AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User wteiken , the webmaster of teiken.org, joined AbuseIPDB in December 2021 and has reported 21,685 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇺🇸 52.173.164.19	10 Aug 2026	rocinante.teiken.net:80 52.173.164.19:60108 - - [10/Aug/2026:02:29:46 -0400] "GET /.git/HEAD HTTP/1. ... show more rocinante.teiken.net:80 52.173.164.19:60108 - - [10/Aug/2026:02:29:46 -0400] "GET /.git/HEAD HTTP/1.1" 301 589 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" rocinante.teiken.net:80 52.173.164.19:60116 - - [10/Aug/2026:02:29:48 -0400] "GET /.git/config HTTP/1.1" 301 593 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" rocinante.teiken.net:80 52.173.164.19:60112 - - [10/Aug/2026:02:29:48 -0400] "GET /.git/logs/HEAD HTTP/1.1" 301 599 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0" rocinante.teiken.net:80 52.173.164.19:60128 - - [10/Aug/2026:02:29:50 -0400] "GET /.git/refs/heads/master HTTP/1.1" 301 615 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.4; rv:125.0) Gecko/20100101 Firefox/125.0" rocinante.teiken.net:80 52.173.164.19:60800 - - [10/Aug/2026:02:29:50 -0400] "GET /.git/ ... show less	Web App Attack
🇯🇵 133.18.105.193	10 Aug 2026	www.teiken.net:443 133.18.105.193:54716 - - [09/Aug/2026:23:27:49 -0400] "GET /form/index.php HTTP/1 ... show more www.teiken.net:443 133.18.105.193:54716 - - [09/Aug/2026:23:27:49 -0400] "GET /form/index.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" www.teiken.net:443 133.18.105.193:54716 - - [09/Aug/2026:23:27:52 -0400] "GET /mail.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" www.teiken.net:443 133.18.105.193:54716 - - [09/Aug/2026:23:27:57 -0400] "GET /mailform.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" www.teiken.net:443 133.18.105.193:54716 - - [09/Aug/2026:23:28:00 -0400] "GET /postmail/postmail.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" www.teiken.net:443 133.18.105.193:54716 - - [09/Aug/2026:23:28:02 -0400] "GET /qaform.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" www.teiken ... show less	Web App Attack
🇯🇵 2406:8c00:0:3447:133:18:105:193	10 Aug 2026	www.teiken.net:443 2406:8c00:0:3447:133:18:105:193:55458 - - [09/Aug/2026:23:27:14 -0400] "GET /cont ... show more www.teiken.net:443 2406:8c00:0:3447:133:18:105:193:55458 - - [09/Aug/2026:23:27:14 -0400] "GET /contact.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" www.teiken.net:443 2406:8c00:0:3447:133:18:105:193:55458 - - [09/Aug/2026:23:27:16 -0400] "GET /contactus.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" www.teiken.net:443 2406:8c00:0:3447:133:18:105:193:55458 - - [09/Aug/2026:23:27:30 -0400] "GET /contact.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" www.teiken.net:443 2406:8c00:0:3447:133:18:105:193:55458 - - [09/Aug/2026:23:27:33 -0400] "GET /contact/index.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" www.teiken.net:443 2406:8c00:0:3447:133:18:105:193:55458 - - [09/Aug/2026:23:27:35 -0400] "GET /inquiry.php HTTP/1.1" 404 555 "-" "Mozilla/5 ... show less	Web App Attack
🇺🇸 154.29.72.89	10 Aug 2026	2026-08-09T23:25:27.538017-04:00 nostromo.teiken.net kernel: [211365.178320] syn_limit:IN=en-wan OUT ... show more 2026-08-09T23:25:27.538017-04:00 nostromo.teiken.net kernel: [211365.178320] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=154.29.72.89 DST=173.52.106.128 LEN=52 TOS=0x02 PREC=0x00 TTL=121 ID=23173 DF PROTO=TCP SPT=52784 DPT=443 WINDOW=64240 RES=0x00 CWR ECE SYN URGP=0 2026-08-09T23:25:28.534486-04:00 nostromo.teiken.net kernel: [211366.177551] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=154.29.72.89 DST=173.52.106.128 LEN=52 TOS=0x02 PREC=0x00 TTL=121 ID=23175 DF PROTO=TCP SPT=52784 DPT=443 WINDOW=64240 RES=0x00 CWR ECE SYN URGP=0 2026-08-09T23:25:34.538005-04:00 nostromo.teiken.net kernel: [211372.177393] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=154.29.72.89 DST=173.52.106.128 LEN=52 TOS=0x00 PREC=0x00 TTL=121 ID=23177 DF PROTO=TCP SPT=52784 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-08-09T23:25:51.535192-04:00 nostromo.teiken.net kernel: [211389.178033] syn_limit:IN=en-wan OUT= MAC=00 ... show less	Port Scan
