|
🇺🇸
162.243.171.139
|
|
2026-10-26T02:27:58.186636-04:00 nostromo.teiken.net kernel: [403226.697217] syn_limit:IN=en-wan OUT ...
show more
2026-10-26T02:27:58.186636-04:00 nostromo.teiken.net kernel: [403226.697217] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=162.243.171.139 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=57736 DF PROTO=TCP SPT=44890 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0
2026-10-26T02:27:59.194596-04:00 nostromo.teiken.net kernel: [403227.714545] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=162.243.171.139 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=57737 DF PROTO=TCP SPT=44890 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0
2026-10-26T02:28:01.216601-04:00 nostromo.teiken.net kernel: [403229.730001] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=162.243.171.139 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=57738 DF PROTO=TCP SPT=44890 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0
2026-10-26T02:28:01.368075-04:00 nostromo.teiken.net kernel: [403229.888012] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:
...
show less
|
Port Scan
|
|
🇺🇸
45.63.21.236
|
|
2026-10-26T02:06:14.236489-04:00 rocinante.teiken.net kernel: [737783.925934] syn_limit:IN=ens5 OUT= ...
show more
2026-10-26T02:06:14.236489-04:00 rocinante.teiken.net kernel: [737783.925934] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=45.63.21.236 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=10476 DF PROTO=TCP SPT=50114 DPT=443 WINDOW=42340 RES=0x00 SYN URGP=0
2026-10-26T02:06:14.245350-04:00 rocinante.teiken.net kernel: [737783.927986] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=45.63.21.236 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=62148 DF PROTO=TCP SPT=35880 DPT=80 WINDOW=42340 RES=0x00 SYN URGP=0
2026-10-26T02:06:14.245406-04:00 rocinante.teiken.net kernel: [737783.931287] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=45.63.21.236 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=28539 DF PROTO=TCP SPT=50130 DPT=443 WINDOW=42340 RES=0x00 SYN URGP=0
2026-10-26T02:06:14.245493-04:00 rocinante.teiken.net kernel: [737783.933139] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae
...
show less
|
Port Scan
|
|
🇺🇸
157.230.211.81
|
|
2026-10-25T23:24:15.806604-04:00 nostromo.teiken.net kernel: [392204.420125] syn_limit:IN=en-wan OUT ...
show more
2026-10-25T23:24:15.806604-04:00 nostromo.teiken.net kernel: [392204.420125] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=157.230.211.81 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=61350 DF PROTO=TCP SPT=59482 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0
2026-10-25T23:24:16.832618-04:00 nostromo.teiken.net kernel: [392205.449102] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=157.230.211.81 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=61351 DF PROTO=TCP SPT=59482 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0
2026-10-25T23:24:17.856138-04:00 nostromo.teiken.net kernel: [392206.472619] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=157.230.211.81 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=61352 DF PROTO=TCP SPT=59482 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0
2026-10-25T23:24:19.816592-04:00 nostromo.teiken.net kernel: [392208.424336] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:
...
show less
|
Port Scan
|
|
🇸🇪
34.51.230.30
|
|
rocinante.teiken.net:443 34.51.230.30:38550 - - [25/Oct/2026:20:39:44 -0400] "GET /.git/config HTTP/ ...
show more
rocinante.teiken.net:443 34.51.230.30:38550 - - [25/Oct/2026:20:39:44 -0400] "GET /.git/config HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
rocinante.teiken.net:443 34.51.230.30:38550 - - [25/Oct/2026:20:39:44 -0400] "GET /.env HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
rocinante.teiken.net:443 34.51.230.30:38550 - - [25/Oct/2026:20:39:44 -0400] "GET /.env.local HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
rocinante.teiken.net:443 34.51.230.30:38550 - - [25/Oct/2026:20:39:44 -0400] "GET /.env.production HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
rocinante.teiken.net:443 34.51.230.30:38550 - - [25/Oct/
...
