🛡️ Security Report

Sunday, September 06, 2026 — 22:00 ICT
ssdnode-kitkit
💾
63G/473G
Disk
💻
6%
Memory
5.23, 4.08, 3.47
Load Avg
2 weeks, 1 day, 22 hours, 11 minutes
Uptime
active🛡 Fail2ban
2,955🚫 UFW Blocks
30📡 Ports
11🐣 Containers

📡 Open Ports

✓ ufw-docker active Docker ports on 0.0.0.0 are blocked from external access

Cross-referenced with Docker port mappings and UFW rules

Local AddressServiceType
127.0.0.1:37191agy-bin loopback
127.0.0.1:6012cloudflared loopback
100.80.139.9:22sshd Tailscale
10.0.0.1:22sshd
100.80.139.9:36486tailscaled Tailscale
127.0.0.1:8000docker-proxy loopback
127.0.0.1:24543moshi-hook loopback
100.80.139.9:18443tailscaled Tailscale
127.0.0.1:22sshd loopback
100.80.139.9:6001docker-proxy Docker internal
100.80.139.9:6002docker-proxy Docker internal
127.0.0.1:33253agy-bin loopback
127.0.0.53%lo:53systemd-resolve
127.0.0.1:35625agy-bin loopback
100.80.139.9:8000docker-proxy Docker internal
127.0.0.54:53systemd-resolve
127.0.0.1:35905agy-bin loopback
0.0.0.0:8080docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
100.80.139.9:8443tailscaled Tailscale
100.80.139.9:8317cli-proxy-api Tailscale
10.0.1.1:22sshd
0.0.0.0:443docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
0.0.0.0:80docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
[fd7a:115c:a1e0::533b:8b09]:8443tailscaled Tailscale
[fd7a:115c:a1e0::533b:8b09]:43591tailscaled Tailscale
[::]:8080docker-proxy Docker internal
[fd7a:115c:a1e0::533b:8b09]:22sshd Tailscale
[::]:443docker-proxy Docker internal
[::]:80docker-proxy Docker internal
[fd7a:115c:a1e0::533b:8b09]:18443tailscaled Tailscale

🔥 Firewall (UFW)

Status: active · 12 rules

RuleActionInterfaceFromNote
41641/udpALLOWAnywhere
22/tcpALLOWtailscale0AnywhereSSH via Tailscale only
AnywhereALLOWtailscale0Anywhere
60000:61000/udpALLOWtailscale0AnywhereMosh via Tailscale
22/tcpALLOWdocker0Anywhere
41642/udpALLOWAnywhereTailscale peer relay
41641/udp (v6)ALLOWAnywhere (v6)
22/tcp (v6)ALLOWtailscale0Anywhere (v6)SSH via Tailscale only
Anywhere (v6)ALLOWtailscale0Anywhere (v6)
60000:61000/udp (v6)ALLOWtailscale0Anywhere (v6)Mosh via Tailscale
22/tcp (v6)ALLOWdocker0Anywhere (v6)
41642/udp (v6)ALLOWAnywhere (v6)Tailscale peer relay

🔐 SSH Activity

0
Failed (24h)
968
Sessions (24h)

🔑 Other SSH Logins (last 10)

TimeIPHostPort
09/06 21:0110.0.0.210.0.0.256096
09/06 21:0710.0.0.210.0.0.257212
09/06 21:1310.0.0.210.0.0.247050
09/06 21:1910.0.0.210.0.0.239504
09/06 21:2510.0.0.210.0.0.252894
09/06 21:3110.0.0.210.0.0.234974
09/06 21:3710.0.0.210.0.0.237934
09/06 21:4310.0.0.210.0.0.250448
09/06 21:4910.0.0.210.0.0.234034
09/06 21:5510.0.0.210.0.0.239736

🔍 Processes

⚠ High CPU (>50%)

UserPIDCPUCommand
9999334402465.1%/usr/local/bin/php

✓ No high memory processes

🌐 Tailscale

10/18 online

NodeOSStatus
ssdnodethis machinelinuxOnline
boxlinuxOnline
contabolinuxOnline
glkvmlinuxOnline
hkrouterlinuxOnline
ipad13tviOSOnline
ipadproiOSOnline
iphoneairiOSOnline
kitailinuxOnline
kitmbp16macOSOnline
tencentlinuxOnline
appletvtvOSOffline
iphone-14-pro-maxiOSOffline
kitmacOSOffline
kitlegiongowindowsOffline
kits-macbook-airmacOSOffline
mobilerouterlinuxOffline
nodeiOSOffline
virtualkitmacOSOffline

🐣 Docker

✓ No TCP daemon exposure

ContainerStatusPorts
coolify-sentinelUp 2 weeks (healthy)
coolify-proxyUp 2 weeks (healthy)0.0.0.0:80->80/tcp, [::]:80->80/tcp, 0.0.0.0:443->443/tcp, [::]:443->443/tcp, 0.0.0.0:8080->8080/tcp, [::]:8080->8080/tcp, 0.0.0.0:443->443/udp, [::]:443->443/udp
so13t9jiakgbyzwp863dmvzu-103035573499Up 2 weeks3000/tcp
lijg3ncf0yp8on32jagmeg0yUp 2 weeks (healthy)5432/tcp
lkn2msiqhoymcuyaa64cnazj-065012572847Up 2 weeks3000/tcp
ithh2dbx1jyjl6dejr3mre1kUp 2 weeks (healthy)5432/tcp
enthri8p43s4atofatobcunp-232449789422Up 2 weeks3000/tcp
coolifyUp 2 weeks (healthy)8000/tcp, 8443/tcp, 9000/tcp, 100.80.139.9:8000->8080/tcp, 127.0.0.1:8000->8080/tcp
coolify-realtimeUp 2 weeks (healthy)100.80.139.9:6001-6002->6001-6002/tcp
coolify-dbUp 2 weeks (healthy)5432/tcp
coolify-redisUp 2 weeks (healthy)6379/tcp

🚫 UFW Blocks (24h)

Top Source IPs

1111 10.0.0.3
    270 2001
    150 204.76.203.4
    108 2
     74 77.239.124.253
     35 79.124.62.230
     30 79.124.62.134
     25 216.180.246.163
     24 176.65.148.243
     23 79.124.62.126

Top Targeted Ports

1113 8000
     46 22
     44 23
     30 3389
     24 3000
     24 1080
     22 2000
     22 1337
     21 4153
     14 8443

☁️ Cloudflare Tunnel

Uptime: Fri 2026-08-21 16:48:55 UTC · 0 domains routed

4
HA Connections
3
Edge Locations
68
Request Errors
0
Active Sessions

Edges: sin07, sin20, sin21

DomainStatus

⚠ Attack Attempts (7d) 40

TypeCount
Other39
App probe1

📋 History