🛡️ Security Report

Monday, August 10, 2026 — 22:00 ICT
ssdnode-kitkit
💾
53G/473G
Disk
💻
6%
Memory
⚡
2.59, 2.11, 1.92
Load Avg
⏰
19 hours, 17 minutes
Uptime
active🛡 Fail2ban
9,331🚫 UFW Blocks
23📡 Ports
10🐣 Containers

📡 Open Ports

✓ ufw-docker active Docker ports on 0.0.0.0 are blocked from external access

Cross-referenced with Docker port mappings and UFW rules

Local AddressServiceType
100.80.139.9:6001docker-proxy Docker internal
100.80.139.9:6002docker-proxy Docker internal
127.0.0.1:6012cloudflared loopback
100.80.139.9:8000docker-proxy Docker internal
127.0.0.1:8000docker-proxy loopback
127.0.0.1:24543moshi-hook loopback
127.0.0.1:22sshd loopback
100.80.139.9:22sshd Tailscale
100.80.139.9:443tailscaled Tailscale
10.0.1.1:22sshd
127.0.0.54:53systemd-resolve
100.80.139.9:18443tailscaled Tailscale
127.0.0.1:35851omp loopback
100.80.139.9:36486tailscaled Tailscale
10.0.0.1:22sshd
100.80.139.9:8317cli-proxy-api Tailscale
100.80.139.9:8443tailscaled Tailscale
127.0.0.53%lo:53systemd-resolve
[fd7a:115c:a1e0::533b:8b09]:43591tailscaled Tailscale
[fd7a:115c:a1e0::533b:8b09]:8443tailscaled Tailscale
[fd7a:115c:a1e0::533b:8b09]:18443tailscaled Tailscale
[fd7a:115c:a1e0::533b:8b09]:443tailscaled Tailscale
[fd7a:115c:a1e0::533b:8b09]:22sshd Tailscale

🔥 Firewall (UFW)

Status: active · 12 rules

RuleActionInterfaceFromNote
41641/udpALLOW—Anywhere
22/tcpALLOWtailscale0AnywhereSSH via Tailscale only
AnywhereALLOWtailscale0Anywhere
60000:61000/udpALLOWtailscale0AnywhereMosh via Tailscale
22/tcpALLOWdocker0Anywhere
41642/udpALLOW—AnywhereTailscale peer relay
41641/udp (v6)ALLOW—Anywhere (v6)
22/tcp (v6)ALLOWtailscale0Anywhere (v6)SSH via Tailscale only
Anywhere (v6)ALLOWtailscale0Anywhere (v6)
60000:61000/udp (v6)ALLOWtailscale0Anywhere (v6)Mosh via Tailscale
22/tcp (v6)ALLOWdocker0Anywhere (v6)
41642/udp (v6)ALLOW—Anywhere (v6)Tailscale peer relay

🔐 SSH Activity

0
Failed (24h)
4213
Sessions (24h)

🔑 Other SSH Logins (last 10)

TimeIPHostPort
08/10 21:0110.0.0.210.0.0.255786
08/10 21:0710.0.0.210.0.0.245038
08/10 21:1310.0.0.210.0.0.239734
08/10 21:1910.0.0.210.0.0.251384
08/10 21:2510.0.0.210.0.0.253822
08/10 21:3110.0.0.210.0.0.259592
08/10 21:3710.0.0.210.0.0.251776
08/10 21:4310.0.0.210.0.0.241860
08/10 21:4910.0.0.210.0.0.252796
08/10 21:5510.0.0.210.0.0.254166

🔍 Processes

⚠ High CPU (>50%)

UserPIDCPUCommand
99991907583102%/usr/local/bin/php
9999190750360.8%/usr/local/bin/php

✓ No high memory processes

🌐 Tailscale

12/18 online

NodeOSStatus
ssdnodethis machinelinuxOnline
appletvtvOSOnline
boxlinuxOnline
contabolinuxOnline
glkvmlinuxOnline
hkrouterlinuxOnline
ipad13tviOSOnline
ipadproiOSOnline
iphone-14-pro-maxiOSOnline
iphoneairiOSOnline
kitailinuxOnline
kitmbp16macOSOnline
tencentlinuxOnline
kitmacOSOffline
kitlegiongowindowsOffline
kits-macbook-airmacOSOffline
mobilerouterlinuxOffline
nodeiOSOffline
virtualkitmacOSOffline

🐣 Docker

✓ No TCP daemon exposure

ContainerStatusPorts
coolify-sentinelUp 19 hours (healthy)
so13t9jiakgbyzwp863dmvzu-103035573499Up 19 hours3000/tcp
lijg3ncf0yp8on32jagmeg0yUp 19 hours (healthy)5432/tcp
lkn2msiqhoymcuyaa64cnazj-065012572847Up 19 hours3000/tcp
ithh2dbx1jyjl6dejr3mre1kUp 19 hours (healthy)5432/tcp
enthri8p43s4atofatobcunp-232449789422Up 19 hours3000/tcp
coolifyUp 19 hours (healthy)8000/tcp, 8443/tcp, 9000/tcp, 100.80.139.9:8000->8080/tcp, 127.0.0.1:8000->8080/tcp
coolify-realtimeUp 19 hours (healthy)100.80.139.9:6001-6002->6001-6002/tcp
coolify-dbUp 19 hours (healthy)5432/tcp
coolify-redisUp 19 hours (healthy)6379/tcp

🚫 UFW Blocks (24h)

Top Source IPs

2478 10.0.0.3
    911 2001
    881 2400
    265 2
    234 112.140.184.197
    216 2604
    121 93.113.10.194
    109 10.0.0.2
     89 79.124.62.230
     81 79.124.62.134

Top Targeted Ports

2491 8000
    918 443
    519 23
    136 22
    109 23517
    101 3389
     89 3000
     82 1080
     81 1337
     80 2000

☁️ Cloudflare Tunnel

Uptime: Sun 2026-08-09 19:43:18 UTC · 0 domains routed

4
HA Connections
4
Edge Locations
3666
Request Errors
0
Active Sessions

Edges: sin14, sin19, sin20, sin22

DomainStatus

⚠ Attack Attempts (7d) 3727

TypeCount
Other3503
AWS credential probe142
App probe82

📋 History