show less
|
Web App Attack
|
|
🇺🇸
138.197.10.252
|
|
2026-10-25T20:20:45.182676-04:00 rocinante.teiken.net kernel: [717055.184146] syn_limit:IN=ens5 OUT= ...
show more
2026-10-25T20:20:45.182676-04:00 rocinante.teiken.net kernel: [717055.184146] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=138.197.10.252 DST=192.168.16.119 LEN=44 TOS=0x00 PREC=0x00 TTL=244 ID=12522 PROTO=TCP SPT=54039 DPT=80 WINDOW=1025 RES=0x00 SYN URGP=0
2026-10-25T20:20:46.380485-04:00 rocinante.teiken.net kernel: [717056.380368] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=138.197.10.252 DST=192.168.16.119 LEN=44 TOS=0x00 PREC=0x00 TTL=246 ID=52231 PROTO=TCP SPT=54039 DPT=443 WINDOW=1025 RES=0x00 SYN URGP=0
2026-10-25T20:20:46.550919-04:00 rocinante.teiken.net kernel: [717056.552364] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=138.197.10.252 DST=192.168.16.119 LEN=44 TOS=0x00 PREC=0x00 TTL=246 ID=10733 PROTO=TCP SPT=54055 DPT=443 WINDOW=1025 RES=0x00 SYN URGP=0
2026-10-25T20:20:46.601095-04:00 rocinante.teiken.net kernel: [717056.602523] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05
...
show less
|
Port Scan
|
|
🇿🇦
34.35.133.142
|
|
www.teiken.net:443 34.35.133.142:41780 - - [25/Oct/2026:19:34:40 -0400] "GET /.git/config HTTP/1.1" ...
show more
www.teiken.net:443 34.35.133.142:41780 - - [25/Oct/2026:19:34:40 -0400] "GET /.git/config HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
www.teiken.net:443 34.35.133.142:41780 - - [25/Oct/2026:19:34:41 -0400] "GET /.env HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
www.teiken.net:443 34.35.133.142:41780 - - [25/Oct/2026:19:34:41 -0400] "GET /.env.local HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
www.teiken.net:443 34.35.133.142:41780 - - [25/Oct/2026:19:34:41 -0400] "GET /.env.production HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
www.teiken.net:443 34.35.133.142:41780 - - [25/Oct/2026:19:34:41 -0400] "GET
...
show less
|
Web App Attack
|
|
🇩🇿
193.194.91.148
|
|
www.teiken.net:80 193.194.91.148:35222 - - [25/Oct/2026:18:34:44 -0400] "GET /sql/sql-admin/index.ph ...
show more
www.teiken.net:80 193.194.91.148:35222 - - [25/Oct/2026:18:34:44 -0400] "GET /sql/sql-admin/index.php?lang=en HTTP/1.1" 301 679 "-" "Go Web Pentest Tool"
www.teiken.net:80 193.194.91.148:35222 - - [25/Oct/2026:18:34:44 -0400] "GET /sql/phpMyAdmin2/index.php?lang=en HTTP/1.1" 301 682 "-" "Go Web Pentest Tool"
www.teiken.net:80 193.194.91.148:35222 - - [25/Oct/2026:18:34:44 -0400] "GET /db/phpmyadmin3/index.php?lang=en HTTP/1.1" 301 680 "-" "Go Web Pentest Tool"
www.teiken.net:80 193.194.91.148:35222 - - [25/Oct/2026:18:34:44 -0400] "GET /phpmyadmin2021/index.php?lang=en HTTP/1.1" 301 680 "-" "Go Web Pentest Tool"
www.teiken.net:80 193.194.91.148:35222 - - [25/Oct/2026:18:34:44 -0400] "GET /phpmyAdmin/index.php?lang=en HTTP/1.1" 301 672 "-" "Go Web Pentest Tool"
www.teiken.net:80 193.194.91.148:35222 - - [25/Oct/2026:18:34:44 -0400] "GET /index.php?lang=en HTTP/1.1" 301 650 "-" "Go Web Pentest Tool"
www.teiken.net:80 193.194.91.148:35222 - - [25/Oct/2026:18:34:44 -0400] "GET /phpMyAdmin1
...
