๐ฌ๐ง
46.101.53.121
11 Aug 2026
2026-08-11T11:19:52.812723-04:00 nostromo.teiken.net sshd-session[109063]: Invalid user oneadmin fro ...
show more
2026-08-11T11:19:52.812723-04:00 nostromo.teiken.net sshd-session[109063]: Invalid user oneadmin from 46.101.53.121 port 38930
2026-08-11T11:19:52.888919-04:00 nostromo.teiken.net sshd-session[109063]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.53.121
2026-08-11T11:19:54.282166-04:00 nostromo.teiken.net sshd-session[109063]: Failed password for invalid user oneadmin from 46.101.53.121 port 38930 ssh2
2026-08-11T11:22:36.029480-04:00 nostromo.teiken.net sshd-session[109221]: Invalid user oneadmin from 46.101.53.121 port 38316
2026-08-11T11:22:36.106603-04:00 nostromo.teiken.net sshd-session[109221]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.53.121
2026-08-11T11:22:38.259497-04:00 nostromo.teiken.net sshd-session[109221]: Failed password for invalid user oneadmin from 46.101.53.121 port 38316 ssh2
...
show less
Brute-Force
SSH
๐จ๐ณ
81.70.104.19
11 Aug 2026
www.teiken.net:443 81.70.104.19:59712 - - [11/Aug/2026:07:59:15 -0400] "POST /index.php?%25ADd+allow ...
show more
www.teiken.net:443 81.70.104.19:59712 - - [11/Aug/2026:07:59:15 -0400] "POST /index.php?%25ADd+allow_url_include%3D1+%25ADd+auto_prepend_file%3Dphp://input HTTP/1.1" 404 553 "-" "libredtail-http"
www.teiken.net:443 81.70.104.19:59712 - - [11/Aug/2026:07:59:15 -0400] "POST /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//input HTTP/1.1" 404 553 "-" "libredtail-http"
www.teiken.net:443 81.70.104.19:59712 - - [11/Aug/2026:07:59:16 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 553 "-" "libredtail-http"
www.teiken.net:443 81.70.104.19:59712 - - [11/Aug/2026:07:59:16 -0400] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 553 "-" "libredtail-http"
www.teiken.net:443 81.70.104.19:59712 - - [11/Aug/2026:07:59:16 -0400] "GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 553 "-" "libredtail-http"
www.teiken.net:443 81.70.104.19:59712 - - [11/Aug/2026:07:59:17 -0400] "GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/
...
show less
Web App Attack
๐ฎ๐ณ
20.193.226.228
11 Aug 2026
www.teiken.net:80 20.193.226.228:6033 - - [11/Aug/2026:06:23:14 -0400] "GET /wp-content/plugins/hell ...
show more
www.teiken.net:80 20.193.226.228:6033 - - [11/Aug/2026:06:23:14 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 681 "-" "-"
www.teiken.net:443 20.193.226.228:6126 - - [11/Aug/2026:06:23:15 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 3462 "-" "-"
www.teiken.net:80 20.193.226.228:6033 - - [11/Aug/2026:06:23:15 -0400] "GET /this_is_a_new_hello_world.php HTTP/1.1" 301 643 "-" "-"
www.teiken.net:443 20.193.226.228:6126 - - [11/Aug/2026:06:23:15 -0400] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 510 "-" "-"
www.teiken.net:80 20.193.226.228:6033 - - [11/Aug/2026:06:23:15 -0400] "GET /x.php HTTP/1.1" 301 595 "-" "-"
www.teiken.net:443 20.193.226.228:6126 - - [11/Aug/2026:06:23:16 -0400] "GET /x.php HTTP/1.1" 404 510 "-" "-"
www.teiken.net:80 20.193.226.228:6033 - - [11/Aug/2026:06:23:16 -0400] "GET /mgrr.php HTTP/1.1" 301 601 "-" "-"
www.teiken.net:443 20.193.226.228:6126 - - [11/Aug/2026:06:23:16 -0400] "GET /mgrr.php HTTP/1.1"
...
show less
Web App Attack
๐ซ๐ท
169.58.135.198
11 Aug 2026
2026-08-11T04:18:02.436016-04:00 rocinante.teiken.net kernel: [325123.444827] syn_limit:IN=ens5 OUT= ...
