┌─────────────────────────────────────────────────────────────────────────────┐
│ INTERNET — Sparklight Coax │ WAN: xx.xxx.xxx.xxx/23 │ ether1 │ 8–9ms latency │
└────────────────────────────────────┬────────────────────────────────────────┘
│
┌──────────────────────┐
│ MikroTik RB5009 │ 192.168.1.xxx
│ RouterOS 7.24 │ N9LYA-RB5009
│ Winbox: LAN-only ✓ │ admin: DISABLED ✓
└─────────┬────────────┘
┌──────────────┬──────────┴──────────┬──────────────┬──────────────┐
│ │ │ │ │
wg-44net sit1 back-to-home HE IPv6
44.27.130.176 sit1 192.168.216.xxx 2001:470::
→UCSD :44000 →HE.net port 45389
════════════════════════════ LAN: 192.168.1.0/24 ════════════════════════════
INFRASTRUCTURE
├── .xxx MikroTik RB5009UG+S+ │ Gateway / Firewall / DNS relay
├── .xxx MikroTik CRS326-24G-2S+ (Bedroom) │ Mikrotik_CRS2 · SwOS · SFP2→Proxmox · SFP1→CRS-RadioRoom · 77°C ⚠
├── .xxx MikroTik CRS326-24G-2S+ (Radio Room) │ Mikrotik_CRS1 · SwOS · SFP1→RB5009 · SFP2→CRS-Bedroom · 68°C
├── .xxx ASUS RT-AC5300 (DD-WRT) │ AP · NCC-1701-J · 3C:7C:3F:91:E9:30
├── .xxx Buffalo WZR-HP-AG (DD-WRT) │ AP · Radio_Room · B0:C7:45:75:F0:2C
├── .xxx Buffalo WZR-HP-AG (DD-WRT) │ AP · Sec_cam · 10:6F:3F:E7:0F:0E
├── .xxx AdGuard Home │ DNS filtering / ad blocking
└── .xxx HAProxy │ Reverse proxy · external services
PROXMOX — HP DL380 Gen9 · dual Tesla P4 GPU · 36TB
├── .xxx Home Assistant OS VM │ HA + Ollama pipeline (gemma4)
├── .xxx Ollama VM │ P4 GPU passthrough · gemma4
├── .xxx MariaDB │ Database server
├── .xxx n8n │ Automation · 13 RSS→WordPress pipelines
├── .xxx Wyoming CT │ STT/TTS · Whisper :10300 · Piper :10200
├── .xxx Nextcloud │ File sync / cloud storage
├── .xxx Plex Media Server │ CT 109 · port 32400 · media loading Jul 4 weekend
└── .xxx Uptime Kuma │ CT 115 · 18 monitors · LAN only · :3001
PACKET RADIO
├── .xxx URONode / JNOS │ AMPRNet 44.48.0.41 · port 41023
└── .xxx LinBPQ (N9LYA-8) │ mitchellbpq.com · LYANOD · EastNet
WORKSTATIONS
├── .xxx XPS 8930 (10GbE → Proxmox) │ Main workstation · Killer E2400→Plugable
├── .xxx XPS 8900 │ Secondary desktop
└── .xxx Workstation │ Windows 10
IoT / SMART DEVICES
├── .xxx Panasonic DP-UB420 │ 4K Blu-ray · WIRED · reserved · 34:31:7F:5A:31:CE
├── .xxx Emporia Vue │ Energy monitor · Espressif 4C:11:AE:E6:5E:78
├── .xxx SolarEdge Inverter │ Solar monitoring · 00:27:02:10:43:41
├── .xxx Samsung SM-S931U1 │ Jerry's phone (N9LYA) · Galaxy S25
├── .xxx ESPHome (573680) │ esphome-web-573680 · 04:83:08:57:36:80
└── .xxx Motion Detector │ Hangzhou Tech · E0:4B:41:01:52:95
UNKNOWN / UNRESOLVED
└── .xxx 08:10:7A:35:A8:EB │ udhcp 1.20.2 · no ping · ID PENDING
INFRASTRUCTURE
192.168.1.xxx
SWITCH
MikroTik CRS326-24G-2S+ — Radio Room