show less
|
Web App Attack
|
|
🇨🇦
34.47.46.105
|
|
www.teiken.net:443 34.47.46.105:48680 - - [25/Oct/2026:17:10:49 -0400] "GET /.git/config HTTP/1.1" 4 ...
show more
www.teiken.net:443 34.47.46.105:48680 - - [25/Oct/2026:17:10:49 -0400] "GET /.git/config HTTP/1.1" 404 560 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
www.teiken.net:443 34.47.46.105:48680 - - [25/Oct/2026:17:10:49 -0400] "GET /.env HTTP/1.1" 404 560 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
www.teiken.net:443 34.47.46.105:48680 - - [25/Oct/2026:17:10:49 -0400] "GET /.env.local HTTP/1.1" 404 560 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
www.teiken.net:443 34.47.46.105:48680 - - [25/Oct/2026:17:10:49 -0400] "GET /.env.production HTTP/1.1" 404 560 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
www.teiken.net:443 34.47.46.105:48680 - - [25/Oct/2026:17:10:49 -0400] "GET /.env.staging HTTP/1.1" 404 560 "-" "Mozilla/5.0 (X11; Linux x86_64)
...
show less
|
Web App Attack
|
|
🇩🇪
34.32.97.67
|
|
www.teiken.net:443 34.32.97.67:48614 - - [25/Oct/2026:16:57:22 -0400] "GET /.git/config HTTP/1.1" 40 ...
show more
www.teiken.net:443 34.32.97.67:48614 - - [25/Oct/2026:16:57:22 -0400] "GET /.git/config HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
www.teiken.net:443 34.32.97.67:48614 - - [25/Oct/2026:16:57:22 -0400] "GET /.env HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
www.teiken.net:443 34.32.97.67:48614 - - [25/Oct/2026:16:57:22 -0400] "GET /.env.local HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
www.teiken.net:443 34.32.97.67:48614 - - [25/Oct/2026:16:57:22 -0400] "GET /.env.production HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
www.teiken.net:443 34.32.97.67:48614 - - [25/Oct/2026:16:57:22 -0400] "GET /.env.sta
...
show less
|
Web App Attack
|
|
🇪🇸
34.175.50.248
|
|
www.teiken.net:443 34.175.50.248:47428 - - [25/Oct/2026:16:29:44 -0400] "GET /.git/config HTTP/1.1" ...
show more
www.teiken.net:443 34.175.50.248:47428 - - [25/Oct/2026:16:29:44 -0400] "GET /.git/config HTTP/1.1" 404 562 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
www.teiken.net:443 34.175.50.248:47428 - - [25/Oct/2026:16:29:44 -0400] "GET /.env HTTP/1.1" 404 562 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
www.teiken.net:443 34.175.50.248:47428 - - [25/Oct/2026:16:29:44 -0400] "GET /.env.local HTTP/1.1" 404 562 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
www.teiken.net:443 34.175.50.248:47428 - - [25/Oct/2026:16:29:44 -0400] "GET /.env.production HTTP/1.1" 404 562 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
www.teiken.net:443 34.175.50.248:47428 - - [25/Oct/2026:16:29:44 -0400] "GET /.env.staging HTTP/1.1" 404 562 "-" "Mozilla/5.0 (X11; Linux x8
...
show less
|
Web App Attack
|
|
🇺🇸
2605:9880:0:529:225:90ff:fe66:fe9
|
|
2026-10-25T15:36:23.952666-04:00 nostromo.teiken.net kernel: [364132.814621] syn_limit:IN=en-wan OUT ...
