Improving IP Blocking for Enhanced Security in DirectAdmin

Sharif · Nov 1, 2024

I’ve noticed that some IP addresses aren’t being blocked even after exceeding the retry limit set in my security settings, allowing more login attempts than I’d like. To strengthen the server’s security, I want to ensure that IPs are consistently blocked after a specific number of failed login attempts.

Could anyone share advice on the following?

Configurations within DirectAdmin that might be missing or need adjustment to enforce IP blocks more reliably.
Recommendations for using tools like fail2ban or others that could add extra protection against persistent IPs attempting unauthorized access.

Any insights on configuration settings or additional tools to help monitor and block repeated attempts effectively would be greatly appreciated.

Thanks for your support!

mhsolutions · Nov 1, 2024

I think you can install modsecurity comodo to improve securre

Modsecurity | Directadmin Docs

DirectAdmin Knowledge Base

docs.directadmin.com

Sharif · Nov 2, 2024

I mean the basic IP blocking feature isn't working I set it to 3 times failed login to be blocked, but it does not get blocked.

exlhost · Nov 2, 2024

Are you using CSF ?

Sharif · Nov 13, 2024

exlhost said:
Are you using CSF ?

Yes, I am. Is there a setting I missed? I want everything to be blocked automatically, but it seems there is still an issue with blocking it.

The Brute Force Monitor indicates it isn’t blocked, as all failed attempts were from non-users trying to snoop.

exlhost · Nov 14, 2024

Csf is enabled and correct values are added to Distributed Attacks?

Active8 · Nov 14, 2024

maybe this helps

Thread 'Firewall - csf bruteforce not working properly and high CPU use'

Sep 19, 2022

I don't have full confidence in how bruteforce blocking to the firewall works.
I use: csf v14.17 and directadmin Version 1.642 on Centos 7 64bitt.

In the brute force i see In Failed Logins on the webinterface:
212.70.x.x 4168 2022-09-16 17:59 2022-09-17 08:08 (block yes)
5.34.x.x 3085 2022-09-15 18:11 2022-09-18 16:28 (block yes)

So the ip 212.70.x.x. have login wrong for 4168 times. I like to stop this on 150 times and block.

In the block list on brute force list i see 364 items.
When i check the firewall i see on csf.deny, the IP address deny file...

Unifex · Nov 14, 2024

You could also check this:
Starting from DirectAdmin version 1.61.0, the CSF integration is done directly. New installs will have CSF automatically installed and BFM autoblock covered if installation isn't customized to disable them.
#
To activate, remove the following files:

/usr/local/directadmin/scripts/custom/block_ip.sh
/usr/local/directadmin/scripts/custom/brute_force_notice_ip.sh
/usr/local/directadmin/scripts/custom/show_blocked_ips.sh
/usr/local/directadmin/scripts/custom/unblock_ip.sh

Ohm J · Nov 14, 2024

In administrator security setting, there have 2 sections between anti-bruteforce :2222 panel and Other amti-brute service sections,

Upper section is for anti-brute webpanel.
Lower section is for other anti-brute services.

Can you show screen short which's one you config ?

Sharif · Nov 24, 2024

Ohm J said:
In administrator security setting, there have 2 sections between anti-bruteforce :2222 panel and Other amti-brute service sections,

Upper section is for anti-brute webpanel.
Lower section is for other anti-brute services.

Can you show screen short which's one you config ?

Do you mean this config?

Ohm J · Nov 24, 2024

Yes, it's incorrect setting. You should config in "Notify Admin after an IP has" and "Notify Admin after a User has" too.

Sharif · Nov 28, 2024

Ohm J said:
Yes, it's incorrect setting. You should config in "Notify Admin after an IP has" and "Notify Admin after a User has" too.

I do not get it, It's already set to 100

Ohm J · Nov 28, 2024

BFM not immediately block, it scanning every around 30s or 60s, so config to 100 fhen they can go more than 100 until blocked.

and ensure iptables and csf firewall working correctly.

mockingbird · Dec 12, 2024

This is a little frustrating, but I have a fresh installation -- and BFM is not automatically blocking some nuisance IP Addresses that keep trying to bruteforce SSH. Also, this command should be integrated into the UI so stop the spamming messages in the VNC console which makes it unusable:

/usr/local/directadmin/directadmin config-set hide_brute_force_notifications 1 --restart

I have many IPs in BFM, one with 54 tries that were not automatically blocked. In fact, nothing was blocked, unless you count myself, when I changed my SSH port and had to explicitly whitelist my IP in the firewall to access it, but that's for a different thread.

Thanks

edit: no, that command doesn't even work to stop the console spamming:

Code:

starting serial terminal on interface serial0
[ 3739.332861] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:ba:84:d1:11:29:4d:08:00 SRC=38.22.104.218 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=39087 PROTO=UDP SPT=58718 DPT=5355 LEN=41 
[ 3744.111526] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=162.216.149.227 DST=my.ip.address.removed LEN=44 TOS=0x00 PREC=0x00 TTL=57 ID=54321 PROTO=TCP SPT=54322 DPT=48972 WINDOW=65535 RES=0x00 SYN URGP=0 
[ 3749.883088] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15138 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 3749.885887] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15139 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 3749.888255] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15140 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 3749.928718] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=147.185.133.133 DST=my.ip.address.removed LEN=44 TOS=0x00 PREC=0x00 TTL=54 ID=29567 PROTO=TCP SPT=49385 DPT=23586 WINDOW=1024 RES=0x00 SYN URGP=0 
54942 DPT=5355 LEN=41 
[ 3765.880503] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e0:db:55:06:a6:ac:08:00 SRC=104.234.204.130 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=56272 PROTO=UDP SPT=54942 DPT=5355 LEN=41 
53556 DPT=5355 LEN=41

Come on DA people - you should do better than this! This should be working out of the box.

EDIT 2: I think I managed to stop the console spamming with 'dmesg -n 1'.

My next question is how do I get BFM to start blocking all these IPs:

Code:

[ 3739.328845] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:ba:84:d1:11:29:4d:86:dd SRC=fe80:0000:0000:0000:7f73:be7f:7564:47cf DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=719947 PROTO=UDP SPT=58718 DPT=5355 LEN=41 
[ 3739.332861] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:ba:84:d1:11:29:4d:08:00 SRC=38.22.104.218 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=39087 PROTO=UDP SPT=58718 DPT=5355 LEN=41 
[ 3744.111526] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=162.216.149.227 DST=my.ip.address.removed LEN=44 TOS=0x00 PREC=0x00 TTL=57 ID=54321 PROTO=TCP SPT=54322 DPT=48972 WINDOW=65535 RES=0x00 SYN URGP=0 
[ 3749.883088] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15138 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 3749.885887] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15139 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 3749.888255] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15140 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 3749.928718] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=147.185.133.133 DST=my.ip.address.removed LEN=44 TOS=0x00 PREC=0x00 TTL=54 ID=29567 PROTO=TCP SPT=49385 DPT=23586 WINDOW=1024 RES=0x00 SYN URGP=0 
[ 3765.876002] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e0:db:55:06:a6:ac:86:dd SRC=fe80:0000:0000:0000:3dc0:12a0:3933:176f DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=276354 PROTO=UDP SPT=54942 DPT=5355 LEN=41 
[ 3765.880503] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e0:db:55:06:a6:ac:08:00 SRC=104.234.204.130 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=56272 PROTO=UDP SPT=54942 DPT=5355 LEN=41 
[ 3765.883851] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e0:db:55:06:a6:b0:86:dd SRC=fe80:0000:0000:0000:d551:9b9c:a197:aa30 DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=876483 PROTO=UDP SPT=53556 DPT=5355 LEN=41 
[ 3765.886753] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e0:db:55:06:a6:b0:08:00 SRC=38.22.104.96 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=14366 PROTO=UDP SPT=53556 DPT=5355 LEN=41 
[ 3770.716786] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=79.124.62.134 DST=my.ip.address.removed LEN=40 TOS=0x08 PREC=0x40 TTL=241 ID=23387 PROTO=TCP SPT=0 DPT=19075 WINDOW=1024 RES=0x00 SYN URGP=0 
[ 3779.971106] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15141 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 3779.974155] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15142 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 3779.976706] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15143 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 3785.827124] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=185.242.226.3 DST=my.ip.address.removed LEN=44 TOS=0x08 PREC=0x40 TTL=243 ID=54321 PROTO=TCP SPT=43789 DPT=10028 WINDOW=65535 RES=0x00 SYN URGP=0 
[ 3788.858895] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e2:12:70:19:50:44:86:dd SRC=fe80:0000:0000:0000:e997:ce10:ded7:3ffe DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=958218 PROTO=UDP SPT=61790 DPT=5355 LEN=41 
[ 3788.864387] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:50:44:08:00 SRC=104.234.204.207 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=30364 PROTO=UDP SPT=61790 DPT=5355 LEN=41 
[ 3790.239689] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e2:12:70:19:50:44:86:dd SRC=fe80:0000:0000:0000:e997:ce10:ded7:3ffe DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=750905 PROTO=UDP SPT=54003 DPT=5355 LEN=41 
[ 3790.244595] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:50:44:08:00 SRC=104.234.204.207 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=30365 PROTO=UDP SPT=54003 DPT=5355 LEN=41 
[ 3793.239774] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e2:12:70:19:50:44:86:dd SRC=fe80:0000:0000:0000:e997:ce10:ded7:3ffe DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=333508 PROTO=UDP SPT=50145 DPT=5355 LEN=41 
[ 3793.242929] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:50:44:08:00 SRC=104.234.204.207 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=30366 PROTO=UDP SPT=50145 DPT=5355 LEN=41 
[ 3796.197129] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=156.233.225.31 DST=my.ip.address.removed LEN=44 TOS=0x08 PREC=0x40 TTL=243 ID=32985 PROTO=TCP SPT=41186 DPT=786 WINDOW=1025 RES=0x00 SYN URGP=0 
[ 3803.816710] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=79.110.62.66 DST=my.ip.address.removed LEN=40 TOS=0x08 PREC=0x40 TTL=244 ID=44065 PROTO=TCP SPT=47455 DPT=8679 WINDOW=1024 RES=0x00 SYN URGP=0 
[ 3806.792045] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=79.124.62.126 DST=my.ip.address.removed LEN=40 TOS=0x08 PREC=0x40 TTL=241 ID=53261 PROTO=TCP SPT=0 DPT=5219 WINDOW=1024 RES=0x00 SYN URGP=0 
[ 3810.064723] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15144 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 3810.067363] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15145 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 3810.069746] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15146 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 3813.182082] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=79.124.62.122 DST=my.ip.address.removed LEN=40 TOS=0x08 PREC=0x40 TTL=241 ID=26067 PROTO=TCP SPT=0 DPT=26106 WINDOW=1024 RES=0x00 SYN URGP=0 
[ 3815.727395] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=51.81.144.34 DST=my.ip.address.removed LEN=60 TOS=0x08 PREC=0x20 TTL=45 ID=56651 DF PROTO=TCP SPT=37895 DPT=16993 WINDOW=5840 RES=0x00 SYN URGP=0 
[ 3818.777260] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=146.190.109.118 DST=my.ip.address.removed LEN=85 TOS=0x00 PREC=0x00 TTL=48 ID=44473 DF PROTO=UDP SPT=8081 DPT=4000 LEN=65 
[ 3819.476813] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=83.222.190.102 DST=my.ip.address.removed LEN=40 TOS=0x08 PREC=0x40 TTL=241 ID=32305 PROTO=TCP SPT=44745 DPT=42403 WINDOW=1024 RES=0x00 SYN URGP=0 
[ 3824.944338] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=35.203.211.74 DST=my.ip.address.removed LEN=44 TOS=0x00 PREC=0x00 TTL=248 ID=54321 PROTO=TCP SPT=52450 DPT=2242 WINDOW=65535 RES=0x00 SYN URGP=0 
[ 3825.034205] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:90:b1:1c:57:9f:45:86:dd SRC=fe80:0000:0000:0000:5e30:2093:e3f5:2b9f DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=71 TC=0 HOPLIMIT=1 FLOWLBL=1032108 PROTO=UDP SPT=60621 DPT=5355 LEN=31 
[ 3825.037022] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:90:b1:1c:57:9f:45:08:00 SRC=104.234.204.98 DST=224.0.0.252 LEN=51 TOS=0x00 PREC=0x00 TTL=1 ID=7897 PROTO=UDP SPT=60621 DPT=5355 LEN=31 
[ 3825.442847] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:90:b1:1c:57:9f:45:86:dd SRC=fe80:0000:0000:0000:5e30:2093:e3f5:2b9f DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=71 TC=0 HOPLIMIT=1 FLOWLBL=1032108 PROTO=UDP SPT=60621 DPT=5355 LEN=31 
[ 3825.447110] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:90:b1:1c:57:9f:45:08:00 SRC=104.234.204.98 DST=224.0.0.252 LEN=51 TOS=0x00 PREC=0x00 TTL=1 ID=7898 PROTO=UDP SPT=60621 DPT=5355 LEN=31 
[ 3832.458099] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=167.94.145.91 DST=my.ip.address.removed LEN=60 TOS=0x08 PREC=0x40 TTL=54 ID=43403 PROTO=TCP SPT=9130 DPT=10586 WINDOW=42340 RES=0x00 SYN URGP=0 
[ 3832.615098] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=185.242.226.3 DST=my.ip.address.removed LEN=44 TOS=0x08 PREC=0x40 TTL=245 ID=54321 PROTO=TCP SPT=54367 DPT=10026 WINDOW=65535 RES=0x00 SYN URGP=0 
[ 3835.242288] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=154.212.141.199 DST=my.ip.address.removed LEN=44 TOS=0x08 PREC=0x40 TTL=238 ID=27791 PROTO=TCP SPT=58914 DPT=8888 WINDOW=1024 RES=0x00 SYN URGP=0 
[ 3840.171787] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15147 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 3840.174366] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15148 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 3840.176805] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15149 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 3846.025722] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=47.250.81.196 DST=my.ip.address.removed LEN=52 TOS=0x08 PREC=0x20 TTL=51 ID=33075 DF PROTO=TCP SPT=34099 DPT=12261 WINDOW=61690 RES=0x00 SYN URGP=0 
[ 3854.093534] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=65.49.20.113 DST=my.ip.address.removed LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=54321 PROTO=TCP SPT=37385 DPT=8001 WINDOW=65535 RES=0x00 SYN URGP=0 
[ 3856.010613] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e2:12:70:19:50:44:86:dd SRC=fe80:0000:0000:0000:e997:ce10:ded7:3ffe DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=271878 PROTO=UDP SPT=50500 DPT=5355 LEN=41 
[ 3856.014130] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:50:44:08:00 SRC=104.234.204.207 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=30367 PROTO=UDP SPT=50500 DPT=5355 LEN=41 
[ 3857.240031] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e2:12:70:19:50:44:86:dd SRC=fe80:0000:0000:0000:e997:ce10:ded7:3ffe DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=621643 PROTO=UDP SPT=55088 DPT=5355 LEN=41 
[ 3857.244268] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:50:44:08:00 SRC=104.234.204.207 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=30368 PROTO=UDP SPT=55088 DPT=5355 LEN=41 
[ 3858.226654] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e2:12:70:19:50:44:86:dd SRC=fe80:0000:0000:0000:e997:ce10:ded7:3ffe DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=521960 PROTO=UDP SPT=52146 DPT=5355 LEN=41 
[ 3858.230796] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:50:44:08:00 SRC=104.234.204.207 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=30369 PROTO=UDP SPT=52146 DPT=5355 LEN=41 
[ 3860.224531] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e2:12:70:19:50:44:86:dd SRC=fe80:0000:0000:0000:e997:ce10:ded7:3ffe DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=119913 PROTO=UDP SPT=60776 DPT=5355 LEN=41 
[ 3860.237679] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:50:44:08:00 SRC=104.234.204.207 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=30370 PROTO=UDP SPT=60776 DPT=5355 LEN=41 