🇺🇸 34.56.151.211	10 Aug 2026	2026-08-09T23:01:08.318146-04:00 nostromo.teiken.net kernel: [209905.973719] syn_limit:IN=en-wan OUT ... show more 2026-08-09T23:01:08.318146-04:00 nostromo.teiken.net kernel: [209905.973719] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=34.56.151.211 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x60 TTL=61 ID=22987 DF PROTO=TCP SPT=56700 DPT=443 WINDOW=42600 RES=0x00 SYN URGP=0 2026-08-09T23:01:08.318559-04:00 nostromo.teiken.net kernel: [209905.973790] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=34.56.151.211 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x60 TTL=61 ID=35909 DF PROTO=TCP SPT=56716 DPT=443 WINDOW=42600 RES=0x00 SYN URGP=0 2026-08-09T23:01:08.318656-04:00 nostromo.teiken.net kernel: [209905.973843] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=34.56.151.211 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x60 TTL=61 ID=44126 DF PROTO=TCP SPT=56796 DPT=443 WINDOW=42600 RES=0x00 SYN URGP=0 2026-08-09T23:01:08.318734-04:00 nostromo.teiken.net kernel: [209905.973868] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00: ... show less	Port Scan
🇺🇸 159.203.70.134	10 Aug 2026	2026-08-09T22:44:22.478033-04:00 nostromo.teiken.net kernel: [208900.140374] syn_limit:IN=en-wan OUT ... show more 2026-08-09T22:44:22.478033-04:00 nostromo.teiken.net kernel: [208900.140374] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=159.203.70.134 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=54544 DF PROTO=TCP SPT=41044 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-08-09T22:44:23.498009-04:00 nostromo.teiken.net kernel: [208901.161582] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=159.203.70.134 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=54545 DF PROTO=TCP SPT=41044 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-08-09T22:44:24.518215-04:00 nostromo.teiken.net kernel: [208902.185239] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=159.203.70.134 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=54546 DF PROTO=TCP SPT=41044 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-08-09T22:44:25.475220-04:00 nostromo.teiken.net kernel: [208903.142234] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2: ... show less	Port Scan
🇳🇱 31.14.32.4	10 Aug 2026	2026-08-09T22:31:38.668500-04:00 rocinante.teiken.net kernel: [217941.623350] syn_limit:IN=ens5 OUT= ... show more 2026-08-09T22:31:38.668500-04:00 rocinante.teiken.net kernel: [217941.623350] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=31.14.32.4 DST=192.168.16.119 LEN=60 TOS=0x08 PREC=0x20 TTL=53 ID=14984 DF PROTO=TCP SPT=44756 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-08-09T22:31:38.668653-04:00 rocinante.teiken.net kernel: [217941.623726] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=31.14.32.4 DST=192.168.16.119 LEN=60 TOS=0x08 PREC=0x20 TTL=53 ID=8544 DF PROTO=TCP SPT=44730 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-08-09T22:31:38.668693-04:00 rocinante.teiken.net kernel: [217941.626003] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=31.14.32.4 DST=192.168.16.119 LEN=60 TOS=0x08 PREC=0x20 TTL=53 ID=9866 DF PROTO=TCP SPT=44766 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-08-09T22:31:38.668722-04:00 rocinante.teiken.net kernel: [217941.628670] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f: ... show less	Port Scan
