wteiken - AbuseIPDB User Profile

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User wteiken , the webmaster of teiken.org, joined AbuseIPDB in December 2021 and has reported 19,950 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇮🇳 206.1.21.1	1 hour ago	2026-06-28T03:13:01.639650-04:00 narcissus.teiken.net sshd-session[17062]: pam_unix(sshd:auth): auth ... show more 2026-06-28T03:13:01.639650-04:00 narcissus.teiken.net sshd-session[17062]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.1.21.1 2026-06-28T03:13:03.498620-04:00 narcissus.teiken.net sshd-session[17062]: Failed password for invalid user webadmin from 206.1.21.1 port 30412 ssh2 2026-06-28T03:33:15.132024-04:00 narcissus.teiken.net sshd-session[18437]: Invalid user ftp from 206.1.21.1 port 41424 2026-06-28T03:33:15.331280-04:00 narcissus.teiken.net sshd-session[18437]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.1.21.1 2026-06-28T03:33:17.448602-04:00 narcissus.teiken.net sshd-session[18437]: Failed password for invalid user ftp from 206.1.21.1 port 41424 ssh2 2026-06-28T03:53:57.361549-04:00 narcissus.teiken.net sshd-session[20078]: Invalid user test from 206.1.21.1 port 44966 ... show less	Brute-Force SSH
🇧🇴 181.188.148.74	4 hours ago	2026-06-28T01:37:20.197555-04:00 nostromo.teiken.net sshd-session[7491]: Invalid user oracle from 18 ... show more 2026-06-28T01:37:20.197555-04:00 nostromo.teiken.net sshd-session[7491]: Invalid user oracle from 181.188.148.74 port 35532 2026-06-28T01:37:20.221754-04:00 nostromo.teiken.net sshd-session[7491]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.188.148.74 2026-06-28T01:37:22.390384-04:00 nostromo.teiken.net sshd-session[7491]: Failed password for invalid user oracle from 181.188.148.74 port 35532 ssh2 2026-06-28T01:40:02.730872-04:00 nostromo.teiken.net sshd-session[7688]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.188.148.74 user=root 2026-06-28T01:40:04.847982-04:00 nostromo.teiken.net sshd-session[7688]: Failed password for root from 181.188.148.74 port 39262 ssh2 2026-06-28T01:42:37.978589-04:00 nostromo.teiken.net sshd-session[8363]: Invalid user usman from 181.188.148.74 port 41210 ... show less	Brute-Force SSH
🇺🇸 104.28.214.116	4 hours ago	www.teiken.net:80 104.28.214.116:64145 - - [28/Jun/2026:00:51:33 -0400] "GET /chosen.php?p= HTTP/1.1 ... show more www.teiken.net:80 104.28.214.116:64145 - - [28/Jun/2026:00:51:33 -0400] "GET /chosen.php?p= HTTP/1.1" 301 611 "-" "Go-http-client/1.1" www.teiken.net:80 104.28.214.116:64145 - - [28/Jun/2026:00:51:33 -0400] "GET /file.php HTTP/1.1" 301 601 "-" "Go-http-client/1.1" www.teiken.net:80 104.28.214.116:64145 - - [28/Jun/2026:00:51:33 -0400] "GET /flower.php HTTP/1.1" 301 605 "-" "Go-http-client/1.1" www.teiken.net:80 104.28.214.116:64145 - - [28/Jun/2026:00:51:33 -0400] "GET /gifclass.php HTTP/1.1" 301 609 "-" "Go-http-client/1.1" www.teiken.net:80 104.28.214.116:64145 - - [28/Jun/2026:00:51:33 -0400] "GET /bless.php HTTP/1.1" 301 603 "-" "Go-http-client/1.1" www.teiken.net:80 104.28.214.116:64145 - - [28/Jun/2026:00:51:33 -0400] "GET /class-t.api.php HTTP/1.1" 301 615 "-" "Go-http-client/1.1" www.teiken.net:80 104.28.214.116:64145 - - [28/Jun/2026:00:51:33 -0400] "GET /blurbs.php HTTP/1.1" 301 605 "-" "Go-http-client/1.1" www.teiken.net:80 104.28.214.116:64145 - - [28/Jun/2026:00:51:34 -040 ... show less	Web App Attack
