🛡️ Security Report

Thursday, September 03, 2026 — 22:00 ICT
ssdnode-kitkit
💾
59G/473G
Disk
💻
6%
Memory
⚡
3.71, 3.38, 3.29
Load Avg
⏰
1 week, 5 days, 22 hours, 11 minutes
Uptime
active🛡 Fail2ban
23,144🚫 UFW Blocks
28📡 Ports
11🐣 Containers

📡 Open Ports

✓ ufw-docker active Docker ports on 0.0.0.0 are blocked from external access

Cross-referenced with Docker port mappings and UFW rules

Local AddressServiceType
127.0.0.1:37191agy-bin loopback
127.0.0.1:6012cloudflared loopback
100.80.139.9:22sshd Tailscale
10.0.0.1:22sshd
100.80.139.9:36486tailscaled Tailscale
127.0.0.1:8000docker-proxy loopback
127.0.0.1:24543moshi-hook loopback
100.80.139.9:18443tailscaled Tailscale
127.0.0.1:22sshd loopback
100.80.139.9:6001docker-proxy Docker internal
100.80.139.9:6002docker-proxy Docker internal
127.0.0.53%lo:53systemd-resolve
100.80.139.9:8000docker-proxy Docker internal
127.0.0.54:53systemd-resolve
127.0.0.1:35905agy-bin loopback
0.0.0.0:8080docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
100.80.139.9:8443tailscaled Tailscale
100.80.139.9:8317cli-proxy-api Tailscale
10.0.1.1:22sshd
0.0.0.0:443docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
0.0.0.0:80docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
[fd7a:115c:a1e0::533b:8b09]:8443tailscaled Tailscale
[fd7a:115c:a1e0::533b:8b09]:43591tailscaled Tailscale
[::]:8080docker-proxy Docker internal
[fd7a:115c:a1e0::533b:8b09]:22sshd Tailscale
[::]:443docker-proxy Docker internal
[::]:80docker-proxy Docker internal
[fd7a:115c:a1e0::533b:8b09]:18443tailscaled Tailscale

🔥 Firewall (UFW)

Status: active · 12 rules

RuleActionInterfaceFromNote
41641/udpALLOW—Anywhere
22/tcpALLOWtailscale0AnywhereSSH via Tailscale only
AnywhereALLOWtailscale0Anywhere
60000:61000/udpALLOWtailscale0AnywhereMosh via Tailscale
22/tcpALLOWdocker0Anywhere
41642/udpALLOW—AnywhereTailscale peer relay
41641/udp (v6)ALLOW—Anywhere (v6)
22/tcp (v6)ALLOWtailscale0Anywhere (v6)SSH via Tailscale only
Anywhere (v6)ALLOWtailscale0Anywhere (v6)
60000:61000/udp (v6)ALLOWtailscale0Anywhere (v6)Mosh via Tailscale
22/tcp (v6)ALLOWdocker0Anywhere (v6)
41642/udp (v6)ALLOW—Anywhere (v6)Tailscale peer relay

🔐 SSH Activity

0
Failed (24h)
8720
Sessions (24h)

🔑 Other SSH Logins (last 10)

TimeIPHostPort
09/03 21:0110.0.0.210.0.0.239854
09/03 21:0710.0.0.210.0.0.244594
09/03 21:1310.0.0.210.0.0.246682
09/03 21:1910.0.0.210.0.0.251696
09/03 21:2510.0.0.210.0.0.241794
09/03 21:3110.0.0.210.0.0.248458
09/03 21:3710.0.0.210.0.0.254464
09/03 21:4310.0.0.210.0.0.254214
09/03 21:4910.0.0.210.0.0.240216
09/03 21:5510.0.0.210.0.0.249310

🔍 Processes

⚠ High CPU (>50%)

UserPIDCPUCommand
999975282123%/usr/local/bin/php
999975276102%/usr/local/bin/php
99997526584.1%/usr/local/bin/php

✓ No high memory processes

🌐 Tailscale

11/18 online

NodeOSStatus
ssdnodethis machinelinuxOnline
boxlinuxOnline
contabolinuxOnline
glkvmlinuxOnline
hkrouterlinuxOnline
ipad13tviOSOnline
ipadproiOSOnline
iphone-14-pro-maxiOSOnline
iphoneairiOSOnline
kitailinuxOnline
kitmbp16macOSOnline
tencentlinuxOnline
appletvtvOSOffline
kitmacOSOffline
kitlegiongowindowsOffline
kits-macbook-airmacOSOffline
mobilerouterlinuxOffline
nodeiOSOffline
virtualkitmacOSOffline

🐣 Docker

✓ No TCP daemon exposure

ContainerStatusPorts
coolify-sentinelUp 12 days (healthy)
coolify-proxyUp 12 days (healthy)0.0.0.0:80->80/tcp, [::]:80->80/tcp, 0.0.0.0:443->443/tcp, [::]:443->443/tcp, 0.0.0.0:8080->8080/tcp, [::]:8080->8080/tcp, 0.0.0.0:443->443/udp, [::]:443->443/udp
so13t9jiakgbyzwp863dmvzu-103035573499Up 12 days3000/tcp
lijg3ncf0yp8on32jagmeg0yUp 12 days (healthy)5432/tcp
lkn2msiqhoymcuyaa64cnazj-065012572847Up 12 days3000/tcp
ithh2dbx1jyjl6dejr3mre1kUp 12 days (healthy)5432/tcp
enthri8p43s4atofatobcunp-232449789422Up 12 days3000/tcp
coolifyUp 12 days (healthy)8000/tcp, 8443/tcp, 9000/tcp, 100.80.139.9:8000->8080/tcp, 127.0.0.1:8000->8080/tcp
coolify-realtimeUp 12 days (healthy)100.80.139.9:6001-6002->6001-6002/tcp
coolify-dbUp 12 days (healthy)5432/tcp
coolify-redisUp 12 days (healthy)6379/tcp

🚫 UFW Blocks (24h)

Top Source IPs

10067 10.0.0.3
   1811 2001
    763 204.76.203.4
    761 2
    410 77.239.124.253
    347 2604
    255 79.124.62.230
    234 79.124.62.134
    202 64.89.162.189
    181 79.124.62.126

Top Targeted Ports

10091 8000
    337 23
    312 22
    248 3389
    191 3000
    188 1080
    183 2000
    172 4153
    172 1337
     80 8443

☁️ Cloudflare Tunnel

Uptime: Fri 2026-08-21 16:48:55 UTC · 0 domains routed

4
HA Connections
3
Edge Locations
56
Request Errors
0
Active Sessions

Edges: sin07, sin20, sin21

DomainStatus

⚠ Attack Attempts (7d) 44

TypeCount
Other44

📋 History