[ 3870.283596] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15150 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 3870.286689] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15151 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 3870.289057] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15152 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 3870.493428] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=83.222.191.42 DST=my.ip.address.removed LEN=40 TOS=0x08 PREC=0x40 TTL=241 ID=6223 PROTO=TCP SPT=61000 DPT=18212 WINDOW=1024 RES=0x00 SYN URGP=0 
[ 3874.909328] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=113.203.241.189 DST=my.ip.address.removed LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=54321 PROTO=TCP SPT=60696 DPT=4145 WINDOW=65535 RES=0x00 SYN URGP=0 
[ 3891.081174] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=35.203.210.137 DST=my.ip.address.removed LEN=44 TOS=0x00 PREC=0x00 TTL=57 ID=9576 PROTO=TCP SPT=53926 DPT=17242 WINDOW=1024 RES=0x00 SYN URGP=0 
[ 3893.076628] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=94.156.104.187 DST=my.ip.address.removed LEN=44 TOS=0x08 PREC=0x40 TTL=246 ID=54310 PROTO=TCP SPT=57273 DPT=33904 WINDOW=1025 RES=0x00 SYN URGP=0 
[ 3893.091084] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=89.248.165.117 DST=my.ip.address.removed LEN=44 TOS=0x08 PREC=0x40 TTL=245 ID=52250 PROTO=TCP SPT=49182 DPT=3399 WINDOW=1025 RES=0x00 SYN URGP=0 
[ 3895.686869] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=193.68.89.3 DST=my.ip.address.removed LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=54321 PROTO=TCP SPT=47318 DPT=21930 WINDOW=65535 RES=0x00 SYN URGP=0 
[ 3900.409414] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15153 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 3900.412273] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15154 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 3900.414674] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15155 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 3904.895300] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=147.185.132.226 DST=my.ip.address.removed LEN=44 TOS=0x00 PREC=0x00 TTL=57 ID=54321 PROTO=TCP SPT=50669 DPT=46372 WINDOW=65535 RES=0x00 SYN URGP=0 
[ 3907.471761] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=162.216.150.57 DST=my.ip.address.removed LEN=44 TOS=0x00 PREC=0x00 TTL=57 ID=57399 PROTO=TCP SPT=50486 DPT=42358 WINDOW=1024 RES=0x00 SYN URGP=0 
[ 3907.985245] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=79.110.62.148 DST=my.ip.address.removed LEN=40 TOS=0x08 PREC=0x40 TTL=244 ID=64345 PROTO=TCP SPT=47875 DPT=28331 WINDOW=1024 RES=0x00 SYN URGP=0 
[ 3923.010360] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e2:12:70:19:50:44:86:dd SRC=fe80:0000:0000:0000:e997:ce10:ded7:3ffe DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=792463 PROTO=UDP SPT=51365 DPT=5355 LEN=41 
[ 3923.017755] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:50:44:08:00 SRC=104.234.204.207 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=30371 PROTO=UDP SPT=51365 DPT=5355 LEN=41 
[ 3924.093137] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e2:12:70:19:50:44:86:dd SRC=fe80:0000:0000:0000:e997:ce10:ded7:3ffe DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=669316 PROTO=UDP SPT=61878 DPT=5355 LEN=41 
[ 3924.096813] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:50:44:08:00 SRC=104.234.204.207 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=30372 PROTO=UDP SPT=61878 DPT=5355 LEN=41 
[ 3925.228563] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e2:12:70:19:50:44:86:dd SRC=fe80:0000:0000:0000:e997:ce10:ded7:3ffe DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=680822 PROTO=UDP SPT=51067 DPT=5355 LEN=41 
[ 3925.237250] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:50:44:08:00 SRC=104.234.204.207 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=30373 PROTO=UDP SPT=51067 DPT=5355 LEN=41 
[ 3927.233715] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e2:12:70:19:50:44:86:dd SRC=fe80:0000:0000:0000:e997:ce10:ded7:3ffe DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=477956 PROTO=UDP SPT=62816 DPT=5355 LEN=41 
[ 3927.238684] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:50:44:08:00 SRC=104.234.204.207 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=30374 PROTO=UDP SPT=62816 DPT=5355 LEN=41 
[ 3930.505060] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15156 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 3930.508439] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15157 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 3930.512069] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15158 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 3932.151849] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=79.110.62.117 DST=my.ip.address.removed LEN=40 TOS=0x08 PREC=0x40 TTL=245 ID=9831 PROTO=TCP SPT=46012 DPT=8443 WINDOW=1024 RES=0x00 SYN URGP=0 
[ 3949.585051] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=74.82.47.43 DST=my.ip.address.removed LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=54321 PROTO=TCP SPT=49763 DPT=3306 WINDOW=65535 RES=0x00 SYN URGP=0 
[ 3960.621184] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15159 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 3960.623564] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15160 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 3960.625805] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15161 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 3974.640781] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=185.242.226.3 DST=my.ip.address.removed LEN=44 TOS=0x08 PREC=0x40 TTL=244 ID=54321 PROTO=TCP SPT=55160 DPT=10025 WINDOW=65535 RES=0x00 SYN URGP=0 
[ 3978.572947] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=162.142.125.138 DST=my.ip.address.removed LEN=60 TOS=0x00 PREC=0x00 TTL=58 ID=10906 PROTO=TCP SPT=53020 DPT=30555 WINDOW=42340 RES=0x00 SYN URGP=0 
[ 3980.107671] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=167.94.138.156 DST=my.ip.address.removed LEN=60 TOS=0x08 PREC=0x40 TTL=52 ID=7820 PROTO=TCP SPT=13561 DPT=2095 WINDOW=42340 RES=0x00 SYN URGP=0 
[ 3983.787024] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e0:db:55:06:cb:2c:86:dd SRC=fe80:0000:0000:0000:98bf:2cdb:5fe7:bd80 DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=74 TC=0 HOPLIMIT=1 FLOWLBL=405900 PROTO=UDP SPT=53771 DPT=5355 LEN=34 
[ 3983.791414] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e0:db:55:06:cb:2c:08:00 SRC=104.234.204.76 DST=224.0.0.252 LEN=54 TOS=0x00 PREC=0x00 TTL=1 ID=34780 PROTO=UDP SPT=53771 DPT=5355 LEN=34 
[ 3989.863162] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e2:12:70:19:50:44:86:dd SRC=fe80:0000:0000:0000:e997:ce10:ded7:3ffe DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=356869 PROTO=UDP SPT=57147 DPT=5355 LEN=41 
[ 3989.876882] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:50:44:08:00 SRC=104.234.204.207 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=30375 PROTO=UDP SPT=57147 DPT=5355 LEN=41 
[ 3990.763112] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15162 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 3990.766186] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15163 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 3990.768467] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15164 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 3991.262525] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e2:12:70:19:50:44:86:dd SRC=fe80:0000:0000:0000:e997:ce10:ded7:3ffe DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=443271 PROTO=UDP SPT=54026 DPT=5355 LEN=41 
[ 3991.266064] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:50:44:08:00 SRC=104.234.204.207 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=30376 PROTO=UDP SPT=54026 DPT=5355 LEN=41 
[ 3992.241016] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e2:12:70:19:50:44:86:dd SRC=fe80:0000:0000:0000:e997:ce10:ded7:3ffe DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=1022170 PROTO=UDP SPT=52369 DPT=5355 LEN=41 
[ 3992.244194] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:50:44:08:00 SRC=104.234.204.207 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=30377 PROTO=UDP SPT=52369 DPT=5355 LEN=41 
[ 3994.297700] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e2:12:70:19:50:44:86:dd SRC=fe80:0000:0000:0000:e997:ce10:ded7:3ffe DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=895372 PROTO=UDP SPT=55821 DPT=5355 LEN=41 
[ 3994.369504] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:50:44:08:00 SRC=104.234.204.207 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=30378 PROTO=UDP SPT=55821 DPT=5355 LEN=41 
[ 3994.729207] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e0:db:55:04:5e:08:86:dd SRC=fe80:0000:0000:0000:29fd:dec6:ff0b:196b DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=43307 PROTO=UDP SPT=60281 DPT=5355 LEN=41 
[ 4000.633013] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=79.110.62.66 DST=my.ip.address.removed LEN=40 TOS=0x08 PREC=0x40 TTL=245 ID=10730 PROTO=TCP SPT=47455 DPT=3038 WINDOW=1024 RES=0x00 SYN URGP=0 
[ 4008.423914] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=85.209.11.185 DST=my.ip.address.removed LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=51717 PROTO=TCP SPT=51756 DPT=21167 WINDOW=1024 RES=0x00 SYN URGP=0 
[ 4013.068398] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=79.110.62.66 DST=my.ip.address.removed LEN=40 TOS=0x08 PREC=0x40 TTL=245 ID=44009 PROTO=TCP SPT=47455 DPT=1999 WINDOW=1024 RES=0x00 SYN URGP=0 
[ 4016.026882] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=79.110.62.66 DST=my.ip.address.removed LEN=40 TOS=0x08 PREC=0x40 TTL=244 ID=5097 PROTO=TCP SPT=47455 DPT=8392 WINDOW=1024 RES=0x00 SYN URGP=0 
[ 4016.346559] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=79.110.62.66 DST=my.ip.address.removed LEN=40 TOS=0x08 PREC=0x40 TTL=243 ID=6545 PROTO=TCP SPT=47455 DPT=2456 WINDOW=1024 RES=0x00 SYN URGP=0 
[ 4018.100407] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=18.223.104.85 DST=my.ip.address.removed LEN=52 TOS=0x08 PREC=0x20 TTL=54 ID=7935 PROTO=TCP SPT=38002 DPT=1935 WINDOW=65535 RES=0x00 SYN URGP=0 
[ 4019.842755] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=92.255.85.52 DST=my.ip.address.removed LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=45526 PROTO=TCP SPT=43273 DPT=20516 WINDOW=1024 RES=0x00 SYN URGP=0 
