应用层对抗DDOS CC SYN UDP 放大 反射 攻击

# Generated by iptables-save v1.4.21 on Sun Nov 30 14:21:32 2025
*mangle
:PREROUTING ACCEPT [78188:7785675]
:INPUT ACCEPT [78188:7785675]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [75739:10297857]
:POSTROUTING ACCEPT [65617:9584277]
COMMIT
# Completed on Sun Nov 30 14:21:32 2025
# Generated by iptables-save v1.4.21 on Sun Nov 30 14:21:32 2025
*nat
:PREROUTING ACCEPT [18658:1069246]
:INPUT ACCEPT [381:19884]
:OUTPUT ACCEPT [10143:714840]
:POSTROUTING ACCEPT [21:1260]
:DOCKER - [0:0]
-A PREROUTING -m addrtype --dst-type LOCAL -j DOCKER
-A OUTPUT ! -d 127.0.0.0/8 -m addrtype --dst-type LOCAL -j DOCKER
-A POSTROUTING -s 172.17.0.0/16 ! -o docker0 -j MASQUERADE
-A DOCKER -i docker0 -j RETURN
COMMIT
# Completed on Sun Nov 30 14:21:32 2025
# Generated by iptables-save v1.4.21 on Sun Nov 30 14:21:32 2025
*raw
:PREROUTING ACCEPT [78188:7785675]
:OUTPUT ACCEPT [75739:10297857]
:OUTPUT_direct - [0:0]
:PREROUTING_ZONES - [0:0]
:PREROUTING_direct - [0:0]
:PRE_docker - [0:0]
:PRE_docker_allow - [0:0]
:PRE_docker_deny - [0:0]
:PRE_docker_log - [0:0]
:PRE_public - [0:0]
:PRE_public_allow - [0:0]
:PRE_public_deny - [0:0]
:PRE_public_log - [0:0]
-A PREROUTING -j PREROUTING_direct
-A PREROUTING -j PREROUTING_ZONES
-A OUTPUT -j OUTPUT_direct
-A PREROUTING_ZONES -i docker0 -g PRE_docker
-A PREROUTING_ZONES -i eth0 -g PRE_public
-A PREROUTING_ZONES -g PRE_public
-A PRE_docker -j PRE_docker_log
-A PRE_docker -j PRE_docker_deny
-A PRE_docker -j PRE_docker_allow
-A PRE_public -j PRE_public_log
-A PRE_public -j PRE_public_deny
-A PRE_public -j PRE_public_allow
COMMIT
# Completed on Sun Nov 30 14:21:32 2025
# Generated by iptables-save v1.4.21 on Sun Nov 30 14:21:32 2025
*security
:INPUT ACCEPT [59903:6735993]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [65617:9584277]
:FORWARD_direct - [0:0]
:INPUT_direct - [0:0]
:OUTPUT_direct - [0:0]
-A INPUT -j INPUT_direct
-A FORWARD -j FORWARD_direct
-A OUTPUT -j OUTPUT_direct
COMMIT
# Completed on Sun Nov 30 14:21:32 2025
# Generated by iptables-save v1.4.21 on Sun Nov 30 14:21:32 2025
*filter
:INPUT DROP [0:0]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [53158:7479353]
:ALIYUN_BLOCKED_IPS - [0:0]
:CDBAN - [0:0]
:DOCKER - [0:0]
:DOCKER-ISOLATION-STAGE-1 - [0:0]
:DOCKER-ISOLATION-STAGE-2 - [0:0]
:DOCKER-USER - [0:0]
-A INPUT -j CDBAN
-A INPUT -j ALIYUN_BLOCKED_IPS
-A INPUT -i lo -j ACCEPT
-A INPUT -s 47.236.254.252/32 -j DROP
-A INPUT -s 3.134.148.59/32 -j DROP
-A INPUT -s 80.94.92.186/32 -j DROP
-A INPUT -s 45.148.10.240/32 -j DROP
-A INPUT -p tcp -m set --match-set china src -m multiport --dports 22,80,443,8888 -j ACCEPT
-A INPUT -p tcp -m multiport --dports 22,80,443,8888 -j DROP
-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p tcp -m tcp --tcp-flags FIN,SYN,RST,PSH,ACK,URG NONE -j DROP
-A INPUT -p tcp -m tcp --tcp-flags SYN,RST SYN,RST -j DROP