show more
2026-08-11T04:18:02.436016-04:00 rocinante.teiken.net kernel: [325123.444827] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=169.58.135.198 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=239 DF PROTO=TCP SPT=49620 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0
2026-08-11T04:18:02.458600-04:00 rocinante.teiken.net kernel: [325123.467452] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=169.58.135.198 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=10299 DF PROTO=TCP SPT=44844 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0
2026-08-11T04:18:03.459545-04:00 rocinante.teiken.net kernel: [325124.468361] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=169.58.135.198 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=240 DF PROTO=TCP SPT=49620 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0
2026-08-11T04:18:03.462337-04:00 rocinante.teiken.net kernel: [325124.471217] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:
...
show less
Port Scan
๐จ๐ณ
221.237.0.95
11 Aug 2026
2026-08-11T01:42:31.586647-04:00 narcissus.teiken.net sshd-session[68550]: pam_unix(sshd:auth): auth ...
show more
2026-08-11T01:42:31.586647-04:00 narcissus.teiken.net sshd-session[68550]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.237.0.95 user=root
2026-08-11T01:42:33.355875-04:00 narcissus.teiken.net sshd-session[68550]: Failed password for root from 221.237.0.95 port 9995 ssh2
2026-08-11T01:42:36.828088-04:00 narcissus.teiken.net sshd-session[68558]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.237.0.95 user=root
2026-08-11T01:42:38.432608-04:00 narcissus.teiken.net sshd-session[68558]: Failed password for root from 221.237.0.95 port 9552 ssh2
2026-08-11T01:42:40.241448-04:00 narcissus.teiken.net sshd-session[68564]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.237.0.95 user=root
2026-08-11T01:42:42.489319-04:00 narcissus.teiken.net sshd-session[68564]: Failed password for root from 221.237.0.95 port 9037 ssh2
...
show less
Brute-Force
SSH
๐ฉ๐ฟ
41.111.172.25
11 Aug 2026
2026-08-11T00:22:50.743396-04:00 nostromo.teiken.net sshd-session[55304]: pam_unix(sshd:auth): authe ...
show more
2026-08-11T00:22:50.743396-04:00 nostromo.teiken.net sshd-session[55304]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.111.172.25 user=root
2026-08-11T00:22:53.512136-04:00 nostromo.teiken.net sshd-session[55304]: Failed password for root from 41.111.172.25 port 40304 ssh2
2026-08-11T00:22:55.586510-04:00 nostromo.teiken.net sshd-session[55311]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.111.172.25 user=root
2026-08-11T00:22:57.450358-04:00 nostromo.teiken.net sshd-session[55311]: Failed password for root from 41.111.172.25 port 40316 ssh2
2026-08-11T00:23:00.364441-04:00 nostromo.teiken.net sshd-session[55318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.111.172.25 user=root
2026-08-11T00:23:02.248764-04:00 nostromo.teiken.net sshd-session[55318]: Failed password for root from 41.111.172.25 port 47400 ssh2
...
show less
Brute-Force
SSH
๐ฉ๐ช
165.245.244.117
11 Aug 2026
2026-08-10T21:42:19.346887-04:00 nostromo.teiken.net kernel: [31868.908790] syn_limit:IN=en-wan OUT= ...
show more
2026-08-10T21:42:19.346887-04:00 nostromo.teiken.net kernel: [31868.908790] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=165.245.244.117 DST=173.52.106.128 LEN=60 TOS=0x08 PREC=0x20 TTL=53 ID=5071 DF PROTO=TCP SPT=50900 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0
2026-08-10T21:42:20.364855-04:00 nostromo.teiken.net kernel: [31869.926754] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=165.245.244.117 DST=173.52.106.128 LEN=60 TOS=0x08 PREC=0x20 TTL=53 ID=5072 DF PROTO=TCP SPT=50900 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0
2026-08-10T21:42:21.392388-04:00 nostromo.teiken.net kernel: [31870.950169] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=165.245.244.117 DST=173.52.106.128 LEN=60 TOS=0x08 PREC=0x20 TTL=53 ID=5073 DF PROTO=TCP SPT=50900 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0
2026-08-10T21:42:22.362388-04:00 nostromo.teiken.net kernel: [31871.919559] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:8
...
show less
Port Scan
๐ญ๐ฐ
152.32.173.48
10 Aug 2026
2026-08-10T19:20:32.431061-04:00 nostromo.teiken.net kernel: [23362.077714] syn_limit:IN=en-wan OUT= ...