show more
2026-10-25T15:36:23.952666-04:00 nostromo.teiken.net kernel: [364132.814621] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2605:9880:0000:0529:0225:90ff:fe66:0fe9 DST=2600:4041:5c67:fd8c:da58:d7c2:f48f:4aa8 LEN=64 TC=0 HOPLIMIT=11 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0
2026-10-25T15:36:23.986722-04:00 nostromo.teiken.net kernel: [364132.848701] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2605:9880:0000:0529:0225:90ff:fe66:0fe9 DST=2600:4041:5c67:fd8c:da58:d7c2:f48f:4aa8 LEN=64 TC=0 HOPLIMIT=12 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0
2026-10-25T15:36:24.021793-04:00 nostromo.teiken.net kernel: [364132.883771] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2605:9880:0000:0529:0225:90ff:fe66:0fe9 DST=2600:4041:5c67:fd8c:da58:d7c2:f48f:4aa8 LEN=64 TC=0 HOPLIMIT=13 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x0
...
show less
|
Port Scan
|
|
🇺🇸
156.225.64.194
|
|
2026-10-25T15:32:55.511310-04:00 narcissus.teiken.net sshd-session[631722]: pam_unix(sshd:auth): aut ...
show more
2026-10-25T15:32:55.511310-04:00 narcissus.teiken.net sshd-session[631722]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.225.64.194
2026-10-25T15:32:57.494758-04:00 narcissus.teiken.net sshd-session[631722]: Failed password for invalid user curl from 156.225.64.194 port 40194 ssh2
2026-10-25T15:34:34.162384-04:00 narcissus.teiken.net sshd-session[631842]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.225.64.194 user=root
2026-10-25T15:34:36.227069-04:00 narcissus.teiken.net sshd-session[631842]: Failed password for root from 156.225.64.194 port 33610 ssh2
2026-10-25T15:36:10.022595-04:00 narcissus.teiken.net sshd-session[631996]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.225.64.194 user=root
2026-10-25T15:36:12.531814-04:00 narcissus.teiken.net sshd-session[631996]: Failed password for root from 156.225.64.194 port 54316 ssh2
...
show less
|
Brute-Force
SSH
|
|
🇩🇪
2a05:e740:1145::2
|
|
2026-10-25T15:35:51.936619-04:00 nostromo.teiken.net kernel: [364100.794714] syn_limit:IN=en-wan OUT ...
show more
2026-10-25T15:35:51.936619-04:00 nostromo.teiken.net kernel: [364100.794714] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1145:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7c2:f48f:4aa8 LEN=64 TC=0 HOPLIMIT=11 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0
2026-10-25T15:35:51.976436-04:00 nostromo.teiken.net kernel: [364100.838622] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1145:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7c2:f48f:4aa8 LEN=64 TC=0 HOPLIMIT=12 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0
2026-10-25T15:35:52.026604-04:00 nostromo.teiken.net kernel: [364100.882403] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1145:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7c2:f48f:4aa8 LEN=64 TC=0 HOPLIMIT=13 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x0
...
show less
|
Port Scan
|
|
🇩🇪
2a05:e740:9161::2
|
|
2026-10-25T15:35:51.987822-04:00 nostromo.teiken.net kernel: [364100.850017] syn_limit:IN=en-wan OUT ...
show more
2026-10-25T15:35:51.987822-04:00 nostromo.teiken.net kernel: [364100.850017] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:9161:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7c2:f48f:4aa8 LEN=64 TC=0 HOPLIMIT=11 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0
2026-10-25T15:35:52.036626-04:00 nostromo.teiken.net kernel: [364100.893835] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:9161:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7c2:f48f:4aa8 LEN=64 TC=0 HOPLIMIT=12 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0
2026-10-25T15:35:52.076631-04:00 nostromo.teiken.net kernel: [364100.937496] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:9161:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7c2:f48f:4aa8 LEN=64 TC=0 HOPLIMIT=13 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x0
...
