AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User wteiken , the webmaster of teiken.org, joined AbuseIPDB in December 2021 and has reported 23,655 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇺🇸 2604:a880:2:d1:0:1:7f0e:2001	16 Oct 2026	2026-10-15T21:59:09.283052-04:00 rocinante.teiken.net kernel: [1170753.882013] syn_limit:IN=ens5 OUT ... show more 2026-10-15T21:59:09.283052-04:00 rocinante.teiken.net kernel: [1170753.882013] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:86:dd SRC=2604:a880:0002:00d1:0000:0001:7f0e:2001 DST=2600:1f18:0596:2501:0000:0000:0000:1001 LEN=72 TC=0 HOPLIMIT=54 FLOWLBL=279130 PROTO=TCP SPT=38218 DPT=443 WINDOW=64800 RES=0x00 SYN URGP=0 2026-10-15T21:59:10.301046-04:00 rocinante.teiken.net kernel: [1170754.899991] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:86:dd SRC=2604:a880:0002:00d1:0000:0001:7f0e:2001 DST=2600:1f18:0596:2501:0000:0000:0000:1001 LEN=72 TC=0 HOPLIMIT=54 FLOWLBL=282058 PROTO=TCP SPT=38218 DPT=443 WINDOW=64800 RES=0x00 SYN URGP=0 2026-10-15T21:59:10.537388-04:00 rocinante.teiken.net kernel: [1170755.136307] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:86:dd SRC=2604:a880:0002:00d1:0000:0001:7f0e:2001 DST=2600:1f18:0596:2501:0000:0000:0000:1001 LEN=72 TC=0 HOPLIMIT=54 FLOWLBL=953907 PROTO=TCP SPT=38240 DPT=443 WINDOW=64800 RES=0x00 S ... show less	Port Scan
🇩🇪 34.32.79.90	15 Oct 2026	rocinante.teiken.net:443 34.32.79.90:52764 - - [15/Oct/2026:19:48:36 -0400] "GET /.git/config HTTP/1 ... show more rocinante.teiken.net:443 34.32.79.90:52764 - - [15/Oct/2026:19:48:36 -0400] "GET /.git/config HTTP/1.1" 404 557 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.32.79.90:52764 - - [15/Oct/2026:19:48:36 -0400] "GET /.env HTTP/1.1" 404 557 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.32.79.90:52764 - - [15/Oct/2026:19:48:36 -0400] "GET /.env.local HTTP/1.1" 404 557 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.32.79.90:52764 - - [15/Oct/2026:19:48:37 -0400] "GET /.env.production HTTP/1.1" 404 557 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.32.79.90:52764 - - [15/Oct/2026:19:48:37 -0400] "GET /.env.staging HTTP/1.1" 404 557 "-" "Mozill ... show less	Web App Attack
🇹🇼 35.194.214.9	15 Oct 2026	2026-10-15T19:46:42.312848-04:00 rocinante.teiken.net kernel: [1162807.031044] syn_limit:IN=ens5 OUT ... show more 2026-10-15T19:46:42.312848-04:00 rocinante.teiken.net kernel: [1162807.031044] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=35.194.214.9 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=18168 DF PROTO=TCP SPT=38004 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-10-15T19:46:42.313065-04:00 rocinante.teiken.net kernel: [1162807.033709] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=35.194.214.9 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x60 TTL=58 ID=31759 DF PROTO=TCP SPT=38000 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-10-15T19:46:42.313114-04:00 rocinante.teiken.net kernel: [1162807.035742] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=35.194.214.9 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=45295 DF PROTO=TCP SPT=38026 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-10-15T19:46:42.313158-04:00 rocinante.teiken.net kernel: [1162807.036414] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a: ... show less	Port Scan
