{
"event": "PreToolUse",
"tool_name": "Bash",
"tool_input": {
"command": "ssh root@prod.karlkratz.com \"nft list ruleset\" 2>&1 | head -200",
"timeout": 15000,
"description": "Get nftables ruleset structure to find set name"
}
}
{
"tool_response": {
"stdout": "table ip filter {\n\tchain INPUT {\n\t\ttype filter hook input priority filter; policy drop;\n\t\tip saddr 185.175.196.237 counter packets 45 bytes 2340 drop\n\t\tip saddr 52.230.35.34 counter packets 0 bytes 0 drop\n\t\tip saddr 20.27.221.169 counter packets 25 bytes 1300 drop\n\t\tip saddr 4.241.216.217 counter packets 0 bytes 0 drop\n\t\tip saddr 4.194.107.19 counter packets 15 bytes 780 drop\n\t\tip saddr 62.60.130.228 counter packets 80 bytes 4160 drop\n\t\tip saddr 212.51.136.121 counter packets 28 bytes 1680 drop\n\t\tip saddr 150.109.46.88 counter packets 8 bytes 480 drop\n\t\txt match \"set\" counter packets 62405 bytes 6831087 accept\n\t\tip saddr 145.224.73.102 counter packets 4975038 bytes 605192213 accept\n\t\tiifname \"lo\" counter packets 571736892 bytes 67703678735 accept\n\t\tct state related,established counter packets 86929996 bytes 103232971668 accept\n\t\txt match \"set\" counter packets 30 bytes 1604 drop\n\t\tcounter packets 1748109 bytes 109700976 jump SEMRUSH_BLOCK\n\t\tcounter packets 1748099 bytes 109700376 jump XOVI_BLOCK\n\t\tip protocol tcp # Warning: table ip filter is managed by iptables-nft, do not touch!\ntcp dport { 25, 587, 465, 80, 443 } counter packets 809043 bytes 42572481 accept\n\t\txt match \"set\" counter packets 345971 bytes 28788077 drop\n\t\tip saddr != 127.0.0.1 tcp dport 6333 counter packets 0 bytes 0 drop\n\t\tudp dport 49152-65535 counter packets 0 bytes 0 accept\n\t\ttcp dport 3478 counter packets 0 bytes 0 accept\n\t\tudp dport 3478 counter packets 0 bytes 0 accept\n\t\tip saddr 91.99.63.201 tcp dport 11434 counter packets 0 bytes 0 accept\n\t\tip saddr 148.251.182.181 tcp dport 11434 counter packets 0 bytes 0 accept\n\t\tip saddr 127.0.0.1 tcp dport 11434 counter packets 0 bytes 0 accept\n\t\tip saddr 91.99.63.201 counter packets 0 bytes 0 accept\n\t\tip saddr 148.251.182.181 counter packets 4 bytes 240 accept\n\t\tip saddr 91.107.225.81 counter packets 0 bytes 0 accept\n\t\tcounter packets 593081 bytes 38339578 jump ufw-before-logging-input\n\t\tcounter packets 593081 bytes 38339578 jump ufw-before-input\n\t\tcounter packets 40 bytes 2248 jump ufw-after-input\n\t\tcounter packets 37 bytes 2128 jump ufw-after-logging-input\n\t\tcounter packets 37 bytes 2128 jump ufw-reject-input\n\t\tcounter packets 37 bytes 2128 jump ufw-track-input\n\t\ttcp dport 11434 counter packets 0 bytes 0 drop\n\t\tip saddr 88.198.50.199 tcp dport 22 counter packets 0 bytes 0 accept\n\t\tip saddr != 127.0.0.1 tcp dport 6333 counter packets 0 bytes 0 drop\n\t\tip saddr != 127.0.0.1 tcp dport 6334 counter packets 0 bytes 0 drop\n\t}\n\n\tchain FORWARD {\n\t\ttype