-A INPUT -p tcp -m tcp --tcp-flags FIN,SYN FIN,SYN -j DROP
-A INPUT -p tcp -m tcp --tcp-flags FIN,PSH,URG FIN,PSH,URG -j DROP
-A INPUT -p tcp -m tcp --dport 22 -m conntrack --ctstate NEW -m recent --set --name SSH_LIMIT --mask 255.255.255.255 --rsource
-A INPUT -p tcp -m tcp --dport 22 -m conntrack --ctstate NEW -m recent --update --seconds 60 --hitcount 3 --name SSH_LIMIT --mask 255.255.255.255 --rsource -j DROP
-A INPUT -p tcp -m tcp --dport 22 -m connlimit --connlimit-above 3 --connlimit-mask 32 --connlimit-saddr -j DROP
-A INPUT -p tcp -m tcp --dport 22 -m conntrack --ctstate NEW -m limit --limit 1/min -j LOG --log-prefix "SSH_BRUTE_FORCE: "
-A INPUT -p tcp -m tcp --dport 80 -m connlimit --connlimit-above 6 --connlimit-mask 32 --connlimit-saddr -j REJECT --reject-with icmp-port-unreachable
-A INPUT -p tcp -m tcp --dport 443 -m connlimit --connlimit-above 6 --connlimit-mask 32 --connlimit-saddr -j REJECT --reject-with icmp-port-unreachable
-A INPUT -p tcp -m tcp --dport 80 -m connlimit --connlimit-above 20 --connlimit-mask 32 --connlimit-saddr -j DROP
-A INPUT -p tcp -m tcp --dport 443 -m connlimit --connlimit-above 20 --connlimit-mask 32 --connlimit-saddr -j DROP
-A INPUT -p tcp -m tcp --dport 80 -m state --state NEW -m limit --limit 10/min --limit-burst 20 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 80 -m state --state NEW -j DROP
-A INPUT -p tcp -m tcp --dport 80 -m recent --set --name HTTP_FAST --mask 255.255.255.255 --rsource
-A INPUT -p tcp -m tcp --dport 80 -m recent --update --seconds 2 --hitcount 6 --name HTTP_FAST --mask 255.255.255.255 --rsource -j LOG --log-prefix "CC_ATTACK_FAST: "
-A INPUT -p tcp -m tcp --dport 80 -m recent --update --seconds 2 --hitcount 6 --name HTTP_FAST --mask 255.255.255.255 --rsource -j DROP
-A INPUT -p tcp -m tcp --dport 80 -m connlimit --connlimit-upto 50 --connlimit-mask 32 --connlimit-saddr -j ACCEPT
-A INPUT -p tcp -m tcp --dport 80 -m connlimit --connlimit-above 50 --connlimit-mask 32 --connlimit-saddr -j DROP
-A INPUT -p tcp -m tcp --dport 80 -m string --string "wget" --algo bm --to 65535 -j DROP
-A INPUT -p tcp -m tcp --dport 80 -m string --string "curl" --algo bm --to 65535 -j DROP
-A INPUT -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -m limit --limit 1/sec --limit-burst 3 -j ACCEPT
-A INPUT -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -j DROP
-A INPUT -p udp -j DROP
-A INPUT -p icmp -j DROP
-A INPUT -j LOG --log-prefix "IPTABLES_INPUT_DENIED: " --log-level 6
-A INPUT -j DROP
-A FORWARD -j DOCKER-USER
-A FORWARD -j DOCKER-ISOLATION-STAGE-1
-A FORWARD -o docker0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -o docker0 -j DOCKER
-A FORWARD -i docker0 ! -o docker0 -j ACCEPT
-A FORWARD -i docker0 -o docker0 -j ACCEPT
-A OUTPUT -p udp -j DROP
-A ALIYUN_BLOCKED_IPS -s 8.209.16.0/20 -j DROP