🇳🇱 193.47.62.168	15 Oct 2026	rocinante.teiken.net:443 193.47.62.168:20122 - - [15/Oct/2026:19:22:38 -0400] "GET /backend/.env HTT ... show more rocinante.teiken.net:443 193.47.62.168:20122 - - [15/Oct/2026:19:22:38 -0400] "GET /backend/.env HTTP/1.1" 404 506 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" rocinante.teiken.net:443 193.47.62.168:20122 - - [15/Oct/2026:19:22:38 -0400] "GET /.env HTTP/1.1" 404 506 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" rocinante.teiken.net:443 193.47.62.168:20122 - - [15/Oct/2026:19:22:38 -0400] "GET /.env.production HTTP/1.1" 404 506 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" rocinante.teiken.net:443 193.47.62.168:20122 - - [15/Oct/2026:19:22:38 -0400] "GET /.gitlab-ci.yml HTTP/1.1" 404 506 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" rocinante.teiken.net:443 193.47.62.168:20122 - - [15/Oct/2026:19:22:39 ... show less	Web App Attack
🇺🇸 159.203.177.71	15 Oct 2026	2026-10-15T19:16:38.506569-04:00 nostromo.teiken.net kernel: [25495.353179] syn_limit:IN=en-wan OUT= ... show more 2026-10-15T19:16:38.506569-04:00 nostromo.teiken.net kernel: [25495.353179] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=159.203.177.71 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=20600 DF PROTO=TCP SPT=38238 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-15T19:16:39.536588-04:00 nostromo.teiken.net kernel: [25496.379258] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=159.203.177.71 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=20601 DF PROTO=TCP SPT=38238 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-15T19:16:40.547599-04:00 nostromo.teiken.net kernel: [25497.394832] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=159.203.177.71 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=20602 DF PROTO=TCP SPT=38238 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-15T19:16:41.516569-04:00 nostromo.teiken.net kernel: [25498.356416] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:8 ... show less	Port Scan
🇮🇩 103.63.101.24	15 Oct 2026	www.teiken.net:443 103.63.101.24:41904 - - [15/Oct/2026:13:11:43 -0400] "POST /index.php?%25ADd+allo ... show more www.teiken.net:443 103.63.101.24:41904 - - [15/Oct/2026:13:11:43 -0400] "POST /index.php?%25ADd+allow_url_include%3D1+%25ADd+auto_prepend_file%3Dphp://input HTTP/1.1" 404 555 "-" "libredtail-http" www.teiken.net:443 103.63.101.24:41904 - - [15/Oct/2026:13:11:45 -0400] "POST /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//input HTTP/1.1" 404 555 "-" "libredtail-http" www.teiken.net:443 103.63.101.24:41904 - - [15/Oct/2026:13:11:46 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 555 "-" "libredtail-http" www.teiken.net:443 103.63.101.24:41904 - - [15/Oct/2026:13:11:47 -0400] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 555 "-" "libredtail-http" www.teiken.net:443 103.63.101.24:41904 - - [15/Oct/2026:13:11:48 -0400] "GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 555 "-" "libredtail-http" www.teiken.net:443 103.63.101.24:41904 - - [15/Oct/2026:13:11:48 -0400] "GET /vendor/phpunit/Util/PHP/eval-stdin.php ... show less	Web App Attack
🇮🇳 103.211.217.243	15 Oct 2026	www.teiken.net:80 103.211.217.243:43928 - - [15/Oct/2026:08:31:25 -0400] "GET /mysql/admin/index.php ... show more www.teiken.net:80 103.211.217.243:43928 - - [15/Oct/2026:08:31:25 -0400] "GET /mysql/admin/index.php?lang=en HTTP/1.1" 301 669 "-" "Go Web Pentest Tool" www.teiken.net:80 103.211.217.243:43928 - - [15/Oct/2026:08:31:25 -0400] "GET /phpMyAdmin-5.1.2/index.php?lang=en HTTP/1.1" 301 678 "-" "Go Web Pentest Tool" www.teiken.net:80 103.211.217.243:43928 - - [15/Oct/2026:08:31:25 -0400] "GET /admin/index.php?lang=en HTTP/1.1" 301 656 "-" "Go Web Pentest Tool" www.teiken.net:80 103.211.217.243:43928 - - [15/Oct/2026:08:31:26 -0400] "GET /php-myadmin/index.php?lang=en HTTP/1.1" 301 668 "-" "Go Web Pentest Tool" www.teiken.net:80 103.211.217.243:43928 - - [15/Oct/2026:08:31:26 -0400] "GET /php-my-admin/index.php?lang=en HTTP/1.1" 301 670 "-" "Go Web Pentest Tool" www.teiken.net:80 103.211.217.243:43928 - - [15/Oct/2026:08:31:26 -0400] "GET /mysql/dbadmin/index.php?lang=en HTTP/1.1" 301 672 "-" "Go Web Pentest Tool" www.teiken.net:80 103.211.217.243:43928 - - [15/Oct/2026:08:31:26 -0400] "GET /d ... show less	Web App Attack
