🛡️ Security Report

Thursday, August 27, 2026 — 22:00 ICT
ssdnode-kitkit
💾
62G/473G
Disk
💻
6%
Memory
3.21, 2.22, 2.02
Load Avg
5 days, 22 hours, 11 minutes
Uptime
active🛡 Fail2ban
23,012🚫 UFW Blocks
28📡 Ports
11🐣 Containers

📡 Open Ports

✓ ufw-docker active Docker ports on 0.0.0.0 are blocked from external access

Cross-referenced with Docker port mappings and UFW rules

Local AddressServiceType
127.0.0.1:37549agy-bin loopback
127.0.0.1:6012cloudflared loopback
100.80.139.9:22sshd Tailscale
10.0.0.1:22sshd
100.80.139.9:36486tailscaled Tailscale
127.0.0.1:8000docker-proxy loopback
127.0.0.1:24543moshi-hook loopback
100.80.139.9:18443tailscaled Tailscale
127.0.0.1:22sshd loopback
100.80.139.9:6001docker-proxy Docker internal
100.80.139.9:6002docker-proxy Docker internal
127.0.0.53%lo:53systemd-resolve
100.80.139.9:8000docker-proxy Docker internal
127.0.0.54:53systemd-resolve
127.0.0.1:46059agy-bin loopback
0.0.0.0:8080docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
100.80.139.9:8443tailscaled Tailscale
100.80.139.9:8317cli-proxy-api Tailscale
10.0.1.1:22sshd
0.0.0.0:443docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
0.0.0.0:80docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
[fd7a:115c:a1e0::533b:8b09]:8443tailscaled Tailscale
[fd7a:115c:a1e0::533b:8b09]:43591tailscaled Tailscale
[::]:8080docker-proxy Docker internal
[fd7a:115c:a1e0::533b:8b09]:22sshd Tailscale
[::]:443docker-proxy Docker internal
[::]:80docker-proxy Docker internal
[fd7a:115c:a1e0::533b:8b09]:18443tailscaled Tailscale

🔥 Firewall (UFW)

Status: active · 12 rules

RuleActionInterfaceFromNote
41641/udpALLOWAnywhere
22/tcpALLOWtailscale0AnywhereSSH via Tailscale only
AnywhereALLOWtailscale0Anywhere
60000:61000/udpALLOWtailscale0AnywhereMosh via Tailscale
22/tcpALLOWdocker0Anywhere
41642/udpALLOWAnywhereTailscale peer relay
41641/udp (v6)ALLOWAnywhere (v6)
22/tcp (v6)ALLOWtailscale0Anywhere (v6)SSH via Tailscale only
Anywhere (v6)ALLOWtailscale0Anywhere (v6)
60000:61000/udp (v6)ALLOWtailscale0Anywhere (v6)Mosh via Tailscale
22/tcp (v6)ALLOWdocker0Anywhere (v6)
41642/udp (v6)ALLOWAnywhere (v6)Tailscale peer relay

🔐 SSH Activity

0
Failed (24h)
7730
Sessions (24h)

🔑 Other SSH Logins (last 10)

TimeIPHostPort
08/27 21:0110.0.0.210.0.0.252662
08/27 21:0710.0.0.210.0.0.250054
08/27 21:1310.0.0.210.0.0.249834
08/27 21:1910.0.0.210.0.0.253562
08/27 21:2510.0.0.210.0.0.247892
08/27 21:3110.0.0.210.0.0.258360
08/27 21:3710.0.0.210.0.0.236276
08/27 21:4310.0.0.210.0.0.251926
08/27 21:4910.0.0.210.0.0.242480
08/27 21:5510.0.0.210.0.0.259634

🔍 Processes

⚠ High CPU (>50%)

UserPIDCPUCommand
99992982062108%/usr/local/bin/php

✓ No high memory processes

🌐 Tailscale

13/18 online

NodeOSStatus
ssdnodethis machinelinuxOnline
appletvtvOSOnline
boxlinuxOnline
contabolinuxOnline
glkvmlinuxOnline
hkrouterlinuxOnline
ipad13tviOSOnline
ipadproiOSOnline
iphone-14-pro-maxiOSOnline
iphoneairiOSOnline
kitailinuxOnline
kitmbp16macOSOnline
tencentlinuxOnline
virtualkitmacOSOnline
kitmacOSOffline
kitlegiongowindowsOffline
kits-macbook-airmacOSOffline
mobilerouterlinuxOffline
nodeiOSOffline

🐣 Docker

✓ No TCP daemon exposure

ContainerStatusPorts
coolify-sentinelUp 5 days (healthy)
coolify-proxyUp 5 days (healthy)0.0.0.0:80->80/tcp, [::]:80->80/tcp, 0.0.0.0:443->443/tcp, [::]:443->443/tcp, 0.0.0.0:8080->8080/tcp, [::]:8080->8080/tcp, 0.0.0.0:443->443/udp, [::]:443->443/udp
so13t9jiakgbyzwp863dmvzu-103035573499Up 5 days3000/tcp
lijg3ncf0yp8on32jagmeg0yUp 5 days (healthy)5432/tcp
lkn2msiqhoymcuyaa64cnazj-065012572847Up 5 days3000/tcp
ithh2dbx1jyjl6dejr3mre1kUp 5 days (healthy)5432/tcp
enthri8p43s4atofatobcunp-232449789422Up 5 days3000/tcp
coolifyUp 5 days (healthy)8000/tcp, 8443/tcp, 9000/tcp, 100.80.139.9:8000->8080/tcp, 127.0.0.1:8000->8080/tcp
coolify-realtimeUp 5 days (healthy)100.80.139.9:6001-6002->6001-6002/tcp
coolify-dbUp 5 days (healthy)5432/tcp
coolify-redisUp 5 days (healthy)6379/tcp

🚫 UFW Blocks (24h)

Top Source IPs

11217 10.0.0.3
   1851 2001
    823 2
    495 77.239.124.253
    242 79.124.62.134
    236 79.124.62.230
    170 79.124.62.126
    158 2607
    127 31.220.3.165
     87 2400

Top Targeted Ports

11241 8000
    431 23
    301 22
    250 3389
    205 1080
    195 3000
    176 2000
    175 1337
    167 4153
     90 8443

☁️ Cloudflare Tunnel

Uptime: Fri 2026-08-21 16:48:55 UTC · 0 domains routed

4
HA Connections
3
Edge Locations
12
Request Errors
0
Active Sessions

Edges: sin07, sin20, sin21

DomainStatus

⚠ Attack Attempts (7d) 12

TypeCount
Other10
Path traversal1
AWS credential probe1

📋 History