d4:01:c3:bd:a3:9a · Mikrotik_CRS1 · SwOS Rev r2 · S/N: HGH09M0FSMF
SFP1: RB5009_Link (10G uplink to router)
SFP2: CRS 2 Bedroom (10G inter-switch, Bedroom CRS)
Temp: 68°C · Active: AC5300 AP · Plexnas · HDHR×2 · RPC-3 · SolarEdge
SFP2: CRS 2 Bedroom (10G inter-switch, Bedroom CRS)
Temp: 68°C · Active: AC5300 AP · Plexnas · HDHR×2 · RPC-3 · SolarEdge
192.168.1.xxx
SWITCH
MikroTik CRS326-24G-2S+ — Bedroom
d4:01:c3:f9:b2:f4 · Mikrotik_CRS2 · SwOS Rev r2 · S/N: HGQ09X0H3DX
SFP1: CRS 1 Radio Room (10G inter-switch, Radio Room CRS)
SFP2: Proxmox Bedroom (10G to HP DL380 Gen9)
Temp: 77°C ⚠ · Active: Buffalo AP/SW · Dell Laptop · URONode · BPQ32 · RPi×2 · MMDVM
SFP2: Proxmox Bedroom (10G to HP DL380 Gen9)
Temp: 77°C ⚠ · Active: Buffalo AP/SW · Dell Laptop · URONode · BPQ32 · RPi×2 · MMDVM
192.168.1.xxx
ROUTER
MikroTik RB5009UG+S+
N9LYA-RB5009 · RouterOS 7.24
WAN: xx.xxx.xxx.xxx/23 (Sparklight)
Admin: DISABLED · n9lya user: ACTIVE
Winbox: LAN-only ✓ · API ban: 3-stage ✓
Admin: DISABLED · n9lya user: ACTIVE
Winbox: LAN-only ✓ · API ban: 3-stage ✓
192.168.1.xxx
ACCESS POINT
ASUS RT-AC5300
3C:7C:3F:91:E9:30 · DD-WRT
Name: NCC-1701-J
Mode: AP (WAN disabled)
SSIDs: FBI_Surveillance_Van_173
Mode: AP (WAN disabled)
SSIDs: FBI_Surveillance_Van_173
192.168.1.xxx
ACCESS POINT
Buffalo WZR-HP-AG
B0:C7:45:75:F0:2C · DD-WRT
Name: Radio_Room
Mode: AP (WAN disabled)
Mode: AP (WAN disabled)
192.168.1.xxx
ACCESS POINT
Buffalo WZR-HP-AG
10:6F:3F:E7:0F:0E · DD-WRT
Name: Sec_cam
Mode: AP (WAN disabled)
Mode: AP (WAN disabled)
192.168.1.xxx
DNS
AdGuard Home
Primary DNS for all LAN clients
Blocks: ads, trackers, telemetry
Upstream: Cloudflare / quad9
Upstream: Cloudflare / quad9
192.168.1.xxx
PROXY
HAProxy
Reverse proxy · external services
Routes external traffic to internal services
SSL termination
SSL termination
PROXMOX HYPERVISOR
192.168.1.xxx
SERVER
Proxmox — HP DL380 Gen9
HP StoreEasy chassis · 256GB RAM
GPU: dual Tesla P4
Storage: 36TB (~27% used)
NIC: 10GbE SFP+ ↔ XPS 8930
Storage: 36TB (~27% used)
NIC: 10GbE SFP+ ↔ XPS 8930
192.168.1.xxx
VM
Home Assistant OS
Proxmox VM · port 8123
Ollama pipeline: gemma4
Integrations: SolarEdge, Emporia, Plex
Wyoming: active via CT 103 (faster-whisper :10300 · piper :10200)
Integrations: SolarEdge, Emporia, Plex
Wyoming: active via CT 103 (faster-whisper :10300 · piper :10200)
192.168.1.xxx
LXC
Ollama LXC
Tesla P4 GPU passthrough
Model: gemma4
Connected to: HA Assist pipeline
Connected to: HA Assist pipeline
192.168.1.xxx
LXC
MariaDB
Database server
Backend for: n8n, Nextcloud, WordPress sites
192.168.1.xxx
LXC
n8n
Workflow automation
Pipelines: 13 RSS→WordPress sites
Sites: ainews, cryptonews, tripza +10 more