🇺🇸 2605:9880:0:529:225:90ff:fe66:fe9	15 Oct 2026	2026-10-15T08:07:28.021601-04:00 nostromo.teiken.net kernel: [293692.336001] syn_limit:IN=en-wan OUT ... show more 2026-10-15T08:07:28.021601-04:00 nostromo.teiken.net kernel: [293692.336001] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2605:9880:0000:0529:0225:90ff:fe66:0fe9 DST=2600:4041:5c67:fd8c:da58:d7ff:fe52:ae93 LEN=64 TC=0 HOPLIMIT=11 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-10-15T08:07:28.056598-04:00 nostromo.teiken.net kernel: [293692.371022] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2605:9880:0000:0529:0225:90ff:fe66:0fe9 DST=2600:4041:5c67:fd8c:da58:d7ff:fe52:ae93 LEN=64 TC=0 HOPLIMIT=12 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-10-15T08:07:28.091566-04:00 nostromo.teiken.net kernel: [293692.406004] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2605:9880:0000:0529:0225:90ff:fe66:0fe9 DST=2600:4041:5c67:fd8c:da58:d7ff:fe52:ae93 LEN=64 TC=0 HOPLIMIT=13 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x0 ... show less	Port Scan
🇩🇪 2a05:e740:1947::2	15 Oct 2026	2026-10-15T08:04:50.293872-04:00 nostromo.teiken.net kernel: [293534.608150] syn_limit:IN=en-wan OUT ... show more 2026-10-15T08:04:50.293872-04:00 nostromo.teiken.net kernel: [293534.608150] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1947:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7ff:fe52:ae93 LEN=64 TC=0 HOPLIMIT=11 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-10-15T08:04:50.343585-04:00 nostromo.teiken.net kernel: [293534.652004] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1947:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7ff:fe52:ae93 LEN=64 TC=0 HOPLIMIT=12 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-10-15T08:04:50.383531-04:00 nostromo.teiken.net kernel: [293534.696175] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1947:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7ff:fe52:ae93 LEN=64 TC=0 HOPLIMIT=13 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x0 ... show less	Port Scan
🇩🇪 2a05:e740:1145::2	15 Oct 2026	2026-10-15T08:04:50.243686-04:00 nostromo.teiken.net kernel: [293534.557383] syn_limit:IN=en-wan OUT ... show more 2026-10-15T08:04:50.243686-04:00 nostromo.teiken.net kernel: [293534.557383] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1145:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7ff:fe52:ae93 LEN=64 TC=0 HOPLIMIT=11 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-10-15T08:04:50.293498-04:00 nostromo.teiken.net kernel: [293534.601455] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1145:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7ff:fe52:ae93 LEN=64 TC=0 HOPLIMIT=12 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-10-15T08:04:50.333474-04:00 nostromo.teiken.net kernel: [293534.645462] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1145:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7ff:fe52:ae93 LEN=64 TC=0 HOPLIMIT=13 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x0 ... show less	Port Scan
🇩🇪 2a05:e740:9161::2	15 Oct 2026	2026-10-15T08:04:50.213500-04:00 nostromo.teiken.net kernel: [293534.520803] syn_limit:IN=en-wan OUT ... show more 2026-10-15T08:04:50.213500-04:00 nostromo.teiken.net kernel: [293534.520803] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:9161:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7ff:fe52:ae93 LEN=64 TC=0 HOPLIMIT=11 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-10-15T08:04:50.253744-04:00 nostromo.teiken.net kernel: [293534.564537] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:9161:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7ff:fe52:ae93 LEN=64 TC=0 HOPLIMIT=12 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-10-15T08:04:50.294042-04:00 nostromo.teiken.net kernel: [293534.608469] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:9161:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7ff:fe52:ae93 LEN=64 TC=0 HOPLIMIT=13 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x0 ... show less	Port Scan