[ 4020.019016] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=79.110.62.178 DST=my.ip.address.removed LEN=40 TOS=0x08 PREC=0x40 TTL=243 ID=62077 PROTO=TCP SPT=56001 DPT=31467 WINDOW=1024 RES=0x00 SYN URGP=0 
[ 4020.867194] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15165 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4020.870543] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15166 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4020.873570] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15167 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4022.843469] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=79.110.62.66 DST=my.ip.address.removed LEN=40 TOS=0x08 PREC=0x40 TTL=244 ID=9613 PROTO=TCP SPT=47455 DPT=4560 WINDOW=1024 RES=0x00 SYN URGP=0 
[ 4023.718504] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=83.222.190.126 DST=my.ip.address.removed LEN=40 TOS=0x08 PREC=0x40 TTL=241 ID=2987 PROTO=TCP SPT=57854 DPT=13336 WINDOW=1024 RES=0x00 SYN URGP=0 
[ 4029.352524] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=154.213.187.225 DST=my.ip.address.removed LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=54321 PROTO=TCP SPT=42708 DPT=509 WINDOW=65535 RES=0x00 SYN URGP=0 
[ 4033.086558] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=147.185.132.229 DST=my.ip.address.removed LEN=44 TOS=0x00 PREC=0x00 TTL=57 ID=54321 PROTO=TCP SPT=55137 DPT=56886 WINDOW=65535 RES=0x00 SYN URGP=0 
[ 4038.830081] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=207.90.244.15 DST=my.ip.address.removed LEN=44 TOS=0x08 PREC=0x20 TTL=117 ID=36638 PROTO=TCP SPT=18242 DPT=4022 WINDOW=43166 RES=0x00 SYN URGP=0 
[ 4039.644179] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=92.255.85.29 DST=my.ip.address.removed LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=64705 PROTO=TCP SPT=43056 DPT=20317 WINDOW=1024 RES=0x00 SYN URGP=0 
[ 4042.832310] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=103.102.230.2 DST=my.ip.address.removed LEN=40 TOS=0x00 PREC=0x00 TTL=253 ID=54321 PROTO=TCP SPT=44203 DPT=8728 WINDOW=65535 RES=0x00 SYN URGP=0 
[ 4049.138368] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=89.248.165.96 DST=my.ip.address.removed LEN=44 TOS=0x08 PREC=0x40 TTL=245 ID=6952 PROTO=TCP SPT=47874 DPT=6515 WINDOW=1025 RES=0x00 SYN URGP=0 
[ 4049.294928] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:49:93:08:00 SRC=104.234.204.156 DST=224.0.0.252 LEN=50 TOS=0x00 PREC=0x00 TTL=1 ID=41820 PROTO=UDP SPT=55023 DPT=5355 LEN=30 
[ 4049.297459] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:49:93:08:00 SRC=104.234.204.156 DST=224.0.0.252 LEN=50 TOS=0x00 PREC=0x00 TTL=1 ID=41821 PROTO=UDP SPT=65272 DPT=5355 LEN=30 
[ 4049.703343] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:49:93:08:00 SRC=104.234.204.156 DST=224.0.0.252 LEN=50 TOS=0x00 PREC=0x00 TTL=1 ID=41823 PROTO=UDP SPT=55023 DPT=5355 LEN=30 
[ 4049.705614] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:49:93:08:00 SRC=104.234.204.156 DST=224.0.0.252 LEN=50 TOS=0x00 PREC=0x00 TTL=1 ID=41822 PROTO=UDP SPT=65272 DPT=5355 LEN=30 
[ 4050.979306] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15168 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4051.420703] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=79.124.62.134 DST=my.ip.address.removed LEN=40 TOS=0x08 PREC=0x40 TTL=241 ID=5866 PROTO=TCP SPT=0 DPT=40488 WINDOW=1024 RES=0x00 SYN URGP=0 
[ 4056.802042] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e2:12:70:19:50:44:86:dd SRC=fe80:0000:0000:0000:e997:ce10:ded7:3ffe DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=513858 PROTO=UDP SPT=59865 DPT=5355 LEN=41 
[ 4056.807403] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:50:44:08:00 SRC=104.234.204.207 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=30379 PROTO=UDP SPT=59865 DPT=5355 LEN=41 
[ 4057.790081] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e2:12:70:19:50:44:86:dd SRC=fe80:0000:0000:0000:e997:ce10:ded7:3ffe DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=325008 PROTO=UDP SPT=51874 DPT=5355 LEN=41 
[ 4057.794226] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:50:44:08:00 SRC=104.234.204.207 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=30380 PROTO=UDP SPT=51874 DPT=5355 LEN=41 
[ 4058.733915] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e2:12:70:19:50:44:86:dd SRC=fe80:0000:0000:0000:e997:ce10:ded7:3ffe DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=959020 PROTO=UDP SPT=50775 DPT=5355 LEN=41 
[ 4058.738430] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:50:44:08:00 SRC=104.234.204.207 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=30381 PROTO=UDP SPT=50775 DPT=5355 LEN=41 
[ 4060.772079] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e2:12:70:19:50:44:86:dd SRC=fe80:0000:0000:0000:e997:ce10:ded7:3ffe DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=146513 PROTO=UDP SPT=50905 DPT=5355 LEN=41 
[ 4060.775078] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:50:44:08:00 SRC=104.234.204.207 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=30382 PROTO=UDP SPT=50905 DPT=5355 LEN=41 
[ 4061.248690] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=147.185.132.17 DST=my.ip.address.removed LEN=44 TOS=0x00 PREC=0x00 TTL=57 ID=54321 PROTO=TCP SPT=53826 DPT=9642 WINDOW=65535 RES=0x00 SYN URGP=0 
[ 4061.532346] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=162.216.149.91 DST=my.ip.address.removed LEN=44 TOS=0x00 PREC=0x00 TTL=57 ID=54321 PROTO=TCP SPT=53515 DPT=54500 WINDOW=65535 RES=0x00 SYN URGP=0 
[ 4064.065226] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=172.169.6.185 DST=my.ip.address.removed LEN=40 TOS=0x08 PREC=0x20 TTL=236 ID=54321 PROTO=TCP SPT=48112 DPT=9200 WINDOW=65535 RES=0x00 SYN URGP=0 
[ 4065.591196] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=167.94.138.130 DST=my.ip.address.removed LEN=60 TOS=0x08 PREC=0x40 TTL=52 ID=58242 PROTO=TCP SPT=13375 DPT=6699 WINDOW=42340 RES=0x00 SYN URGP=0 
[ 4069.347422] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:90:b1:1c:57:9f:45:86:dd SRC=fe80:0000:0000:0000:5e30:2093:e3f5:2b9f DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=71 TC=0 HOPLIMIT=1 FLOWLBL=805107 PROTO=UDP SPT=55114 DPT=5355 LEN=31 
[ 4069.350282] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:90:b1:1c:57:9f:45:08:00 SRC=104.234.204.98 DST=224.0.0.252 LEN=51 TOS=0x00 PREC=0x00 TTL=1 ID=7899 PROTO=UDP SPT=55114 DPT=5355 LEN=31 
[ 4069.755222] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:90:b1:1c:57:9f:45:86:dd SRC=fe80:0000:0000:0000:5e30:2093:e3f5:2b9f DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=71 TC=0 HOPLIMIT=1 FLOWLBL=805107 PROTO=UDP SPT=55114 DPT=5355 LEN=31 
[ 4069.757879] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:90:b1:1c:57:9f:45:08:00 SRC=104.234.204.98 DST=224.0.0.252 LEN=51 TOS=0x00 PREC=0x00 TTL=1 ID=7900 PROTO=UDP SPT=55114 DPT=5355 LEN=31 
[ 4070.768020] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=195.3.223.52 DST=my.ip.address.removed LEN=40 TOS=0x08 PREC=0x20 TTL=245 ID=54321 PROTO=TCP SPT=58407 DPT=5002 WINDOW=65535 RES=0x00 SYN URGP=0 
[ 4072.072493] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=5.188.206.46 DST=my.ip.address.removed LEN=40 TOS=0x08 PREC=0x40 TTL=241 ID=38480 PROTO=TCP SPT=46772 DPT=23500 WINDOW=1024 RES=0x00 SYN URGP=0 
[ 4081.123328] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15171 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4081.126759] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15172 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4081.130301] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15173 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4096.511937] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=176.113.115.128 DST=my.ip.address.removed LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=37564 PROTO=TCP SPT=42461 DPT=21219 WINDOW=1024 RES=0x00 SYN URGP=0 
[ 4105.438307] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=79.110.62.66 DST=my.ip.address.removed LEN=40 TOS=0x08 PREC=0x40 TTL=245 ID=34103 PROTO=TCP SPT=47455 DPT=61370 WINDOW=1024 RES=0x00 SYN URGP=0 
[ 4108.909951] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=87.120.113.188 DST=my.ip.address.removed LEN=40 TOS=0x08 PREC=0x40 TTL=246 ID=36738 PROTO=TCP SPT=60000 DPT=1965 WINDOW=1024 RES=0x00 SYN URGP=0 
[ 4111.249262] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15174 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4111.254652] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15175 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4111.257097] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15176 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4113.580713] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=147.185.133.243 DST=my.ip.address.removed LEN=44 TOS=0x00 PREC=0x00 TTL=54 ID=54321 PROTO=TCP SPT=51835 DPT=29997 WINDOW=65535 RES=0x00 SYN URGP=0 
[ 4116.499600] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=79.110.62.66 DST=my.ip.address.removed LEN=40 TOS=0x08 PREC=0x40 TTL=243 ID=18482 PROTO=TCP SPT=47455 DPT=2551 WINDOW=1024 RES=0x00 SYN URGP=0 
[ 4123.102226] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e2:12:70:19:50:44:86:dd SRC=fe80:0000:0000:0000:e997:ce10:ded7:3ffe DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=974243 PROTO=UDP SPT=55012 DPT=5355 LEN=41 
[ 4123.106473] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:50:44:08:00 SRC=104.234.204.207 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=30383 PROTO=UDP SPT=55012 DPT=5355 LEN=41 
[ 4124.150831] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e2:12:70:19:50:44:86:dd SRC=fe80:0000:0000:0000:e997:ce10:ded7:3ffe DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=723093 PROTO=UDP SPT=51569 DPT=5355 LEN=41 
[ 4124.156264] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:50:44:08:00 SRC=104.234.204.207 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=30384 PROTO=UDP SPT=51569 DPT=5355 LEN=41 
[ 4125.244597] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e2:12:70:19:50:44:86:dd SRC=fe80:0000:0000:0000:e997:ce10:ded7:3ffe DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=51883 PROTO=UDP SPT=53811 DPT=5355 LEN=41 