show less
|
Port Scan
|
|
🇩🇪
2a05:e740:1146::2
|
|
2026-10-25T15:35:51.486580-04:00 nostromo.teiken.net kernel: [364100.346147] syn_limit:IN=en-wan OUT ...
show more
2026-10-25T15:35:51.486580-04:00 nostromo.teiken.net kernel: [364100.346147] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1146:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7c2:f48f:4aa8 LEN=64 TC=0 HOPLIMIT=11 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0
2026-10-25T15:35:51.536620-04:00 nostromo.teiken.net kernel: [364100.390302] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1146:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7c2:f48f:4aa8 LEN=64 TC=0 HOPLIMIT=12 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0
2026-10-25T15:35:51.576615-04:00 nostromo.teiken.net kernel: [364100.434374] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1146:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7c2:f48f:4aa8 LEN=64 TC=0 HOPLIMIT=13 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x0
...
show less
|
Port Scan
|
|
🇩🇪
2a05:e740:9160::2
|
|
2026-10-25T15:35:51.746654-04:00 nostromo.teiken.net kernel: [364100.602764] syn_limit:IN=en-wan OUT ...
show more
2026-10-25T15:35:51.746654-04:00 nostromo.teiken.net kernel: [364100.602764] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:9160:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7c2:f48f:4aa8 LEN=64 TC=0 HOPLIMIT=11 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0
2026-10-25T15:35:51.786614-04:00 nostromo.teiken.net kernel: [364100.646676] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:9160:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7c2:f48f:4aa8 LEN=64 TC=0 HOPLIMIT=12 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0
2026-10-25T15:35:51.828449-04:00 nostromo.teiken.net kernel: [364100.690671] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:9160:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7c2:f48f:4aa8 LEN=64 TC=0 HOPLIMIT=13 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x0
...
show less
|
Port Scan
|
|
🇩🇪
2a05:e740:1144::2
|
|
2026-10-25T15:35:51.166635-04:00 nostromo.teiken.net kernel: [364100.023939] syn_limit:IN=en-wan OUT ...
show more
2026-10-25T15:35:51.166635-04:00 nostromo.teiken.net kernel: [364100.023939] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1144:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7c2:f48f:4aa8 LEN=64 TC=0 HOPLIMIT=11 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0
2026-10-25T15:35:51.206616-04:00 nostromo.teiken.net kernel: [364100.067729] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1144:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7c2:f48f:4aa8 LEN=64 TC=0 HOPLIMIT=12 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0
2026-10-25T15:35:51.256619-04:00 nostromo.teiken.net kernel: [364100.111613] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1144:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7c2:f48f:4aa8 LEN=64 TC=0 HOPLIMIT=13 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x0
...
show less
|
Port Scan
|
|
🇩🇪
2a05:e740:1947::2
|
|
2026-10-25T15:35:50.389403-04:00 nostromo.teiken.net kernel: [364099.251641] syn_limit:IN=en-wan OUT ...
show more
2026-10-25T15:35:50.389403-04:00 nostromo.teiken.net kernel: [364099.251641] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1947:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7c2:f48f:4aa8 LEN=64 TC=0 HOPLIMIT=11 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0
2026-10-25T15:35:50.433380-04:00 nostromo.teiken.net kernel: [364099.295615] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1947:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7c2:f48f:4aa8 LEN=64 TC=0 HOPLIMIT=12 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0
2026-10-25T15:35:50.477342-04:00 nostromo.teiken.net kernel: [364099.339601] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1947:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7c2:f48f:4aa8 LEN=64 TC=0 HOPLIMIT=13 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x0
...
show less
|
Port Scan
|
|
🇿🇦
34.35.124.215
|
|
www.teiken.net:443 34.35.124.215:44644 - - [25/Oct/2026:09:57:50 -0400] "GET /.git/config HTTP/1.1" ...
