HEX
Server: Apache
System: Linux fan.fanlow.com 3.10.0-1160.144.1.el7.tuxcare.els9.x86_64 #1 SMP Fri Jul 10 17:06:31 UTC 2026 x86_64
User: ssiacademy (1163)
PHP: 8.2.32
Disabled: exec,passthru,shell_exec,system
$ pwd: /etc/sysconfig/
Upload Files
File: //etc/sysconfig/iptables.2022-05-16
# Generated by iptables-save v1.4.21 on Fri Oct 23 17:55:20 2020
*nat
:PREROUTING ACCEPT [9298505:594283533]
:INPUT ACCEPT [2444491:180658074]
:OUTPUT ACCEPT [1622994:117527060]
:POSTROUTING ACCEPT [935335:47212682]
COMMIT
# Completed on Fri Oct 23 17:55:20 2020
# Generated by iptables-save v1.4.21 on Fri Oct 23 17:55:20 2020
*raw
:PREROUTING ACCEPT [54124522:13017106427]
:OUTPUT ACCEPT [55521504:64998460774]
-A PREROUTING -s 74.220.195.27/32 -p udp -m udp --sport 53 -j NOTRACK
-A PREROUTING -i eth+ -p tcp -m multiport --dports 80,443 -j NOTRACK
-A PREROUTING -i lo -j NOTRACK
-A OUTPUT -d 74.220.195.27/32 -p udp -m udp --dport 53 -j NOTRACK
-A OUTPUT -o eth+ -p tcp -m multiport --sports 80,443 -j NOTRACK
-A OUTPUT -o lo -j NOTRACK
COMMIT
# Completed on Fri Oct 23 17:55:20 2020
# Generated by iptables-save v1.4.21 on Fri Oct 23 17:55:20 2020
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:cphulk - [0:0]
:icmpchk - [0:0]
:input_custom - [0:0]
:ipdrop_global - [0:0]
:outbound-attack - [0:0]
:output_custom - [0:0]
:ssh - [0:0]
:tcpchk - [0:0]
:udpchk - [0:0]
-A INPUT -s 162.214.41.61/32 -m comment --comment Managed-Support-Access -j ACCEPT
-A INPUT -s 162.241.18.61/32 -m comment --comment Managed-Support-Access -j ACCEPT
-A INPUT -j cphulk
-A INPUT -s 70.119.102.211/32 -j ACCEPT
-A INPUT -s 127.0.0.1/32 -j ACCEPT
-A INPUT -s 50.23.47.206/32 -j ACCEPT
-A INPUT -s 173.227.74.5/32 -j ACCEPT
-A INPUT -s 192.185.1.20/32 -j ACCEPT
-A INPUT -s 74.202.255.245/32 -j ACCEPT
-A INPUT -s 216.110.94.244/32 -j ACCEPT
-A INPUT -s 74.202.255.244/32 -j ACCEPT
-A INPUT -s 173.193.65.163/32 -j ACCEPT
-A INPUT -s 111.93.159.50/32 -j ACCEPT
-A INPUT -s 173.11.193.20/32 -j ACCEPT
-A INPUT -s 216.110.94.228/32 -j ACCEPT
-A INPUT -s 74.202.255.243/32 -j ACCEPT
-A INPUT ! -i lo -p tcp -j tcpchk
-A INPUT ! -i lo -p udp -j udpchk
-A INPUT ! -i lo -p icmp -j icmpchk
-A INPUT -j ipdrop_global
-A INPUT -j input_custom
-A INPUT -i lo -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ssh
-A INPUT -p icmp -m icmp --icmp-type 8 -m hashlimit --hashlimit-upto 2/sec --hashlimit-burst 10 --hashlimit-mode srcip --hashlimit-name PING_IN -j ACCEPT
-A INPUT -p icmp -m icmp --icmp-type 8 -m limit --limit 5/min -j LOG --log-prefix "ICMP_DROP " --log-level 3
-A INPUT -p icmp -m icmp --icmp-type 8 -j DROP
-A INPUT -p icmp -m icmp --icmp-type 0 -j ACCEPT
-A INPUT -p icmp -m icmp --icmp-type 3/4 -j ACCEPT
-A INPUT -p icmp -m icmp --icmp-type 3/3 -j ACCEPT
-A INPUT -p icmp -m icmp --icmp-type 3/1 -j ACCEPT
