🛡️ Security Report

Tuesday, September 01, 2026 — 22:00 ICT
ssdnode-kitkit
💾
64G/473G
Disk
💻
5%
Memory
⚡
2.38, 2.43, 2.91
Load Avg
⏰
1 week, 3 days, 22 hours, 11 minutes
Uptime
active🛡 Fail2ban
12,995🚫 UFW Blocks
28📡 Ports
11🐣 Containers

📡 Open Ports

✓ ufw-docker active Docker ports on 0.0.0.0 are blocked from external access

Cross-referenced with Docker port mappings and UFW rules

Local AddressServiceType
127.0.0.1:37191agy-bin loopback
127.0.0.1:6012cloudflared loopback
100.80.139.9:22sshd Tailscale
10.0.0.1:22sshd
100.80.139.9:36486tailscaled Tailscale
127.0.0.1:8000docker-proxy loopback
127.0.0.1:24543moshi-hook loopback
100.80.139.9:18443tailscaled Tailscale
127.0.0.1:22sshd loopback
100.80.139.9:6001docker-proxy Docker internal
100.80.139.9:6002docker-proxy Docker internal
127.0.0.53%lo:53systemd-resolve
100.80.139.9:8000docker-proxy Docker internal
127.0.0.54:53systemd-resolve
127.0.0.1:35905agy-bin loopback
0.0.0.0:8080docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
100.80.139.9:8443tailscaled Tailscale
100.80.139.9:8317cli-proxy-api Tailscale
10.0.1.1:22sshd
0.0.0.0:443docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
0.0.0.0:80docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
[fd7a:115c:a1e0::533b:8b09]:8443tailscaled Tailscale
[fd7a:115c:a1e0::533b:8b09]:43591tailscaled Tailscale
[::]:8080docker-proxy Docker internal
[fd7a:115c:a1e0::533b:8b09]:22sshd Tailscale
[::]:443docker-proxy Docker internal
[::]:80docker-proxy Docker internal
[fd7a:115c:a1e0::533b:8b09]:18443tailscaled Tailscale

🔥 Firewall (UFW)

Status: active · 12 rules

RuleActionInterfaceFromNote
41641/udpALLOW—Anywhere
22/tcpALLOWtailscale0AnywhereSSH via Tailscale only
AnywhereALLOWtailscale0Anywhere
60000:61000/udpALLOWtailscale0AnywhereMosh via Tailscale
22/tcpALLOWdocker0Anywhere
41642/udpALLOW—AnywhereTailscale peer relay
41641/udp (v6)ALLOW—Anywhere (v6)
22/tcp (v6)ALLOWtailscale0Anywhere (v6)SSH via Tailscale only
Anywhere (v6)ALLOWtailscale0Anywhere (v6)
60000:61000/udp (v6)ALLOWtailscale0Anywhere (v6)Mosh via Tailscale
22/tcp (v6)ALLOWdocker0Anywhere (v6)
41642/udp (v6)ALLOW—Anywhere (v6)Tailscale peer relay

🔐 SSH Activity

0
Failed (24h)
4984
Sessions (24h)

🔑 Other SSH Logins (last 10)

TimeIPHostPort
09/01 21:0110.0.0.210.0.0.243456
09/01 21:0710.0.0.210.0.0.253114
09/01 21:1310.0.0.210.0.0.244136
09/01 21:1910.0.0.210.0.0.260946
09/01 21:2510.0.0.210.0.0.253258
09/01 21:3110.0.0.210.0.0.244226
09/01 21:3710.0.0.210.0.0.252618
09/01 21:4310.0.0.210.0.0.233102
09/01 21:4910.0.0.210.0.0.255054
09/01 21:5510.0.0.210.0.0.232902

🔍 Processes

⚠ High CPU (>50%)

UserPIDCPUCommand
root3537652133%/root/cliproxyapi/cli-proxy-api
99993537614103%/usr/local/bin/php

✓ No high memory processes

🌐 Tailscale

12/18 online

NodeOSStatus
ssdnodethis machinelinuxOnline
boxlinuxOnline
contabolinuxOnline
glkvmlinuxOnline
hkrouterlinuxOnline
ipad13tviOSOnline
ipadproiOSOnline
iphone-14-pro-maxiOSOnline
iphoneairiOSOnline
kitailinuxOnline
kitmbp16macOSOnline
tencentlinuxOnline
virtualkitmacOSOnline
appletvtvOSOffline
kitmacOSOffline
kitlegiongowindowsOffline
kits-macbook-airmacOSOffline
mobilerouterlinuxOffline
nodeiOSOffline

🐣 Docker

✓ No TCP daemon exposure

ContainerStatusPorts
coolify-sentinelUp 10 days (healthy)
coolify-proxyUp 10 days (healthy)0.0.0.0:80->80/tcp, [::]:80->80/tcp, 0.0.0.0:443->443/tcp, [::]:443->443/tcp, 0.0.0.0:8080->8080/tcp, [::]:8080->8080/tcp, 0.0.0.0:443->443/udp, [::]:443->443/udp
so13t9jiakgbyzwp863dmvzu-103035573499Up 10 days3000/tcp
lijg3ncf0yp8on32jagmeg0yUp 10 days (healthy)5432/tcp
lkn2msiqhoymcuyaa64cnazj-065012572847Up 10 days3000/tcp
ithh2dbx1jyjl6dejr3mre1kUp 10 days (healthy)5432/tcp
enthri8p43s4atofatobcunp-232449789422Up 10 days3000/tcp
coolifyUp 10 days (healthy)8000/tcp, 8443/tcp, 9000/tcp, 100.80.139.9:8000->8080/tcp, 127.0.0.1:8000->8080/tcp
coolify-realtimeUp 10 days (healthy)100.80.139.9:6001-6002->6001-6002/tcp
coolify-dbUp 10 days (healthy)5432/tcp
coolify-redisUp 10 days (healthy)6379/tcp

🚫 UFW Blocks (24h)

Top Source IPs

5968 10.0.0.3
   1027 2001
    441 2
    285 204.76.203.4
    236 77.239.124.253
    147 79.124.62.230
    130 79.124.62.134
    101 2604
     99 79.124.62.126
     95 2607

Top Targeted Ports

5981 8000
    212 23
    181 22
    139 3389
    110 1080
    108 3000
    101 2000
     98 4153
     98 1337
     55 8443

☁️ Cloudflare Tunnel

Uptime: Fri 2026-08-21 16:48:55 UTC · 0 domains routed

4
HA Connections
3
Edge Locations
37
Request Errors
0
Active Sessions

Edges: sin07, sin20, sin21

DomainStatus

⚠ Attack Attempts (7d) 25

TypeCount
Other25

📋 History