show more
www.teiken.net:443 34.35.124.215:44644 - - [25/Oct/2026:09:57:50 -0400] "GET /.git/config HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
www.teiken.net:443 34.35.124.215:44644 - - [25/Oct/2026:09:57:50 -0400] "GET /.env HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
www.teiken.net:443 34.35.124.215:44644 - - [25/Oct/2026:09:57:50 -0400] "GET /.env.local HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
www.teiken.net:443 34.35.124.215:44644 - - [25/Oct/2026:09:57:51 -0400] "GET /.env.production HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
www.teiken.net:443 34.35.124.215:44644 - - [25/Oct/2026:09:57:51 -0400] "GET
...
show less
|
Web App Attack
|
|
🇿🇦
34.35.106.116
|
|
www.teiken.net:443 34.35.106.116:57646 - - [25/Oct/2026:08:14:45 -0400] "GET /.git/config HTTP/1.1" ...
show more
www.teiken.net:443 34.35.106.116:57646 - - [25/Oct/2026:08:14:45 -0400] "GET /.git/config HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
www.teiken.net:443 34.35.106.116:57646 - - [25/Oct/2026:08:14:45 -0400] "GET /.env HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
www.teiken.net:443 34.35.106.116:57646 - - [25/Oct/2026:08:14:45 -0400] "GET /.env.local HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
www.teiken.net:443 34.35.106.116:57646 - - [25/Oct/2026:08:14:46 -0400] "GET /.env.production HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
www.teiken.net:443 34.35.106.116:57646 - - [25/Oct/2026:08:14:46 -0400] "GET
...
show less
|
Web App Attack
|
|
🇺🇸
167.71.20.69
|
|
2026-10-25T08:01:00.613798-04:00 nostromo.teiken.net kernel: [336809.711651] syn_limit:IN=en-wan OUT ...
show more
2026-10-25T08:01:00.613798-04:00 nostromo.teiken.net kernel: [336809.711651] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=167.71.20.69 DST=173.52.106.128 LEN=52 TOS=0x00 PREC=0x00 TTL=56 ID=26046 PROTO=TCP SPT=57486 DPT=7788 WINDOW=65535 RES=0x00 SYN URGP=0
2026-10-25T08:01:00.742299-04:00 nostromo.teiken.net kernel: [336809.840178] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=167.71.20.69 DST=173.52.106.128 LEN=52 TOS=0x00 PREC=0x00 TTL=56 ID=37201 PROTO=TCP SPT=44798 DPT=8022 WINDOW=65535 RES=0x00 SYN URGP=0
2026-10-25T08:01:00.861791-04:00 nostromo.teiken.net kernel: [336809.959660] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=167.71.20.69 DST=173.52.106.128 LEN=52 TOS=0x00 PREC=0x00 TTL=56 ID=8166 PROTO=TCP SPT=39215 DPT=8181 WINDOW=65535 RES=0x00 SYN URGP=0
2026-10-25T08:01:00.955406-04:00 nostromo.teiken.net kernel: [336810.053262] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1
...
show less
|
Port Scan
|
|
🇺🇸
64.227.2.162
|
|
2026-10-25T07:48:18.804153-04:00 nostromo.teiken.net kernel: [336047.908628] syn_limit:IN=en-wan OUT ...
show more
2026-10-25T07:48:18.804153-04:00 nostromo.teiken.net kernel: [336047.908628] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=64.227.2.162 DST=173.52.106.128 LEN=52 TOS=0x00 PREC=0x00 TTL=56 ID=23590 PROTO=TCP SPT=52885 DPT=5701 WINDOW=65535 RES=0x00 SYN URGP=0
2026-10-25T07:48:18.956586-04:00 nostromo.teiken.net kernel: [336048.060618] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=64.227.2.162 DST=173.52.106.128 LEN=52 TOS=0x00 PREC=0x00 TTL=56 ID=24461 PROTO=TCP SPT=36178 DPT=2087 WINDOW=65535 RES=0x00 SYN URGP=0
2026-10-25T07:48:19.501543-04:00 nostromo.teiken.net kernel: [336048.606013] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=64.227.2.162 DST=173.52.106.128 LEN=52 TOS=0x00 PREC=0x00 TTL=56 ID=40565 PROTO=TCP SPT=37880 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0
2026-10-25T07:48:19.666585-04:00 nostromo.teiken.net kernel: [336048.767101] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1
...