-A INPUT -p icmp -m icmp --icmp-type 11 -j ACCEPT
-A INPUT -p icmp -m icmp --icmp-type 12 -j ACCEPT
-A INPUT -p icmp -m icmp --icmp-type 30 -j ACCEPT
-A INPUT -p icmp -m state --state ESTABLISHED -j ACCEPT
-A INPUT -s 173.245.48.0/20 -p tcp -m tcp --dport 80 -j ACCEPT
-A INPUT -s 103.21.244.0/22 -p tcp -m tcp --dport 80 -j ACCEPT
-A INPUT -s 103.22.200.0/22 -p tcp -m tcp --dport 80 -j ACCEPT
-A INPUT -s 103.31.4.0/22 -p tcp -m tcp --dport 80 -j ACCEPT
-A INPUT -s 141.101.64.0/18 -p tcp -m tcp --dport 80 -j ACCEPT
-A INPUT -s 108.162.192.0/18 -p tcp -m tcp --dport 80 -j ACCEPT
-A INPUT -s 190.93.240.0/20 -p tcp -m tcp --dport 80 -j ACCEPT
-A INPUT -s 188.114.96.0/20 -p tcp -m tcp --dport 80 -j ACCEPT
-A INPUT -s 197.234.240.0/22 -p tcp -m tcp --dport 80 -j ACCEPT
-A INPUT -s 198.41.128.0/17 -p tcp -m tcp --dport 80 -j ACCEPT
-A INPUT -s 162.158.0.0/15 -p tcp -m tcp --dport 80 -j ACCEPT
-A INPUT -s 104.16.0.0/12 -p tcp -m tcp --dport 80 -j ACCEPT
-A INPUT -s 172.64.0.0/13 -p tcp -m tcp --dport 80 -j ACCEPT
-A INPUT -s 131.0.72.0/22 -p tcp -m tcp --dport 80 -j ACCEPT
-A INPUT -s 162.241.189.194/32 -p tcp -m tcp --dport 80 -j ACCEPT
-A INPUT -s 198.1.121.202/32 -p tcp -m multiport --dports 22,80 -j ACCEPT
-A INPUT -s 198.1.121.202/32 -p icmp -m icmp --icmp-type 8 -j ACCEPT
-A INPUT -s 184.173.226.84/32 -p tcp -m multiport --dports 22,80 -j ACCEPT
-A INPUT -s 184.173.226.84/32 -p icmp -m icmp --icmp-type 8 -j ACCEPT
-A INPUT -s 184.172.224.50/32 -p tcp -m multiport --dports 22,80 -j ACCEPT
-A INPUT -s 184.172.224.50/32 -p icmp -m icmp --icmp-type 8 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 53 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 21 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 25 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 26 -j ACCEPT
-A INPUT -p udp -m udp --dport 53 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 80 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 110 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 143 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 443 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 465 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 587 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 2082 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 2083 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 2084 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 2086 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 2087 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 2089 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 2222 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 2095 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 2096 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 993 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 995 -j ACCEPT