filter hook forward priority filter; policy drop;\n\t\tcounter packets 0 bytes 0 jump DOCKER-USER\n\t\tcounter packets 0 bytes 0 jump DOCKER-ISOLATION-STAGE-1\n\t\toifname \"docker0\" ct state related,established counter packets 0 bytes 0 accept\n\t\toifname \"docker0\" counter packets 0 bytes 0 jump DOCKER\n\t\tiifname \"docker0\" oifname != \"docker0\" counter packets 0 bytes 0 accept\n\t\tiifname \"docker0\" oifname \"docker0\" counter packets 0 bytes 0 accept\n\t\tcounter packets 0 bytes 0 jump ufw-before-logging-forward\n\t\tcounter packets 0 bytes 0 jump ufw-before-forward\n\t\tcounter packets 0 bytes 0 jump ufw-after-forward\n\t\tcounter packets 0 bytes 0 jump ufw-after-logging-forward\n\t\tcounter packets 0 bytes 0 jump ufw-reject-forward\n\t\tcounter packets 0 bytes 0 jump ufw-track-forward\n\t}\n\n\tchain OUTPUT {\n\t\ttype filter hook output priority filter; policy accept;\n\t\tcounter packets 650583321 bytes 137281749582 jump ufw-before-logging-output\n\t\tcounter packets 650583321 bytes 137281749582 jump ufw-before-output\n\t\tcounter packets 1582560 bytes 100377735 jump ufw-after-output\n\t\tcounter packets 1582560 bytes 100377735 jump ufw-after-logging-output\n\t\tcounter packets 1582560 bytes 100377735 jump ufw-reject-output\n\t\tcounter packets 1582560 bytes 100377735 jump ufw-track-output\n\t}\n\n\tchain DOCKER {\n\t}\n\n\tchain DOCKER-ISOLATION-STAGE-1 {\n\t\tiifname \"docker0\" oifname != \"docker0\" counter packets 0 bytes 0 jump DOCKER-ISOLATION-STAGE-2\n\t\tcounter packets 0 bytes 0 return\n\t}\n\n\tchain DOCKER-ISOLATION-STAGE-2 {\n\t\toifname \"docker0\" counter packets 0 bytes 0 drop\n\t\tcounter packets 0 bytes 0 return\n\t}\n\n\tchain DOCKER-USER {\n\t\tcounter packets 0 bytes 0 return\n\t}\n\n\tchain SEMRUSH_BLOCK {\n\t}\n\n\tchain XOVI_BLOCK {\n\t}\n\n\tchain ufw-after-forward {\n\t}\n\n\tchain ufw-after-input {\n\t\tudp dport 137 counter packets 0 bytes 0 jump ufw-skip-to-policy-input\n\t\tudp dport 138 counter packets 0 bytes 0 jump ufw-skip-to-policy-input\n\t\ttcp dport 139 counter packets 0 bytes 0 jump ufw-skip-to-policy-input\n\t\ttcp dport 445 counter packets 0 bytes 0 jump ufw-skip-to-policy-input\n\t\tudp dport 67 counter packets 0 bytes 0 jump ufw-skip-to-policy-input\n\t\tudp dport 68 counter packets 0 bytes 0 jump ufw-skip-to-policy-input\n\t\tfib daddr type broadcast counter packets 3 bytes 120 jump ufw-skip-to-policy-input\n\t}\n\n\tchain ufw-after-logging-forward {\n\t\tlimit rate 3\/minute burst 10 packets counter packets 0 bytes 0 log prefix \"[UFW BLOCK] \"\n\t}\n\n\tchain ufw-after-logging-input {\n\t\tlimit rate 3\/minute burst 10 packets counter packets 21 bytes 1136 log prefix \"[UFW BLOCK] \"\n\t}\n\n\tchain ufw-after-logging-output {\n\t}\n\n\tchain ufw-after-output {\n\t}\n\n\tchain ufw-before-forward {\n\t\tct state related,established counter packets 0 bytes 0 accept\n\t\tip protocol icmp