show more
2026-08-10T19:20:32.431061-04:00 nostromo.teiken.net kernel: [23362.077714] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=152.32.173.48 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=59777 DF PROTO=TCP SPT=35824 DPT=443 WINDOW=1412 RES=0x00 SYN URGP=0
2026-08-10T19:20:35.446000-04:00 nostromo.teiken.net kernel: [23365.092627] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=152.32.173.48 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=4069 DF PROTO=TCP SPT=36358 DPT=443 WINDOW=1412 RES=0x00 SYN URGP=0
2026-08-10T19:20:36.455302-04:00 nostromo.teiken.net kernel: [23366.101919] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=152.32.173.48 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=4070 DF PROTO=TCP SPT=36358 DPT=443 WINDOW=1412 RES=0x00 SYN URGP=0
2026-08-10T19:20:38.435423-04:00 nostromo.teiken.net kernel: [23368.082020] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:
...
show less
Port Scan
๐บ๐ธ
52.173.165.167
10 Aug 2026
rocinante.teiken.net:80 52.173.165.167:37764 - - [10/Aug/2026:18:16:07 -0400] "GET /.git/HEAD HTTP/1 ...
show more
rocinante.teiken.net:80 52.173.165.167:37764 - - [10/Aug/2026:18:16:07 -0400] "GET /.git/HEAD HTTP/1.1" 301 589 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Mobile Safari/537.36"
rocinante.teiken.net:80 52.173.165.167:37782 - - [10/Aug/2026:18:16:08 -0400] "GET /.git/config HTTP/1.1" 301 593 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.4; rv:125.0) Gecko/20100101 Firefox/125.0"
rocinante.teiken.net:80 52.173.165.167:37338 - - [10/Aug/2026:18:16:09 -0400] "GET /.git/logs/HEAD HTTP/1.1" 301 599 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
rocinante.teiken.net:80 52.173.165.167:37378 - - [10/Aug/2026:18:16:10 -0400] "GET /.git/refs/heads/master HTTP/1.1" 301 615 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
rocinante.teiken.net:80 52.173.165.167:37354 - - [10/Aug/2026:18:16:12 -0400
...
show less
Web App Attack
๐ฉ๐ช
164.90.229.21
10 Aug 2026
2026-08-10T17:14:26.442079-04:00 nostromo.teiken.net kernel: [15796.164429] syn_limit:IN=en-wan OUT= ...
show more
2026-08-10T17:14:26.442079-04:00 nostromo.teiken.net kernel: [15796.164429] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=164.90.229.21 DST=173.52.106.128 LEN=60 TOS=0x08 PREC=0x20 TTL=54 ID=63418 DF PROTO=TCP SPT=53756 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0
2026-08-10T17:14:27.443221-04:00 nostromo.teiken.net kernel: [15797.165555] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=164.90.229.21 DST=173.52.106.128 LEN=60 TOS=0x08 PREC=0x20 TTL=54 ID=63419 DF PROTO=TCP SPT=53756 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0
2026-08-10T17:14:28.466767-04:00 nostromo.teiken.net kernel: [15798.189093] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=164.90.229.21 DST=173.52.106.128 LEN=60 TOS=0x08 PREC=0x20 TTL=54 ID=63420 DF PROTO=TCP SPT=53756 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0
2026-08-10T17:14:29.442390-04:00 nostromo.teiken.net kernel: [15799.162886] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a
...
show less
Port Scan
๐บ๐ธ
4.154.182.86
10 Aug 2026
2026-08-10T16:11:59.767329-04:00 nostromo.teiken.net kernel: [12049.526986] syn_limit:IN=en-wan OUT= ...
show more
2026-08-10T16:11:59.767329-04:00 nostromo.teiken.net kernel: [12049.526986] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=4.154.182.86 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=28192 DF PROTO=TCP SPT=26568 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0
2026-08-10T16:12:00.584294-04:00 nostromo.teiken.net kernel: [12050.343942] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=4.154.182.86 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=18283 DF PROTO=TCP SPT=26590 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0
2026-08-10T16:12:01.407486-04:00 nostromo.teiken.net kernel: [12051.167120] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=4.154.182.86 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=32688 DF PROTO=TCP SPT=26582 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0
2026-08-10T16:12:03.012414-04:00 nostromo.teiken.net kernel: [12052.772041] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1
...