-A ALIYUN_BLOCKED_IPS -s 8.209.10.0/23 -j DROP
-A ALIYUN_BLOCKED_IPS -s 8.209.0.0/20 -j DROP
-A ALIYUN_BLOCKED_IPS -s 8.209.0.0/19 -j DROP
-A ALIYUN_BLOCKED_IPS -s 8.208.32.0/19 -j DROP
-A ALIYUN_BLOCKED_IPS -s 8.208.128.0/17 -j DROP
-A ALIYUN_BLOCKED_IPS -s 8.208.0.0/19 -j DROP
-A ALIYUN_BLOCKED_IPS -s 8.208.0.0/18 -j DROP
-A ALIYUN_BLOCKED_IPS -s 8.208.0.0/17 -j DROP
-A ALIYUN_BLOCKED_IPS -s 8.208.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 60.205.128.0/17 -j DROP
-A ALIYUN_BLOCKED_IPS -s 60.205.0.0/17 -j DROP
-A ALIYUN_BLOCKED_IPS -s 60.205.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 59.110.128.0/17 -j DROP
-A ALIYUN_BLOCKED_IPS -s 59.110.0.0/17 -j DROP
-A ALIYUN_BLOCKED_IPS -s 59.110.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 47.96.0.0/15 -j DROP
-A ALIYUN_BLOCKED_IPS -s 47.94.0.0/15 -j DROP
-A ALIYUN_BLOCKED_IPS -s 47.92.0.0/15 -j DROP
-A ALIYUN_BLOCKED_IPS -s 47.92.0.0/14 -j DROP
-A ALIYUN_BLOCKED_IPS -s 47.113.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 47.112.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 47.111.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 47.110.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 47.110.0.0/15 -j DROP
-A ALIYUN_BLOCKED_IPS -s 47.109.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 47.108.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 47.108.0.0/15 -j DROP
-A ALIYUN_BLOCKED_IPS -s 47.107.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 47.106.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 47.105.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 47.104.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 47.104.0.0/15 -j DROP
-A ALIYUN_BLOCKED_IPS -s 47.100.0.0/15 -j DROP
-A ALIYUN_BLOCKED_IPS -s 47.100.0.0/14 -j DROP
-A ALIYUN_BLOCKED_IPS -s 42.96.128.0/17 -j DROP
-A ALIYUN_BLOCKED_IPS -s 42.121.128.0/17 -j DROP
-A ALIYUN_BLOCKED_IPS -s 42.121.0.0/17 -j DROP
-A ALIYUN_BLOCKED_IPS -s 42.121.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 42.120.0.0/17 -j DROP
-A ALIYUN_BLOCKED_IPS -s 42.120.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 39.96.0.0/14 -j DROP
-A ALIYUN_BLOCKED_IPS -s 39.96.0.0/13 -j DROP
-A ALIYUN_BLOCKED_IPS -s 39.108.128.0/17 -j DROP
-A ALIYUN_BLOCKED_IPS -s 39.108.0.0/17 -j DROP
-A ALIYUN_BLOCKED_IPS -s 39.108.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 39.106.0.0/15 -j DROP
-A ALIYUN_BLOCKED_IPS -s 39.104.0.0/15 -j DROP
-A ALIYUN_BLOCKED_IPS -s 39.104.0.0/14 -j DROP
-A ALIYUN_BLOCKED_IPS -s 39.100.0.0/14 -j DROP
-A ALIYUN_BLOCKED_IPS -s 223.7.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 223.6.6.0/24 -j DROP
-A ALIYUN_BLOCKED_IPS -s 223.6.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 223.5.5.0/24 -j DROP
-A ALIYUN_BLOCKED_IPS -s 223.5.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 223.4.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 223.4.0.0/14 -j DROP