🇩🇪 2a05:e740:1144::2	15 Oct 2026	2026-10-15T08:04:49.313468-04:00 nostromo.teiken.net kernel: [293533.619710] syn_limit:IN=en-wan OUT ... show more 2026-10-15T08:04:49.313468-04:00 nostromo.teiken.net kernel: [293533.619710] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1144:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7ff:fe52:ae93 LEN=64 TC=0 HOPLIMIT=11 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-10-15T08:04:49.347877-04:00 nostromo.teiken.net kernel: [293533.663851] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1144:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7ff:fe52:ae93 LEN=64 TC=0 HOPLIMIT=12 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-10-15T08:04:49.391952-04:00 nostromo.teiken.net kernel: [293533.707926] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1144:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7ff:fe52:ae93 LEN=64 TC=0 HOPLIMIT=13 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x0 ... show less	Port Scan
🇩🇪 2a05:e740:9160::2	15 Oct 2026	2026-10-15T08:04:49.523505-04:00 nostromo.teiken.net kernel: [293533.835798] syn_limit:IN=en-wan OUT ... show more 2026-10-15T08:04:49.523505-04:00 nostromo.teiken.net kernel: [293533.835798] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:9160:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7ff:fe52:ae93 LEN=64 TC=0 HOPLIMIT=11 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-10-15T08:04:49.573518-04:00 nostromo.teiken.net kernel: [293533.879556] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:9160:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7ff:fe52:ae93 LEN=64 TC=0 HOPLIMIT=12 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-10-15T08:04:49.613498-04:00 nostromo.teiken.net kernel: [293533.923441] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:9160:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7ff:fe52:ae93 LEN=64 TC=0 HOPLIMIT=13 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x0 ... show less	Port Scan
🇩🇪 2a05:e740:1146::2	15 Oct 2026	2026-10-15T08:04:48.747471-04:00 nostromo.teiken.net kernel: [293533.063423] syn_limit:IN=en-wan OUT ... show more 2026-10-15T08:04:48.747471-04:00 nostromo.teiken.net kernel: [293533.063423] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1146:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7ff:fe52:ae93 LEN=64 TC=0 HOPLIMIT=11 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-10-15T08:04:48.791394-04:00 nostromo.teiken.net kernel: [293533.107370] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1146:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7ff:fe52:ae93 LEN=64 TC=0 HOPLIMIT=12 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-10-15T08:04:48.835304-04:00 nostromo.teiken.net kernel: [293533.151276] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1146:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7ff:fe52:ae93 LEN=64 TC=0 HOPLIMIT=13 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x0 ... show less	Port Scan
