Static hostname: hst-fr Icon name: computer-vm Chassis: vm 🖴 Machine ID: 670145ea93d8dd9a9e397078c61e2718 Boot ID: 0f817d48f69f4f53b145fe9a2ad92ba4 Product UUID: d660a663-6560-4ff5-835a-5548e1c010bb Virtualization: kvm Operating System: Debian GNU/Linux 13 (trixie) Kernel: Linux 6.12.95+deb13-cloud-amd64 Architecture: x86-64 Hardware Vendor: QEMU Hardware Model: Standard PC _i440FX + PIIX, 1996_ Firmware Version: rel-1.17.0-0-gb52ca86e094d-prebuilt.qemu.org Firmware Date: Tue 2014-04-01 Firmware Age: 12y 4month 2w 6d Date : 2026-08-20 20:25:08 CEST 20:25:08 up 42 days, 4:35, 2 users, load average: 0.00, 0.02, 0.06 ● firewall.service - LSB: Start daemon at boot time Loaded: loaded (/etc/init.d/firewall; generated) Active: active (exited) since Thu 2026-07-09 15:50:56 CEST; 1 month 11 days ago Invocation: 8b01252e9e1b4f389d829ebdc92ba8f9 Docs: man:systemd-sysv-generator(8) Mem peak: 4.1M CPU: 10.635s Notice: journal has been rotated since unit was started, output may be incomplete. Chain INPUT (policy DROP 20 packets, 1033 bytes) pkts bytes target prot opt in out source destination 2565K 258M DROP icmp -- * * 0.0.0.0/0 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 863K 51M syn-flood tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x17/0x02 7538 560K DROP tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp flags:!0x17/0x02 state NEW 0 0 DROP all -f * * 0.0.0.0/0 0.0.0.0/0 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x3F 25 2907 DROP all -- eth0 * 10.0.0.0/8 0.0.0.0/0 311K 29M DROP all -- eth0 * 172.16.0.0/12 0.0.0.0/0 0 0 DROP all -- eth0 * 224.0.0.0/4 0.0.0.0/0 0 0 DROP all -- eth0 * 240.0.0.0/5 0.0.0.0/0 0 0 DROP all -- eth0 * 127.0.0.0/8 0.0.0.0/0 203K 19M ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0 0 0 CHECK_GRE tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:47 state NEW 0 0 CHECK_GRE udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:47 state NEW 72M 28G ACCEPT all -- * * 0.0.0.0/0 147.79.115.130 state RELATED,ESTABLISHED 75688 4924K ACCEPT icmp -- * * 0.0.0.0/0 147.79.115.130 limit: avg 5/sec burst 4 50716 2029K ACCEPT all -- * * 0.0.0.0/0 10.175.0.254 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.175.0.254 limit: avg 5/sec burst 4 241K 365M ACCEPT all -- * * 0.0.0.0/0 10.0.3.1 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.0.3.1 limit: avg 5/sec burst 4 0 0 ACCEPT tcp -- eth0 * 83.159.31.116 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- incusbr0 * 83.159.31.116 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- lxcbr0 * 83.159.31.116 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- eth0 * 158.69.126.137 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- incusbr0 * 158.69.126.137 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- lxcbr0 * 158.69.126.137 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- eth0 * 172.16.5.137 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- incusbr0 * 172.16.5.137 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- lxcbr0 * 172.16.5.137 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- eth0 * 172.16.5.253 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- incusbr0 * 172.16.5.253 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- lxcbr0 * 172.16.5.253 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- eth0 * 172.16.5.143 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- incusbr0 * 172.16.5.143 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- lxcbr0 * 172.16.5.143 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- eth0 * 172.16.10.0/24 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- incusbr0 * 172.16.10.0/24 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- lxcbr0 * 172.16.10.0/24 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- eth0 * 10.101.0.1 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- incusbr0 * 10.101.0.1 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- lxcbr0 * 10.101.0.1 0.0.0.0/0 tcp dpt:22 4007 234K tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 state NEW recent: SET name: SSH side: source mask: 255.255.255.255 667 39552 DROP tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: SSH side: source mask: 255.255.255.255 3344 194K ACCEPT tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 0 0 tcp -- incusbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 state NEW recent: SET name: SSH side: source mask: 255.255.255.255 0 0 DROP tcp -- incusbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: SSH side: source mask: 255.255.255.255 0 0 ACCEPT tcp -- incusbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 0 0 tcp -- lxcbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 state NEW recent: SET name: SSH side: source mask: 255.255.255.255 0 0 DROP tcp -- lxcbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: SSH side: source mask: 255.255.255.255 0 0 ACCEPT tcp -- lxcbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- * * 83.159.31.116 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 83.159.31.116 0.0.0.0/0 udp dpt:873 0 0 ACCEPT tcp -- * * 158.69.126.137 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 158.69.126.137 0.0.0.0/0 udp dpt:873 0 0 ACCEPT tcp -- * * 172.16.5.137 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 172.16.5.137 0.0.0.0/0 udp dpt:873 0 0 ACCEPT tcp -- * * 172.16.5.253 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 172.16.5.253 0.0.0.0/0 udp dpt:873 0 0 ACCEPT tcp -- * * 172.16.5.143 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 172.16.5.143 0.0.0.0/0 udp dpt:873 0 0 ACCEPT tcp -- * * 172.16.10.0/24 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 172.16.10.0/24 0.0.0.0/0 udp dpt:873 0 0 ACCEPT tcp -- * * 10.101.0.1 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 10.101.0.1 0.0.0.0/0 udp dpt:873 10 492 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:514 249 18093 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:123 69 5291 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:161 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:514 3389 1034K ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:67 175 40027 ACCEPT udp -- eth0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:500 109 17352 ACCEPT udp -- eth0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:4500 0 0 ACCEPT esp -- eth0 * 0.0.0.0/0 0.0.0.0/0 esp 5 216 ACCEPT tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:50 1 40 ACCEPT tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:51 0 0 ACCEPT tcp -- eth0 * 104.113.170.241 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- eth0 * 104.113.170.241 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- eth0 * 151.231.39.39 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- eth0 * 151.231.39.39 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- eth0 * 121.201.29.121 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- eth0 * 121.201.29.121 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- eth0 * 183.39.223.233 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- eth0 * 183.39.223.233 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- eth0 * 183.15.177.153 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- eth0 * 183.15.177.153 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- eth0 * 216.105.171.68 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- eth0 * 216.105.171.68 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- eth0 * 173.254.28.48 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- eth0 * 173.254.28.48 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- eth0 * 162.212.252.227 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- eth0 * 162.212.252.227 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- eth0 * 222.70.229.251 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- eth0 * 222.70.229.251 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- eth0 * 148.66.136.61 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- eth0 * 148.66.136.61 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- eth0 * 185.17.52.46 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- eth0 * 185.17.52.46 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- eth0 * 59.127.92.11 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- eth0 * 59.127.92.11 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- eth0 * 45.61.237.40 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- eth0 * 45.61.237.40 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- eth0 * 180.86.4.148 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- eth0 * 180.86.4.148 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- eth0 * 201.64.112.162 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- eth0 * 201.64.112.162 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- eth0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:53 0 0 DROP udp -- eth0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:53 limit: above 20/sec burst 20 mode srcip 0 0 tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 state NEW recent: SET name: NAMED side: source mask: 255.255.255.255 0 0 DROP tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: NAMED side: source mask: 255.255.255.255 0 0 ACCEPT tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 76252 4547K ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 tcp state NEW recent: SET name: WEB_80 side: source mask: 255.255.255.255 87 3972 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 307K 18M ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443 tcp state NEW recent: SET name: WEB_443 side: source mask: 255.255.255.255 1281 52500 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443 5793 2846K LOG udp -- eth0 * 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES UDP-IN: " 9933 5204K DROP udp -- eth0 * 0.0.0.0/0 0.0.0.0/0 3 191 LOG icmp -- eth0 * 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES ICMP-IN: " 3 191 DROP icmp -- eth0 * 0.0.0.0/0 0.0.0.0/0 6080 312K LOG tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES TCP-IN: " 116K 6190K DROP tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 358 165K LOG all -- eth0 * 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES PROTOCOL-X-IN: " 428 172K DROP all -- eth0 * 0.0.0.0/0 0.0.0.0/0 Chain FORWARD (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- * lo 0.0.0.0/0 0.0.0.0/0 331 22595 ACCEPT all -- incusbr0 eth0 0.0.0.0/0 0.0.0.0/0 649 67018 ACCEPT all -- eth0 incusbr0 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- lxcbr0 eth0 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- eth0 lxcbr0 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- lxcbr0 incusbr0 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- incusbr0 lxcbr0 0.0.0.0/0 0.0.0.0/0 Chain OUTPUT (policy DROP 1 packets, 40 bytes) pkts bytes target prot opt in out source destination 337K 31M ACCEPT all -- * lo 0.0.0.0/0 0.0.0.0/0 97M 24G ACCEPT all -- * * 147.79.115.130 0.0.0.0/0 131K 8840K ACCEPT all -- * * 10.175.0.254 0.0.0.0/0 497K 36M ACCEPT all -- * * 10.0.3.1 0.0.0.0/0 0 0 ACCEPT udp -- * eth0 0.0.0.0/0 0.0.0.0/0 udp spt:500 0 0 ACCEPT udp -- * eth0 0.0.0.0/0 0.0.0.0/0 udp spt:4500 0 0 ACCEPT tcp -- * eth0 0.0.0.0/0 0.0.0.0/0 tcp spt:50 0 0 ACCEPT tcp -- * eth0 0.0.0.0/0 0.0.0.0/0 tcp spt:51 0 0 LOG udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:53 LOG flags 0 level 4 prefix "OUTPUT-U-NAMED:" 0 0 LOG tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:53 LOG flags 0 level 4 prefix "OUTPUT-T-NAMED:" 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:80 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:443 0 0 LOG udp -- * eth0 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES UDP-OUT: " 0 0 DROP udp -- * eth0 0.0.0.0/0 0.0.0.0/0 0 0 LOG icmp -- * eth0 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES ICMP-OUT: " 0 0 DROP icmp -- * eth0 0.0.0.0/0 0.0.0.0/0 0 0 LOG tcp -- * eth0 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES TCP-OUT: " 0 0 DROP tcp -- * eth0 0.0.0.0/0 0.0.0.0/0 0 0 LOG all -- * eth0 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES PROTOCOL-X-OUT: " 0 0 DROP all -- * eth0 0.0.0.0/0 0.0.0.0/0 Chain BLACK (1 references) pkts bytes target prot opt in out source destination 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 recent: SET name: BLACKLIST side: source mask: 255.255.255.255 Chain CHECK_GRE (2 references) pkts bytes target prot opt in out source destination 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 recent: UPDATE seconds: 86400 reap name: BLACKLIST side: source mask: 255.255.255.255 0 0 BLACK all -- * * 0.0.0.0/0 0.0.0.0/0 recent: UPDATE seconds: 60 reap hit_count: 3 name: TIMER side: source mask: 255.255.255.255 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 recent: SET name: TIMER side: source mask: 255.255.255.255 Chain syn-flood (1 references) pkts bytes target prot opt in out source destination 509K 30M RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 4 354K 21M DROP all -- * * 0.0.0.0/0 0.0.0.0/0