Docker internal
[::]:80docker-proxy Docker internal
[::]:8080docker-proxy Docker internal
[fd7a:115c:a1e0::533b:8b09]:8443tailscaled Tailscale
[fd7a:115c:a1e0::533b:8b09]:43591tailscaled Tailscale

🔥 Firewall (UFW)

Status: active · 12 rules

RuleActionInterfaceFromNote
41641/udpALLOWAnywhere
22/tcpALLOWtailscale0AnywhereSSH via Tailscale only
AnywhereALLOWtailscale0Anywhere
60000:61000/udpALLOWtailscale0AnywhereMosh via Tailscale
22/tcpALLOWdocker0Anywhere
41642/udpALLOWAnywhereTailscale peer relay
41641/udp (v6)ALLOWAnywhere (v6)
22/tcp (v6)ALLOWtailscale0Anywhere (v6)SSH via Tailscale only
Anywhere (v6)ALLOWtailscale0Anywhere (v6)
60000:61000/udp (v6)ALLOWtailscale0Anywhere (v6)Mosh via Tailscale
22/tcp (v6)ALLOWdocker0Anywhere (v6)
41642/udp (v6)ALLOWAnywhere (v6)Tailscale peer relay

🔐 SSH Activity

0
Failed (24h)
7675
Sessions (24h)

🔑 Other SSH Logins (last 10)

TimeIPHostPort
07/23 21:0110.0.0.210.0.0.257308
07/23 21:0710.0.0.210.0.0.236432
07/23 21:1310.0.0.210.0.0.259016
07/23 21:1910.0.0.210.0.0.246676
07/23 21:2510.0.0.210.0.0.254066
07/23 21:3110.0.0.210.0.0.238596
07/23 21:3710.0.0.210.0.0.236380
07/23 21:4310.0.0.210.0.0.241302
07/23 21:4910.0.0.210.0.0.253120
07/23 21:5510.0.0.210.0.0.255616

🔍 Processes

⚠ High CPU (>50%)

UserPIDCPUCommand
9999128762166.6%/usr/local/bin/php
9999128754663.9%/usr/local/bin/php

✓ No high memory processes

🌐 Tailscale

9/18 online

NodeOSStatus
ssdnodethis machinelinuxOnline
appletvtvOSOnline
boxlinuxOnline
contabolinuxOnline
glkvmlinuxOnline
hkrouterlinuxOnline
ipadproiOSOnline
iphoneairiOSOnline
kitailinuxOnline
tencentlinuxOnline
ipad13tviOSOffline
iphone-14-pro-maxiOSOffline
kitmacOSOffline
kitlegiongowindowsOffline
kitmbp16macOSOffline
kits-macbook-airmacOSOffline
mobilerouterlinuxOffline
nodeiOSOffline
virtualkitmacOSOffline

🐣 Docker

✓ No TCP daemon exposure

ContainerStatusPorts
coolify-sentinelUp 2 days (healthy)
so13t9jiakgbyzwp863dmvzu-103035573499Up 2 days3000/tcp
lijg3ncf0yp8on32jagmeg0yUp 2 days (healthy)5432/tcp
lkn2msiqhoymcuyaa64cnazj-065012572847Up 2 days3000/tcp
ithh2dbx1jyjl6dejr3mre1kUp 2 days (healthy)5432/tcp
enthri8p43s4atofatobcunp-232449789422Up 2 days3000/tcp
coolifyUp 2 days (healthy)8000/tcp, 8443/tcp, 9000/tcp, 100.80.139.9:8000->8080/tcp, 127.0.0.1:8000->8080/tcp
coolify-proxyUp 2 days (healthy)0.0.0.0:80->80/tcp, [::]:80->80/tcp, 0.0.0.0:443->443/tcp, [::]:443->443/tcp, 0.0.0.0:8080->8080/tcp, [::]:8080->8080/tcp, 0.0.0.0:443->443/udp, [::]:443->443/udp
coolify-realtimeUp 2 days (healthy)100.80.139.9:6001-6002->6001-6002/tcp
coolify-dbUp 2 days (healthy)5432/tcp
coolify-redisUp 2 days (healthy)6379/tcp

🚫 UFW Blocks (24h)

Top Source IPs

5873 10.0.0.3
   1647 10.0.0.2
    810 2001
    743 2
    322 67.220.180.114
    284 79.124.62.230
    249 79.124.62.134
    222 79.124.62.126
    176 2607
    161 20.253.95.3

Top Targeted Ports

5896 8000
   1647 23517
    435 23
    140 22
    124 2221
    120 3389
     90 8443
     53 53
     47 1080
     46 5555

☁️ Cloudflare Tunnel

Uptime: Tue 2026-07-21 08:50:49 UTC · 0 domains routed

4
HA Connections
3
Edge Locations
27
Request Errors
0
Active Sessions

Edges: sin08, sin11, sin21

DomainStatus

⚠ Attack Attempts (7d) 47

TypeCount
Other45
App probe2

📋 History