🛡️ Security Report

Tuesday, August 11, 2026 — 22:00 ICT
ssdnode-kitkit
💾
55G/473G
Disk
💻
6%
Memory
2.00, 1.75, 1.55
Load Avg
1 day, 19 hours, 17 minutes
Uptime
active🛡 Fail2ban
15,538🚫 UFW Blocks
23📡 Ports
10🐣 Containers

📡 Open Ports

✓ ufw-docker active Docker ports on 0.0.0.0 are blocked from external access

Cross-referenced with Docker port mappings and UFW rules

Local AddressServiceType
100.80.139.9:6001docker-proxy Docker internal
100.80.139.9:6002docker-proxy Docker internal
127.0.0.1:6012cloudflared loopback
100.80.139.9:8000docker-proxy Docker internal
127.0.0.1:8000docker-proxy loopback
127.0.0.1:24543moshi-hook loopback
127.0.0.1:22sshd loopback
100.80.139.9:22sshd Tailscale
100.80.139.9:443tailscaled Tailscale
10.0.1.1:22sshd
127.0.0.54:53systemd-resolve
100.80.139.9:18443tailscaled Tailscale
127.0.0.1:35851omp loopback
100.80.139.9:36486tailscaled Tailscale
10.0.0.1:22sshd
100.80.139.9:8317cli-proxy-api Tailscale
100.80.139.9:8443tailscaled Tailscale
127.0.0.53%lo:53systemd-resolve
[fd7a:115c:a1e0::533b:8b09]:43591tailscaled Tailscale
[fd7a:115c:a1e0::533b:8b09]:8443tailscaled Tailscale
[fd7a:115c:a1e0::533b:8b09]:18443tailscaled Tailscale
[fd7a:115c:a1e0::533b:8b09]:443tailscaled Tailscale
[fd7a:115c:a1e0::533b:8b09]:22sshd Tailscale

🔥 Firewall (UFW)

Status: active · 12 rules

RuleActionInterfaceFromNote
41641/udpALLOWAnywhere
22/tcpALLOWtailscale0AnywhereSSH via Tailscale only
AnywhereALLOWtailscale0Anywhere
60000:61000/udpALLOWtailscale0AnywhereMosh via Tailscale
22/tcpALLOWdocker0Anywhere
41642/udpALLOWAnywhereTailscale peer relay
41641/udp (v6)ALLOWAnywhere (v6)
22/tcp (v6)ALLOWtailscale0Anywhere (v6)SSH via Tailscale only
Anywhere (v6)ALLOWtailscale0Anywhere (v6)
60000:61000/udp (v6)ALLOWtailscale0Anywhere (v6)Mosh via Tailscale
22/tcp (v6)ALLOWdocker0Anywhere (v6)
41642/udp (v6)ALLOWAnywhere (v6)Tailscale peer relay

🔐 SSH Activity

0
Failed (24h)
6446
Sessions (24h)

🔑 Other SSH Logins (last 10)

TimeIPHostPort
08/11 21:0110.0.0.210.0.0.259498
08/11 21:0710.0.0.210.0.0.242476
08/11 21:1310.0.0.210.0.0.251078
08/11 21:1910.0.0.210.0.0.260728
08/11 21:2510.0.0.210.0.0.242694
08/11 21:3110.0.0.210.0.0.260274
08/11 21:3710.0.0.210.0.0.247804
08/11 21:4310.0.0.210.0.0.240384
08/11 21:4910.0.0.210.0.0.239588
08/11 21:5510.0.0.210.0.0.251078

🔍 Processes

⚠ High CPU (>50%)

UserPIDCPUCommand
root79286225%/bin/sh
99997912395.2%/usr/local/bin/php
root7926765.2%[runc]

✓ No high memory processes

🌐 Tailscale

9/18 online

NodeOSStatus
ssdnodethis machinelinuxOnline
appletvtvOSOnline
boxlinuxOnline
contabolinuxOnline
glkvmlinuxOnline
hkrouterlinuxOnline
ipad13tviOSOnline
iphoneairiOSOnline
kitailinuxOnline
tencentlinuxOnline
ipadproiOSOffline
iphone-14-pro-maxiOSOffline
kitmacOSOffline
kitlegiongowindowsOffline
kitmbp16macOSOffline
kits-macbook-airmacOSOffline
mobilerouterlinuxOffline
nodeiOSOffline
virtualkitmacOSOffline

🐣 Docker

✓ No TCP daemon exposure

ContainerStatusPorts
coolify-sentinelUp 43 hours (healthy)
so13t9jiakgbyzwp863dmvzu-103035573499Up 43 hours3000/tcp
lijg3ncf0yp8on32jagmeg0yUp 43 hours (healthy)5432/tcp
lkn2msiqhoymcuyaa64cnazj-065012572847Up 43 hours3000/tcp
ithh2dbx1jyjl6dejr3mre1kUp 43 hours (healthy)5432/tcp
enthri8p43s4atofatobcunp-232449789422Up 43 hours3000/tcp
coolifyUp 43 hours (healthy)8000/tcp, 8443/tcp, 9000/tcp, 100.80.139.9:8000->8080/tcp, 127.0.0.1:8000->8080/tcp
coolify-realtimeUp 43 hours (healthy)100.80.139.9:6001-6002->6001-6002/tcp
coolify-dbUp 43 hours (healthy)5432/tcp
coolify-redisUp 43 hours (healthy)6379/tcp

🚫 UFW Blocks (24h)

Top Source IPs

4365 10.0.0.3
   1979 2400
   1400 2001
    441 2
    382 112.140.184.197
    254 2604
    150 93.113.10.194
    125 79.124.62.230
    123 79.124.62.134
    111 10.0.0.2

Top Targeted Ports

4384 8000
   2084 443
    782 23
    212 22
    165 3389
    129 80
    128 3000
    120 1080
    119 1337
    117 2000

☁️ Cloudflare Tunnel

Uptime: Sun 2026-08-09 19:43:18 UTC · 0 domains routed

4
HA Connections
4
Edge Locations
4286
Request Errors
0
Active Sessions

Edges: sin14, sin19, sin20, sin22

DomainStatus

⚠ Attack Attempts (7d) 4347

TypeCount
Other4112
AWS credential probe142
App probe93

📋 History