Static hostname: hst-fr Icon name: computer-vm Chassis: vm 🖴 Machine ID: 670145ea93d8dd9a9e397078c61e2718 Boot ID: 0f817d48f69f4f53b145fe9a2ad92ba4 Product UUID: d660a663-6560-4ff5-835a-5548e1c010bb Virtualization: kvm Operating System: Debian GNU/Linux 13 (trixie) Kernel: Linux 6.12.95+deb13-cloud-amd64 Architecture: x86-64 Hardware Vendor: QEMU Hardware Model: Standard PC _i440FX + PIIX, 1996_ Firmware Version: rel-1.17.0-0-gb52ca86e094d-prebuilt.qemu.org Firmware Date: Tue 2014-04-01 Firmware Age: 12y 5month 3w 1d Date : 2026-09-22 11:10:08 CEST 11:10:08 up 74 days, 19:20, 1 user, load average: 0.07, 0.02, 0.00 ● firewall.service - LSB: Start daemon at boot time Loaded: loaded (/etc/init.d/firewall; generated) Active: active (exited) since Thu 2026-07-09 15:50:56 CEST; 2 months 13 days ago Invocation: 8b01252e9e1b4f389d829ebdc92ba8f9 Docs: man:systemd-sysv-generator(8) Mem peak: 4.1M CPU: 10.635s Notice: journal has been rotated since unit was started, output may be incomplete. Chain INPUT (policy DROP 3 packets, 219 bytes) pkts bytes target prot opt in out source destination 2263K 224M DROP icmp -- * * 0.0.0.0/0 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 772K 45M syn-flood tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x17/0x02 1277 92490 DROP tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp flags:!0x17/0x02 state NEW 0 0 DROP all -f * * 0.0.0.0/0 0.0.0.0/0 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x3F 11 921 DROP all -- eth0 * 10.0.0.0/8 0.0.0.0/0 232K 21M DROP all -- eth0 * 172.16.0.0/12 0.0.0.0/0 0 0 DROP all -- eth0 * 224.0.0.0/4 0.0.0.0/0 0 0 DROP all -- eth0 * 240.0.0.0/5 0.0.0.0/0 0 0 DROP all -- eth0 * 127.0.0.0/8 0.0.0.0/0 229K 20M ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0 3 140 CHECK_GRE tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:47 state NEW 1 540 CHECK_GRE udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:47 state NEW 32M 5944M ACCEPT all -- * * 0.0.0.0/0 147.79.115.130 state RELATED,ESTABLISHED 73229 4694K ACCEPT icmp -- * * 0.0.0.0/0 147.79.115.130 limit: avg 5/sec burst 4 0 0 ACCEPT all -- * * 0.0.0.0/0 10.175.0.254 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.175.0.254 limit: avg 5/sec burst 4 0 0 ACCEPT all -- * * 0.0.0.0/0 10.0.3.1 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.0.3.1 limit: avg 5/sec burst 4 0 0 ACCEPT tcp -- eth0 * 83.159.31.116 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- incusbr0 * 83.159.31.116 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- lxcbr0 * 83.159.31.116 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- eth0 * 158.69.126.137 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- incusbr0 * 158.69.126.137 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- lxcbr0 * 158.69.126.137 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- eth0 * 172.16.5.137 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- incusbr0 * 172.16.5.137 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- lxcbr0 * 172.16.5.137 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- eth0 * 172.16.5.253 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- incusbr0 * 172.16.5.253 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- lxcbr0 * 172.16.5.253 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- eth0 * 172.16.5.143 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- incusbr0 * 172.16.5.143 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- lxcbr0 * 172.16.5.143 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- eth0 * 172.16.10.0/24 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- incusbr0 * 172.16.10.0/24 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- lxcbr0 * 172.16.10.0/24 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- eth0 * 10.101.0.1 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- incusbr0 * 10.101.0.1 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- lxcbr0 * 10.101.0.1 0.0.0.0/0 tcp dpt:22 7652 456K tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 state NEW recent: SET name: SSH side: source mask: 255.255.255.255 4095 246K DROP tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: SSH side: source mask: 255.255.255.255 3562 210K ACCEPT tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 0 0 tcp -- incusbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 state NEW recent: SET name: SSH side: source mask: 255.255.255.255 0 0 DROP tcp -- incusbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: SSH side: source mask: 255.255.255.255 0 0 ACCEPT tcp -- incusbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 0 0 tcp -- lxcbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 state NEW recent: SET name: SSH side: source mask: 255.255.255.255 0 0 DROP tcp -- lxcbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: SSH side: source mask: 255.255.255.255 0 0 ACCEPT tcp -- lxcbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- * * 83.159.31.116 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 83.159.31.116 0.0.0.0/0 udp dpt:873 0 0 ACCEPT tcp -- * * 158.69.126.137 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 158.69.126.137 0.0.0.0/0 udp dpt:873 0 0 ACCEPT tcp -- * * 172.16.5.137 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 172.16.5.137 0.0.0.0/0 udp dpt:873 0 0 ACCEPT tcp -- * * 172.16.5.253 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 172.16.5.253 0.0.0.0/0 udp dpt:873 0 0 ACCEPT tcp -- * * 172.16.5.143 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 172.16.5.143 0.0.0.0/0 udp dpt:873 0 0 ACCEPT tcp -- * * 172.16.10.0/24 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 172.16.10.0/24 0.0.0.0/0 udp dpt:873 0 0 ACCEPT tcp -- * * 10.101.0.1 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 10.101.0.1 0.0.0.0/0 udp dpt:873 8 424 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:514 192 11553 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:123 74 5932 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:161 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:514 1680 512K ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:67 362 116K ACCEPT udp -- eth0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:500 153 97078 ACCEPT udp -- eth0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:4500 0 0 ACCEPT esp -- eth0 * 0.0.0.0/0 0.0.0.0/0 esp 6 260 ACCEPT tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:50 0 0 ACCEPT tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:51 0 0 ACCEPT tcp -- eth0 * 104.113.170.241 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- eth0 * 104.113.170.241 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- eth0 * 151.231.39.39 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- eth0 * 151.231.39.39 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- eth0 * 121.201.29.121 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- eth0 * 121.201.29.121 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- eth0 * 183.39.223.233 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- eth0 * 183.39.223.233 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- eth0 * 183.15.177.153 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- eth0 * 183.15.177.153 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- eth0 * 216.105.171.68 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- eth0 * 216.105.171.68 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- eth0 * 173.254.28.48 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- eth0 * 173.254.28.48 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- eth0 * 162.212.252.227 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- eth0 * 162.212.252.227 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- eth0 * 222.70.229.251 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- eth0 * 222.70.229.251 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- eth0 * 148.66.136.61 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- eth0 * 148.66.136.61 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- eth0 * 185.17.52.46 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- eth0 * 185.17.52.46 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- eth0 * 59.127.92.11 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- eth0 * 59.127.92.11 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- eth0 * 45.61.237.40 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- eth0 * 45.61.237.40 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- eth0 * 180.86.4.148 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- eth0 * 180.86.4.148 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- eth0 * 201.64.112.162 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- eth0 * 201.64.112.162 0.0.0.0/0 udp dpt:53 0 0 ACCEPT udp -- eth0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:53 0 0 DROP udp -- eth0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:53 limit: above 20/sec burst 20 mode srcip 0 0 tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 state NEW recent: SET name: NAMED side: source mask: 255.255.255.255 0 0 DROP tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: NAMED side: source mask: 255.255.255.255 0 0 ACCEPT tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 126K 7544K ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 tcp state NEW recent: SET name: WEB_80 side: source mask: 255.255.255.255 35 2405 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 146K 8690K ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443 tcp state NEW recent: SET name: WEB_443 side: source mask: 255.255.255.255 36 1660 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443 3988 1705K LOG udp -- eth0 * 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES UDP-IN: " 5687 2546K DROP udp -- eth0 * 0.0.0.0/0 0.0.0.0/0 24 1624 LOG icmp -- eth0 * 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES ICMP-IN: " 25 1692 DROP icmp -- eth0 * 0.0.0.0/0 0.0.0.0/0 4583 240K LOG tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES TCP-IN: " 93505 4865K DROP tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 88 45764 LOG all -- eth0 * 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES PROTOCOL-X-IN: " 88 45764 DROP all -- eth0 * 0.0.0.0/0 0.0.0.0/0 Chain FORWARD (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- * lo 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- incusbr0 eth0 0.0.0.0/0 0.0.0.0/0 231 20231 ACCEPT all -- eth0 incusbr0 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- lxcbr0 eth0 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- eth0 lxcbr0 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- lxcbr0 incusbr0 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- incusbr0 lxcbr0 0.0.0.0/0 0.0.0.0/0 Chain OUTPUT (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 377K 33M ACCEPT all -- * lo 0.0.0.0/0 0.0.0.0/0 51M 6436M ACCEPT all -- * * 147.79.115.130 0.0.0.0/0 124K 7911K ACCEPT all -- * * 10.175.0.254 0.0.0.0/0 255K 15M ACCEPT all -- * * 10.0.3.1 0.0.0.0/0 0 0 ACCEPT udp -- * eth0 0.0.0.0/0 0.0.0.0/0 udp spt:500 0 0 ACCEPT udp -- * eth0 0.0.0.0/0 0.0.0.0/0 udp spt:4500 0 0 ACCEPT tcp -- * eth0 0.0.0.0/0 0.0.0.0/0 tcp spt:50 0 0 ACCEPT tcp -- * eth0 0.0.0.0/0 0.0.0.0/0 tcp spt:51 0 0 LOG udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:53 LOG flags 0 level 4 prefix "OUTPUT-U-NAMED:" 0 0 LOG tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:53 LOG flags 0 level 4 prefix "OUTPUT-T-NAMED:" 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:80 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:443 0 0 LOG udp -- * eth0 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES UDP-OUT: " 0 0 DROP udp -- * eth0 0.0.0.0/0 0.0.0.0/0 0 0 LOG icmp -- * eth0 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES ICMP-OUT: " 0 0 DROP icmp -- * eth0 0.0.0.0/0 0.0.0.0/0 0 0 LOG tcp -- * eth0 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES TCP-OUT: " 0 0 DROP tcp -- * eth0 0.0.0.0/0 0.0.0.0/0 0 0 LOG all -- * eth0 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES PROTOCOL-X-OUT: " 0 0 DROP all -- * eth0 0.0.0.0/0 0.0.0.0/0 Chain BLACK (1 references) pkts bytes target prot opt in out source destination 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 recent: SET name: BLACKLIST side: source mask: 255.255.255.255 Chain CHECK_GRE (2 references) pkts bytes target prot opt in out source destination 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 recent: UPDATE seconds: 86400 reap name: BLACKLIST side: source mask: 255.255.255.255 0 0 BLACK all -- * * 0.0.0.0/0 0.0.0.0/0 recent: UPDATE seconds: 60 reap hit_count: 3 name: TIMER side: source mask: 255.255.255.255 4 680 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 recent: SET name: TIMER side: source mask: 255.255.255.255 Chain syn-flood (1 references) pkts bytes target prot opt in out source destination 376K 22M RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 4 397K 24M DROP all -- * * 0.0.0.0/0 0.0.0.0/0