-A INPUT -s 74.220.195.27/32 -p udp -m udp --sport 53 -j ACCEPT
-A INPUT -s 74.220.195.27/32 -p tcp -m tcp --sport 53 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT
-A INPUT -p udp -m udp --dport 22 -j ACCEPT
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -m limit --limit 1/sec -j LOG --log-prefix "LOG_INPUT: "
-A INPUT -p tcp -m tcp -j REJECT --reject-with tcp-reset
-A INPUT -j DROP
-A FORWARD -p tcp -j tcpchk
-A FORWARD -p udp -j udpchk
-A FORWARD -p icmp -j icmpchk
-A OUTPUT -p tcp -m tcp --dport 80 -j outbound-attack
-A OUTPUT ! -o lo -p tcp -j tcpchk
-A OUTPUT -p udp -j udpchk
-A OUTPUT -p icmp -j icmpchk
-A OUTPUT -j output_custom
-A OUTPUT -o lo -j ACCEPT
-A OUTPUT -p icmp -m state --state NEW,ESTABLISHED -j ACCEPT
-A OUTPUT -d 198.1.121.202/32 -p icmp -m icmp --icmp-type 0 -j ACCEPT
-A OUTPUT -d 184.173.226.84/32 -p icmp -m icmp --icmp-type 0 -j ACCEPT
-A OUTPUT -d 184.172.224.50/32 -p icmp -m icmp --icmp-type 0 -j ACCEPT
-A OUTPUT -p udp -m udp --dport 1129 -j ACCEPT
-A OUTPUT -p tcp -m tcp --dport 1129 -j ACCEPT
-A OUTPUT -p udp -m udp --dport 30000 -j ACCEPT
-A OUTPUT -p tcp -m tcp --dport 30000 -j ACCEPT
-A OUTPUT -p udp -m udp --dport 110 -j ACCEPT
-A OUTPUT -p tcp -m tcp --dport 110 -j ACCEPT
-A OUTPUT -p udp -m udp --dport 43 -j ACCEPT
-A OUTPUT -p tcp -m tcp --dport 43 -j ACCEPT
-A OUTPUT -p tcp -m tcp --dport 873 -j ACCEPT
-A OUTPUT -p udp -m owner --uid-owner 0 -j ACCEPT
-A OUTPUT -p icmp -j ACCEPT
-A OUTPUT -o lo -j ACCEPT
-A OUTPUT -p tcp -m tcp --dport 21 -j ACCEPT
-A OUTPUT -p tcp -m tcp --dport 22 -j ACCEPT
-A OUTPUT -d 74.52.223.18/32 -p tcp -m tcp --dport 25 -j ACCEPT
-A OUTPUT -d 74.52.223.66/32 -p tcp -m tcp --dport 25 -j ACCEPT
-A OUTPUT -d 64.5.52.7/32 -p tcp -m tcp --dport 25 -j ACCEPT
-A OUTPUT -d 64.5.52.8/32 -p tcp -m tcp --dport 25 -j ACCEPT
-A OUTPUT -d 64.5.52.9/32 -p tcp -m tcp --dport 25 -j ACCEPT
-A OUTPUT -d 64.5.52.12/32 -p tcp -m tcp --dport 25 -j ACCEPT
-A OUTPUT -d 64.5.52.13/32 -p tcp -m tcp --dport 25 -j ACCEPT
-A OUTPUT -d 64.5.52.14/32 -p tcp -m tcp --dport 25 -j ACCEPT
-A OUTPUT -d 67.18.137.84/32 -p tcp -m tcp --dport 25 -j ACCEPT
-A OUTPUT -d 67.18.137.85/32 -p tcp -m tcp --dport 25 -j ACCEPT
-A OUTPUT -d 67.18.137.86/32 -p tcp -m tcp --dport 25 -j ACCEPT
-A OUTPUT -d 67.18.137.87/32 -p tcp -m tcp --dport 25 -j ACCEPT
-A OUTPUT -d 67.18.137.88/32 -p tcp -m tcp --dport 25 -j ACCEPT
-A OUTPUT -d 74.52.222.226/32 -p tcp -m tcp --dport 25 -j ACCEPT
-A OUTPUT -d 74.52.222.242/32 -p tcp -m tcp --dport 25 -j ACCEPT
-A OUTPUT -d 74.52.223.2/32 -p tcp -m tcp --dport 25 -j ACCEPT
-A OUTPUT -p tcp -m tcp --dport 25 -m owner --uid-owner 47 -j ACCEPT
-A OUTPUT -p tcp -m owner ! --uid-owner 0 -m multiport --dports 25,465,587 -m limit --limit 1/sec -j LOG --log-prefix "OUTBOUND-SMTP : " --log-level 5
