{"type":"rich","version":"1.0","provider_name":"phorkie","provider_url":"https:\/\/p.cweiske.de\/","title":"iptables attack close ssh","author_name":"Christian Weiske","cache_age":86400,"width":900,"height":900,"html":"<!-- embedding all files of https:\/\/p.cweiske.de\/597 -->\n<link rel=\"stylesheet\" href=\"https:\/\/p.cweiske.de\/css\/embed.css\"\/>\n<div class=\"phork\" id=\"597\">\n    <div class=\"phork-file\">\n <div class=\"phork-content\">\n  <style type=\"text\/css\">\/**\n * GeSHi (C) 2004 - 2007 Nigel McNie, 2007 - 2014 Benny Baumann\n * (http:\/\/qbnz.com\/highlighter\/ and http:\/\/geshi.org\/)\n *\/\n.ini .de1, .ini .de2 {font: normal normal 1em\/1.2em monospace; margin:0; padding:0; background:none; vertical-align:top;}\n.ini  {font-family:monospace;}\n.ini .imp {font-weight: bold; color: red;}\n.ini li, .ini .li1 {color: #DDD;}\n.ini .ln {width:1px;text-align:right;margin:0;padding:0 2px;vertical-align:top;}\n.ini .co0 {color: #666666; font-style: italic;}\n.ini .sy0 {color: #000066; font-weight:bold;}\n.ini .st0 {color: #933;}\n.ini .re0 {color: #000066; font-weight:bold;}\n.ini .re1 {color: #000099;}\n.ini .re2 {color: #660066;}\n.ini span.xtra { display:block; }\n<\/style><div class=\"code\"><table class=\"ini\"><tbody><tr class=\"li1\"><td class=\"ln\"><pre class=\"de1\">1\n2\n3\n4\n5\n6\n7\n8\n9\n10\n<\/pre><\/td><td class=\"de1\"><pre class=\"de1\">*raw\n:PREROUTING ACCEPT <span class=\"re0\"><span class=\"br0\">&#91;<\/span>199179:302566450<span class=\"br0\">&#93;<\/span><\/span>\n:OUTPUT ACCEPT <span class=\"re0\"><span class=\"br0\">&#91;<\/span>587967:675961536<span class=\"br0\">&#93;<\/span><\/span>\n:myrain - <span class=\"re0\"><span class=\"br0\">&#91;<\/span>0:0<span class=\"br0\">&#93;<\/span><\/span>\n-A PREROUTING -i eth0 -j myrain\n-A myrain -p tcp -s 88.198.148.245 --dport <span class=\"nu0\">22<\/span> -j ACCEPT\n-A myrain -p tcp -s 208.43.231.8 --dport <span class=\"nu0\">22<\/span> -j ACCEPT\n-A myrain -p tcp --dport <span class=\"nu0\">22<\/span> -j DROP\nCOMMIT\n&#160;<\/pre><\/td><\/tr><\/tbody><\/table><\/div>\n <\/div>\n <div class=\"phork-meta\">\n  <a href=\"https:\/\/p.cweiske.de\/597\/rev-raw\/10292ee0d3c133486e16895404e0ab7f8736f258\/etc\/iptables.conf\" style=\"float: right\">view raw source<\/a>\n  <a href=\"https:\/\/p.cweiske.de\/597#etc\/iptables.conf\">etc\/iptables.conf<\/a>\n <\/div>\n<\/div>\n    <div class=\"phork-file\">\n <div class=\"phork-content\">\n  <div class=\"code\"><pre class=\"txt\">$ ls -lah --full-time \/etc\/iptables.conf \r\n-rw-r--r-- 1 root root 278 2018-07-14 20:39:30.002311896 -0400 \/etc\/iptables.conf\r\n<\/pre><\/div>\n\n <\/div>\n <div class=\"phork-meta\">\n  <a href=\"https:\/\/p.cweiske.de\/597\/rev-raw\/10292ee0d3c133486e16895404e0ab7f8736f258\/phork0.txt\" style=\"float: right\">view raw source<\/a>\n  <a href=\"https:\/\/p.cweiske.de\/597#phork0.txt\">phork0.txt<\/a>\n <\/div>\n<\/div>\n<\/div>\n"}