🇨🇳 117.151.24.25	15 Oct 2026	2026-10-15T03:33:37.503226-04:00 nostromo.teiken.net sshd-session[428391]: Failed password for root ... show more 2026-10-15T03:33:37.503226-04:00 nostromo.teiken.net sshd-session[428391]: Failed password for root from 117.151.24.25 port 12939 ssh2 2026-10-15T03:33:42.088068-04:00 nostromo.teiken.net sshd-session[428391]: Failed password for root from 117.151.24.25 port 12939 ssh2 2026-10-15T03:33:45.804133-04:00 nostromo.teiken.net sshd-session[428391]: Failed password for root from 117.151.24.25 port 12939 ssh2 2026-10-15T03:33:49.836312-04:00 nostromo.teiken.net sshd-session[428391]: Failed password for root from 117.151.24.25 port 12939 ssh2 2026-10-15T03:33:53.836988-04:00 nostromo.teiken.net sshd-session[428391]: Failed password for root from 117.151.24.25 port 12939 ssh2 2026-10-15T03:33:55.779599-04:00 nostromo.teiken.net sshd-session[428391]: Disconnecting authenticating user root 117.151.24.25 port 12939: Change of username or service not allowed: (root,ssh-connection) -> (test,ssh-connection) [preauth] ... show less	Brute-Force SSH
🇺🇸 104.249.156.222	15 Oct 2026	2026-10-15T01:31:29.550318-04:00 narcissus.teiken.net sshd-session[449473]: Invalid user radio from ... show more 2026-10-15T01:31:29.550318-04:00 narcissus.teiken.net sshd-session[449473]: Invalid user radio from 104.249.156.222 port 51034 2026-10-15T01:31:29.574984-04:00 narcissus.teiken.net sshd-session[449473]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.249.156.222 2026-10-15T01:31:31.601206-04:00 narcissus.teiken.net sshd-session[449473]: Failed password for invalid user radio from 104.249.156.222 port 51034 ssh2 2026-10-15T01:33:08.770639-04:00 narcissus.teiken.net sshd-session[449629]: Invalid user naresh from 104.249.156.222 port 17600 2026-10-15T01:33:08.794837-04:00 narcissus.teiken.net sshd-session[449629]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.249.156.222 2026-10-15T01:33:10.646997-04:00 narcissus.teiken.net sshd-session[449629]: Failed password for invalid user naresh from 104.249.156.222 port 17600 ssh2 ... show less	Brute-Force SSH
🇩🇪 34.185.133.255	15 Oct 2026	www.teiken.net:443 34.185.133.255:48360 - - [15/Oct/2026:01:25:49 -0400] "GET /.git/config HTTP/1.1" ... show more www.teiken.net:443 34.185.133.255:48360 - - [15/Oct/2026:01:25:49 -0400] "GET /.git/config HTTP/1.1" 404 562 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.185.133.255:48360 - - [15/Oct/2026:01:25:49 -0400] "GET /.env HTTP/1.1" 404 562 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.185.133.255:48360 - - [15/Oct/2026:01:25:49 -0400] "GET /.env.local HTTP/1.1" 404 562 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.185.133.255:48360 - - [15/Oct/2026:01:25:49 -0400] "GET /.env.production HTTP/1.1" 404 562 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.185.133.255:48360 - - [15/Oct/2026:01:25:49 -0400] "GET /.env.staging HTTP/1.1" 404 562 "-" "Mozilla/5.0 (X11; Lin ... show less	Web App Attack
🇨🇦 15.235.86.191	15 Oct 2026	2026-10-15T00:40:25.844655-04:00 rocinante.teiken.net kernel: [1094031.687795] syn_limit:IN=ens5 OUT ... show more 2026-10-15T00:40:25.844655-04:00 rocinante.teiken.net kernel: [1094031.687795] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=15.235.86.191 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=21789 DF PROTO=TCP SPT=35600 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-15T00:40:25.844844-04:00 rocinante.teiken.net kernel: [1094031.687819] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=15.235.86.191 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=26936 DF PROTO=TCP SPT=35736 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-15T00:40:25.845568-04:00 rocinante.teiken.net kernel: [1094031.690517] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=15.235.86.191 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=6022 DF PROTO=TCP SPT=35604 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-15T00:40:25.846317-04:00 rocinante.teiken.net kernel: [1094031.693219] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0 ... show less	Port Scan
