🛡️ Security Report

Saturday, August 15, 2026 — 22:00 ICT
ssdnode-kitkit
💾
57G/473G
Disk
💻
7%
Memory
⚡
2.24, 2.66, 2.59
Load Avg
⏰
5 days, 19 hours, 17 minutes
Uptime
active🛡 Fail2ban
37,399🚫 UFW Blocks
29📡 Ports
11🐣 Containers

📡 Open Ports

✓ ufw-docker active Docker ports on 0.0.0.0 are blocked from external access

Cross-referenced with Docker port mappings and UFW rules

Local AddressServiceType
0.0.0.0:8080docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
100.80.139.9:6001docker-proxy Docker internal
100.80.139.9:6002docker-proxy Docker internal
127.0.0.1:38149omp loopback
127.0.0.1:6012cloudflared loopback
127.0.0.1:38885agy-bin loopback
100.80.139.9:8000docker-proxy Docker internal
127.0.0.1:8000docker-proxy loopback
127.0.0.1:24543moshi-hook loopback
127.0.0.1:22sshd loopback
100.80.139.9:22sshd Tailscale
10.0.1.1:22sshd
127.0.0.54:53systemd-resolve
100.80.139.9:18443tailscaled Tailscale
100.80.139.9:36486tailscaled Tailscale
0.0.0.0:443docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
0.0.0.0:80docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
127.0.0.1:46139agy-bin loopback
10.0.0.1:22sshd
100.80.139.9:8317cli-proxy-api Tailscale
100.80.139.9:8443tailscaled Tailscale
127.0.0.53%lo:53systemd-resolve
[::]:8080docker-proxy Docker internal
[fd7a:115c:a1e0::533b:8b09]:43591tailscaled Tailscale
[fd7a:115c:a1e0::533b:8b09]:8443tailscaled Tailscale
[::]:443docker-proxy Docker internal
[::]:80docker-proxy Docker internal
[fd7a:115c:a1e0::533b:8b09]:18443tailscaled Tailscale
[fd7a:115c:a1e0::533b:8b09]:22sshd Tailscale

🔥 Firewall (UFW)

Status: active · 12 rules

RuleActionInterfaceFromNote
41641/udpALLOW—Anywhere
22/tcpALLOWtailscale0AnywhereSSH via Tailscale only
AnywhereALLOWtailscale0Anywhere
60000:61000/udpALLOWtailscale0AnywhereMosh via Tailscale
22/tcpALLOWdocker0Anywhere
41642/udpALLOW—AnywhereTailscale peer relay
41641/udp (v6)ALLOW—Anywhere (v6)
22/tcp (v6)ALLOWtailscale0Anywhere (v6)SSH via Tailscale only
Anywhere (v6)ALLOWtailscale0Anywhere (v6)
60000:61000/udp (v6)ALLOWtailscale0Anywhere (v6)Mosh via Tailscale
22/tcp (v6)ALLOWdocker0Anywhere (v6)
41642/udp (v6)ALLOW—Anywhere (v6)Tailscale peer relay

🔐 SSH Activity

0
Failed (24h)
15101
Sessions (24h)

🔑 Other SSH Logins (last 10)

TimeIPHostPort
08/15 21:0110.0.0.210.0.0.241140
08/15 21:0710.0.0.210.0.0.244710
08/15 21:1310.0.0.210.0.0.240952
08/15 21:1910.0.0.210.0.0.245718
08/15 21:2510.0.0.210.0.0.252072
08/15 21:3110.0.0.210.0.0.249088
08/15 21:3710.0.0.210.0.0.243062
08/15 21:4310.0.0.210.0.0.250492
08/15 21:4910.0.0.210.0.0.258984
08/15 21:5510.0.0.210.0.0.250490

🔍 Processes

⚠ High CPU (>50%)

UserPIDCPUCommand
root1780804160%runc
9999178076294.8%/usr/local/bin/php
9999178077391.8%/usr/local/bin/php
root207322067.1%/root/.local/bin/agy-bin
root178077853.3%runc

✓ No high memory processes

🌐 Tailscale

9/18 online

NodeOSStatus
ssdnodethis machinelinuxOnline
appletvtvOSOnline
boxlinuxOnline
contabolinuxOnline
glkvmlinuxOnline
hkrouterlinuxOnline
ipadproiOSOnline
iphoneairiOSOnline
kitailinuxOnline
tencentlinuxOnline
ipad13tviOSOffline
iphone-14-pro-maxiOSOffline
kitmacOSOffline
kitlegiongowindowsOffline
kitmbp16macOSOffline
kits-macbook-airmacOSOffline
mobilerouterlinuxOffline
nodeiOSOffline
virtualkitmacOSOffline

🐣 Docker

✓ No TCP daemon exposure

ContainerStatusPorts
coolify-proxyUp 47 hours (healthy)0.0.0.0:80->80/tcp, [::]:80->80/tcp, 0.0.0.0:443->443/tcp, [::]:443->443/tcp, 0.0.0.0:8080->8080/tcp, [::]:8080->8080/tcp, 0.0.0.0:443->443/udp, [::]:443->443/udp
coolify-sentinelUp 3 days (healthy)
so13t9jiakgbyzwp863dmvzu-103035573499Up 5 days3000/tcp
lijg3ncf0yp8on32jagmeg0yUp 5 days (healthy)5432/tcp
lkn2msiqhoymcuyaa64cnazj-065012572847Up 5 days3000/tcp
ithh2dbx1jyjl6dejr3mre1kUp 5 days (healthy)5432/tcp
enthri8p43s4atofatobcunp-232449789422Up 5 days3000/tcp
coolifyUp 5 days (healthy)8000/tcp, 8443/tcp, 9000/tcp, 100.80.139.9:8000->8080/tcp, 127.0.0.1:8000->8080/tcp
coolify-realtimeUp 5 days (healthy)100.80.139.9:6001-6002->6001-6002/tcp
coolify-dbUp 5 days (healthy)5432/tcp
coolify-redisUp 5 days (healthy)6379/tcp

🚫 UFW Blocks (24h)

Top Source IPs

10428 10.0.0.3
   4172 2400
   2839 2001
   1362 10.0.0.2
   1122 2
    398 79.124.62.230
    389 79.124.62.134
    388 112.140.184.197
    301 2604
    280 79.124.62.126

Top Targeted Ports

10473 8000
   4371 443
   1955 23
   1362 23517
    482 22
    363 3389
    264 80
    252 3000
    246 1080
    233 1337

☁️ Cloudflare Tunnel

Uptime: Sun 2026-08-09 19:43:18 UTC · 0 domains routed

4
HA Connections
3
Edge Locations
5634
Request Errors
0
Active Sessions

Edges: sin12, sin18, sin19

DomainStatus

⚠ Attack Attempts (7d) 5655

TypeCount
Other5400
AWS credential probe143
App probe112

📋 History