show less
Port Scan
๐ธ๐ฌ
20.212.82.42
10 Aug 2026
www.teiken.net:80 20.212.82.42:4231 - - [10/Aug/2026:13:51:10 -0400] "GET /wp-content/plugins/hellop ...
show more
www.teiken.net:80 20.212.82.42:4231 - - [10/Aug/2026:13:51:10 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 681 "-" "-"
www.teiken.net:443 20.212.82.42:10937 - - [10/Aug/2026:13:51:11 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 3462 "-" "-"
www.teiken.net:80 20.212.82.42:4231 - - [10/Aug/2026:13:51:11 -0400] "GET /this_is_a_new_hello_world.php HTTP/1.1" 301 643 "-" "-"
www.teiken.net:443 20.212.82.42:10937 - - [10/Aug/2026:13:51:12 -0400] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 510 "-" "-"
www.teiken.net:80 20.212.82.42:4231 - - [10/Aug/2026:13:51:12 -0400] "GET /class.php HTTP/1.1" 301 603 "-" "-"
www.teiken.net:443 20.212.82.42:10937 - - [10/Aug/2026:13:51:12 -0400] "GET /class.php HTTP/1.1" 404 510 "-" "-"
www.teiken.net:80 20.212.82.42:4231 - - [10/Aug/2026:13:51:12 -0400] "GET /lm13.php HTTP/1.1" 301 601 "-" "-"
www.teiken.net:443 20.212.82.42:10937 - - [10/Aug/2026:13:51:13 -0400] "GET /lm13.php HTTP/1.1" 404
...
show less
Web App Attack
๐บ๐ธ
2605:9880:0:529:225:90ff:fe66:fe9
10 Aug 2026
2026-08-10T13:07:19.622387-04:00 nostromo.teiken.net kernel: [ 969.484531] syn_limit:IN=en-wan OUT= ...
show more
2026-08-10T13:07:19.622387-04:00 nostromo.teiken.net kernel: [ 969.484531] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2605:9880:0000:0529:0225:90ff:fe66:0fe9 DST=2600:4041:5c7d:4d8c:da58:d7ff:0323:513b LEN=64 TC=0 HOPLIMIT=11 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0
2026-08-10T13:07:19.649626-04:00 nostromo.teiken.net kernel: [ 969.519497] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2605:9880:0000:0529:0225:90ff:fe66:0fe9 DST=2600:4041:5c7d:4d8c:da58:d7ff:0323:513b LEN=64 TC=0 HOPLIMIT=12 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0
2026-08-10T13:07:19.692372-04:00 nostromo.teiken.net kernel: [ 969.554650] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2605:9880:0000:0529:0225:90ff:fe66:0fe9 DST=2600:4041:5c7d:4d8c:da58:d7ff:0323:513b LEN=64 TC=0 HOPLIMIT=13 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 S
...
show less
Port Scan
๐ฎ๐น
2a02:29e2:84:6::2
10 Aug 2026
2026-08-10T13:06:26.508611-04:00 nostromo.teiken.net kernel: [ 916.378935] syn_limit:IN=en-wan OUT= ...
show more
2026-08-10T13:06:26.508611-04:00 nostromo.teiken.net kernel: [ 916.378935] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a02:29e2:0084:0006:0000:0000:0000:0002 DST=2600:4041:5c7d:4d8c:da58:d7ff:0323:513b LEN=64 TC=0 HOPLIMIT=11 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0
2026-08-10T13:06:26.542821-04:00 nostromo.teiken.net kernel: [ 916.413165] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a02:29e2:0084:0006:0000:0000:0000:0002 DST=2600:4041:5c7d:4d8c:da58:d7ff:0323:513b LEN=64 TC=0 HOPLIMIT=12 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0
2026-08-10T13:06:26.582376-04:00 nostromo.teiken.net kernel: [ 916.447398] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a02:29e2:0084:0006:0000:0000:0000:0002 DST=2600:4041:5c7d:4d8c:da58:d7ff:0323:513b LEN=64 TC=0 HOPLIMIT=13 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 S
...
show less
Port Scan
๐ฉ๐ช
2a05:e740:9161::2
10 Aug 2026
2026-08-10T13:05:12.742376-04:00 nostromo.teiken.net kernel: [ 842.609349] syn_limit:IN=en-wan OUT= ...