Sites: ainews, cryptonews, tripza +10 more
192.168.1.xxx
VM
Plex Media Server
CT 109 · port 32400
Upload: ~3,750 GB/mo
Note: Media loading July 4 weekend · IP reassigned
Note: Media loading July 4 weekend · IP reassigned
192.168.1.xxx
LXC
Uptime Kuma
CT 115 · port 3001 · Debian 13
Monitors: 18 services
Access: LAN only · SQLite backend · installed 2026-06-28
Access: LAN only · SQLite backend · installed 2026-06-28
192.168.1.xxx
LXC
Nextcloud
File sync / cloud storage
Self-hosted cloud storage
MariaDB backend
MariaDB backend
PACKET RADIO
192.168.1.xxx
RADIO
URONode / JNOS
AMPRNet: 44.48.0.41 · port 41023
Node: N9LYA-1 EastNet
FlexNet: V3.3g (DOSemu)
Links: N2KGC (P3), WB2CMF (P4)
FlexNet: V3.3g (DOSemu)
Links: N2KGC (P3), WB2CMF (P4)
192.168.1.xxx
RADIO
LinBPQ (N9LYA-8)
mitchellbpq.com · LYANOD
Network: EastNet
AMPRNet: Indiana Coordinator (N9LYA)
wview→HA: cron push every 1 min
AMPRNet: Indiana Coordinator (N9LYA)
wview→HA: cron push every 1 min
WORKSTATIONS
192.168.1.xxx
WORKSTATION
Dell XPS 8930
Main workstation (N9LYA)
NIC: Plugable USB3-E1000 (Killer E2400 retired)
10GbE SFP+: → Proxmox direct
10GbE SFP+: → Proxmox direct
192.168.1.xxx
WORKSTATION
Dell XPS 8900
Secondary desktop
Intel SFP+ 10G card installed (KB8PMY & N9LYA)
10G fiber direct → Proxmox DL380 Gen9
Throughput: ~2.5 Gb/s sustained
10G fiber direct → Proxmox DL380 Gen9
Throughput: ~2.5 Gb/s sustained
192.168.1.xxx
WORKSTATION
Workstation
Windows 10
Desktop workstation
Wired LAN
Wired LAN
192.168.1.xxx
MOBILE
Samsung SM-S931U1
Galaxy S25 · N9LYA
Jerry's phone · Back-to-Home VPN client
Garmin Fenix 8 sync via garth
Garmin Fenix 8 sync via garth
IoT / SMART DEVICES UPDATED
192.168.1.xxx
IoT
Panasonic DP-UB420
34:31:7F:5A:31:CE · WIRED · RESERVED
4K Blu-ray player · BD-Live: limited
DNS: AdGuard .20
Switched: static→DHCP · wired 2026-06-07
DNS: AdGuard .20
Switched: static→DHCP · wired 2026-06-07
192.168.1.xxx
IoT
Emporia Vue
4C:11:AE:E6:5E:78 · Espressif
Energy monitor · whole-home power
Integrated: Home Assistant
Integrated: Home Assistant
192.168.1.xxx
IoT
SolarEdge Inverter
00:27:02:10:43:41
Solar monitoring
Arrays: 18-panel house + 32-panel garage
Arrays: 18-panel house + 32-panel garage
192.168.1.xxx
IoT
ESPHome Node
04:83:08:57:36:80 · esphome-web-573680
ESPHome device
HA integration active
HA integration active
192.168.1.xxx
IoT
Hisense 55M7SG
4K MiniLED Smart TV
Living room display
DNS: AdGuard .20
Added: 2026-06-13
DNS: AdGuard .20
Added: 2026-06-13
192.168.1.xxx
IoT
Motion Detector
E0:4B:41:01:52:95 · Hangzhou Tech
Motion sensor · HA integration
192.168.1.xxx
UNKNOWN
Unidentified Device
08:10:7A:35:A8:EB
udhcp 1.20.2 · no ping response
