Static hostname: vps-de Icon name: computer-vm Chassis: vm Deployment: vps-de Machine ID: 78a0c4a814ac43358dd592e98f6a0784 Boot ID: 1363038210824a2c8a76d8e823c3312f Virtualization: kvm Operating System: Debian GNU/Linux 11 (bullseye) Kernel: Linux 6.2.9-ninja Architecture: x86-64 Date : 2026-11-04 18:55:08 CET 18:55:08 up 118 days, 20:08, 0 users, load average: 0,97, 1,18, 1,13 ● firewall.service - LSB: Start daemon at boot time Loaded: loaded (/etc/init.d/firewall; generated) Active: active (exited) since Wed 2026-07-08 23:46:39 CEST; 3 months 27 days ago Docs: man:systemd-sysv-generator(8) Tasks: 0 (limit: 2291) Memory: 0B CPU: 0 CGroup: /system.slice/firewall.service Warning: journal has been rotated since unit was started, output may be incomplete. Chain INPUT (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 15M 1364M DROP icmp -- * * 0.0.0.0/0 0.0.0.0/0 limit: above 1/sec burst 1 mode srcip 0 0 ACCEPT tcp -- lxcbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- lxcbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- lxcbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:67 0 0 ACCEPT udp -- lxcbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:67 478M 27G syn-flood tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x17/0x02 477K 51M DROP tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp flags:!0x17/0x02 state NEW 0 0 DROP all -f * * 0.0.0.0/0 0.0.0.0/0 3 192 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x3F 14 700 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x00 12M 999M DROP all -- vmbr0 * 10.0.0.0/8 0.0.0.0/0 1870K 178M DROP all -- vmbr0 * 172.16.0.0/12 0.0.0.0/0 0 0 DROP all -- vmbr0 * 224.0.0.0/4 0.0.0.0/0 0 0 DROP all -- vmbr0 * 240.0.0.0/5 0.0.0.0/0 0 0 DROP all -- vmbr0 * 127.0.0.0/8 0.0.0.0/0 13M 2029M ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0 13 540 gre tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:47 state NEW 0 0 gre udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:47 state NEW 3822M 1695G ACCEPT all -- * * 0.0.0.0/0 135.125.133.51 state RELATED,ESTABLISHED 5628K 194M ACCEPT icmp -- * * 0.0.0.0/0 135.125.133.51 limit: avg 5/sec burst 4 0 0 ACCEPT all -- * * 0.0.0.0/0 10.133.0.254 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.133.0.254 limit: avg 5/sec burst 4 0 0 ACCEPT all -- * * 0.0.0.0/0 172.16.5.51 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 172.16.5.51 limit: avg 5/sec burst 4 0 0 ACCEPT tcp -- vmbr0 * 83.159.31.116 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- vmbr1 * 83.159.31.116 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- ppp0 * 83.159.31.116 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- vmbr0 * 158.69.126.137 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- vmbr1 * 158.69.126.137 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- ppp0 * 158.69.126.137 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- vmbr0 * 172.16.5.137 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- vmbr1 * 172.16.5.137 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- ppp0 * 172.16.5.137 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- vmbr0 * 172.16.5.253 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- vmbr1 * 172.16.5.253 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- ppp0 * 172.16.5.253 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- vmbr0 * 172.16.5.143 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- vmbr1 * 172.16.5.143 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- ppp0 * 172.16.5.143 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- vmbr0 * 172.16.10.0/24 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- vmbr1 * 172.16.10.0/24 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- ppp0 * 172.16.10.0/24 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- vmbr0 * 10.101.0.1 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- vmbr1 * 10.101.0.1 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- ppp0 * 10.101.0.1 0.0.0.0/0 tcp dpt:22 242K 14M tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 state NEW recent: SET name: SSH side: source mask: 255.255.255.255 180K 11M DROP tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: SSH side: source mask: 255.255.255.255 69735 6226K ACCEPT tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 0 0 tcp -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 state NEW recent: SET name: SSH side: source mask: 255.255.255.255 0 0 DROP tcp -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: SSH side: source mask: 255.255.255.255 0 0 ACCEPT tcp -- vmbr1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 0 0 tcp -- ppp0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 state NEW recent: SET name: SSH side: source mask: 255.255.255.255 0 0 DROP tcp -- ppp0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: SSH side: source mask: 255.255.255.255 0 0 ACCEPT tcp -- ppp0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- * * 83.159.31.116 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 83.159.31.116 0.0.0.0/0 udp dpt:873 0 0 ACCEPT tcp -- * * 158.69.126.137 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 158.69.126.137 0.0.0.0/0 udp dpt:873 0 0 ACCEPT tcp -- * * 172.16.5.137 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 172.16.5.137 0.0.0.0/0 udp dpt:873 0 0 ACCEPT tcp -- * * 172.16.5.253 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 172.16.5.253 0.0.0.0/0 udp dpt:873 0 0 ACCEPT tcp -- * * 172.16.5.143 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 172.16.5.143 0.0.0.0/0 udp dpt:873 0 0 ACCEPT tcp -- * * 172.16.10.0/24 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 172.16.10.0/24 0.0.0.0/0 udp dpt:873 0 0 ACCEPT tcp -- * * 10.101.0.1 0.0.0.0/0 tcp dpt:873 0 0 ACCEPT udp -- * * 10.101.0.1 0.0.0.0/0 udp dpt:873 62 2864 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:514 3162 205K ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:123 2669 217K ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:161 1 28 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:514 22 5253 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:67 2544 724K ACCEPT udp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:500 792 254K ACCEPT udp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:4500 1 44 ACCEPT esp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 esp 43 1788 ACCEPT tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:50 25 1024 ACCEPT tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:51 0 0 