LXC Container is accessible from WAN after creation

I’m sorry to inform you that I’m using Turris OS 5.1.5 (hbs), Kernelversion 4.14.206…
I’m not sure if Sentinel is always active, but I also do not have activated the Data Collection Package (only the Speed Measurment is active).

If I can help i could see whats in the log files if you guide me to the right point?