🛡️ Security Report

Friday, August 21, 2026 — 22:00 ICT
ssdnode-kitkit
💾
58G/473G
Disk
💻
6%
Memory
2.88, 2.02, 1.72
Load Avg
1 week, 4 days, 19 hours, 17 minutes
Uptime
active🛡 Fail2ban
28,056🚫 UFW Blocks
27📡 Ports
11🐣 Containers

📡 Open Ports

✓ ufw-docker active Docker ports on 0.0.0.0 are blocked from external access

Cross-referenced with Docker port mappings and UFW rules

Local AddressServiceType
0.0.0.0:8080docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
100.80.139.9:6001docker-proxy Docker internal
100.80.139.9:6002docker-proxy Docker internal
127.0.0.1:38149omp loopback
127.0.0.1:6012cloudflared loopback
100.80.139.9:8000docker-proxy Docker internal
127.0.0.1:8000docker-proxy loopback
127.0.0.1:24543moshi-hook loopback
127.0.0.1:22sshd loopback
100.80.139.9:22sshd Tailscale
10.0.1.1:22sshd
127.0.0.54:53systemd-resolve
100.80.139.9:18443tailscaled Tailscale
100.80.139.9:36486tailscaled Tailscale
0.0.0.0:443docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
0.0.0.0:80docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
10.0.0.1:22sshd
100.80.139.9:8317cli-proxy-api Tailscale
100.80.139.9:8443tailscaled Tailscale
127.0.0.53%lo:53systemd-resolve
[::]:8080docker-proxy Docker internal
[fd7a:115c:a1e0::533b:8b09]:43591tailscaled Tailscale
[fd7a:115c:a1e0::533b:8b09]:8443tailscaled Tailscale
[::]:443docker-proxy Docker internal
[::]:80docker-proxy Docker internal
[fd7a:115c:a1e0::533b:8b09]:18443tailscaled Tailscale
[fd7a:115c:a1e0::533b:8b09]:22sshd Tailscale

🔥 Firewall (UFW)

Status: active · 12 rules

RuleActionInterfaceFromNote
41641/udpALLOWAnywhere
22/tcpALLOWtailscale0AnywhereSSH via Tailscale only
AnywhereALLOWtailscale0Anywhere
60000:61000/udpALLOWtailscale0AnywhereMosh via Tailscale
22/tcpALLOWdocker0Anywhere
41642/udpALLOWAnywhereTailscale peer relay
41641/udp (v6)ALLOWAnywhere (v6)
22/tcp (v6)ALLOWtailscale0Anywhere (v6)SSH via Tailscale only
Anywhere (v6)ALLOWtailscale0Anywhere (v6)
60000:61000/udp (v6)ALLOWtailscale0Anywhere (v6)Mosh via Tailscale
22/tcp (v6)ALLOWdocker0Anywhere (v6)
41642/udp (v6)ALLOWAnywhere (v6)Tailscale peer relay

🔐 SSH Activity

0
Failed (24h)
9504
Sessions (24h)

🔑 Other SSH Logins (last 10)

TimeIPHostPort
08/21 21:0110.0.0.210.0.0.234174
08/21 21:0710.0.0.210.0.0.238394
08/21 21:1310.0.0.210.0.0.249214
08/21 21:1910.0.0.210.0.0.243454
08/21 21:2510.0.0.210.0.0.245078
08/21 21:3110.0.0.210.0.0.235300
08/21 21:3710.0.0.210.0.0.238722
08/21 21:4310.0.0.210.0.0.260474
08/21 21:4910.0.0.210.0.0.238956
08/21 21:5510.0.0.210.0.0.242036

🔍 Processes

⚠ High CPU (>50%)

UserPIDCPUCommand
root4011431225%[runc]
99994011414130%/usr/local/bin/php

✓ No high memory processes

🌐 Tailscale

9/18 online

NodeOSStatus
ssdnodethis machinelinuxOnline
appletvtvOSOnline
boxlinuxOnline
contabolinuxOnline
glkvmlinuxOnline
hkrouterlinuxOnline
ipadproiOSOnline
iphoneairiOSOnline
kitailinuxOnline
tencentlinuxOnline
ipad13tviOSOffline
iphone-14-pro-maxiOSOffline
kitmacOSOffline
kitlegiongowindowsOffline
kitmbp16macOSOffline
kits-macbook-airmacOSOffline
mobilerouterlinuxOffline
nodeiOSOffline
virtualkitmacOSOffline

🐣 Docker

✓ No TCP daemon exposure

ContainerStatusPorts
coolify-proxyUp 7 days (healthy)0.0.0.0:80->80/tcp, [::]:80->80/tcp, 0.0.0.0:443->443/tcp, [::]:443->443/tcp, 0.0.0.0:8080->8080/tcp, [::]:8080->8080/tcp, 0.0.0.0:443->443/udp, [::]:443->443/udp
coolify-sentinelUp 9 days (healthy)
so13t9jiakgbyzwp863dmvzu-103035573499Up 11 days3000/tcp
lijg3ncf0yp8on32jagmeg0yUp 11 days (healthy)5432/tcp
lkn2msiqhoymcuyaa64cnazj-065012572847Up 11 days3000/tcp
ithh2dbx1jyjl6dejr3mre1kUp 11 days (healthy)5432/tcp
enthri8p43s4atofatobcunp-232449789422Up 11 days3000/tcp
coolifyUp 11 days (healthy)8000/tcp, 8443/tcp, 9000/tcp, 100.80.139.9:8000->8080/tcp, 127.0.0.1:8000->8080/tcp
coolify-realtimeUp 11 days (healthy)100.80.139.9:6001-6002->6001-6002/tcp
coolify-dbUp 11 days (healthy)5432/tcp
coolify-redisUp 11 days (healthy)6379/tcp

🚫 UFW Blocks (24h)

Top Source IPs

7958 10.0.0.3
   2246 10.0.0.2
   2235 2001
    928 2
    429 79.124.62.230
    406 79.124.62.134
    321 146.190.164.28
    298 79.124.62.126
    272 31.220.3.165
    242 204.76.203.225

Top Targeted Ports

7988 8000
   2246 23517
   1258 23
    453 22
    324 3389
    239 3000
    234 1080
    218 2000
    210 1337
    209 4153

☁️ Cloudflare Tunnel

Uptime: Sun 2026-08-09 19:43:18 UTC · 0 domains routed

4
HA Connections
4
Edge Locations
5650
Request Errors
0
Active Sessions

Edges: sin12, sin15, sin18, sin19

DomainStatus

⚠ Attack Attempts (7d) 20

TypeCount
Other11
App probe8
AWS credential probe1

📋 History