🇺🇸 142.93.191.239	10 Aug 2026	2026-08-09T21:57:56.308037-04:00 nostromo.teiken.net kernel: [206114.001239] syn_limit:IN=en-wan OUT ... show more 2026-08-09T21:57:56.308037-04:00 nostromo.teiken.net kernel: [206114.001239] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=142.93.191.239 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=22706 DF PROTO=TCP SPT=43996 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-08-09T21:57:57.318009-04:00 nostromo.teiken.net kernel: [206115.006533] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=142.93.191.239 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=22707 DF PROTO=TCP SPT=43996 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-08-09T21:57:58.338013-04:00 nostromo.teiken.net kernel: [206116.030104] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=142.93.191.239 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=22708 DF PROTO=TCP SPT=43996 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-08-09T21:57:59.310499-04:00 nostromo.teiken.net kernel: [206117.004570] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2: ... show less	Port Scan
🇬🇧 185.130.187.14	09 Aug 2026	rocinante.teiken.net:80 185.130.187.14:49381 - - [09/Aug/2026:19:47:18 -0400] "GET /.env HTTP/1.1" 3 ... show more rocinante.teiken.net:80 185.130.187.14:49381 - - [09/Aug/2026:19:47:18 -0400] "GET /.env HTTP/1.1" 301 560 "-" "Mozilla/5.0 (compatible; EnvCracker/4.0)" rocinante.teiken.net:80 185.130.187.14:55132 - - [09/Aug/2026:19:47:19 -0400] "GET /.env.backup HTTP/1.1" 301 574 "-" "Mozilla/5.0 (compatible; EnvCracker/4.0)" rocinante.teiken.net:80 185.130.187.14:26892 - - [09/Aug/2026:19:47:19 -0400] "GET /.env.old HTTP/1.1" 301 568 "-" "Mozilla/5.0 (compatible; EnvCracker/4.0)" rocinante.teiken.net:80 185.130.187.14:11881 - - [09/Aug/2026:19:47:20 -0400] "GET /.env.example HTTP/1.1" 301 576 "-" "Mozilla/5.0 (compatible; EnvCracker/4.0)" rocinante.teiken.net:80 185.130.187.14:35573 - - [09/Aug/2026:19:47:20 -0400] "GET /.env.save HTTP/1.1" 301 570 "-" "Mozilla/5.0 (compatible; EnvCracker/4.0)" rocinante.teiken.net:80 185.130.187.14:1310 - - [09/Aug/2026:19:47:21 -0400] "GET /.env.production HTTP/1.1" 301 582 "-" "Mozilla/5.0 (compatible; EnvCracker/4.0)" rocinante.teiken.net:80 185.130.187.14:232 ... show less	Web App Attack
🇩🇪 93.159.123.181	09 Aug 2026	2026-08-09T19:13:11.858017-04:00 nostromo.teiken.net kernel: [196229.645598] syn_limit:IN=en-wan OUT ... show more 2026-08-09T19:13:11.858017-04:00 nostromo.teiken.net kernel: [196229.645598] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=93.159.123.181 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=21446 DF PROTO=TCP SPT=61183 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 2026-08-09T19:13:12.872499-04:00 nostromo.teiken.net kernel: [196230.664570] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=93.159.123.181 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=21447 DF PROTO=TCP SPT=61183 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 2026-08-09T19:13:13.424084-04:00 nostromo.teiken.net kernel: [196231.216155] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=93.159.123.181 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=36055 DF PROTO=TCP SPT=65109 DPT=22 WINDOW=64240 RES=0x00 SYN URGP=0 2026-08-09T19:13:14.364916-04:00 nostromo.teiken.net kernel: [196232.156974] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00: ... show less	Port Scan
🇺🇸 34.26.45.18	09 Aug 2026	rocinante.teiken.net:443 34.26.45.18:53490 - - [09/Aug/2026:18:17:04 -0400] "GET /.gitlab-ci.yml HTT ... show more rocinante.teiken.net:443 34.26.45.18:53490 - - [09/Aug/2026:18:17:04 -0400] "GET /.gitlab-ci.yml HTTP/1.1" 404 502 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" rocinante.teiken.net:443 34.26.45.18:53524 - - [09/Aug/2026:18:17:04 -0400] "GET /backend/.env HTTP/1.1" 404 502 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" rocinante.teiken.net:443 34.26.45.18:53584 - - [09/Aug/2026:18:17:04 -0400] "GET /config/.env HTTP/1.1" 404 502 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" rocinante.teiken.net:443 34.26.45.18:53544 - - [09/Aug/2026:18:17:04 -0400] "GET /.env.example HTTP/1.1" 404 502 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" rocinante.teiken.net:443 34.26.45.18:53496 - - [09/Aug/2026:18:17:04 -0400] "GET /.github/workflows ... show less	Web App Attack