icmp type destination-unreachable counter packets 0 bytes 0 accept\n\t\tip protocol icmp icmp type time-exceeded counter packets 0 bytes 0 accept\n\t\tip protocol icmp icmp type parameter-problem counter packets 0 bytes 0 accept\n\t\tip protocol icmp icmp type echo-request counter packets 0 bytes 0 accept\n\t\tcounter packets 0 bytes 0 jump ufw-user-forward\n\t}\n\n\tchain ufw-before-input {\n\t\tiifname \"lo\" counter packets 0 bytes 0 accept\n\t\tct state related,established counter packets 0 bytes 0 accept\n\t\tct state invalid counter packets 950 bytes 46513 jump ufw-logging-deny\n\t\tct state invalid counter packets 950 bytes 46513 drop\n\t\tip protocol icmp icmp type destination-unreachable counter packets 0 bytes 0 accept\n\t\tip protocol icmp icmp type time-exceeded counter packets 0 bytes 0 accept\n\t\tip protocol icmp icmp type parameter-problem counter packets 0 bytes 0 accept\n\t\tip protocol icmp icmp type echo-request counter packets 1306 bytes 75310 accept\n\t\tudp sport 67 udp dport 68 counter packets 0 bytes 0 accept\n\t\tcounter packets 590825 bytes 38217755 jump ufw-not-local\n\t\tip daddr 224.0.0.251 udp dport 5353 counter packets 0 bytes 0 accept\n\t\tip daddr 239.255.255.250 udp dport 1900 counter packets 0 bytes 0 accept\n\t\tcounter packets 590825 bytes 38217755 jump ufw-user-input\n\t}\n\n\tchain ufw-before-logging-forward {\n\t}\n\n\tchain ufw-before-logging-input {\n\t}\n\n\tchain ufw-before-logging-output {\n\t}\n\n\tchain ufw-before-output {\n\t\toifname \"lo\" counter packets 571705442 bytes 67702043335 accept\n\t\tct state related,established counter packets 77295319 bytes 69479328512 accept\n\t\tcounter packets 1582560 bytes 100377735 jump ufw-user-output\n\t}\n\n\tchain ufw-logging-allow {\n\t\tlimit rate 3\/minute burst 10 packets counter packets 0 bytes 0 log prefix \"[UFW ALLOW] \"\n\t}\n\n\tchain ufw-logging-deny {\n\t\tct state invalid limit rate 3\/minute burst 10 packets counter packets 837 bytes 40873 return\n\t\tlimit rate 3\/minute burst 10 packets counter packets 37 bytes 1772 log prefix \"[UFW BLOCK] \"\n\t}\n\n\tchain ufw-not-local {\n\t\tfib daddr type local counter packets 590814 bytes 38217247 return\n\t\tfib daddr type multicast counter packets 0 bytes 0 return\n\t\tfib daddr type broadcast counter packets 11 bytes 508 return\n\t\tlimit rate 3\/minute burst 10 packets counter packets 0 bytes 0 jump ufw-logging-deny\n\t\tcounter packets 0 bytes 0 drop\n\t}\n\n\tchain ufw-reject-forward {\n\t}\n\n\tchain ufw-reject-input {\n\t}\n\n\tchain ufw-reject-output {\n\t}\n\n\tchain ufw-skip-to-policy-forward {\n\t\tcounter packets 0 bytes 0 drop\n\t}\n\n\tchain ufw-skip-to-policy-input {\n\t\tcounter packets 3 bytes 120 drop\n\t}\n\n\tchain ufw-skip-to-policy-output {\n\t\tcounter packets 0 bytes 0 accept\n\t}\n\n\tchain ufw-track-forward {\n\t}",
"stderr": "",
"interrupted": false,
"isImage": false
}
}