🇺🇸 2604:a880:2:d1:0:1:7f0d:c001	15 Oct 2026	2026-10-15T00:11:05.098980-04:00 nostromo.teiken.net kernel: [265109.691286] syn_limit:IN=en-wan OUT ... show more 2026-10-15T00:11:05.098980-04:00 nostromo.teiken.net kernel: [265109.691286] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2604:a880:0002:00d1:0000:0001:7f0d:c001 DST=2600:4041:5c67:fd8c:0000:0000:0000:00fe LEN=72 TC=40 HOPLIMIT=56 FLOWLBL=18959 PROTO=TCP SPT=35818 DPT=443 WINDOW=64800 RES=0x00 SYN URGP=0 2026-10-15T00:11:05.721733-04:00 nostromo.teiken.net kernel: [265110.314031] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2604:a880:0002:00d1:0000:0001:7f0d:c001 DST=2600:4041:5c67:fd8c:0000:0000:0000:00fe LEN=72 TC=40 HOPLIMIT=56 FLOWLBL=448017 PROTO=TCP SPT=35834 DPT=443 WINDOW=64800 RES=0x00 SYN URGP=0 2026-10-15T00:11:06.150666-04:00 nostromo.teiken.net kernel: [265110.742964] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2604:a880:0002:00d1:0000:0001:7f0d:c001 DST=2600:4041:5c67:fd8c:0000:0000:0000:00fe LEN=72 TC=40 HOPLIMIT=56 FLOWLBL=491216 PROTO=TCP SPT=35818 DPT=443 WINDOW=64800 RES=0x00 ... show less	Port Scan
🇦🇺 168.144.174.252	15 Oct 2026	2026-10-14T23:39:09.323512-04:00 nostromo.teiken.net kernel: [263193.934883] syn_limit:IN=en-wan OUT ... show more 2026-10-14T23:39:09.323512-04:00 nostromo.teiken.net kernel: [263193.934883] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=168.144.174.252 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=1693 DF PROTO=TCP SPT=31082 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-14T23:39:10.331415-04:00 nostromo.teiken.net kernel: [263194.942996] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=168.144.174.252 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=1694 DF PROTO=TCP SPT=31082 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-14T23:39:11.359471-04:00 nostromo.teiken.net kernel: [263195.971044] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=168.144.174.252 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=1695 DF PROTO=TCP SPT=31082 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-14T23:39:12.379401-04:00 nostromo.teiken.net kernel: [263196.990963] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2: ... show less	Port Scan
🇪🇸 2400:cb00:927:1000:18cd:a520:47eb:5611	15 Oct 2026	2026-10-14T23:33:45.240381-04:00 rocinante.teiken.net kernel: [1090031.163482] syn_limit:IN=ens5 OUT ... show more 2026-10-14T23:33:45.240381-04:00 rocinante.teiken.net kernel: [1090031.163482] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:86:dd SRC=2400:cb00:0927:1000:18cd:a520:47eb:5611 DST=2600:1f18:0596:2501:0000:0000:0000:1001 LEN=80 TC=0 HOPLIMIT=56 FLOWLBL=796203 PROTO=TCP SPT=13170 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-14T23:33:45.240523-04:00 rocinante.teiken.net kernel: [1090031.163741] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:86:dd SRC=2400:cb00:0927:1000:18cd:a520:47eb:5611 DST=2600:1f18:0596:2501:0000:0000:0000:1001 LEN=80 TC=0 HOPLIMIT=56 FLOWLBL=702766 PROTO=TCP SPT=13174 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-14T23:33:46.270131-04:00 rocinante.teiken.net kernel: [1090032.187103] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:86:dd SRC=2400:cb00:0927:1000:18cd:a520:47eb:5611 DST=2600:1f18:0596:2501:0000:0000:0000:1001 LEN=80 TC=0 HOPLIMIT=56 FLOWLBL=358653 PROTO=TCP SPT=13063 DPT=80 WINDOW=65535 RES=0x00 SYN ... show less	Port Scan