🇨🇳 180.103.119.98	09 Aug 2026	2026-08-09T17:14:26.873382-04:00 nostromo.teiken.net sshd-session[333193]: pam_unix(sshd:auth): auth ... show more 2026-08-09T17:14:26.873382-04:00 nostromo.teiken.net sshd-session[333193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.103.119.98 user=root 2026-08-09T17:14:28.635289-04:00 nostromo.teiken.net sshd-session[333193]: Failed password for root from 180.103.119.98 port 51998 ssh2 2026-08-09T17:28:36.925764-04:00 nostromo.teiken.net sshd-session[334165]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.103.119.98 user=root 2026-08-09T17:28:39.652762-04:00 nostromo.teiken.net sshd-session[334165]: Failed password for root from 180.103.119.98 port 51478 ssh2 2026-08-09T17:35:16.481610-04:00 nostromo.teiken.net sshd-session[334693]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.103.119.98 user=root 2026-08-09T17:35:18.453627-04:00 nostromo.teiken.net sshd-session[334693]: Failed password for root from 180.103.119.98 port 60634 ssh2 ... show less	Brute-Force SSH
🇳🇱 91.148.245.81	09 Aug 2026	www.teiken.net:443 91.148.245.81:50630 - - [09/Aug/2026:13:07:59 -0400] "GET /config.php HTTP/1.1" 4 ... show more www.teiken.net:443 91.148.245.81:50630 - - [09/Aug/2026:13:07:59 -0400] "GET /config.php HTTP/1.1" 404 3462 "-" "Go-http-client/1.1" www.teiken.net:443 91.148.245.81:50638 - - [09/Aug/2026:13:07:59 -0400] "GET /storage/logs/laravel.log HTTP/1.1" 404 3463 "-" "Go-http-client/1.1" www.teiken.net:443 91.148.245.81:50654 - - [09/Aug/2026:13:07:59 -0400] "GET /dump.sql HTTP/1.1" 404 510 "-" "Go-http-client/1.1" www.teiken.net:443 91.148.245.81:50630 - - [09/Aug/2026:13:07:59 -0400] "GET /backup.sql HTTP/1.1" 404 510 "-" "Go-http-client/1.1" www.teiken.net:443 91.148.245.81:50670 - - [09/Aug/2026:13:07:59 -0400] "GET /database.sql HTTP/1.1" 404 510 "-" "Go-http-client/1.1" www.teiken.net:443 91.148.245.81:50638 - - [09/Aug/2026:13:07:59 -0400] "GET /database_backup.sql HTTP/1.1" 404 510 "-" "Go-http-client/1.1" www.teiken.net:443 91.148.245.81:50654 - - [09/Aug/2026:13:07:59 -0400] "GET /wp-config.php HTTP/1.1" 404 510 "-" "Go-http-client/1.1" www.teiken.net:443 91.148.245.81:50638 - - [09/A ... show less	Web App Attack
🇮🇹 2.193.0.222	09 Aug 2026	2026-08-09T10:29:59.814442-04:00 nostromo.teiken.net sshd-session[303335]: Failed password for root ... show more 2026-08-09T10:29:59.814442-04:00 nostromo.teiken.net sshd-session[303335]: Failed password for root from 2.193.0.222 port 34862 ssh2 2026-08-09T10:30:03.213069-04:00 nostromo.teiken.net sshd-session[303335]: Failed password for root from 2.193.0.222 port 34862 ssh2 2026-08-09T10:30:05.124858-04:00 nostromo.teiken.net sshd-session[303335]: Failed password for root from 2.193.0.222 port 34862 ssh2 2026-08-09T10:30:08.027380-04:00 nostromo.teiken.net sshd-session[303335]: Failed password for root from 2.193.0.222 port 34862 ssh2 2026-08-09T10:30:11.896781-04:00 nostromo.teiken.net sshd-session[303335]: Failed password for root from 2.193.0.222 port 34862 ssh2 2026-08-09T10:30:15.585330-04:00 nostromo.teiken.net sshd-session[303335]: Failed password for root from 2.193.0.222 port 34862 ssh2 ... show less	Brute-Force SSH