[ 4125.248056] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:50:44:08:00 SRC=104.234.204.207 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=30385 PROTO=UDP SPT=53811 DPT=5355 LEN=41 
[ 4127.271950] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e2:12:70:19:50:44:86:dd SRC=fe80:0000:0000:0000:e997:ce10:ded7:3ffe DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=580445 PROTO=UDP SPT=62778 DPT=5355 LEN=41 
[ 4127.275656] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:50:44:08:00 SRC=104.234.204.207 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=30386 PROTO=UDP SPT=62778 DPT=5355 LEN=41 
[ 4141.376457] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15177 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4141.379171] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15178 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4141.381567] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15179 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4145.894046] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=79.110.62.66 DST=my.ip.address.removed LEN=40 TOS=0x08 PREC=0x40 TTL=245 ID=57173 PROTO=TCP SPT=47455 DPT=61055 WINDOW=1024 RES=0x00 SYN URGP=0 
[ 4164.521806] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=205.210.31.145 DST=my.ip.address.removed LEN=44 TOS=0x00 PREC=0x00 TTL=57 ID=54321 PROTO=TCP SPT=57147 DPT=3000 WINDOW=65535 RES=0x00 SYN URGP=0 
[ 4165.319306] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=162.216.149.164 DST=my.ip.address.removed LEN=44 TOS=0x00 PREC=0x00 TTL=57 ID=54321 PROTO=TCP SPT=50385 DPT=9331 WINDOW=65535 RES=0x00 SYN URGP=0 
[ 4171.487251] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15180 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4171.490092] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15181 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4171.492559] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15182 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4183.173769] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=79.110.62.175 DST=my.ip.address.removed LEN=40 TOS=0x08 PREC=0x40 TTL=244 ID=35999 PROTO=TCP SPT=43749 DPT=24988 WINDOW=1024 RES=0x00 SYN URGP=0 
[ 4189.828397] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e2:12:70:19:50:44:86:dd SRC=fe80:0000:0000:0000:e997:ce10:ded7:3ffe DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=950900 PROTO=UDP SPT=51241 DPT=5355 LEN=41 
[ 4189.832217] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:50:44:08:00 SRC=104.234.204.207 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=30387 PROTO=UDP SPT=51241 DPT=5355 LEN=41 
[ 4190.971995] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e2:12:70:19:50:44:86:dd SRC=fe80:0000:0000:0000:e997:ce10:ded7:3ffe DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=733367 PROTO=UDP SPT=58520 DPT=5355 LEN=41 
[ 4190.983257] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:50:44:08:00 SRC=104.234.204.207 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=30388 PROTO=UDP SPT=58520 DPT=5355 LEN=41 
[ 4192.245827] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e2:12:70:19:50:44:86:dd SRC=fe80:0000:0000:0000:e997:ce10:ded7:3ffe DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=989283 PROTO=UDP SPT=57006 DPT=5355 LEN=41 
[ 4192.249869] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:50:44:08:00 SRC=104.234.204.207 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=30389 PROTO=UDP SPT=57006 DPT=5355 LEN=41 
[ 4194.247651] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e2:12:70:19:50:44:86:dd SRC=fe80:0000:0000:0000:e997:ce10:ded7:3ffe DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=987087 PROTO=UDP SPT=50688 DPT=5355 LEN=41 
[ 4194.251910] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:50:44:08:00 SRC=104.234.204.207 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=30390 PROTO=UDP SPT=50688 DPT=5355 LEN=41 
[ 4197.779499] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=79.110.62.66 DST=my.ip.address.removed LEN=40 TOS=0x08 PREC=0x40 TTL=245 ID=38861 PROTO=TCP SPT=47455 DPT=64602 WINDOW=1024 RES=0x00 SYN URGP=0 
[ 4198.255121] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e0:db:55:06:d5:5c:86:dd SRC=fe80:0000:0000:0000:f1c9:3f82:95b9:6c2d DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=74 TC=0 HOPLIMIT=1 FLOWLBL=130916 PROTO=UDP SPT=26320 DPT=5355 LEN=34 
[ 4198.258222] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e0:db:55:06:d5:5c:08:00 SRC=104.234.204.75 DST=224.0.0.252 LEN=54 TOS=0x00 PREC=0x00 TTL=1 ID=50106 PROTO=UDP SPT=26320 DPT=5355 LEN=34 
[ 4201.620262] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15183 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4201.623261] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15184 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4201.626483] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15185 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4211.747270] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=162.216.150.98 DST=my.ip.address.removed LEN=44 TOS=0x00 PREC=0x00 TTL=57 ID=54321 PROTO=TCP SPT=55760 DPT=12019 WINDOW=65535 RES=0x00 SYN URGP=0 
[ 4222.249090] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=154.213.184.18 DST=my.ip.address.removed LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=54321 PROTO=TCP SPT=52754 DPT=8888 WINDOW=65535 RES=0x00 SYN URGP=0 
[ 4223.477507] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=79.110.62.66 DST=my.ip.address.removed LEN=40 TOS=0x08 PREC=0x40 TTL=244 ID=46604 PROTO=TCP SPT=47455 DPT=2678 WINDOW=1024 RES=0x00 SYN URGP=0 
[ 4231.734815] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15186 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4231.737813] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15187 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4231.740163] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15188 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4256.881400] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e2:12:70:19:50:44:86:dd SRC=fe80:0000:0000:0000:e997:ce10:ded7:3ffe DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=754167 PROTO=UDP SPT=58764 DPT=5355 LEN=41 
[ 4256.885337] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:50:44:08:00 SRC=104.234.204.207 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=30391 PROTO=UDP SPT=58764 DPT=5355 LEN=41 
[ 4258.863783] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e2:12:70:19:50:44:86:dd SRC=fe80:0000:0000:0000:e997:ce10:ded7:3ffe DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=414866 PROTO=UDP SPT=61450 DPT=5355 LEN=41 
[ 4258.869433] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:50:44:08:00 SRC=104.234.204.207 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=30392 PROTO=UDP SPT=61450 DPT=5355 LEN=41 
[ 4259.841129] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e2:12:70:19:50:44:86:dd SRC=fe80:0000:0000:0000:e997:ce10:ded7:3ffe DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=383708 PROTO=UDP SPT=49371 DPT=5355 LEN=41 
[ 4259.844026] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:50:44:08:00 SRC=104.234.204.207 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=30393 PROTO=UDP SPT=49371 DPT=5355 LEN=41 
[ 4260.082446] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=147.185.132.87 DST=my.ip.address.removed LEN=44 TOS=0x00 PREC=0x00 TTL=57 ID=54321 PROTO=TCP SPT=50474 DPT=1234 WINDOW=65535 RES=0x00 SYN URGP=0 
[ 4261.777022] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e2:12:70:19:50:44:86:dd SRC=fe80:0000:0000:0000:e997:ce10:ded7:3ffe DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=630074 PROTO=UDP SPT=63105 DPT=5355 LEN=41 
[ 4261.780657] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:50:44:08:00 SRC=104.234.204.207 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=30394 PROTO=UDP SPT=63105 DPT=5355 LEN=41 
[ 4261.846770] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15189 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4261.851100] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15190 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4261.853508] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15191 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4267.028604] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=83.222.191.42 DST=my.ip.address.removed LEN=40 TOS=0x08 PREC=0x40 TTL=241 ID=45937 PROTO=TCP SPT=61000 DPT=18419 WINDOW=1024 RES=0x00 SYN URGP=0 
[ 4291.954445] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15192 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4291.957439] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15193 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4291.960114] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15194 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4310.625576] Firewall: *ICMP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=15.161.92.15 DST=my.ip.address.removed LEN=68 TOS=0x08 PREC=0x20 TTL=238 ID=56423 DF PROTO=ICMP TYPE=8 CODE=0 ID=4 SEQ=16987 
[ 4311.700578] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=193.68.89.3 DST=my.ip.address.removed LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=54321 PROTO=TCP SPT=53746 DPT=21072 WINDOW=65535 RES=0x00 SYN URGP=0 
[ 4311.798577] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=185.234.216.12 DST=my.ip.address.removed LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=16797 PROTO=TCP SPT=42337 DPT=21210 WINDOW=1024 RES=0x00 SYN URGP=0 
[ 4321.922312] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=206.168.34.163 DST=my.ip.address.removed LEN=60 TOS=0x00 PREC=0x00 TTL=58 ID=9923 PROTO=TCP SPT=56297 DPT=61616 WINDOW=42340 RES=0x00 SYN URGP=0 
[ 4322.088105] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15195 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4322.090968] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15196 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4322.093294] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15197 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4324.011807] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e2:12:70:19:50:44:86:dd SRC=fe80:0000:0000:0000:e997:ce10:ded7:3ffe DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=112943 PROTO=UDP SPT=60444 DPT=5355 LEN=41 
[ 4324.020330] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:50:44:08:00 SRC=104.234.204.207 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=30395 PROTO=UDP SPT=60444 DPT=5355 LEN=41 