DHCP offered, not acknowledged
Identity: PENDING investigation
DHCP offered, not acknowledged
Identity: PENDING investigation
| IP ADDRESS | HOSTNAME / NAME | TYPE | MAC ADDRESS | NOTES |
|---|---|---|---|---|
| .xxx | MikroTik RB5009 | ROUTER | — | Gateway · RouterOS 7.24 · admin DISABLED |
| .xxx | Mikrotik_CRS2 — Bedroom | SWITCH | d4:01:c3:f9:b2:f4 | CRS326-24G-2S+ · SwOS · SFP2→Proxmox · SFP1→CRS-RadioRoom · Temp 77°C ⚠ |
| .xxx | Mikrotik_CRS1 — Radio Room | SWITCH | d4:01:c3:bd:a3:9a | CRS326-24G-2S+ · SwOS · SFP1→RB5009 · SFP2→CRS-Bedroom · Temp 68°C |
| .xxx | Sec_cam | AP | 10:6F:3F:E7:0F:0E | Buffalo WZR-HP-AG · DD-WRT |
| .xxx | URONode/JNOS | RADIO | — | AMPRNet 44.48.0.41 · port 41023 · N9LYA-1 |
| .xxx | AdGuard Home | DNS | — | Primary DNS · ad/tracker blocking |
| .xxx | Home Assistant OS | VM | — | Port 8123 · Ollama gemma4 pipeline |
| .xxx | Ollama LXC | LXC | — | Tesla P4 GPU · gemma4 |
| .xxx | MariaDB | LXC | — | Database server |
| .xxx | n8n | LXC | — | 13 RSS→WordPress automation pipelines |
| .xxx | Wyoming CT | LXC | — | STT/TTS · faster-whisper :10300 · piper :10200 · HA voice assistant |
| .xxx | Nextcloud | LXC | — | File sync / self-hosted cloud |
| .xxx | HAProxy | PROXY | — | Reverse proxy · SSL termination |
| .xxx | XPS 8930 | WS | — | Main workstation · Plugable USB3-E1000 · 10GbE→Proxmox |
| .xxx | Plex Media Server | VM | — | CT 109 · Port 32400 · ~3750 GB/mo upload |
| .xxx | LinBPQ (N9LYA-8) | RADIO | — | mitchellbpq.com · LYANOD · EastNet |
| .xxx | XPS 8900 | WS | — | Secondary desktop · Intel SFP+ 10G → Proxmox (~2.5 Gb) · installed KB8PMY & N9LYA |
| .xxx | Panasonic DP-UB420 | IoT | 34:31:7F:5A:31:CE | 4K Blu-ray · WIRED · DHCP reserved · updated 2026-06-07 |
| .xxx | Emporia Vue | IoT | 4C:11:AE:E6:5E:78 | Energy monitor · Espressif · HA integrated |
| .xxx | SolarEdge Inverter | IoT | 00:27:02:10:43:41 | Solar monitoring · 18+32 panel arrays |
| .xxx | Hisense 55M7SG | IoT | — | 4K MiniLED Smart TV · living room · added 2026-06-13 |
| .xxx | UNKNOWN | ??? | 08:10:7A:35:A8:EB | udhcp 1.20.2 · no ping · ID pending |
| .xxx | Workstation | WS | — | Windows 10 · wired LAN |
| .xxx | Samsung SM-S931U1 | MOBILE | — | Galaxy S25 · N9LYA · Back-to-Home VPN client |
| .xxx | ESPHome-573680 | IoT | 04:83:08:57:36:80 | ESPHome · HA integrated |
| .xxx | Motion Detector | IoT | E0:4B:41:01:52:95 | Hangzhou Tech · HA motion sensor |
| .xxx | Proxmox HP DL380 Gen9 | SERVER | — | Dual Tesla P4 · 36TB · 256GB RAM |
EXTERNAL PORT FORWARDS (HAProxy / RB5009 NAT)
EXT PORTDESTINATIONPROTO
8006
→
192.168.1.xxx:8006 — Proxmox UI
TCP
6000
→
192.168.1.xxx:6001 — HP NAS Management
TCP
32400
→