🇸🇬 35.197.155.163	09 Aug 2026	2026-08-09T10:00:18.318542-04:00 rocinante.teiken.net kernel: [172862.095286] syn_limit:IN=ens5 OUT= ... show more 2026-08-09T10:00:18.318542-04:00 rocinante.teiken.net kernel: [172862.095286] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=35.197.155.163 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=10827 DF PROTO=TCP SPT=39420 DPT=443 WINDOW=42600 RES=0x00 SYN URGP=0 2026-08-09T10:00:18.318738-04:00 rocinante.teiken.net kernel: [172862.096509] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=35.197.155.163 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=62186 DF PROTO=TCP SPT=39476 DPT=443 WINDOW=42600 RES=0x00 SYN URGP=0 2026-08-09T10:00:18.318774-04:00 rocinante.teiken.net kernel: [172862.097957] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=35.197.155.163 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=1526 DF PROTO=TCP SPT=39458 DPT=443 WINDOW=42600 RES=0x00 SYN URGP=0 2026-08-09T10:00:18.318808-04:00 rocinante.teiken.net kernel: [172862.100722] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a ... show less	Port Scan
🇩🇪 206.81.24.74	09 Aug 2026	2026-08-09T09:19:37.131657-04:00 nostromo.teiken.net kernel: [160615.277045] syn_limit:IN=en-wan OUT ... show more 2026-08-09T09:19:37.131657-04:00 nostromo.teiken.net kernel: [160615.277045] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=206.81.24.74 DST=173.52.106.128 LEN=60 TOS=0x08 PREC=0x20 TTL=54 ID=15112 DF PROTO=TCP SPT=33610 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-08-09T09:19:38.155081-04:00 nostromo.teiken.net kernel: [160616.300452] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=206.81.24.74 DST=173.52.106.128 LEN=60 TOS=0x08 PREC=0x20 TTL=54 ID=15113 DF PROTO=TCP SPT=33610 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-08-09T09:19:41.136374-04:00 nostromo.teiken.net kernel: [160619.281729] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=206.81.24.74 DST=173.52.106.128 LEN=60 TOS=0x08 PREC=0x20 TTL=54 ID=4943 DF PROTO=TCP SPT=33614 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-08-09T09:19:42.158006-04:00 nostromo.teiken.net kernel: [160620.301979] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a ... show less	Port Scan
🇬🇧 209.97.180.8	09 Aug 2026	2026-08-09T09:19:35.770665-04:00 nostromo.teiken.net kernel: [160613.916058] syn_limit:IN=en-wan OUT ... show more 2026-08-09T09:19:35.770665-04:00 nostromo.teiken.net kernel: [160613.916058] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=209.97.180.8 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=7543 DF PROTO=TCP SPT=44154 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 2026-08-09T09:19:36.776724-04:00 nostromo.teiken.net kernel: [160614.922108] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=209.97.180.8 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=7544 DF PROTO=TCP SPT=44154 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 2026-08-09T09:19:39.830565-04:00 nostromo.teiken.net kernel: [160617.975918] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=209.97.180.8 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=18500 DF PROTO=TCP SPT=44156 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 2026-08-09T09:19:40.840447-04:00 nostromo.teiken.net kernel: [160618.985792] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e ... show less	Port Scan
🇺🇸 34.173.72.86	09 Aug 2026	www.teiken.org:443 34.173.72.86:59470 - - [09/Aug/2026:08:48:35 -0400] "GET /.env.bak HTTP/1.1" 404 ... show more www.teiken.org:443 34.173.72.86:59470 - - [09/Aug/2026:08:48:35 -0400] "GET /.env.bak HTTP/1.1" 404 567 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot" www.teiken.org:443 34.173.72.86:59494 - - [09/Aug/2026:08:48:35 -0400] "GET /.github/workflows/deploy.yml HTTP/1.1" 404 4507 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot" www.teiken.org:443 34.173.72.86:59498 - - [09/Aug/2026:08:48:35 -0400] "GET /.env HTTP/1.1" 404 4508 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot" www.teiken.org:443 34.173.72.86:59478 - - [09/Aug/2026:08:48:35 -0400] "GET /.gitlab-ci.yml HTTP/1.1" 404 4507 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot" www.teiken.org:443 34.173.72.86:59504 - - [09/Aug/2026:08:48:35 -0400] "GET /.gitco ... show less	Web App Attack