[ 4324.945798] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=185.242.226.3 DST=my.ip.address.removed LEN=44 TOS=0x08 PREC=0x40 TTL=245 ID=54321 PROTO=TCP SPT=49993 DPT=10027 WINDOW=65535 RES=0x00 SYN URGP=0 
[ 4325.266481] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e2:12:70:19:50:44:86:dd SRC=fe80:0000:0000:0000:e997:ce10:ded7:3ffe DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=420020 PROTO=UDP SPT=59939 DPT=5355 LEN=41 
[ 4325.271992] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:50:44:08:00 SRC=104.234.204.207 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=30396 PROTO=UDP SPT=59939 DPT=5355 LEN=41 
[ 4326.274611] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e2:12:70:19:50:44:86:dd SRC=fe80:0000:0000:0000:e997:ce10:ded7:3ffe DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=177010 PROTO=UDP SPT=62992 DPT=5355 LEN=41 
[ 4326.277813] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:50:44:08:00 SRC=104.234.204.207 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=30397 PROTO=UDP SPT=62992 DPT=5355 LEN=41 
[ 4328.260535] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e2:12:70:19:50:44:86:dd SRC=fe80:0000:0000:0000:e997:ce10:ded7:3ffe DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=929967 PROTO=UDP SPT=52025 DPT=5355 LEN=41 
[ 4328.263513] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:50:44:08:00 SRC=104.234.204.207 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=30398 PROTO=UDP SPT=52025 DPT=5355 LEN=41 
[ 4332.827040] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=205.210.31.100 DST=my.ip.address.removed LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=54321 PROTO=TCP SPT=50527 DPT=102 WINDOW=65535 RES=0x00 SYN URGP=0 
[ 4337.080047] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=147.185.132.195 DST=my.ip.address.removed LEN=44 TOS=0x00 PREC=0x00 TTL=57 ID=54321 PROTO=TCP SPT=53967 DPT=3389 WINDOW=65535 RES=0x00 SYN URGP=0 
[ 4339.205659] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=4.156.21.128 DST=my.ip.address.removed LEN=40 TOS=0x08 PREC=0x20 TTL=238 ID=54321 PROTO=TCP SPT=36790 DPT=8443 WINDOW=65535 RES=0x00 SYN URGP=0 
[ 4352.211861] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15198 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4352.215875] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15199 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4352.218183] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15200 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4356.991310] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=79.110.62.66 DST=my.ip.address.removed LEN=40 TOS=0x08 PREC=0x40 TTL=244 ID=51196 PROTO=TCP SPT=47455 DPT=63333 WINDOW=1024 RES=0x00 SYN URGP=0 
[ 4358.858464] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=65.49.1.47 DST=my.ip.address.removed LEN=29 TOS=0x00 PREC=0x00 TTL=53 ID=13094 DF PROTO=UDP SPT=43510 DPT=53413 LEN=9 
[ 4372.313391] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=147.185.133.211 DST=my.ip.address.removed LEN=44 TOS=0x00 PREC=0x00 TTL=54 ID=28138 PROTO=TCP SPT=53323 DPT=27486 WINDOW=1024 RES=0x00 SYN URGP=0 
[ 4374.469839] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=35.203.211.79 DST=my.ip.address.removed LEN=44 TOS=0x00 PREC=0x00 TTL=248 ID=54321 PROTO=TCP SPT=49860 DPT=9152 WINDOW=65535 RES=0x00 SYN URGP=0 
[ 4382.373386] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15201 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4382.376237] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15202 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4382.378668] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15203 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4385.293169] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=64.62.156.26 DST=my.ip.address.removed LEN=32 TOS=0x00 PREC=0x00 TTL=53 ID=41749 DF PROTO=UDP SPT=8555 DPT=10001 LEN=12 
[ 4390.864422] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e2:12:70:19:50:44:86:dd SRC=fe80:0000:0000:0000:e997:ce10:ded7:3ffe DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=935905 PROTO=UDP SPT=49949 DPT=5355 LEN=41 
[ 4390.868879] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:50:44:08:00 SRC=104.234.204.207 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=30399 PROTO=UDP SPT=49949 DPT=5355 LEN=41 
[ 4392.093044] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e2:12:70:19:50:44:86:dd SRC=fe80:0000:0000:0000:e997:ce10:ded7:3ffe DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=4373 PROTO=UDP SPT=54986 DPT=5355 LEN=41 
[ 4392.097844] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:50:44:08:00 SRC=104.234.204.207 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=30400 PROTO=UDP SPT=54986 DPT=5355 LEN=41 
[ 4393.259546] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e2:12:70:19:50:44:86:dd SRC=fe80:0000:0000:0000:e997:ce10:ded7:3ffe DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=577184 PROTO=UDP SPT=51111 DPT=5355 LEN=41 
[ 4393.263660] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:50:44:08:00 SRC=104.234.204.207 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=30401 PROTO=UDP SPT=51111 DPT=5355 LEN=41 
[ 4395.257754] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e2:12:70:19:50:44:86:dd SRC=fe80:0000:0000:0000:e997:ce10:ded7:3ffe DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=854951 PROTO=UDP SPT=63755 DPT=5355 LEN=41 
[ 4395.260910] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:50:44:08:00 SRC=104.234.204.207 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=30402 PROTO=UDP SPT=63755 DPT=5355 LEN=41 
[ 4402.815818] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e2:12:70:19:49:95:86:dd SRC=fe80:0000:0000:0000:7753:ab57:64c4:dbf2 DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=465378 PROTO=UDP SPT=53891 DPT=5355 LEN=41 
[ 4402.818691] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:49:95:08:00 SRC=104.234.204.158 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=49035 PROTO=UDP SPT=53891 DPT=5355 LEN=41 
[ 4412.501899] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15204 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4412.504327] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15205 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4412.506588] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15206 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4416.924101] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=79.110.62.163 DST=my.ip.address.removed LEN=40 TOS=0x08 PREC=0x40 TTL=245 ID=36049 PROTO=TCP SPT=54829 DPT=58840 WINDOW=1024 RES=0x00 SYN URGP=0 
[ 4421.314483] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=27.222.179.146 DST=my.ip.address.removed LEN=42 TOS=0x00 PREC=0x20 TTL=50 ID=12402 DF PROTO=UDP SPT=11211 DPT=8080 LEN=22 
[ 4423.477105] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=194.48.251.195 DST=my.ip.address.removed LEN=44 TOS=0x08 PREC=0x40 TTL=246 ID=20591 PROTO=TCP SPT=46487 DPT=3307 WINDOW=1025 RES=0x00 SYN URGP=0 
[ 4423.711617] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=103.173.15.237 DST=my.ip.address.removed LEN=125 TOS=0x08 PREC=0x40 TTL=45 ID=47199 DF PROTO=UDP SPT=5990 DPT=8082 LEN=105 
[ 4424.560138] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=35.203.210.11 DST=my.ip.address.removed LEN=44 TOS=0x00 PREC=0x00 TTL=248 ID=8714 PROTO=TCP SPT=52377 DPT=64718 WINDOW=1024 RES=0x00 SYN URGP=0 
[ 4428.384510] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:90:b1:1c:57:9f:45:86:dd SRC=fe80:0000:0000:0000:5e30:2093:e3f5:2b9f DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=71 TC=0 HOPLIMIT=1 FLOWLBL=884946 PROTO=UDP SPT=63600 DPT=5355 LEN=31 
[ 4428.388517] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:90:b1:1c:57:9f:45:08:00 SRC=104.234.204.98 DST=224.0.0.252 LEN=51 TOS=0x00 PREC=0x00 TTL=1 ID=7901 PROTO=UDP SPT=63600 DPT=5355 LEN=31 
[ 4428.802416] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:90:b1:1c:57:9f:45:86:dd SRC=fe80:0000:0000:0000:5e30:2093:e3f5:2b9f DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=71 TC=0 HOPLIMIT=1 FLOWLBL=884946 PROTO=UDP SPT=63600 DPT=5355 LEN=31 
[ 4428.805158] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:90:b1:1c:57:9f:45:08:00 SRC=104.234.204.98 DST=224.0.0.252 LEN=51 TOS=0x00 PREC=0x00 TTL=1 ID=7902 PROTO=UDP SPT=63600 DPT=5355 LEN=31 
[ 4429.738657] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=162.216.150.167 DST=my.ip.address.removed LEN=44 TOS=0x00 PREC=0x00 TTL=57 ID=39422 PROTO=TCP SPT=57227 DPT=53122 WINDOW=1024 RES=0x00 SYN URGP=0 
[ 4441.933093] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=94.156.104.187 DST=my.ip.address.removed LEN=44 TOS=0x08 PREC=0x40 TTL=246 ID=60268 PROTO=TCP SPT=57289 DPT=13380 WINDOW=1025 RES=0x00 SYN URGP=0 
[ 4442.640165] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15207 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4442.643031] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15208 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4442.645229] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15209 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4457.853905] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e2:12:70:19:50:44:86:dd SRC=fe80:0000:0000:0000:e997:ce10:ded7:3ffe DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=1007318 PROTO=UDP SPT=55958 DPT=5355 LEN=41 
[ 4457.857287] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:50:44:08:00 SRC=104.234.204.207 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=30403 PROTO=UDP SPT=55958 DPT=5355 LEN=41 
[ 4459.552941] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e2:12:70:19:50:44:86:dd SRC=fe80:0000:0000:0000:e997:ce10:ded7:3ffe DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=145852 PROTO=UDP SPT=50334 DPT=5355 LEN=41 
[ 4459.556971] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:50:44:08:00 SRC=104.234.204.207 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=30404 PROTO=UDP SPT=50334 DPT=5355 LEN=41 
[ 4460.787762] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e2:12:70:19:50:44:86:dd SRC=fe80:0000:0000:0000:e997:ce10:ded7:3ffe DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=847525 PROTO=UDP SPT=61190 DPT=5355 LEN=41 