-A OUTPUT -p udp -m udp --dport 53 -m owner ! --uid-owner 99 -j ACCEPT
-A OUTPUT -p tcp -m tcp --dport 53 -m owner ! --uid-owner 99 -j ACCEPT
-A OUTPUT -d 74.220.195.27/32 -p udp -m udp --dport 53 -j ACCEPT
-A OUTPUT -d 74.220.195.27/32 -p tcp -m tcp --dport 53 -j ACCEPT
-A OUTPUT -p udp -m udp --dport 53 -m owner --uid-owner 99 -m limit --limit 20/sec -j ACCEPT
-A OUTPUT -p tcp -m tcp --dport 53 -m owner --uid-owner 99 -m limit --limit 20/sec -j ACCEPT
-A OUTPUT -p tcp -m tcp --dport 80 -j ACCEPT
-A OUTPUT -p tcp -m tcp --dport 443 -j ACCEPT
-A OUTPUT -p tcp -m tcp --dport 465 -j ACCEPT
-A OUTPUT -p tcp -m tcp --dport 587 -j ACCEPT
-A OUTPUT -p tcp -m tcp --dport 2086 -j ACCEPT
-A OUTPUT -p tcp -m tcp --dport 2087 -j ACCEPT
-A OUTPUT -p tcp -m tcp --dport 2089 -j ACCEPT
-A OUTPUT -p tcp -m tcp --dport 3306 -j ACCEPT
-A OUTPUT -p tcp -m tcp --dport 37 -j ACCEPT
-A OUTPUT -p tcp -m tcp --dport 2703 -j ACCEPT
-A OUTPUT -p tcp -m tcp --sport 53 -j ACCEPT
-A OUTPUT -p tcp -m tcp --sport 21 -j ACCEPT
-A OUTPUT -p tcp -m tcp --sport 22 -j ACCEPT
-A OUTPUT -p tcp -m tcp --sport 22 -j ACCEPT
-A OUTPUT -p tcp -m tcp --sport 25 -j ACCEPT
-A OUTPUT -p tcp -m tcp --sport 26 -j ACCEPT
-A OUTPUT -p udp -m udp --sport 53 -j ACCEPT
-A OUTPUT -p tcp -m tcp --sport 80 -j ACCEPT
-A OUTPUT -p tcp -m tcp --sport 110 -j ACCEPT
-A OUTPUT -p tcp -m tcp --sport 143 -j ACCEPT
-A OUTPUT -p tcp -m tcp --sport 443 -j ACCEPT
-A OUTPUT -p tcp -m tcp --sport 465 -j ACCEPT
-A OUTPUT -p tcp -m tcp --sport 587 -j ACCEPT
-A OUTPUT -p tcp -m tcp --sport 2082 -j ACCEPT
-A OUTPUT -p tcp -m tcp --sport 2083 -j ACCEPT
-A OUTPUT -p tcp -m tcp --sport 2084 -j ACCEPT
-A OUTPUT -p tcp -m tcp --sport 2086 -j ACCEPT
-A OUTPUT -p tcp -m tcp --sport 2087 -j ACCEPT
-A OUTPUT -p tcp -m tcp --sport 2089 -j ACCEPT
-A OUTPUT -p tcp -m tcp --sport 2222 -j ACCEPT
-A OUTPUT -p tcp -m tcp --sport 2095 -j ACCEPT
-A OUTPUT -p tcp -m tcp --sport 2096 -j ACCEPT
-A OUTPUT -p tcp -m tcp --sport 993 -j ACCEPT
-A OUTPUT -p tcp -m tcp --sport 995 -j ACCEPT
-A OUTPUT -d 10.0.0.0/8 -p tcp -m tcp --dport 50905 -j ACCEPT
-A OUTPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A OUTPUT -m limit --limit 1/sec -j LOG --log-prefix "LOG_OUTPUT: "
-A OUTPUT -p tcp -m tcp -j REJECT --reject-with tcp-reset
-A OUTPUT -j DROP
-A cphulk -s 112.85.42.176/32 -m state --state NEW -m time --datestop 2020-10-23T22:57:16 -j DROP
-A cphulk -s 61.177.172.104/32 -m state --state NEW -m time --datestop 2020-10-23T23:15:09 -j DROP
-A cphulk -s 218.92.0.158/32 -m state --state NEW -m time --datestop 2020-10-23T23:24:45 -j DROP
-A cphulk -s 112.85.42.119/32 -m state --state NEW -m time --datestop 2020-10-23T23:27:46 -j DROP
-A cphulk -s 61.177.172.61/32 -m state --state NEW -m time --datestop 2020-10-23T23:50:54 -j DROP