🇧🇪 34.34.185.169	09 Aug 2026	2026-08-09T06:14:57.878033-04:00 nostromo.teiken.net kernel: [149536.130680] syn_limit:IN=en-wan OUT ... show more 2026-08-09T06:14:57.878033-04:00 nostromo.teiken.net kernel: [149536.130680] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=34.34.185.169 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x60 TTL=61 ID=56777 DF PROTO=TCP SPT=29128 DPT=443 WINDOW=42600 RES=0x00 SYN URGP=0 2026-08-09T06:14:57.878472-04:00 nostromo.teiken.net kernel: [149536.130725] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=34.34.185.169 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=60 ID=25049 DF PROTO=TCP SPT=29302 DPT=443 WINDOW=42600 RES=0x00 SYN URGP=0 2026-08-09T06:14:57.878584-04:00 nostromo.teiken.net kernel: [149536.130788] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=34.34.185.169 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x60 TTL=61 ID=7655 DF PROTO=TCP SPT=29320 DPT=443 WINDOW=42600 RES=0x00 SYN URGP=0 2026-08-09T06:14:57.878667-04:00 nostromo.teiken.net kernel: [149536.130813] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:8 ... show less	Port Scan
🇺🇸 34.74.27.247	09 Aug 2026	2026-08-09T04:47:17.045022-04:00 rocinante.teiken.net kernel: [154081.175534] syn_limit:IN=ens5 OUT= ... show more 2026-08-09T04:47:17.045022-04:00 rocinante.teiken.net kernel: [154081.175534] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.74.27.247 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x60 TTL=58 ID=50437 DF PROTO=TCP SPT=9304 DPT=443 WINDOW=42600 RES=0x00 SYN URGP=0 2026-08-09T04:47:17.045196-04:00 rocinante.teiken.net kernel: [154081.175557] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.74.27.247 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=63709 DF PROTO=TCP SPT=9322 DPT=443 WINDOW=42600 RES=0x00 SYN URGP=0 2026-08-09T04:47:17.045234-04:00 rocinante.teiken.net kernel: [154081.178211] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.74.27.247 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=33475 DF PROTO=TCP SPT=9306 DPT=443 WINDOW=42600 RES=0x00 SYN URGP=0 2026-08-09T04:47:17.045263-04:00 rocinante.teiken.net kernel: [154081.180886] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:0 ... show less	Port Scan
🇺🇸 164.92.76.234	09 Aug 2026	2026-08-09T03:13:35.650486-04:00 nostromo.teiken.net kernel: [138654.010503] syn_limit:IN=en-wan OUT ... show more 2026-08-09T03:13:35.650486-04:00 nostromo.teiken.net kernel: [138654.010503] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=164.92.76.234 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=15406 DF PROTO=TCP SPT=58720 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-08-09T03:13:37.692282-04:00 nostromo.teiken.net kernel: [138656.052280] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=164.92.76.234 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=15408 DF PROTO=TCP SPT=58720 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-08-09T03:13:38.656636-04:00 nostromo.teiken.net kernel: [138657.016632] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=164.92.76.234 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=44643 DF PROTO=TCP SPT=58726 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-08-09T03:13:39.676512-04:00 nostromo.teiken.net kernel: [138658.036499] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00: ... show less	Port Scan