🇺🇸 2a09:bac5:952b:3af::5e:5a	4 hours ago	ca.teiken.net:80 2a09:bac5:952b:3af::5e:5a:20408 - - [28/Jun/2026:00:49:12 -0400] "GET /ms-themes.ph ... show more ca.teiken.net:80 2a09:bac5:952b:3af::5e:5a:20408 - - [28/Jun/2026:00:49:12 -0400] "GET /ms-themes.php HTTP/1.1" 404 476 "-" "Go-http-client/1.1" ca.teiken.net:80 2a09:bac5:952b:3af::5e:5a:20408 - - [28/Jun/2026:00:49:12 -0400] "GET /chosen.php?p= HTTP/1.1" 404 476 "-" "Go-http-client/1.1" ca.teiken.net:80 2a09:bac5:952b:3af::5e:5a:20408 - - [28/Jun/2026:00:49:12 -0400] "GET /file.php HTTP/1.1" 404 476 "-" "Go-http-client/1.1" ca.teiken.net:80 2a09:bac5:952b:3af::5e:5a:20408 - - [28/Jun/2026:00:49:12 -0400] "GET /flower.php HTTP/1.1" 404 476 "-" "Go-http-client/1.1" ca.teiken.net:80 2a09:bac5:952b:3af::5e:5a:20408 - - [28/Jun/2026:00:49:12 -0400] "GET /gifclass.php HTTP/1.1" 404 476 "-" "Go-http-client/1.1" ca.teiken.net:80 2a09:bac5:952b:3af::5e:5a:20408 - - [28/Jun/2026:00:49:12 -0400] "GET /bless.php HTTP/1.1" 404 476 "-" "Go-http-client/1.1" ca.teiken.net:80 2a09:bac5:952b:3af::5e:5a:20408 - - [28/Jun/2026:00:49:12 -0400] "GET /class-t.api.php HTTP/1.1" 404 476 "-" "Go-http-client/1 ... show less	Web App Attack
🇺🇸 52.224.247.162	6 hours ago	2026-06-27T22:55:59.711411-04:00 nostromo.teiken.net kernel: [ 7285.536485] syn_limit:IN=en-wan OUT= ... show more 2026-06-27T22:55:59.711411-04:00 nostromo.teiken.net kernel: [ 7285.536485] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=52.224.247.162 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=3431 DF PROTO=TCP SPT=21988 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 2026-06-27T22:56:00.737377-04:00 nostromo.teiken.net kernel: [ 7286.562446] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=52.224.247.162 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=3432 DF PROTO=TCP SPT=21988 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 2026-06-27T22:56:00.807163-04:00 nostromo.teiken.net kernel: [ 7286.632243] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=52.224.247.162 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=19671 DF PROTO=TCP SPT=21959 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 2026-06-27T22:56:01.621481-04:00 nostromo.teiken.net kernel: [ 7287.438826] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2: ... show less	Port Scan
🇨🇳 125.91.33.72	15 hours ago	2026-06-27T13:54:14.767860-04:00 narcissus.teiken.net sshd-session[6718]: Failed password for invali ... show more 2026-06-27T13:54:14.767860-04:00 narcissus.teiken.net sshd-session[6718]: Failed password for invalid user admin from 125.91.33.72 port 33060 ssh2 2026-06-27T13:54:38.213581-04:00 narcissus.teiken.net sshd-session[6747]: Invalid user zhangwei from 125.91.33.72 port 37010 2026-06-27T13:54:38.237760-04:00 narcissus.teiken.net sshd-session[6747]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.91.33.72 2026-06-27T13:54:40.665702-04:00 narcissus.teiken.net sshd-session[6747]: Failed password for invalid user zhangwei from 125.91.33.72 port 37010 ssh2 2026-06-27T13:56:38.141380-04:00 narcissus.teiken.net sshd-session[6866]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.91.33.72 user=root 2026-06-27T13:56:40.157569-04:00 narcissus.teiken.net sshd-session[6866]: Failed password for root from 125.91.33.72 port 56766 ssh2 ... show less	Brute-Force SSH
🇺🇸 74.208.32.138	16 hours ago	2026-06-27T12:46:34.411681-04:00 narcissus.teiken.net sshd-session[868029]: pam_unix(sshd:auth): aut ... show more 2026-06-27T12:46:34.411681-04:00 narcissus.teiken.net sshd-session[868029]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.208.32.138 user=root 2026-06-27T12:46:36.558460-04:00 narcissus.teiken.net sshd-session[868029]: Failed password for root from 74.208.32.138 port 41576 ssh2 2026-06-27T12:46:38.347992-04:00 narcissus.teiken.net sshd-session[868035]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.208.32.138 user=root 2026-06-27T12:46:40.268649-04:00 narcissus.teiken.net sshd-session[868035]: Failed password for root from 74.208.32.138 port 41578 ssh2 2026-06-27T12:46:42.290825-04:00 narcissus.teiken.net sshd-session[868041]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.208.32.138 user=root 2026-06-27T12:46:44.054408-04:00 narcissus.teiken.net sshd-session[868041]: Failed password for root from 74.208.32.138 port 44636 ssh2 ... show less	Brute-Force SSH