-A cphulk -s 222.186.15.62/32 -m state --state NEW -m time --datestop 2020-10-23T23:53:18 -j DROP
-A cphulk -s 122.51.200.252/32 -m state --state NEW -m time --datestop 2020-10-24T00:03:10 -j DROP
-A cphulk -s 122.194.229.122/32 -m state --state NEW -m time --datestop 2020-10-24T00:47:40 -j DROP
-A cphulk -s 112.85.42.151/32 -m state --state NEW -m time --datestop 2020-10-24T00:57:09 -j DROP
-A cphulk -s 218.92.0.173/32 -m state --state NEW -m time --datestop 2020-10-24T01:01:22 -j DROP
-A cphulk -s 222.186.30.112/32 -m state --state NEW -m time --datestop 2020-10-24T01:35:01 -j DROP
-A cphulk -s 112.85.42.98/32 -m state --state NEW -m time --datestop 2020-10-24T03:01:32 -j DROP
-A cphulk -s 218.92.0.247/32 -m state --state NEW -m time --datestop 2020-10-24T03:32:46 -j DROP
-A cphulk -s 218.92.0.212/32 -m state --state NEW -m time --datestop 2020-10-24T04:30:12 -j DROP
-A cphulk -s 218.92.0.145/32 -m state --state NEW -m time --datestop 2020-10-24T04:30:38 -j DROP
-A cphulk -s 222.186.42.57/32 -m state --state NEW -m time --datestop 2020-10-24T04:42:29 -j DROP
-A cphulk -s 112.85.42.230/32 -m state --state NEW -m time --datestop 2020-10-24T04:44:07 -j DROP
-A cphulk -s 122.194.229.54/32 -m state --state NEW -m time --datestop 2020-10-24T04:48:55 -j DROP
-A cphulk -s 112.85.42.13/32 -m state --state NEW -m time --datestop 2020-10-24T04:53:13 -j DROP
-A cphulk -s 118.193.34.198/32 -m state --state NEW -m time --datestop 2020-10-24T05:15:12 -j DROP
-A cphulk -s 218.92.0.171/32 -m state --state NEW -m time --datestop 2020-10-24T05:20:36 -j DROP
-A cphulk -s 222.186.42.137/32 -m state --state NEW -m time --datestop 2020-10-24T05:41:55 -j DROP
-A cphulk -s 106.12.150.36/32 -m state --state NEW -m time --datestop 2020-10-24T05:50:11 -j DROP
-A cphulk -s 112.85.42.172/32 -m state --state NEW -m time --datestop 2020-10-24T06:58:07 -j DROP
-A cphulk -s 141.98.80.74/32 -m state --state NEW -m time --datestop 2020-10-24T07:59:45 -j DROP
-A cphulk -s 112.85.42.180/32 -m state --state NEW -m time --datestop 2020-10-24T08:55:28 -j DROP
-A cphulk -s 61.177.172.54/32 -m state --state NEW -m time --datestop 2020-10-24T09:05:01 -j DROP
-A cphulk -s 61.177.172.142/32 -m state --state NEW -m time --datestop 2020-10-24T09:09:13 -j DROP
-A cphulk -s 61.177.172.168/32 -m state --state NEW -m time --datestop 2020-10-24T09:39:35 -j DROP
-A cphulk -s 122.194.229.37/32 -m state --state NEW -m time --datestop 2020-10-24T10:35:47 -j DROP
-A cphulk -s 45.150.206.118/32 -m state --state NEW -m time --datestop 2020-10-24T10:38:31 -j DROP
-A cphulk -s 222.186.180.130/32 -m state --state NEW -m time --datestop 2020-10-24T10:50:45 -j DROP
-A cphulk -s 45.142.120.53/32 -m state --state NEW -m time --datestop 2020-10-24T11:22:56 -j DROP