show more
2026-08-10T13:05:12.742376-04:00 nostromo.teiken.net kernel: [ 842.609349] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:9161:0000:0000:0000:0000:0002 DST=2600:4041:5c7d:4d8c:da58:d7ff:0323:513b LEN=64 TC=0 HOPLIMIT=11 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0
2026-08-10T13:05:12.792420-04:00 nostromo.teiken.net kernel: [ 842.653419] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:9161:0000:0000:0000:0000:0002 DST=2600:4041:5c7d:4d8c:da58:d7ff:0323:513b LEN=64 TC=0 HOPLIMIT=12 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0
2026-08-10T13:05:12.832467-04:00 nostromo.teiken.net kernel: [ 842.697373] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:9161:0000:0000:0000:0000:0002 DST=2600:4041:5c7d:4d8c:da58:d7ff:0323:513b LEN=64 TC=0 HOPLIMIT=13 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 S
...
show less
Port Scan
๐ฉ๐ช
2a05:e740:1947::2
10 Aug 2026
2026-08-10T13:05:12.591556-04:00 nostromo.teiken.net kernel: [ 842.462577] syn_limit:IN=en-wan OUT= ...
show more
2026-08-10T13:05:12.591556-04:00 nostromo.teiken.net kernel: [ 842.462577] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1947:0000:0000:0000:0000:0002 DST=2600:4041:5c7d:4d8c:da58:d7ff:0323:513b LEN=64 TC=0 HOPLIMIT=11 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0
2026-08-10T13:05:12.635542-04:00 nostromo.teiken.net kernel: [ 842.506533] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1947:0000:0000:0000:0000:0002 DST=2600:4041:5c7d:4d8c:da58:d7ff:0323:513b LEN=64 TC=0 HOPLIMIT=12 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0
2026-08-10T13:05:12.682432-04:00 nostromo.teiken.net kernel: [ 842.550509] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1947:0000:0000:0000:0000:0002 DST=2600:4041:5c7d:4d8c:da58:d7ff:0323:513b LEN=64 TC=0 HOPLIMIT=13 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 S
...
show less
Port Scan
๐ฉ๐ช
2a05:e740:1144::2
10 Aug 2026
2026-08-10T13:05:12.357521-04:00 nostromo.teiken.net kernel: [ 842.228516] syn_limit:IN=en-wan OUT= ...
show more
2026-08-10T13:05:12.357521-04:00 nostromo.teiken.net kernel: [ 842.228516] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1144:0000:0000:0000:0000:0002 DST=2600:4041:5c7d:4d8c:da58:d7ff:0323:513b LEN=64 TC=0 HOPLIMIT=11 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0
2026-08-10T13:05:12.402372-04:00 nostromo.teiken.net kernel: [ 842.272145] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1144:0000:0000:0000:0000:0002 DST=2600:4041:5c7d:4d8c:da58:d7ff:0323:513b LEN=64 TC=0 HOPLIMIT=12 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0
2026-08-10T13:05:12.444802-04:00 nostromo.teiken.net kernel: [ 842.315821] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1144:0000:0000:0000:0000:0002 DST=2600:4041:5c7d:4d8c:da58:d7ff:0323:513b LEN=64 TC=0 HOPLIMIT=13 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 S
...
show less
Port Scan
๐ฉ๐ช
2a05:e740:1146::2
10 Aug 2026
2026-08-10T13:05:12.152371-04:00 nostromo.teiken.net kernel: [ 842.020941] syn_limit:IN=en-wan OUT= ...
show more
2026-08-10T13:05:12.152371-04:00 nostromo.teiken.net kernel: [ 842.020941] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1146:0000:0000:0000:0000:0002 DST=2600:4041:5c7d:4d8c:da58:d7ff:0323:513b LEN=64 TC=0 HOPLIMIT=11 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0
2026-08-10T13:05:12.193810-04:00 nostromo.teiken.net kernel: [ 842.064812] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1146:0000:0000:0000:0000:0002 DST=2600:4041:5c7d:4d8c:da58:d7ff:0323:513b LEN=64 TC=0 HOPLIMIT=12 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0
2026-08-10T13:05:12.237779-04:00 nostromo.teiken.net kernel: [ 842.108792] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1146:0000:0000:0000:0000:0002 DST=2600:4041:5c7d:4d8c:da58:d7ff:0323:513b LEN=64 TC=0 HOPLIMIT=13 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 S
...