192.168.1.xxx:32400 — Plex Media Server
TCP
8123
→
192.168.1.xxx:8123 — Home Assistant
TCP
41023
→
192.168.1.xxx:41023 — URONode (packet radio)
TCP
44000
→
44.27.225.1:44000 — Net44 WireGuard (wg-44net)
UDP
45389
→
192.168.216.xxx/24 — back-to-home VPN
UDP
MIKROTIK SERVICES — POST HARDENING
SERVICEPORTACCESSSTATUS
Winbox
8291
LAN only (192.168.1.0/24)
LOCKED
API
8728
LAN only · 3-stage brute-force ban active
LOCKED
SSH
22
LAN only
LOCKED
Telnet
23
Enabled, no source restriction — firewall-gated only
REVIEW
Reverse-proxy
443
Enabled, no cert, no source restriction (IP Cloud feature)
REVIEW
FTP
21
—
DISABLED
The Dude
—
—
DISABLED
RB5009 HARDENING STATUS UPDATED 2026-07-25
ACCESS CONTROL
✓admin accountDISABLED
✓n9lya admin userACTIVE
✓Winbox accessLAN-only
✓API accessLAN-only
✓Telnet / FTPDISABLED
✓The DudeDISABLED
FIREWALL / BRUTE FORCE
✓3-stage API banactive
✓api-ban-check scheduler1 min interval
✓179.43.186.xxxBLACKLISTED
✓Invalid state drop rulesactive
✓Rule *46 — SSH port 22BY DESIGN
PENDING HARDENING
○Proxmox hardeningnext session
○DMZ review / Plex perimeternext session
○Identify 08:10:7A:35:A8:EBlow priority
○Proxmox root login disablepending
○Network API exposure auditpending
○Review telnet / reverse-proxy source restrictionfound 8/25/26
○Single-path resiliency gaptabled — pending hardware
KNOWN ATTACK LOG
2026-06-04 03:21179.43.186.xxx→ winbox (user: admin)BLOCKED
2026-06-04 22:08179.43.186.xxx→ winbox (user: admin)BLOCKED
2026-06-05 18:21179.43.186.xxx→ winbox (user: admin)BLOCKED
2026-06-06 15:24179.43.186.xxx→ winbox (user: admin)BLOCKED
2026-06-07 10:56179.43.186.xxx→ winbox (user: admin)BLOCKED
Attacker blacklisted 2026-06-07. admin account disabled. Attack vector closed.
DHCP HOUSEKEEPING — 2026-06-07
Panasonic DP-UB420Static → DHCP · wired cable added · reserved .100
Old reservation removed08:10:7A:35:A8:EB @ .100 → deleted (wrong MAC)
New reservation added34:31:7F:5A:31:CE → .100 (correct wired MAC)
WIREGUARD TUNNELS
wg-44net — AMPRNet / Net44
Interfacewg-44net
Local IP44.27.130.176/32
Endpoint44.27.225.1:44000 (UCSD)
Network44.27.130.176/32
StatusUP · resolved Apr 2026
back-to-home-vpn — Remote Access
Interfaceback-to-home-vpn
Server IP192.168.216.xxx/24
Port45389/UDP
ClientsGalaxy S25, Lenovo Tab P11
StatusUP
IPv6 TUNNEL
sit1 — Hurricane Electric IPv6
Interfacesit1
Tunnel ID430369
Prefix2001:470:1f11:372::/64
Local (WAN)xx.xxx.xxx.xxx
RALAN SLAAC distribution active
StatusUP · fixed May 2026 (stale Frontier IP)
AMPRNet / 44NET
IPIP Mesh — Indiana Coordinator
CoordinatorN9LYA — Jerome Kutche
Node IP44.48.0.41 (URONode/JNOS)
Block44.48.0.40/24
Routes936 AMPRNet routes via ampr-ripd
StatusUP · resolved May 2026