-A ALIYUN_BLOCKED_IPS -s 218.244.144.0/20 -j DROP
-A ALIYUN_BLOCKED_IPS -s 218.244.128.0/20 -j DROP
-A ALIYUN_BLOCKED_IPS -s 218.244.128.0/19 -j DROP
-A ALIYUN_BLOCKED_IPS -s 203.107.6.0/24 -j DROP
-A ALIYUN_BLOCKED_IPS -s 203.107.47.0/24 -j DROP
-A ALIYUN_BLOCKED_IPS -s 203.107.46.0/24 -j DROP
-A ALIYUN_BLOCKED_IPS -s 203.107.46.0/23 -j DROP
-A ALIYUN_BLOCKED_IPS -s 203.107.45.0/24 -j DROP
-A ALIYUN_BLOCKED_IPS -s 203.107.44.0/24 -j DROP
-A ALIYUN_BLOCKED_IPS -s 203.107.44.0/23 -j DROP
-A ALIYUN_BLOCKED_IPS -s 203.107.44.0/22 -j DROP
-A ALIYUN_BLOCKED_IPS -s 203.107.43.0/24 -j DROP
-A ALIYUN_BLOCKED_IPS -s 203.107.42.0/24 -j DROP
-A ALIYUN_BLOCKED_IPS -s 203.107.42.0/23 -j DROP
-A ALIYUN_BLOCKED_IPS -s 203.107.41.0/24 -j DROP
-A ALIYUN_BLOCKED_IPS -s 203.107.40.0/24 -j DROP
-A ALIYUN_BLOCKED_IPS -s 203.107.40.0/23 -j DROP
-A ALIYUN_BLOCKED_IPS -s 203.107.40.0/22 -j DROP
-A ALIYUN_BLOCKED_IPS -s 203.107.39.0/24 -j DROP
-A ALIYUN_BLOCKED_IPS -s 203.107.38.0/24 -j DROP
-A ALIYUN_BLOCKED_IPS -s 203.107.37.0/24 -j DROP
-A ALIYUN_BLOCKED_IPS -s 203.107.36.0/24 -j DROP
-A ALIYUN_BLOCKED_IPS -s 203.107.36.0/22 -j DROP
-A ALIYUN_BLOCKED_IPS -s 203.107.35.0/24 -j DROP
-A ALIYUN_BLOCKED_IPS -s 203.107.34.0/24 -j DROP
-A ALIYUN_BLOCKED_IPS -s 203.107.33.0/24 -j DROP
-A ALIYUN_BLOCKED_IPS -s 203.107.32.0/24 -j DROP
-A ALIYUN_BLOCKED_IPS -s 203.107.32.0/22 -j DROP
-A ALIYUN_BLOCKED_IPS -s 203.107.32.0/21 -j DROP
-A ALIYUN_BLOCKED_IPS -s 203.107.24.0/24 -j DROP
-A ALIYUN_BLOCKED_IPS -s 203.107.23.0/24 -j DROP
-A ALIYUN_BLOCKED_IPS -s 203.107.22.0/24 -j DROP
-A ALIYUN_BLOCKED_IPS -s 203.107.21.0/24 -j DROP
-A ALIYUN_BLOCKED_IPS -s 203.107.20.0/24 -j DROP
-A ALIYUN_BLOCKED_IPS -s 203.107.1.0/24 -j DROP
-A ALIYUN_BLOCKED_IPS -s 203.107.0.0/24 -j DROP
-A ALIYUN_BLOCKED_IPS -s 182.92.128.0/17 -j DROP
-A ALIYUN_BLOCKED_IPS -s 182.92.0.0/17 -j DROP
-A ALIYUN_BLOCKED_IPS -s 182.92.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 170.33.9.0/24 -j DROP
-A ALIYUN_BLOCKED_IPS -s 170.33.8.0/24 -j DROP
-A ALIYUN_BLOCKED_IPS -s 170.33.32.0/24 -j DROP
-A ALIYUN_BLOCKED_IPS -s 170.33.32.0/21 -j DROP
-A ALIYUN_BLOCKED_IPS -s 170.33.3.0/24 -j DROP
-A ALIYUN_BLOCKED_IPS -s 170.33.2.0/24 -j DROP
-A ALIYUN_BLOCKED_IPS -s 170.33.16.0/21 -j DROP
-A ALIYUN_BLOCKED_IPS -s 170.33.15.0/24 -j DROP
-A ALIYUN_BLOCKED_IPS -s 170.33.14.0/24 -j DROP
-A ALIYUN_BLOCKED_IPS -s 170.33.13.0/24 -j DROP
-A ALIYUN_BLOCKED_IPS -s 170.33.11.0/24 -j DROP
-A ALIYUN_BLOCKED_IPS -s 170.33.10.0/24 -j DROP
-A ALIYUN_BLOCKED_IPS -s 170.33.1.0/24 -j DROP
-A ALIYUN_BLOCKED_IPS -s 170.33.0.0/24 -j DROP
-A ALIYUN_BLOCKED_IPS -s 139.224.128.0/17 -j DROP
-A ALIYUN_BLOCKED_IPS -s 139.224.0.0/17 -j DROP
-A ALIYUN_BLOCKED_IPS -s 139.224.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 139.196.128.0/17 -j DROP
