🛡️ Security Report

Tuesday, September 08, 2026 — 22:00 ICT
ssdnode-kitkit
💾
61G/473G
Disk
💻
6%
Memory
⚡
3.15, 3.29, 3.22
Load Avg
⏰
2 weeks, 3 days, 22 hours, 11 minutes
Uptime
active🛡 Fail2ban
13,017🚫 UFW Blocks
30📡 Ports
10🐣 Containers

📡 Open Ports

✓ ufw-docker active Docker ports on 0.0.0.0 are blocked from external access

Cross-referenced with Docker port mappings and UFW rules

Local AddressServiceType
127.0.0.1:6012cloudflared loopback
100.80.139.9:22sshd Tailscale
10.0.0.1:22sshd
100.80.139.9:36486tailscaled Tailscale
127.0.0.1:24543moshi-hook loopback
100.80.139.9:18443tailscaled Tailscale
127.0.0.1:22sshd loopback
127.0.0.1:33253agy-bin loopback
127.0.0.53%lo:53systemd-resolve
127.0.0.1:35625agy-bin loopback
127.0.0.54:53systemd-resolve
0.0.0.0:8080docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
0.0.0.0:8000docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
100.80.139.9:8443tailscaled Tailscale
100.80.139.9:8317cli-proxy-api Tailscale
0.0.0.0:6001docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
0.0.0.0:6002docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
10.0.1.1:22sshd
0.0.0.0:443docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
0.0.0.0:80docker-proxy Docker 0.0.0.0 (ufw-docker blocked)
[fd7a:115c:a1e0::533b:8b09]:8443tailscaled Tailscale
[fd7a:115c:a1e0::533b:8b09]:43591tailscaled Tailscale
[::]:8080docker-proxy Docker internal
[::]:8000docker-proxy Docker internal
[::]:6001docker-proxy Docker internal
[::]:6002docker-proxy Docker internal
[fd7a:115c:a1e0::533b:8b09]:22sshd Tailscale
[::]:443docker-proxy Docker internal
[::]:80docker-proxy Docker internal
[fd7a:115c:a1e0::533b:8b09]:18443tailscaled Tailscale

🔥 Firewall (UFW)

Status: active · 12 rules

RuleActionInterfaceFromNote
41641/udpALLOW—Anywhere
22/tcpALLOWtailscale0AnywhereSSH via Tailscale only
AnywhereALLOWtailscale0Anywhere
60000:61000/udpALLOWtailscale0AnywhereMosh via Tailscale
22/tcpALLOWdocker0Anywhere
41642/udpALLOW—AnywhereTailscale peer relay
41641/udp (v6)ALLOW—Anywhere (v6)
22/tcp (v6)ALLOWtailscale0Anywhere (v6)SSH via Tailscale only
Anywhere (v6)ALLOWtailscale0Anywhere (v6)
60000:61000/udp (v6)ALLOWtailscale0Anywhere (v6)Mosh via Tailscale
22/tcp (v6)ALLOWdocker0Anywhere (v6)
41642/udp (v6)ALLOW—Anywhere (v6)Tailscale peer relay

🔐 SSH Activity

0
Failed (24h)
1598
Sessions (24h)

🔑 Other SSH Logins (last 10)

TimeIPHostPort
09/07 06:0710.0.0.210.0.0.252466
09/07 06:1310.0.0.210.0.0.259976
09/07 06:1910.0.0.210.0.0.247692
09/07 06:2510.0.0.210.0.0.253134
09/07 06:3110.0.0.210.0.0.233110
09/07 06:3710.0.0.210.0.0.237992
09/07 06:4310.0.0.210.0.0.253322
09/07 06:4910.0.0.210.0.0.259920
09/07 06:5510.0.0.210.0.0.242722
09/07 07:0110.0.0.210.0.0.238526

🔍 Processes

⚠ High CPU (>50%)

UserPIDCPUCommand
99993667119240%/usr/local/bin/php
99993667131145%/bin/sh

✓ No high memory processes

🌐 Tailscale

11/18 online

NodeOSStatus
ssdnodethis machinelinuxOnline
boxlinuxOnline
contabolinuxOnline
glkvmlinuxOnline
hkrouterlinuxOnline
ipad13tviOSOnline
ipadproiOSOnline
iphone-14-pro-maxiOSOnline
iphoneairiOSOnline
kitailinuxOnline
kitmbp16macOSOnline
tencentlinuxOnline
appletvtvOSOffline
kitmacOSOffline
kitlegiongowindowsOffline
kits-macbook-airmacOSOffline
mobilerouterlinuxOffline
nodeiOSOffline
virtualkitmacOSOffline

🐣 Docker

✓ No TCP daemon exposure

ContainerStatusPorts
coolifyUp 33 hours (healthy)8000/tcp, 8443/tcp, 9000/tcp, 0.0.0.0:8000->8080/tcp, [::]:8000->8080/tcp
coolify-dbUp 33 hours (healthy)5432/tcp
coolify-redisUp 33 hours (healthy)6379/tcp
coolify-realtimeUp 33 hours (healthy)0.0.0.0:6001-6002->6001-6002/tcp, [::]:6001-6002->6001-6002/tcp
coolify-proxyUp 33 hours (healthy)0.0.0.0:80->80/tcp, [::]:80->80/tcp, 0.0.0.0:443->443/tcp, [::]:443->443/tcp, 0.0.0.0:8080->8080/tcp, [::]:8080->8080/tcp, 0.0.0.0:443->443/udp, [::]:443->443/udp
so13t9jiakgbyzwp863dmvzu-103035573499Up 33 hours3000/tcp
lijg3ncf0yp8on32jagmeg0yUp 33 hours (healthy)5432/tcp
lkn2msiqhoymcuyaa64cnazj-065012572847Up 33 hours3000/tcp
ithh2dbx1jyjl6dejr3mre1kUp 33 hours (healthy)5432/tcp
enthri8p43s4atofatobcunp-232449789422Up 33 hours3000/tcp

🚫 UFW Blocks (24h)

Top Source IPs

1897 10.0.0.3
   1076 2001
    893 204.76.203.4
    452 2
    397 77.239.124.253
    317 10.0.1.9
    226 79.124.62.230
    199 79.124.62.134
    174 2604
    160 79.124.62.126

Top Targeted Ports

1901 8000
    603 22
    253 23
    155 3389
    111 3000
    107 2000
    106 1337
    106 1080
     95 4153
     53 8443

☁️ Cloudflare Tunnel

Uptime: Fri 2026-08-21 16:48:55 UTC · 0 domains routed

4
HA Connections
3
Edge Locations
77
Request Errors
0
Active Sessions

Edges: sin07, sin20, sin21

DomainStatus

⚠ Attack Attempts (7d) 40

TypeCount
Other39
App probe1

📋 History