show less
Port Scan
๐ฉ๐ช
2a05:e740:1145::2
10 Aug 2026
2026-08-10T13:05:11.812370-04:00 nostromo.teiken.net kernel: [ 841.677896] syn_limit:IN=en-wan OUT= ...
show more
2026-08-10T13:05:11.812370-04:00 nostromo.teiken.net kernel: [ 841.677896] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1145:0000:0000:0000:0000:0002 DST=2600:4041:5c7d:4d8c:da58:d7ff:0323:513b LEN=64 TC=0 HOPLIMIT=11 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0
2026-08-10T13:05:11.850839-04:00 nostromo.teiken.net kernel: [ 841.721849] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1145:0000:0000:0000:0000:0002 DST=2600:4041:5c7d:4d8c:da58:d7ff:0323:513b LEN=64 TC=0 HOPLIMIT=12 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0
2026-08-10T13:05:11.894757-04:00 nostromo.teiken.net kernel: [ 841.765772] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1145:0000:0000:0000:0000:0002 DST=2600:4041:5c7d:4d8c:da58:d7ff:0323:513b LEN=64 TC=0 HOPLIMIT=13 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 S
...
show less
Port Scan
๐ฉ๐ช
2a05:e740:9160::2
10 Aug 2026
2026-08-10T13:05:11.772744-04:00 nostromo.teiken.net kernel: [ 841.643746] syn_limit:IN=en-wan OUT= ...
show more
2026-08-10T13:05:11.772744-04:00 nostromo.teiken.net kernel: [ 841.643746] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:9160:0000:0000:0000:0000:0002 DST=2600:4041:5c7d:4d8c:da58:d7ff:0323:513b LEN=64 TC=0 HOPLIMIT=11 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0
2026-08-10T13:05:11.816327-04:00 nostromo.teiken.net kernel: [ 841.687359] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:9160:0000:0000:0000:0000:0002 DST=2600:4041:5c7d:4d8c:da58:d7ff:0323:513b LEN=64 TC=0 HOPLIMIT=12 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0
2026-08-10T13:05:11.862376-04:00 nostromo.teiken.net kernel: [ 841.731103] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:9160:0000:0000:0000:0000:0002 DST=2600:4041:5c7d:4d8c:da58:d7ff:0323:513b LEN=64 TC=0 HOPLIMIT=13 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 S
...
show less
Port Scan
๐บ๐ธ
146.190.137.16
10 Aug 2026
2026-08-10T12:16:28.487970-04:00 nostromo.teiken.net kernel: [257625.672412] syn_limit:IN=en-wan OUT ...
show more
2026-08-10T12:16:28.487970-04:00 nostromo.teiken.net kernel: [257625.672412] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=146.190.137.16 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=21430 DF PROTO=TCP SPT=45016 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0
2026-08-10T12:16:29.501628-04:00 nostromo.teiken.net kernel: [257626.686068] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=146.190.137.16 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=21431 DF PROTO=TCP SPT=45016 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0
2026-08-10T12:16:30.521840-04:00 nostromo.teiken.net kernel: [257627.706267] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=146.190.137.16 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=21432 DF PROTO=TCP SPT=45016 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0
2026-08-10T12:16:31.532523-04:00 nostromo.teiken.net kernel: [257628.716943] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:
...
show less
Port Scan
๐จ๐ณ
14.103.118.106
10 Aug 2026
2026-08-10T10:14:04.715713-04:00 nostromo.teiken.net sshd-session[415128]: Invalid user minecraft fr ...
show more
2026-08-10T10:14:04.715713-04:00 nostromo.teiken.net sshd-session[415128]: Invalid user minecraft from 14.103.118.106 port 35148
2026-08-10T10:14:04.740046-04:00 nostromo.teiken.net sshd-session[415128]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.103.118.106
2026-08-10T10:14:06.685281-04:00 nostromo.teiken.net sshd-session[415128]: Failed password for invalid user minecraft from 14.103.118.106 port 35148 ssh2
2026-08-10T10:19:41.588476-04:00 nostromo.teiken.net sshd-session[415640]: Invalid user suporte from 14.103.118.106 port 44076
2026-08-10T10:19:41.613148-04:00 nostromo.teiken.net sshd-session[415640]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.103.118.106
2026-08-10T10:19:43.871146-04:00 nostromo.teiken.net sshd-session[415640]: Failed password for invalid user suporte from 14.103.118.106 port 44076 ssh2
...