-A ALIYUN_BLOCKED_IPS -s 139.196.0.0/17 -j DROP
-A ALIYUN_BLOCKED_IPS -s 139.196.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 139.129.128.0/17 -j DROP
-A ALIYUN_BLOCKED_IPS -s 139.129.0.0/17 -j DROP
-A ALIYUN_BLOCKED_IPS -s 139.129.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 123.57.45.0/24 -j DROP
-A ALIYUN_BLOCKED_IPS -s 123.57.0.0/24 -j DROP
-A ALIYUN_BLOCKED_IPS -s 123.57.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 123.56.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 123.56.0.0/15 -j DROP
-A ALIYUN_BLOCKED_IPS -s 121.42.64.0/18 -j DROP
-A ALIYUN_BLOCKED_IPS -s 121.42.224.0/19 -j DROP
-A ALIYUN_BLOCKED_IPS -s 121.42.192.0/19 -j DROP
-A ALIYUN_BLOCKED_IPS -s 121.42.17.0/24 -j DROP
-A ALIYUN_BLOCKED_IPS -s 121.42.128.0/18 -j DROP
-A ALIYUN_BLOCKED_IPS -s 121.42.0.0/18 -j DROP
-A ALIYUN_BLOCKED_IPS -s 121.42.0.0/15 -j DROP
-A ALIYUN_BLOCKED_IPS -s 121.40.0.0/15 -j DROP
-A ALIYUN_BLOCKED_IPS -s 121.40.0.0/14 -j DROP
-A ALIYUN_BLOCKED_IPS -s 121.199.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 121.198.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 121.197.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 121.196.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 121.196.0.0/14 -j DROP
-A ALIYUN_BLOCKED_IPS -s 120.79.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 120.78.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 120.78.0.0/15 -j DROP
-A ALIYUN_BLOCKED_IPS -s 120.77.128.0/17 -j DROP
-A ALIYUN_BLOCKED_IPS -s 120.77.0.0/17 -j DROP
-A ALIYUN_BLOCKED_IPS -s 120.77.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 120.76.128.0/17 -j DROP
-A ALIYUN_BLOCKED_IPS -s 120.76.0.0/17 -j DROP
-A ALIYUN_BLOCKED_IPS -s 120.76.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 120.76.0.0/15 -j DROP
-A ALIYUN_BLOCKED_IPS -s 120.55.128.0/17 -j DROP
-A ALIYUN_BLOCKED_IPS -s 120.55.0.0/17 -j DROP
-A ALIYUN_BLOCKED_IPS -s 120.55.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 120.27.64.0/18 -j DROP
-A ALIYUN_BLOCKED_IPS -s 120.27.192.0/18 -j DROP
-A ALIYUN_BLOCKED_IPS -s 120.27.128.0/18 -j DROP
-A ALIYUN_BLOCKED_IPS -s 120.27.128.0/17 -j DROP
-A ALIYUN_BLOCKED_IPS -s 120.27.0.0/18 -j DROP
-A ALIYUN_BLOCKED_IPS -s 120.27.0.0/17 -j DROP
-A ALIYUN_BLOCKED_IPS -s 120.26.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 120.25.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 120.24.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 120.24.0.0/15 -j DROP
-A ALIYUN_BLOCKED_IPS -s 120.24.0.0/14 -j DROP
-A ALIYUN_BLOCKED_IPS -s 119.23.128.0/17 -j DROP
-A ALIYUN_BLOCKED_IPS -s 119.23.0.0/17 -j DROP
-A ALIYUN_BLOCKED_IPS -s 119.23.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 118.31.128.0/17 -j DROP
-A ALIYUN_BLOCKED_IPS -s 118.31.0.0/17 -j DROP
-A ALIYUN_BLOCKED_IPS -s 118.31.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 118.190.128.0/17 -j DROP