🇪🇸 2400:cb00:927:1000:75b6:5074:e4f8:ea11	15 Oct 2026	2026-10-14T23:33:43.193149-04:00 rocinante.teiken.net kernel: [1090029.116631] syn_limit:IN=ens5 OUT ... show more 2026-10-14T23:33:43.193149-04:00 rocinante.teiken.net kernel: [1090029.116631] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:86:dd SRC=2400:cb00:0927:1000:75b6:5074:e4f8:ea11 DST=2600:1f18:0596:2501:0000:0000:0000:1001 LEN=80 TC=0 HOPLIMIT=56 FLOWLBL=793489 PROTO=TCP SPT=13729 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-14T23:33:43.707109-04:00 rocinante.teiken.net kernel: [1090029.627310] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:86:dd SRC=2400:cb00:0927:1000:75b6:5074:e4f8:ea11 DST=2600:1f18:0596:2501:0000:0000:0000:1001 LEN=80 TC=0 HOPLIMIT=56 FLOWLBL=696521 PROTO=TCP SPT=13749 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-14T23:33:43.707238-04:00 rocinante.teiken.net kernel: [1090029.627779] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:86:dd SRC=2400:cb00:0927:1000:75b6:5074:e4f8:ea11 DST=2600:1f18:0596:2501:0000:0000:0000:1001 LEN=80 TC=0 HOPLIMIT=56 FLOWLBL=878866 PROTO=TCP SPT=13741 DPT=80 WINDOW=65535 RES=0x00 SYN ... show less	Port Scan
🇪🇸 104.22.23.76	15 Oct 2026	2026-10-14T23:33:24.931500-04:00 rocinante.teiken.net kernel: [1090010.855843] syn_limit:IN=ens5 OUT ... show more 2026-10-14T23:33:24.931500-04:00 rocinante.teiken.net kernel: [1090010.855843] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=104.22.23.76 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=37713 DF PROTO=TCP SPT=11619 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-14T23:33:25.989731-04:00 rocinante.teiken.net kernel: [1090011.914061] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=104.22.23.76 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=37714 DF PROTO=TCP SPT=11619 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-14T23:33:26.122687-04:00 rocinante.teiken.net kernel: [1090012.044298] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=104.22.23.76 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=29951 DF PROTO=TCP SPT=11626 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-14T23:33:27.012757-04:00 rocinante.teiken.net kernel: [1090012.937059] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3: ... show less	Port Scan
🇪🇸 162.158.122.134	15 Oct 2026	2026-10-14T23:33:25.632142-04:00 rocinante.teiken.net kernel: [1090011.556452] syn_limit:IN=ens5 OUT ... show more 2026-10-14T23:33:25.632142-04:00 rocinante.teiken.net kernel: [1090011.556452] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=162.158.122.134 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=13786 DF PROTO=TCP SPT=11652 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-14T23:33:25.632277-04:00 rocinante.teiken.net kernel: [1090011.559185] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=162.158.122.134 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=61427 DF PROTO=TCP SPT=11658 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-14T23:33:26.122820-04:00 rocinante.teiken.net kernel: [1090012.046968] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=162.158.122.134 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=56941 DF PROTO=TCP SPT=11659 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-14T23:33:26.648185-04:00 rocinante.teiken.net kernel: [1090012.572467] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5: ... show less	Port Scan
🇪🇸 162.158.122.133	15 Oct 2026	www.teiken.org:443 162.158.122.133:11296 - - [14/Oct/2026:23:33:16 -0400] "GET /.env.production HTTP ... show more www.teiken.org:443 162.158.122.133:11296 - - [14/Oct/2026:23:33:16 -0400] "GET /.env.production HTTP/1.1" 404 4656 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" www.teiken.org:443 162.158.122.133:11300 - - [14/Oct/2026:23:33:16 -0400] "GET /.git/config HTTP/1.1" 404 4655 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Mobile/15E148 Safari/604.1" www.teiken.org:443 162.158.122.133:11310 - - [14/Oct/2026:23:33:17 -0400] "GET /.git-credentials HTTP/1.1" 404 4656 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Mobile/15E148 Safari/604.1" www.teiken.org:443 162.158.122.133:11335 - - [14/Oct/2026:23:33:18 -0400] "GET /config.php HTTP/1.1" 404 4657 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" www.teiken.o ... show less	Web App Attack