[ 4460.791437] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:50:44:08:00 SRC=104.234.204.207 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=30405 PROTO=UDP SPT=61190 DPT=5355 LEN=41 
[ 4462.847902] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e2:12:70:19:50:44:86:dd SRC=fe80:0000:0000:0000:e997:ce10:ded7:3ffe DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=102899 PROTO=UDP SPT=59969 DPT=5355 LEN=41 
[ 4462.852906] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:50:44:08:00 SRC=104.234.204.207 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=30406 PROTO=UDP SPT=59969 DPT=5355 LEN=41 
[ 4469.172055] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=79.110.62.51 DST=my.ip.address.removed LEN=40 TOS=0x08 PREC=0x40 TTL=243 ID=58767 PROTO=TCP SPT=45297 DPT=44733 WINDOW=1024 RES=0x00 SYN URGP=0 
[ 4472.738737] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15210 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4472.743816] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15211 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4472.747330] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15212 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4490.350572] Firewall: *ICMP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=54.167.231.22 DST=my.ip.address.removed LEN=68 TOS=0x08 PREC=0x20 TTL=245 ID=38930 DF PROTO=ICMP TYPE=8 CODE=0 ID=5 SEQ=17303 
[ 4491.068304] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=79.110.62.66 DST=my.ip.address.removed LEN=40 TOS=0x08 PREC=0x40 TTL=243 ID=45892 PROTO=TCP SPT=47455 DPT=61827 WINDOW=1024 RES=0x00 SYN URGP=0 
[ 4502.833215] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15213 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4502.835875] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15214 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4502.838297] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15215 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4520.972363] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=118.37.157.169 DST=my.ip.address.removed LEN=40 TOS=0x08 PREC=0x20 TTL=46 ID=34989 PROTO=TCP SPT=65000 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0 
[ 4525.325555] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e2:12:70:19:50:44:86:dd SRC=fe80:0000:0000:0000:e997:ce10:ded7:3ffe DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=778839 PROTO=UDP SPT=64453 DPT=5355 LEN=41 
[ 4525.328448] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:50:44:08:00 SRC=104.234.204.207 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=30407 PROTO=UDP SPT=64453 DPT=5355 LEN=41 
[ 4527.774608] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e2:12:70:19:50:44:86:dd SRC=fe80:0000:0000:0000:e997:ce10:ded7:3ffe DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=905175 PROTO=UDP SPT=53017 DPT=5355 LEN=41 
[ 4527.778056] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:50:44:08:00 SRC=104.234.204.207 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=30408 PROTO=UDP SPT=53017 DPT=5355 LEN=41 
[ 4529.821895] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e2:12:70:19:50:44:86:dd SRC=fe80:0000:0000:0000:e997:ce10:ded7:3ffe DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=421277 PROTO=UDP SPT=56814 DPT=5355 LEN=41 
[ 4529.825635] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:50:44:08:00 SRC=104.234.204.207 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=30409 PROTO=UDP SPT=56814 DPT=5355 LEN=41 
[ 4532.966270] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15216 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4532.969167] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15217 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4532.971504] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15218 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4534.626333] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=79.110.62.148 DST=my.ip.address.removed LEN=40 TOS=0x08 PREC=0x40 TTL=245 ID=5875 PROTO=TCP SPT=47875 DPT=27427 WINDOW=1024 RES=0x00 SYN URGP=0 
[ 4540.127510] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=51.159.111.44 DST=my.ip.address.removed LEN=40 TOS=0x08 PREC=0x20 TTL=244 ID=40347 PROTO=TCP SPT=42701 DPT=8090 WINDOW=1024 RES=0x00 SYN URGP=0 
[ 4549.989880] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=79.110.62.213 DST=my.ip.address.removed LEN=40 TOS=0x08 PREC=0x40 TTL=245 ID=25302 PROTO=TCP SPT=56258 DPT=10183 WINDOW=1024 RES=0x00 SYN URGP=0 
[ 4551.721240] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=79.110.62.66 DST=my.ip.address.removed LEN=40 TOS=0x08 PREC=0x40 TTL=244 ID=48929 PROTO=TCP SPT=47455 DPT=6301 WINDOW=1024 RES=0x00 SYN URGP=0 
[ 4557.951561] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=154.213.188.3 DST=my.ip.address.removed LEN=40 TOS=0x08 PREC=0x20 TTL=239 ID=54321 PROTO=TCP SPT=43917 DPT=22514 WINDOW=65535 RES=0x00 SYN URGP=0 
[ 4560.838820] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=79.124.62.134 DST=my.ip.address.removed LEN=40 TOS=0x08 PREC=0x40 TTL=241 ID=1705 PROTO=TCP SPT=0 DPT=43842 WINDOW=1024 RES=0x00 SYN URGP=0 
[ 4563.095528] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15219 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4563.099116] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15220 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4563.102728] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15221 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4570.996979] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=156.233.225.31 DST=my.ip.address.removed LEN=44 TOS=0x08 PREC=0x40 TTL=240 ID=32340 PROTO=TCP SPT=41170 DPT=1145 WINDOW=1025 RES=0x00 SYN URGP=0 
[ 4571.141214] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=79.110.62.129 DST=my.ip.address.removed LEN=40 TOS=0x08 PREC=0x40 TTL=245 ID=26763 PROTO=TCP SPT=52782 DPT=55025 WINDOW=1024 RES=0x00 SYN URGP=0 
[ 4582.248392] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=117.187.117.6 DST=my.ip.address.removed LEN=40 TOS=0x08 PREC=0x20 TTL=229 ID=43776 PROTO=TCP SPT=46490 DPT=8090 WINDOW=1024 RES=0x00 SYN URGP=0 
[ 4591.673865] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=79.110.62.66 DST=my.ip.address.removed LEN=40 TOS=0x08 PREC=0x40 TTL=245 ID=61164 PROTO=TCP SPT=47455 DPT=2602 WINDOW=1024 RES=0x00 SYN URGP=0 
[ 4591.888945] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e2:12:70:19:50:44:86:dd SRC=fe80:0000:0000:0000:e997:ce10:ded7:3ffe DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=254341 PROTO=UDP SPT=57055 DPT=5355 LEN=41 
[ 4591.892098] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:50:44:08:00 SRC=104.234.204.207 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=30410 PROTO=UDP SPT=57055 DPT=5355 LEN=41 
[ 4593.083979] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e2:12:70:19:50:44:86:dd SRC=fe80:0000:0000:0000:e997:ce10:ded7:3ffe DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=273742 PROTO=UDP SPT=50569 DPT=5355 LEN=41 
[ 4593.088320] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:50:44:08:00 SRC=104.234.204.207 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=30411 PROTO=UDP SPT=50569 DPT=5355 LEN=41 
[ 4593.225579] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15222 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4593.228526] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15223 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4593.230804] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15224 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4594.274407] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e2:12:70:19:50:44:86:dd SRC=fe80:0000:0000:0000:e997:ce10:ded7:3ffe DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=73481 PROTO=UDP SPT=60279 DPT=5355 LEN=41 
[ 4594.279205] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:50:44:08:00 SRC=104.234.204.207 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=30412 PROTO=UDP SPT=60279 DPT=5355 LEN=41 
[ 4596.275939] Firewall: *UDP6IN Blocked* IN=eth0 OUT= MAC=33:33:00:01:00:03:e2:12:70:19:50:44:86:dd SRC=fe80:0000:0000:0000:e997:ce10:ded7:3ffe DST=ff02:0000:0000:0000:0000:0000:0001:0003 LEN=81 TC=0 HOPLIMIT=1 FLOWLBL=625085 PROTO=UDP SPT=50734 DPT=5355 LEN=41 
[ 4596.279610] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:e2:12:70:19:50:44:08:00 SRC=104.234.204.207 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=30413 PROTO=UDP SPT=50734 DPT=5355 LEN=41 
[ 4604.358900] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:3a:e2:9f:01:12:8a:08:00 SRC=66.225.254.159 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=37279 PROTO=UDP SPT=64478 DPT=5355 LEN=41 
[ 4604.521139] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:3a:e2:9f:01:12:8a:08:00 SRC=66.225.254.159 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=37280 PROTO=UDP SPT=52514 DPT=5355 LEN=41 
[ 4607.783539] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=01:00:5e:00:00:fc:3a:e2:9f:01:12:8a:08:00 SRC=66.225.254.159 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=37281 PROTO=UDP SPT=57877 DPT=5355 LEN=41 
[ 4608.880520] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=79.110.62.245 DST=my.ip.address.removed LEN=40 TOS=0x08 PREC=0x40 TTL=245 ID=48863 PROTO=TCP SPT=43585 DPT=13627 WINDOW=1024 RES=0x00 SYN URGP=0 
[ 4613.518584] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=185.180.141.10 DST=my.ip.address.removed LEN=40 TOS=0x08 PREC=0x20 TTL=242 ID=54277 PROTO=TCP SPT=34173 DPT=3128 WINDOW=1024 RES=0x00 SYN URGP=0 
[ 4617.599482] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=35.203.211.56 DST=my.ip.address.removed LEN=44 TOS=0x00 PREC=0x00 TTL=248 ID=58690 PROTO=TCP SPT=54504 DPT=17190 WINDOW=1024 RES=0x00 SYN URGP=0 
[ 4618.516232] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=bc:24:11:ea:03:f1:88:30:37:d7:b5:50:08:00 SRC=79.110.62.199 DST=my.ip.address.removed LEN=40 TOS=0x08 PREC=0x40 TTL=244 ID=61800 PROTO=TCP SPT=44480 DPT=34205 WINDOW=1024 RES=0x00 SYN URGP=0 
[ 4623.349192] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15225 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4623.352338] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15226 PROTO=UDP SPT=17500 DPT=17500 LEN=143 
[ 4623.354644] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:3a:e2:9f:ad:4d:af:08:00 SRC=66.225.254.227 DST=255.255.255.255 LEN=163 TOS=0x00 PREC=0x00 TTL=128 ID=15227 PROTO=UDP SPT=17500 DPT=17500 LEN=143