-A ALIYUN_BLOCKED_IPS -s 118.190.0.0/17 -j DROP
-A ALIYUN_BLOCKED_IPS -s 118.190.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 118.178.128.0/17 -j DROP
-A ALIYUN_BLOCKED_IPS -s 118.178.0.0/17 -j DROP
-A ALIYUN_BLOCKED_IPS -s 118.178.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 116.62.0.0/17 -j DROP
-A ALIYUN_BLOCKED_IPS -s 116.62.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 115.29.64.0/18 -j DROP
-A ALIYUN_BLOCKED_IPS -s 115.29.32.0/19 -j DROP
-A ALIYUN_BLOCKED_IPS -s 115.29.128.0/19 -j DROP
-A ALIYUN_BLOCKED_IPS -s 115.29.128.0/17 -j DROP
-A ALIYUN_BLOCKED_IPS -s 115.29.0.0/17 -j DROP
-A ALIYUN_BLOCKED_IPS -s 115.29.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 115.28.64.0/18 -j DROP
-A ALIYUN_BLOCKED_IPS -s 115.28.192.0/18 -j DROP
-A ALIYUN_BLOCKED_IPS -s 115.28.128.0/18 -j DROP
-A ALIYUN_BLOCKED_IPS -s 115.28.0.0/18 -j DROP
-A ALIYUN_BLOCKED_IPS -s 115.28.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 114.55.128.0/17 -j DROP
-A ALIYUN_BLOCKED_IPS -s 114.55.0.0/17 -j DROP
-A ALIYUN_BLOCKED_IPS -s 114.55.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 114.215.96.0/19 -j DROP
-A ALIYUN_BLOCKED_IPS -s 114.215.64.0/18 -j DROP
-A ALIYUN_BLOCKED_IPS -s 114.215.220.0/22 -j DROP
-A ALIYUN_BLOCKED_IPS -s 114.215.160.0/21 -j DROP
-A ALIYUN_BLOCKED_IPS -s 114.215.128.0/19 -j DROP
-A ALIYUN_BLOCKED_IPS -s 114.215.0.0/18 -j DROP
-A ALIYUN_BLOCKED_IPS -s 114.215.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 112.74.128.0/17 -j DROP
-A ALIYUN_BLOCKED_IPS -s 112.74.0.0/17 -j DROP
-A ALIYUN_BLOCKED_IPS -s 112.74.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 112.127.128.0/17 -j DROP
-A ALIYUN_BLOCKED_IPS -s 112.127.0.0/17 -j DROP
-A ALIYUN_BLOCKED_IPS -s 112.127.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 112.126.128.0/17 -j DROP
-A ALIYUN_BLOCKED_IPS -s 112.126.0.0/17 -j DROP
-A ALIYUN_BLOCKED_IPS -s 112.126.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 112.125.128.0/17 -j DROP
-A ALIYUN_BLOCKED_IPS -s 112.125.0.0/17 -j DROP
-A ALIYUN_BLOCKED_IPS -s 112.125.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 112.124.128.0/17 -j DROP
-A ALIYUN_BLOCKED_IPS -s 112.124.0.0/17 -j DROP
-A ALIYUN_BLOCKED_IPS -s 112.124.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 110.76.32.0/20 -j DROP
-A ALIYUN_BLOCKED_IPS -s 106.15.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 106.14.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 106.14.0.0/15 -j DROP
-A ALIYUN_BLOCKED_IPS -s 103.15.96.0/22 -j DROP
-A ALIYUN_BLOCKED_IPS -s 101.37.128.0/17 -j DROP
-A ALIYUN_BLOCKED_IPS -s 101.37.0.0/17 -j DROP
-A ALIYUN_BLOCKED_IPS -s 101.37.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 101.201.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 101.200.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 101.200.0.0/15 -j DROP