show less
|
Port Scan
|
|
🇿🇦
34.35.160.135
|
|
www.teiken.net:443 34.35.160.135:60242 - - [25/Oct/2026:07:13:30 -0400] "GET /.git/config HTTP/1.1" ...
show more
www.teiken.net:443 34.35.160.135:60242 - - [25/Oct/2026:07:13:30 -0400] "GET /.git/config HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
www.teiken.net:443 34.35.160.135:60242 - - [25/Oct/2026:07:13:31 -0400] "GET /.env HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
www.teiken.net:443 34.35.160.135:60242 - - [25/Oct/2026:07:13:31 -0400] "GET /.env.local HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
www.teiken.net:443 34.35.160.135:60242 - - [25/Oct/2026:07:13:31 -0400] "GET /.env.production HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
www.teiken.net:443 34.35.160.135:60242 - - [25/Oct/2026:07:13:31 -0400] "GET
...
show less
|
Web App Attack
|
|
🇮🇩
103.120.66.67
|
|
2026-10-25T06:46:02.046599-04:00 nostromo.teiken.net kernel: [332311.178068] syn_limit:IN=en-wan OUT ...
show more
2026-10-25T06:46:02.046599-04:00 nostromo.teiken.net kernel: [332311.178068] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=103.120.66.67 DST=173.52.106.128 LEN=40 TOS=0x08 PREC=0x20 TTL=245 ID=26401 PROTO=TCP SPT=9099 DPT=9999 WINDOW=1024 RES=0x00 SYN URGP=0
2026-10-25T06:46:02.179419-04:00 nostromo.teiken.net kernel: [332311.316404] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=103.120.66.67 DST=173.52.106.128 LEN=40 TOS=0x08 PREC=0x20 TTL=244 ID=44901 PROTO=TCP SPT=9099 DPT=10198 WINDOW=1024 RES=0x00 SYN URGP=0
2026-10-25T06:46:02.936597-04:00 nostromo.teiken.net kernel: [332312.071875] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=103.120.66.67 DST=173.52.106.128 LEN=40 TOS=0x08 PREC=0x20 TTL=245 ID=16570 PROTO=TCP SPT=9099 DPT=53250 WINDOW=1024 RES=0x00 SYN URGP=0
2026-10-25T06:46:03.372555-04:00 nostromo.teiken.net kernel: [332312.509531] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5
...
show less
|
Port Scan
|
|
🇳🇱
34.6.178.62
|
|
rocinante.teiken.net:443 34.6.178.62:56152 - - [25/Oct/2026:06:12:04 -0400] "GET /.git/config HTTP/1 ...
show more
rocinante.teiken.net:443 34.6.178.62:56152 - - [25/Oct/2026:06:12:04 -0400] "GET /.git/config HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
rocinante.teiken.net:443 34.6.178.62:56152 - - [25/Oct/2026:06:12:04 -0400] "GET /.env HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
rocinante.teiken.net:443 34.6.178.62:56152 - - [25/Oct/2026:06:12:04 -0400] "GET /.env.local HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
rocinante.teiken.net:443 34.6.178.62:56152 - - [25/Oct/2026:06:12:05 -0400] "GET /.env.production HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
rocinante.teiken.net:443 34.6.178.62:56152 - - [25/Oct/2026:
...
show less
|
Web App Attack
|