🇺🇸 5.161.211.105	17 hours ago	2026-06-27T12:37:42.488764-04:00 nostromo.teiken.net sshd-session[45023]: pam_unix(sshd:auth): authe ... show more 2026-06-27T12:37:42.488764-04:00 nostromo.teiken.net sshd-session[45023]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.161.211.105 2026-06-27T12:37:44.033471-04:00 nostromo.teiken.net sshd-session[45023]: Failed password for invalid user orangepi from 5.161.211.105 port 59654 ssh2 2026-06-27T12:38:56.462271-04:00 nostromo.teiken.net sshd-session[45090]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.161.211.105 user=root 2026-06-27T12:38:58.788048-04:00 nostromo.teiken.net sshd-session[45090]: Failed password for root from 5.161.211.105 port 36634 ssh2 2026-06-27T12:40:08.979384-04:00 nostromo.teiken.net sshd-session[45740]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.161.211.105 user=root 2026-06-27T12:40:10.629467-04:00 nostromo.teiken.net sshd-session[45740]: Failed password for root from 5.161.211.105 port 40030 ssh2 ... show less	Brute-Force SSH
🇺🇸 35.89.148.191	18 hours ago	www.teiken.net:443 35.89.148.191:32802 - - [27/Jun/2026:11:07:07 -0400] "GET /.git/config HTTP/1.1" ... show more www.teiken.net:443 35.89.148.191:32802 - - [27/Jun/2026:11:07:07 -0400] "GET /.git/config HTTP/1.1" 404 562 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 35.89.148.191:32802 - - [27/Jun/2026:11:07:07 -0400] "GET /.env HTTP/1.1" 404 562 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 35.89.148.191:32802 - - [27/Jun/2026:11:07:07 -0400] "GET /.env.local HTTP/1.1" 404 562 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 35.89.148.191:32802 - - [27/Jun/2026:11:07:07 -0400] "GET /.env.production HTTP/1.1" 404 562 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 35.89.148.191:32802 - - [27/Jun/2026:11:07:07 -0400] "GET ... show less	Web App Attack
🇸🇬 54.169.238.70	19 hours ago	rocinante.teiken.net:443 54.169.238.70:43584 - - [27/Jun/2026:10:44:43 -0400] "GET /.git/config HTTP ... show more rocinante.teiken.net:443 54.169.238.70:43584 - - [27/Jun/2026:10:44:43 -0400] "GET /.git/config HTTP/1.1" 404 561 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 54.169.238.70:43584 - - [27/Jun/2026:10:44:43 -0400] "GET /.env HTTP/1.1" 404 561 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 54.169.238.70:43584 - - [27/Jun/2026:10:44:43 -0400] "GET /.env.local HTTP/1.1" 404 561 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 54.169.238.70:43584 - - [27/Jun/2026:10:44:43 -0400] "GET /.env.production HTTP/1.1" 404 561 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 54.169.238.70:43584 - - [27/Jun/2026:10:44:44 -0400] "GET /.env.staging HTTP/1.1" 404 561 " ... show less	Web App Attack
🇬🇧 18.175.175.245	19 hours ago	www.teiken.net:443 18.175.175.245:49456 - - [27/Jun/2026:10:22:19 -0400] "GET /.git/config HTTP/1.1" ... show more www.teiken.net:443 18.175.175.245:49456 - - [27/Jun/2026:10:22:19 -0400] "GET /.git/config HTTP/1.1" 404 560 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 18.175.175.245:49456 - - [27/Jun/2026:10:22:20 -0400] "GET /.env HTTP/1.1" 404 560 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 18.175.175.245:49456 - - [27/Jun/2026:10:22:20 -0400] "GET /.env.local HTTP/1.1" 404 560 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 18.175.175.245:49456 - - [27/Jun/2026:10:22:20 -0400] "GET /.env.production HTTP/1.1" 404 560 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 18.175.175.245:49456 - - [27/Jun/2026:10:22:20 -0400] ... show less	Web App Attack