-A ALIYUN_BLOCKED_IPS -s 101.133.0.0/16 -j DROP
-A ALIYUN_BLOCKED_IPS -s 101.132.0.0/16 -j DROP
-A CDBAN -s 102.22.27.146/32 -j DROP
-A CDBAN -s 103.103.53.44/32 -j DROP
-A CDBAN -s 103.135.46.118/32 -j DROP
-A CDBAN -s 103.172.146.170/32 -j DROP
-A CDBAN -s 109.126.34.84/32 -j DROP
-A CDBAN -s 111.171.127.190/32 -j DROP
-A CDBAN -s 111.61.229.78/32 -j DROP
-A CDBAN -s 111.68.102.19/32 -j DROP
-A CDBAN -s 111.70.22.154/32 -j DROP
-A CDBAN -s 111.70.9.143/32 -j DROP
-A CDBAN -s 112.186.241.102/32 -j DROP
-A CDBAN -s 113.158.205.225/32 -j DROP
-A CDBAN -s 115.110.106.118/32 -j DROP
-A CDBAN -s 115.193.33.105/32 -j DROP
-A CDBAN -s 115.46.88.68/32 -j DROP
-A CDBAN -s 116.48.151.58/32 -j DROP
-A CDBAN -s 117.141.79.159/32 -j DROP
-A CDBAN -s 117.159.174.136/32 -j DROP
-A CDBAN -s 117.216.33.31/32 -j DROP
-A CDBAN -s 118.213.136.182/32 -j DROP
-A CDBAN -s 122.160.80.105/32 -j DROP
-A CDBAN -s 123.129.245.249/32 -j DROP
-A CDBAN -s 123.202.235.205/32 -j DROP
-A CDBAN -s 125.19.156.2/32 -j DROP
-A CDBAN -s 125.19.179.26/32 -j DROP
-A CDBAN -s 125.19.183.202/32 -j DROP
-A CDBAN -s 125.19.248.170/32 -j DROP
-A CDBAN -s 125.20.251.70/32 -j DROP
-A CDBAN -s 125.215.199.37/32 -j DROP
-A CDBAN -s 125.72.150.250/32 -j DROP
-A CDBAN -s 128.185.199.14/32 -j DROP
-A CDBAN -s 128.185.214.78/32 -j DROP
-A CDBAN -s 128.185.227.166/32 -j DROP
-A CDBAN -s 128.24.161.193/32 -j DROP
-A CDBAN -s 134.242.137.8/32 -j DROP
-A CDBAN -s 136.248.73.230/32 -j DROP
-A CDBAN -s 13.83.233.96/32 -j DROP
-A CDBAN -s 14.241.229.250/32 -j DROP
-A CDBAN -s 143.105.110.242/32 -j DROP
-A CDBAN -s 149.54.33.150/32 -j DROP
-A CDBAN -s 14.98.28.43/32 -j DROP
-A CDBAN -s 150.249.252.237/32 -j DROP
-A CDBAN -s 152.32.240.168/32 -j DROP
-A CDBAN -s 154.12.182.21/32 -j DROP
-A CDBAN -s 154.9.254.247/32 -j DROP
-A CDBAN -s 159.223.231.210/32 -j DROP
-A CDBAN -s 161.81.25.86/32 -j DROP
-A CDBAN -s 171.244.61.137/32 -j DROP
-A CDBAN -s 175.198.18.3/32 -j DROP
-A CDBAN -s 175.206.1.60/32 -j DROP
-A CDBAN -s 176.100.124.153/32 -j DROP
-A CDBAN -s 178.128.245.42/32 -j DROP
-A CDBAN -s 178.132.144.161/32 -j DROP
-A CDBAN -s 178.178.222.50/32 -j DROP
-A CDBAN -s 179.125.169.77/32 -j DROP
-A CDBAN -s 180.94.74.94/32 -j DROP
-A CDBAN -s 181.115.237.19/32 -j DROP
-A CDBAN -s 183.171.236.103/32 -j DROP
-A CDBAN -s 183.223.156.154/32 -j DROP
-A CDBAN -s 183.233.85.194/32 -j DROP
-A CDBAN -s 185.15.171.214/32 -j DROP
-A CDBAN -s 187.126.105.42/32 -j DROP
-A CDBAN -s 187.73.90.14/32 -j DROP
-A CDBAN -s 187.8.3.230/32 -j DROP
-A CDBAN -s 190.124.153.17/32 -j DROP
-A CDBAN -s 191.59.187.13/32 -j DROP
-A CDBAN -s 193.164.205.94/32 -j DROP
-A CDBAN -s 194.31.8.12/32 -j DROP
-A CDBAN -s 195.177.94.144/32 -j DROP
-A CDBAN -s 195.218.159.123/32 -j DROP
-A CDBAN -s 196.28.226.66/32 -j DROP
-A CDBAN -s 197.219.228.242/32 -j DROP
