🛡️ Security Report

Wednesday, July 29, 2026 — 22:00 ICT
ssdnode-kitkit
💾
50G/473G
Disk
💻
5%
Memory
⚡
1.16, 1.29, 1.36
Load Avg
⏰
1 week, 1 day, 6 hours, 9 minutes
Uptime
active🛡 Fail2ban
17,940🚫 UFW Blocks
26📡 Ports
11🐣 Containers

📡 Open Ports

✓ ufw-docker active Docker ports on 0.0.0.0 are blocked from external access

Cross-referenced with Docker port mappings and UFW rules

Local AddressServiceType
127.0.0.54:53systemd-resolve
127.0.0.53%lo:53systemd-resolve
100.80.139.9:8317cli-proxy-api Tailscale
10.0.0.1:22sshd
100.80.139.9:8443tailscaled Tailscale
127.0.0.1:22sshd loopback
127.0.0.1:8000docker-proxy loopback
127.0.0.1:24543moshi-hook loopback
127.0.0.1:6012cloudflared loopback
100.80.139.9:22sshd Tailscale
100.80.139.9:36486tailscaled Tailscale
10.0.1.1:22sshd
0.0.0.0:443docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
0.0.0.0:80docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
100.80.139.9:18443tailscaled Tailscale
100.80.139.9:6002docker-proxy Docker internal
100.80.139.9:6001docker-proxy Docker internal
0.0.0.0:8080docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
100.80.139.9:8000docker-proxy Docker internal
[fd7a:115c:a1e0::533b:8b09]:22sshd Tailscale
[fd7a:115c:a1e0::533b:8b09]:18443tailscaled Tailscale
[::]:443docker-proxy Docker internal
[::]:80docker-proxy Docker internal
[::]:8080docker-proxy Docker internal
[fd7a:115c:a1e0::533b:8b09]:8443tailscaled Tailscale
[fd7a:115c:a1e0::533b:8b09]:43591tailscaled Tailscale

🔥 Firewall (UFW)

Status: active · 12 rules

RuleActionInterfaceFromNote
41641/udpALLOW—Anywhere
22/tcpALLOWtailscale0AnywhereSSH via Tailscale only
AnywhereALLOWtailscale0Anywhere
60000:61000/udpALLOWtailscale0AnywhereMosh via Tailscale
22/tcpALLOWdocker0Anywhere
41642/udpALLOW—AnywhereTailscale peer relay
41641/udp (v6)ALLOW—Anywhere (v6)
22/tcp (v6)ALLOWtailscale0Anywhere (v6)SSH via Tailscale only
Anywhere (v6)ALLOWtailscale0Anywhere (v6)
60000:61000/udp (v6)ALLOWtailscale0Anywhere (v6)Mosh via Tailscale
22/tcp (v6)ALLOWdocker0Anywhere (v6)
41642/udp (v6)ALLOW—Anywhere (v6)Tailscale peer relay

🔐 SSH Activity

0
Failed (24h)
6497
Sessions (24h)

🔒 Tailscale SSH Logins (last 10)

TimeIPHostTailscale UserNode
07/29 12:30100.117.146.121ipad13tvtagged-devicesipad13tv
07/29 12:31100.117.146.121ipad13tvtagged-devicesipad13tv
07/29 12:32100.117.146.121ipad13tvtagged-devicesipad13tv
07/29 12:42100.117.146.121ipad13tvtagged-devicesipad13tv
07/29 12:43100.117.146.121ipad13tvtagged-devicesipad13tv

🔑 Other SSH Logins (last 10)

TimeIPHostPort
07/29 21:0110.0.0.210.0.0.240874
07/29 21:0710.0.0.210.0.0.238004
07/29 21:1310.0.0.210.0.0.255022
07/29 21:1910.0.0.210.0.0.234064
07/29 21:2510.0.0.210.0.0.253884
07/29 21:3110.0.0.210.0.0.257878
07/29 21:3710.0.0.210.0.0.241888
07/29 21:4310.0.0.210.0.0.240722
07/29 21:4910.0.0.210.0.0.257704
07/29 21:5510.0.0.210.0.0.237736

🔍 Processes

⚠ High CPU (>50%)

UserPIDCPUCommand
99993266132110%/usr/local/bin/php

✓ No high memory processes

🌐 Tailscale

12/18 online

NodeOSStatus
ssdnodethis machinelinuxOnline
appletvtvOSOnline
boxlinuxOnline
contabolinuxOnline
glkvmlinuxOnline
hkrouterlinuxOnline
ipad13tviOSOnline
ipadproiOSOnline
iphone-14-pro-maxiOSOnline
iphoneairiOSOnline
kitailinuxOnline
kitmbp16macOSOnline
tencentlinuxOnline
kitmacOSOffline
kitlegiongowindowsOffline
kits-macbook-airmacOSOffline
mobilerouterlinuxOffline
nodeiOSOffline
virtualkitmacOSOffline

🐣 Docker

✓ No TCP daemon exposure

ContainerStatusPorts
coolify-sentinelUp 3 days (healthy)
coolify-proxyUp 3 days (healthy)0.0.0.0:80->80/tcp, [::]:80->80/tcp, 0.0.0.0:443->443/tcp, [::]:443->443/tcp, 0.0.0.0:8080->8080/tcp, [::]:8080->8080/tcp, 0.0.0.0:443->443/udp, [::]:443->443/udp
so13t9jiakgbyzwp863dmvzu-103035573499Up 8 days3000/tcp
lijg3ncf0yp8on32jagmeg0yUp 8 days (healthy)5432/tcp
lkn2msiqhoymcuyaa64cnazj-065012572847Up 8 days3000/tcp
ithh2dbx1jyjl6dejr3mre1kUp 8 days (healthy)5432/tcp
enthri8p43s4atofatobcunp-232449789422Up 8 days3000/tcp
coolifyUp 8 days (healthy)8000/tcp, 8443/tcp, 9000/tcp, 100.80.139.9:8000->8080/tcp, 127.0.0.1:8000->8080/tcp
coolify-realtimeUp 8 days (healthy)100.80.139.9:6001-6002->6001-6002/tcp
coolify-dbUp 8 days (healthy)5432/tcp
coolify-redisUp 8 days (healthy)6379/tcp

🚫 UFW Blocks (24h)

Top Source IPs

5001 10.0.0.3
   1080 2001
    654 10.0.0.2
    650 2
    456 157.245.56.194
    269 2604
    237 79.124.62.230
    194 79.124.62.134
    184 79.124.62.126
    150 139.162.61.187

Top Targeted Ports

5030 8000
    748 23
    654 23517
    202 22
    178 3389
    117 3000
    101 1080
     99 2000
     92 2221
     90 1337

☁️ Cloudflare Tunnel

Uptime: Tue 2026-07-21 08:50:49 UTC · 0 domains routed

4
HA Connections
3
Edge Locations
95
Request Errors
0
Active Sessions

Edges: sin08, sin13, sin16

DomainStatus

⚠ Attack Attempts (7d) 94

TypeCount
Other74
App probe15
AWS credential probe4
Path traversal1

📋 History