-A cphulk -s 45.142.120.192/32 -m state --state NEW -m time --datestop 2020-10-24T11:33:26 -j DROP
-A cphulk -s 222.186.42.7/32 -m state --state NEW -m time --datestop 2020-10-24T11:39:35 -j DROP
-A cphulk -s 47.104.238.8/32 -m state --state NEW -m time --datestop 2020-10-24T11:59:00 -j DROP
-A cphulk -s 111.229.234.109/32 -m state --state NEW -m time --datestop 2020-10-24T12:04:07 -j DROP
-A cphulk -s 218.92.0.251/32 -m state --state NEW -m time --datestop 2020-10-24T12:05:58 -j DROP
-A cphulk -s 112.85.42.181/32 -m state --state NEW -m time --datestop 2020-10-24T14:05:34 -j DROP
-A cphulk -s 112.85.42.184/32 -m state --state NEW -m time --datestop 2020-10-24T14:07:09 -j DROP
-A cphulk -s 122.194.229.59/32 -m state --state NEW -m time --datestop 2020-10-24T14:17:10 -j DROP
-A cphulk -s 112.85.42.112/32 -m state --state NEW -m time --datestop 2020-10-24T14:45:53 -j DROP
-A cphulk -s 103.141.138.130/32 -m state --state NEW -m time --datestop 2020-10-24T15:15:44 -j DROP
-A cphulk -s 112.85.42.195/32 -m state --state NEW -m time --datestop 2020-10-24T16:08:41 -j DROP
-A cphulk -s 218.92.0.184/32 -m state --state NEW -m time --datestop 2020-10-24T16:36:11 -j DROP
-A cphulk -s 106.12.52.34/32 -m state --state NEW -m time --datestop 2020-10-24T16:55:16 -j DROP
-A cphulk -s 222.186.42.213/32 -m state --state NEW -m time --datestop 2020-10-24T16:55:21 -j DROP
-A cphulk -s 190.102.153.152/32 -m state --state NEW -m time --datestop 2020-10-24T17:07:46 -j DROP
-A cphulk -s 222.186.31.166/32 -m state --state NEW -m time --datestop 2020-10-24T17:13:43 -j DROP
-A cphulk -s 112.85.42.110/32 -m state --state NEW -m time --datestop 2020-10-24T17:20:57 -j DROP
-A cphulk -s 222.186.30.76/32 -m state --state NEW -m time --datestop 2020-10-24T17:28:02 -j DROP
-A cphulk -s 124.118.186.230/32 -m state --state NEW -m time --datestop 2020-10-24T17:45:07 -j DROP
-A cphulk -s 2.57.122.15/32 -m state --state NEW -m time --datestop 2020-10-24T18:00:27 -j DROP
-A cphulk -s 222.186.31.83/32 -m state --state NEW -m time --datestop 2020-10-24T18:41:58 -j DROP
-A cphulk -s 49.88.112.72/32 -m state --state NEW -m time --datestop 2020-10-24T18:48:50 -j DROP
-A cphulk -s 212.70.149.69/32 -m state --state NEW -m time --datestop 2020-10-24T19:04:03 -j DROP
-A cphulk -s 218.92.0.172/32 -m state --state NEW -m time --datestop 2020-10-24T19:20:30 -j DROP
-A cphulk -s 218.92.0.223/32 -m state --state NEW -m time --datestop 2020-10-24T19:26:13 -j DROP
-A cphulk -s 222.186.30.57/32 -m state --state NEW -m time --datestop 2020-10-24T19:27:16 -j DROP
-A cphulk -s 222.186.15.115/32 -m state --state NEW -m time --datestop 2020-10-24T19:50:41 -j DROP
-A cphulk -s 221.131.165.61/32 -m state --state NEW -m time --datestop 2020-10-24T20:00:34 -j DROP
-A cphulk -s 112.85.42.122/32 -m state --state NEW -m time --datestop 2020-10-24T20:34:49 -j DROP