Active8 · Dec 13, 2024

Try to install the one of the predefined firewall profiles in CSF, I am using the "medium" profile and restart CSF
or
You didn't have setup the max amount of failed login hits in Administrator Settings in Directadmin

mockingbird · Dec 13, 2024

Active8 said:
Try to install the one of the predefined firewall profiles in CSF, I am using the "medium" profile and restart CSF
or
You didn't have setup the max amount of failed login hits in Administrator Settings in Directadmin

Thanks, I didn't see that option... I applied medium and I will remove 'dmesg -n 1' because it hasn't been logging anything since I enabled it and I'll report back.

mockingbird · Dec 13, 2024

I enabled the 'medium' setting in the profile but I don't see BFM capturing any of the portscanning IPs at all... I wish there were more options like there are in fail2ban to configure which filters are enabled and to customize them. I can live with it for now though.

Also, the correct way to stop the plethora of messages in the console is as follows:

in /etc/sysctl.conf, uncomment kernel.printk = 3 4 1 3, then send a sysctl --system command.

Richard G · Dec 13, 2024

mockingbird said:
I wish there were more options like there are in fail2ban to configure which filters are enabled and to customize them.

CSF can do anything that fail2ban can and more. Just check your csf.conf there are all kinds of filters and checks and how you can configure them and ways to block things for shorter or longer period.

mockingbird · Dec 13, 2024

Richard G said:
CSF can do anything that fail2ban can and more. Just check your csf.conf there are all kinds of filters and checks and how you can configure them and ways to block things for shorter or longer period.

Thank you, much appreciated... May I politely please suggest that the basic and obvious filters be added to the BFM GUI section? For example, SSH, Postfix, Dovecot, FTP (or sFTP) bruteforcing, which just happen automatically as soon as you initialize your server from all sorts of IPs all over the world.

That's just my experience with Webmin, I feel DA is behind in this respect, and Webmin is not a paid product.

Richard G · Dec 13, 2024

mockingbird said:
and obvious filters be added to the BFM GUI section?

You can ask a feature suggestion (seperate account required) for that, but I don't see the point as these filters can be configured in CSF, so no need to have them double.
Be aware that BFM and CSF are 2 different protection systems. BFM is the brute force manager of DA, which can send commands to CSF to block certain actions.
But CSF is also working standalone and you can configure those things there too.

I don't know what you mean with Webmin being better in that respect, Webmin has almost no basic protection and also requires something like CSF to be safe. So I woulnd't know exactly where DA would be behind.

Also be aware that CSF is a free product and as plugin added to DA so people don't have to do it manually. It's not a part of DA, just a bit of service of DA to put it in for you already.

Improving IP Blocking for Enhanced Security in DirectAdmin

Verified User

Verified User

Verified User

Verified User

Verified User

Verified User

Verified User

Verified User

Verified User

Verified User

Attachments

Verified User

Verified User

Verified User

Verified User

Verified User

Verified User

Verified User

Verified User

Verified User

Verified User