-A CDBAN -s 197.255.141.37/32 -j DROP
-A CDBAN -s 199.102.205.204/32 -j DROP
-A CDBAN -s 199.229.220.185/32 -j DROP
-A CDBAN -s 200.222.71.218/32 -j DROP
-A CDBAN -s 200.46.214.110/32 -j DROP
-A CDBAN -s 203.252.10.3/32 -j DROP
-A CDBAN -s 204.76.203.28/32 -j DROP
-A CDBAN -s 209.173.10.75/32 -j DROP
-A CDBAN -s 211.23.109.116/32 -j DROP
-A CDBAN -s 213.230.124.17/32 -j DROP
-A CDBAN -s 213.32.253.235/32 -j DROP
-A CDBAN -s 213.55.85.202/32 -j DROP
-A CDBAN -s 217.149.125.18/32 -j DROP
-A CDBAN -s 217.218.206.34/32 -j DROP
-A CDBAN -s 2.180.31.224/32 -j DROP
-A CDBAN -s 218.206.136.24/32 -j DROP
-A CDBAN -s 219.248.65.30/32 -j DROP
-A CDBAN -s 220.246.42.212/32 -j DROP
-A CDBAN -s 222.117.0.253/32 -j DROP
-A CDBAN -s 222.99.52.202/32 -j DROP
-A CDBAN -s 223.241.214.127/32 -j DROP
-A CDBAN -s 223.75.156.89/32 -j DROP
-A CDBAN -s 2.54.85.220/32 -j DROP
-A CDBAN -s 2.57.121.112/32 -j DROP
-A CDBAN -s 2.57.121.25/32 -j DROP
-A CDBAN -s 31.173.0.46/32 -j DROP
-A CDBAN -s 35.200.201.144/32 -j DROP
-A CDBAN -s 36.137.38.119/32 -j DROP
-A CDBAN -s 36.50.21.246/32 -j DROP
-A CDBAN -s 36.64.211.93/32 -j DROP
-A CDBAN -s 36.64.30.151/32 -j DROP
-A CDBAN -s 37.236.189.25/32 -j DROP
-A CDBAN -s 38.224.95.167/32 -j DROP
-A CDBAN -s 41.72.202.86/32 -j DROP
-A CDBAN -s 42.200.196.141/32 -j DROP
-A CDBAN -s 45.182.5.98/32 -j DROP
-A CDBAN -s 46.100.9.112/32 -j DROP
-A CDBAN -s 46.14.24.50/32 -j DROP
-A CDBAN -s 49.124.151.32/32 -j DROP
-A CDBAN -s 49.125.201.72/32 -j DROP
-A CDBAN -s 49.125.201.85/32 -j DROP
-A CDBAN -s 49.37.32.248/32 -j DROP
-A CDBAN -s 50.223.176.171/32 -j DROP
-A CDBAN -s 52.173.219.149/32 -j DROP
-A CDBAN -s 57.151.136.160/32 -j DROP
-A CDBAN -s 61.59.6.81/32 -j DROP
-A CDBAN -s 62.201.253.23/32 -j DROP
-A CDBAN -s 62.60.131.157/32 -j DROP
-A CDBAN -s 63.47.149.59/32 -j DROP
-A CDBAN -s 65.20.132.172/32 -j DROP
-A CDBAN -s 65.20.141.215/32 -j DROP
-A CDBAN -s 65.20.170.59/32 -j DROP
-A CDBAN -s 65.20.205.197/32 -j DROP
-A CDBAN -s 65.76.196.136/32 -j DROP
-A CDBAN -s 73.171.251.82/32 -j DROP
-A CDBAN -s 76.132.238.43/32 -j DROP
-A CDBAN -s 77.95.56.101/32 -j DROP
-A CDBAN -s 80.233.12.109/32 -j DROP
-A CDBAN -s 81.0.54.119/32 -j DROP
-A CDBAN -s 81.214.75.248/32 -j DROP
-A CDBAN -s 8.218.160.83/32 -j DROP
-A CDBAN -s 83.136.176.12/32 -j DROP
-A CDBAN -s 83.239.171.226/32 -j DROP
-A CDBAN -s 83.239.84.130/32 -j DROP
-A CDBAN -s 84.193.235.41/32 -j DROP
-A CDBAN -s 84.196.223.100/32 -j DROP
-A CDBAN -s 85.30.248.213/32 -j DROP
-A CDBAN -s 93.118.127.19/32 -j DROP
-A CDBAN -s 94.207.29.57/32 -j DROP
-A CDBAN -s 95.153.98.7/32 -j DROP
-A DOCKER-ISOLATION-STAGE-1 -i docker0 ! -o docker0 -j DOCKER-ISOLATION-STAGE-2
-A DOCKER-ISOLATION-STAGE-1 -j RETURN
-A DOCKER-ISOLATION-STAGE-2 -o docker0 -j DROP
-A DOCKER-ISOLATION-STAGE-2 -j RETURN
-A DOCKER-USER -j RETURN
COMMIT
# Completed on Sun Nov 30 14:21:32 2025