show less
Brute-Force
SSH
๐บ๐ธ
206.46.35.250
10 Aug 2026
2026-08-10T07:44:56.881301-04:00 nostromo.teiken.net kernel: [241334.227410] syn_limit:IN=en-wan OUT ...
show more
2026-08-10T07:44:56.881301-04:00 nostromo.teiken.net kernel: [241334.227410] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=206.46.35.250 DST=173.52.106.128 LEN=52 TOS=0x00 PREC=0x00 TTL=58 ID=6948 DF PROTO=TCP SPT=53879 DPT=4567 WINDOW=29200 RES=0x00 SYN URGP=0
2026-08-10T07:44:58.617024-04:00 nostromo.teiken.net kernel: [241335.963117] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=206.46.35.250 DST=173.52.106.128 LEN=52 TOS=0x00 PREC=0x00 TTL=58 ID=48690 DF PROTO=TCP SPT=36013 DPT=4567 WINDOW=29200 RES=0x00 SYN URGP=0
2026-08-10T07:44:58.818791-04:00 nostromo.teiken.net kernel: [241336.164909] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=206.46.35.250 DST=173.52.106.128 LEN=52 TOS=0x00 PREC=0x00 TTL=58 ID=52855 DF PROTO=TCP SPT=38561 DPT=4567 WINDOW=29200 RES=0x00 SYN URGP=0
2026-08-10T07:44:59.634377-04:00 nostromo.teiken.net kernel: [241336.980462] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:0
...
show less
Port Scan
๐ฉ๐ช
45.77.64.215
10 Aug 2026
2026-08-10T07:41:51.002614-04:00 rocinante.teiken.net kernel: [250953.364218] syn_limit:IN=ens5 OUT= ...
show more
2026-08-10T07:41:51.002614-04:00 rocinante.teiken.net kernel: [250953.364218] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=45.77.64.215 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=44 ID=65267 DF PROTO=TCP SPT=50106 DPT=80 WINDOW=42340 RES=0x00 SYN URGP=0
2026-08-10T07:41:51.433999-04:00 rocinante.teiken.net kernel: [250953.795636] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=45.77.64.215 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=1011 DF PROTO=TCP SPT=41964 DPT=443 WINDOW=42340 RES=0x00 SYN URGP=0
2026-08-10T07:41:52.015790-04:00 rocinante.teiken.net kernel: [250954.377397] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=45.77.64.215 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=44 ID=65268 DF PROTO=TCP SPT=50106 DPT=80 WINDOW=42340 RES=0x00 SYN URGP=0
2026-08-10T07:41:52.459675-04:00 rocinante.teiken.net kernel: [250954.821305] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:0
...
show less
Port Scan
๐ฉ๐ช
2001:19f0:6c01:1ac5:5400:6ff:fe82:d399
10 Aug 2026
2026-08-10T07:41:50.695594-04:00 rocinante.teiken.net kernel: [250953.056702] syn_limit:IN=ens5 OUT= ...
show more
2026-08-10T07:41:50.695594-04:00 rocinante.teiken.net kernel: [250953.056702] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:86:dd SRC=2001:19f0:6c01:1ac5:5400:06ff:fe82:d399 DST=2600:1f18:0596:2501:0000:0000:0000:1001 LEN=80 TC=0 HOPLIMIT=49 FLOWLBL=556101 PROTO=TCP SPT=44120 DPT=80 WINDOW=43200 RES=0x00 SYN URGP=0
2026-08-10T07:41:51.126275-04:00 rocinante.teiken.net kernel: [250953.487343] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:86:dd SRC=2001:19f0:6c01:1ac5:5400:06ff:fe82:d399 DST=2600:1f18:0596:2501:0000:0000:0000:1001 LEN=80 TC=0 HOPLIMIT=49 FLOWLBL=960960 PROTO=TCP SPT=46990 DPT=443 WINDOW=43200 RES=0x00 SYN URGP=0
2026-08-10T07:41:51.757291-04:00 rocinante.teiken.net kernel: [250954.118381] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:86:dd SRC=2001:19f0:6c01:1ac5:5400:06ff:fe82:d399 DST=2600:1f18:0596:2501:0000:0000:0000:1001 LEN=80 TC=0 HOPLIMIT=50 FLOWLBL=305503 PROTO=TCP SPT=44120 DPT=80 WINDOW=43200 RES=0x00 SYN UR
...
show less
Port Scan