🛡️ Security Report

Monday, September 07, 2026 — 22:00 ICT
ssdnode-kitkit
💾
61G/473G
Disk
💻
6%
Memory
⚡
4.04, 3.70, 3.73
Load Avg
⏰
2 weeks, 2 days, 22 hours, 11 minutes
Uptime
active🛡 Fail2ban
7,866🚫 UFW Blocks
30📡 Ports
10🐣 Containers

📡 Open Ports

✓ ufw-docker active Docker ports on 0.0.0.0 are blocked from external access

Cross-referenced with Docker port mappings and UFW rules

Local AddressServiceType
127.0.0.1:6012cloudflared loopback
100.80.139.9:22sshd Tailscale
10.0.0.1:22sshd
100.80.139.9:36486tailscaled Tailscale
127.0.0.1:24543moshi-hook loopback
100.80.139.9:18443tailscaled Tailscale
127.0.0.1:22sshd loopback
127.0.0.1:33253agy-bin loopback
127.0.0.53%lo:53systemd-resolve
127.0.0.1:35625agy-bin loopback
127.0.0.54:53systemd-resolve
0.0.0.0:8080docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
0.0.0.0:8000docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
100.80.139.9:8443tailscaled Tailscale
100.80.139.9:8317cli-proxy-api Tailscale
0.0.0.0:6001docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
0.0.0.0:6002docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
10.0.1.1:22sshd
0.0.0.0:443docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
0.0.0.0:80docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
[fd7a:115c:a1e0::533b:8b09]:8443tailscaled Tailscale
[fd7a:115c:a1e0::533b:8b09]:43591tailscaled Tailscale
[::]:8080docker-proxy Docker internal
[::]:8000docker-proxy Docker internal
[::]:6001docker-proxy Docker internal
[::]:6002docker-proxy Docker internal
[fd7a:115c:a1e0::533b:8b09]:22sshd Tailscale
[::]:443docker-proxy Docker internal
[::]:80docker-proxy Docker internal
[fd7a:115c:a1e0::533b:8b09]:18443tailscaled Tailscale

🔥 Firewall (UFW)

Status: active · 12 rules

RuleActionInterfaceFromNote
41641/udpALLOW—Anywhere
22/tcpALLOWtailscale0AnywhereSSH via Tailscale only
AnywhereALLOWtailscale0Anywhere
60000:61000/udpALLOWtailscale0AnywhereMosh via Tailscale
22/tcpALLOWdocker0Anywhere
41642/udpALLOW—AnywhereTailscale peer relay
41641/udp (v6)ALLOW—Anywhere (v6)
22/tcp (v6)ALLOWtailscale0Anywhere (v6)SSH via Tailscale only
Anywhere (v6)ALLOWtailscale0Anywhere (v6)
60000:61000/udp (v6)ALLOWtailscale0Anywhere (v6)Mosh via Tailscale
22/tcp (v6)ALLOWdocker0Anywhere (v6)
41642/udp (v6)ALLOW—Anywhere (v6)Tailscale peer relay

🔐 SSH Activity

0
Failed (24h)
1577
Sessions (24h)

🔑 Other SSH Logins (last 10)

TimeIPHostPort
09/07 06:0710.0.0.210.0.0.252466
09/07 06:1310.0.0.210.0.0.259976
09/07 06:1910.0.0.210.0.0.247692
09/07 06:2510.0.0.210.0.0.253134
09/07 06:3110.0.0.210.0.0.233110
09/07 06:3710.0.0.210.0.0.237992
09/07 06:4310.0.0.210.0.0.253322
09/07 06:4910.0.0.210.0.0.259920
09/07 06:5510.0.0.210.0.0.242722
09/07 07:0110.0.0.210.0.0.238526

🔍 Processes

⚠ High CPU (>50%)

UserPIDCPUCommand
9999147250878.7%/usr/local/bin/php
9999147252675.0%/usr/local/bin/php
9999147242869.6%[php]

✓ No high memory processes

🌐 Tailscale

11/18 online

NodeOSStatus
ssdnodethis machinelinuxOnline
boxlinuxOnline
contabolinuxOnline
glkvmlinuxOnline
hkrouterlinuxOnline
ipad13tviOSOnline
ipadproiOSOnline
iphone-14-pro-maxiOSOnline
iphoneairiOSOnline
kitailinuxOnline
kitmbp16macOSOnline
tencentlinuxOnline
appletvtvOSOffline
kitmacOSOffline
kitlegiongowindowsOffline
kits-macbook-airmacOSOffline
mobilerouterlinuxOffline
nodeiOSOffline
virtualkitmacOSOffline

🐣 Docker

✓ No TCP daemon exposure

ContainerStatusPorts
coolifyUp 9 hours (healthy)8000/tcp, 8443/tcp, 9000/tcp, 0.0.0.0:8000->8080/tcp, [::]:8000->8080/tcp
coolify-dbUp 9 hours (healthy)5432/tcp
coolify-redisUp 9 hours (healthy)6379/tcp
coolify-realtimeUp 9 hours (healthy)0.0.0.0:6001-6002->6001-6002/tcp, [::]:6001-6002->6001-6002/tcp
coolify-proxyUp 9 hours (healthy)0.0.0.0:80->80/tcp, [::]:80->80/tcp, 0.0.0.0:443->443/tcp, [::]:443->443/tcp, 0.0.0.0:8080->8080/tcp, [::]:8080->8080/tcp, 0.0.0.0:443->443/udp, [::]:443->443/udp
so13t9jiakgbyzwp863dmvzu-103035573499Up 9 hours3000/tcp
lijg3ncf0yp8on32jagmeg0yUp 9 hours (healthy)5432/tcp
lkn2msiqhoymcuyaa64cnazj-065012572847Up 9 hours3000/tcp
ithh2dbx1jyjl6dejr3mre1kUp 9 hours (healthy)5432/tcp
enthri8p43s4atofatobcunp-232449789422Up 9 hours3000/tcp

🚫 UFW Blocks (24h)

Top Source IPs

1897 10.0.0.3
    670 2001
    480 204.76.203.4
    268 2
    223 77.239.124.253
    128 10.0.1.9
    117 79.124.62.230
    106 79.124.62.134
     91 79.124.62.126
     71 10.0.1.11

Top Targeted Ports

1901 8000
    324 22
    135 23
     87 3389
     66 3000
     64 2000
     64 1337
     63 1080
     58 4153
     27 2221

☁️ Cloudflare Tunnel

Uptime: Fri 2026-08-21 16:48:55 UTC · 0 domains routed

4
HA Connections
3
Edge Locations
71
Request Errors
0
Active Sessions

Edges: sin07, sin20, sin21

DomainStatus

⚠ Attack Attempts (7d) 43

TypeCount
Other42
App probe1

📋 History