🇫🇷 185.177.72.205	09 Aug 2026	www.teiken.net:443 185.177.72.205:3254 - - [09/Aug/2026:01:36:40 -0400] "GET /api/.env.production HT ... show more www.teiken.net:443 185.177.72.205:3254 - - [09/Aug/2026:01:36:40 -0400] "GET /api/.env.production HTTP/1.1" 404 3467 "-" "curl/8.7.1" www.teiken.net:443 185.177.72.205:3254 - - [09/Aug/2026:01:36:42 -0400] "GET /images/config%2ephp HTTP/1.1" 404 505 "-" "curl/8.7.1" www.teiken.net:443 185.177.72.205:3254 - - [09/Aug/2026:01:36:45 -0400] "GET /mailgun%2ephp HTTP/1.1" 404 505 "-" "curl/8.7.1" www.teiken.net:443 185.177.72.205:3254 - - [09/Aug/2026:01:36:48 -0400] "GET /testpanel%2ephp HTTP/1.1" 404 505 "-" "curl/8.7.1" www.teiken.net:443 185.177.72.205:3254 - - [09/Aug/2026:01:36:50 -0400] "GET /backend/config%2ephp HTTP/1.1" 404 505 "-" "curl/8.7.1" www.teiken.net:443 185.177.72.205:3254 - - [09/Aug/2026:01:36:52 -0400] "GET /aws%2eproperties HTTP/1.1" 404 505 "-" "curl/8.7.1" www.teiken.net:443 185.177.72.205:44484 - - [09/Aug/2026:01:36:54 -0400] "GET /wp-admin/options-media%2ephp HTTP/1.1" 404 505 "-" "curl/8.7.1" www.teiken.net:443 185.177.72.205:44484 - - [09/Aug/2026:01:36:56 -040 ... show less	Web App Attack
🇺🇸 20.169.100.166	09 Aug 2026	rocinante.teiken.net:80 20.169.100.166:64336 - - [09/Aug/2026:00:08:55 -0400] "GET /.git/HEAD HTTP/1 ... show more rocinante.teiken.net:80 20.169.100.166:64336 - - [09/Aug/2026:00:08:55 -0400] "GET /.git/HEAD HTTP/1.1" 301 589 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.4; rv:125.0) Gecko/20100101 Firefox/125.0" rocinante.teiken.net:80 20.169.100.166:64402 - - [09/Aug/2026:00:08:55 -0400] "GET /.git/config HTTP/1.1" 301 593 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" rocinante.teiken.net:80 20.169.100.166:64407 - - [09/Aug/2026:00:08:56 -0400] "GET /.git/logs/HEAD HTTP/1.1" 301 599 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" rocinante.teiken.net:80 20.169.100.166:64388 - - [09/Aug/2026:00:08:57 -0400] "GET /.git/refs/heads/master HTTP/1.1" 301 615 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" rocinante.teiken.net:80 20.169.100.166:64401 - - [09/Aug/2026:00:08:58 -0400] "GET /.git/refs/heads/main HTTP/1.1" 301 611 "-" "Mozilla/5.0 (X11; L ... show less	Web App Attack
🇺🇸 2605:9880:0:529:225:90ff:fe66:fe9	09 Aug 2026	2026-08-08T22:22:42.808015-04:00 nostromo.teiken.net kernel: [121201.336164] syn_limit:IN=en-wan OUT ... show more 2026-08-08T22:22:42.808015-04:00 nostromo.teiken.net kernel: [121201.336164] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2605:9880:0000:0529:0225:90ff:fe66:0fe9 DST=2600:4041:5c7d:4d8c:0e66:3ac4:fabf:1eed LEN=64 TC=0 HOPLIMIT=11 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-08-08T22:22:42.838523-04:00 nostromo.teiken.net kernel: [121201.371072] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2605:9880:0000:0529:0225:90ff:fe66:0fe9 DST=2600:4041:5c7d:4d8c:0e66:3ac4:fabf:1eed LEN=64 TC=0 HOPLIMIT=12 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-08-08T22:22:42.873449-04:00 nostromo.teiken.net kernel: [121201.406014] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2605:9880:0000:0529:0225:90ff:fe66:0fe9 DST=2600:4041:5c7d:4d8c:0e66:3ac4:fabf:1eed LEN=64 TC=0 HOPLIMIT=13 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x0 ... show less	Port Scan
🇮🇹 2a02:29e2:84:6::2	09 Aug 2026	2026-08-08T22:22:28.100361-04:00 nostromo.teiken.net kernel: [121186.633068] syn_limit:IN=en-wan OUT ... show more 2026-08-08T22:22:28.100361-04:00 nostromo.teiken.net kernel: [121186.633068] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a02:29e2:0084:0006:0000:0000:0000:0002 DST=2600:4041:5c7d:4d8c:0e66:3ac4:fabf:1eed LEN=64 TC=0 HOPLIMIT=11 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-08-08T22:22:28.137988-04:00 nostromo.teiken.net kernel: [121186.667284] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a02:29e2:0084:0006:0000:0000:0000:0002 DST=2600:4041:5c7d:4d8c:0e66:3ac4:fabf:1eed LEN=64 TC=0 HOPLIMIT=12 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-08-08T22:22:28.168755-04:00 nostromo.teiken.net kernel: [121186.701490] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a02:29e2:0084:0006:0000:0000:0000:0002 DST=2600:4041:5c7d:4d8c:0e66:3ac4:fabf:1eed LEN=64 TC=0 HOPLIMIT=13 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x0 ... show less	Port Scan