ACCEPT tcp -- vmbr0 * 104.113.170.241 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- vmbr0 * 104.113.170.241 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- vmbr0 * 151.231.39.39 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- vmbr0 * 151.231.39.39 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- vmbr0 * 121.201.29.121 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- vmbr0 * 121.201.29.121 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- vmbr0 * 183.39.223.233 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- vmbr0 * 183.39.223.233 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- vmbr0 * 183.15.177.153 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- vmbr0 * 183.15.177.153 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- vmbr0 * 216.105.171.68 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- vmbr0 * 216.105.171.68 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- vmbr0 * 173.254.28.48 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- vmbr0 * 173.254.28.48 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- vmbr0 * 162.212.252.227 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- vmbr0 * 162.212.252.227 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- vmbr0 * 222.70.229.251 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- vmbr0 * 222.70.229.251 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- vmbr0 * 148.66.136.61 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- vmbr0 * 148.66.136.61 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- vmbr0 * 185.17.52.46 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- vmbr0 * 185.17.52.46 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- vmbr0 * 59.127.92.11 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- vmbr0 * 59.127.92.11 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- vmbr0 * 45.61.237.40 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- vmbr0 * 45.61.237.40 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- vmbr0 * 180.86.4.148 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- vmbr0 * 180.86.4.148 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- vmbr0 * 201.64.112.162 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- vmbr0 * 201.64.112.162 0.0.0.0/0 udp dpt:53 11 1454 ACCEPT udp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:53 0 0 DROP udp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:53 limit: above 20/sec burst 20 mode srcip 0 0 tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 state NEW recent: SET name: NAMED side: source mask: 255.255.255.255 0 0 DROP tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 recent: UPDATE seconds: 60 hit_count: 10 TTL-Match name: NAMED side: source mask: 255.255.255.255 822 63087 ACCEPT tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 7942K 461M ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 tcp state NEW recent: SET name: WEB_80 side: source mask: 255.255.255.255 1422K 57M ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 184K 11M ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443 tcp state NEW recent: SET name: WEB_443 side: source mask: 255.255.255.255 9690 433K ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443 17117 3547K LOG udp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES UDP-IN: " 193K 24M DROP udp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 532 28835 LOG icmp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES ICMP-IN: " 1251 83199 DROP icmp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 17115 792K LOG tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES TCP-IN: " 1287K 58M DROP tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 4278 1973K LOG all -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES PROTOCOL-X-IN: " 4318 1988K DROP all -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 Chain FORWARD (policy DROP 4 packets, 708 bytes) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- * lxcbr0 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- lxcbr0 * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- * lo 0.0.0.0/0 0.0.0.0/0 36M 9786M ACCEPT all -- vmbr1 vmbr0 0.0.0.0/0 0.0.0.0/0 34M 4126M ACCEPT all -- vmbr0 vmbr1 0.0.0.0/0 0.0.0.0/0 Chain OUTPUT (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 13M 2029M ACCEPT all -- * lo 0.0.0.0/0 0.0.0.0/0 4573M 6341G ACCEPT all -- * * 135.125.133.51 0.0.0.0/0 0 0 ACCEPT all -- * * 10.133.0.254 0.0.0.0/0 0 0 ACCEPT all -- * * 172.16.5.51 0.0.0.0/0 0 0 ACCEPT udp -- * vmbr0 0.0.0.0/0 0.0.0.0/0 udp spt:500 0 0 ACCEPT udp -- * vmbr0 0.0.0.0/0 0.0.0.0/0 udp spt:4500 0 0 ACCEPT tcp -- * vmbr0 0.0.0.0/0 0.0.0.0/0 tcp spt:50 0 0 ACCEPT tcp -- * vmbr0 0.0.0.0/0 0.0.0.0/0 tcp spt:51 0 0 LOG udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:53 LOG flags 0 level 4 prefix "OUTPUT-U-NAMED:" 0 0 LOG tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:53 LOG flags 0 level 4 prefix "OUTPUT-T-NAMED:" 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:80 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:443 0 0 LOG udp -- * vmbr0 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES UDP-OUT: " 0 0 DROP udp -- * vmbr0 0.0.0.0/0 0.0.0.0/0 0 0 LOG icmp -- * vmbr0 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES ICMP-OUT: " 0 0 DROP icmp -- * vmbr0 0.0.0.0/0 0.0.0.0/0 0 0 LOG tcp -- * vmbr0 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES TCP-OUT: " 0 0 DROP tcp -- * vmbr0 0.0.0.0/0 0.0.0.0/0 0 0 LOG all -- * vmbr0 0.0.0.0/0 0.0.0.0/0 limit: avg 6/hour burst 5 LOG flags 0 level 4 prefix "IPTABLES PROTOCOL-X-OUT: " 0 0 DROP all -- * vmbr0 0.0.0.0/0 0.0.0.0/0 Chain black (1 references) pkts bytes target prot opt in out source destination 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 recent: SET name: blacklist side: source mask: 255.255.255.255 Chain gre (2 references) pkts bytes target prot opt in out source destination 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 recent: UPDATE seconds: 86400 reap name: blacklist side: source mask: 255.255.255.255 0 0 black all -- * * 0.0.0.0/0 0.0.0.0/0 recent: UPDATE seconds: 600 reap hit_count: 10 name: timer side: source mask: 255.255.255.255 13 540 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 recent: SET name: timer side: source mask: 255.255.255.255 Chain syn-flood (1 references) pkts bytes target prot opt in out source destination 9575K 540M RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 4 468M 27G DROP all -- * * 0.0.0.0/0 0.0.0.0/0