-A cphulk -s 212.70.149.5/32 -m state --state NEW -m time --datestop 2020-10-24T20:43:35 -j DROP
-A cphulk -s 212.70.149.84/32 -m state --state NEW -m time --datestop 2020-10-24T20:46:17 -j DROP
-A cphulk -s 212.70.149.53/32 -m state --state NEW -m time --datestop 2020-10-24T20:49:18 -j DROP
-A cphulk -s 212.70.149.21/32 -m state --state NEW -m time --datestop 2020-10-24T20:51:01 -j DROP
-A cphulk -s 218.92.0.248/32 -m state --state NEW -m time --datestop 2020-10-24T20:55:51 -j DROP
-A cphulk -s 112.85.42.53/32 -m state --state NEW -m time --datestop 2020-10-24T21:04:07 -j DROP
-A cphulk -s 112.85.42.190/32 -m state --state NEW -m time --datestop 2020-10-24T22:05:58 -j DROP
-A cphulk -s 218.92.0.246/32 -m state --state NEW -m time --datestop 2020-10-24T22:18:13 -j DROP
-A cphulk -s 218.92.0.175/32 -m state --state NEW -m time --datestop 2020-10-24T22:38:33 -j DROP
-A cphulk -s 218.92.0.249/32 -m state --state NEW -m time --datestop 2020-10-24T22:43:42 -j DROP
-A ipdrop_global -s 43.255.190.0/23 -j DROP
-A outbound-attack -m string --string "POST /wp-login.php" --algo bm --to 65535 -j LOG --log-prefix "OUTBOUND-ATTACK (wplogin) : " --log-uid
-A outbound-attack -m string --string "POST wp-login.php" --algo bm --to 65535 -j LOG --log-prefix "OUTBOUND-ATTACK (wplogin) : " --log-uid
-A outbound-attack -m string --string "xmlrpc.php" --algo bm --to 65535 -j LOG --log-prefix "OUTBOUND-ATTACK (xmlrpc) : " --log-uid
-A outbound-attack -m string --string "POST /wp-login.php" --algo bm --to 65535 -j DROP
-A outbound-attack -m string --string "POST wp-login.php" --algo bm --to 65535 -j DROP
-A outbound-attack -m string --string "POST xmlrpc.php" --algo bm --to 65535 -j DROP
-A outbound-attack -m string --string "POST /xmlrpc.php" --algo bm --to 65535 -j DROP
-A outbound-attack -m string --string "xmlrpc.php" --algo bm --to 65535 -j DROP
-A outbound-attack -m string --string "wp-login.php" --algo bm --to 65535 -j DROP
-A ssh -s 67.18.2.226/32 -j ACCEPT
-A ssh -s 50.23.47.206/32 -j ACCEPT
-A ssh -s 70.87.80.194/32 -j ACCEPT
-A ssh -s 216.106.185.169/32 -j ACCEPT
-A ssh -s 12.96.160.0/24 -j ACCEPT
-A ssh -s 216.19.0.0/24 -j ACCEPT
-A ssh -s 162.241.18.61/32 -j ACCEPT
-A ssh -s 162.214.41.61/32 -j ACCEPT
-A ssh -p tcp -m state --state NEW -m recent --set --name DEFAULT --mask 255.255.255.255 --rsource
-A ssh -p tcp -m state --state NEW -m recent --rcheck --seconds 60 --hitcount 10 --name DEFAULT --mask 255.255.255.255 --rsource -m limit --limit 10/min -j LOG --log-prefix "SSH-ATTACK : " --log-level 5
-A ssh -p tcp -m state --state NEW -m recent --update --seconds 60 --hitcount 10 --name DEFAULT --mask 255.255.255.255 --rsource -j REJECT --reject-with tcp-reset
-A ssh -p tcp -j ACCEPT
COMMIT
# Completed on Fri Oct 23 17:55:20 2020
@ Telegram