🇦🇺 54.153.251.181	19 hours ago	www.teiken.net:443 54.153.251.181:51596 - - [27/Jun/2026:10:06:28 -0400] "GET /.git/config HTTP/1.1" ... show more www.teiken.net:443 54.153.251.181:51596 - - [27/Jun/2026:10:06:28 -0400] "GET /.git/config HTTP/1.1" 404 565 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 54.153.251.181:51596 - - [27/Jun/2026:10:06:28 -0400] "GET /.env HTTP/1.1" 404 565 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 54.153.251.181:51596 - - [27/Jun/2026:10:06:29 -0400] "GET /.env.local HTTP/1.1" 404 565 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 54.153.251.181:51596 - - [27/Jun/2026:10:06:29 -0400] "GET /.env.production HTTP/1.1" 404 565 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 54.153.251.181:51596 - - [27/Jun/2026:10:06:29 -0400] "GET /.env.staging HTTP/1.1" 404 565 "-" "Mozilla/5.0 (X11; Lin ... show less	Web App Attack
🇸🇪 13.60.238.150	19 hours ago	www.teiken.net:443 13.60.238.150:47522 - - [27/Jun/2026:10:03:39 -0400] "GET /.git/config HTTP/1.1" ... show more www.teiken.net:443 13.60.238.150:47522 - - [27/Jun/2026:10:03:39 -0400] "GET /.git/config HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 13.60.238.150:47522 - - [27/Jun/2026:10:03:39 -0400] "GET /.env HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 13.60.238.150:47522 - - [27/Jun/2026:10:03:40 -0400] "GET /.env.local HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 13.60.238.150:47522 - - [27/Jun/2026:10:03:40 -0400] "GET /.env.production HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 13.60.238.150:47522 - - [27/Jun/2026:10:03:40 -0400] "GET /.env.staging HTTP/1.1" ... show less	Web App Attack
🇮🇳 117.219.14.193	21 hours ago	2026-06-27T08:39:39.768031-04:00 nostromo.teiken.net sshd-session[25440]: pam_unix(sshd:auth): authe ... show more 2026-06-27T08:39:39.768031-04:00 nostromo.teiken.net sshd-session[25440]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.219.14.193 user=root 2026-06-27T08:39:41.588579-04:00 nostromo.teiken.net sshd-session[25440]: Failed password for root from 117.219.14.193 port 38371 ssh2 2026-06-27T08:39:45.548245-04:00 nostromo.teiken.net sshd-session[25447]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.219.14.193 user=root 2026-06-27T08:39:47.834737-04:00 nostromo.teiken.net sshd-session[25447]: Failed password for root from 117.219.14.193 port 43953 ssh2 2026-06-27T08:39:51.225963-04:00 nostromo.teiken.net sshd-session[25457]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.219.14.193 user=root 2026-06-27T08:39:52.794049-04:00 nostromo.teiken.net sshd-session[25457]: Failed password for root from 117.219.14.193 port 21446 ssh2 ... show less	Brute-Force SSH
🇻🇳 171.231.183.147	23 hours ago	2026-06-27T05:32:50.822725-04:00 nostromo.teiken.net sshd-session[6546]: Failed password for invalid ... show more 2026-06-27T05:32:50.822725-04:00 nostromo.teiken.net sshd-session[6546]: Failed password for invalid user installer from 171.231.183.147 port 57942 ssh2 2026-06-27T05:43:55.650566-04:00 nostromo.teiken.net sshd-session[7721]: Invalid user ubnt from 171.231.183.147 port 55628 2026-06-27T05:43:55.921818-04:00 nostromo.teiken.net sshd-session[7721]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.231.183.147 2026-06-27T05:43:57.267159-04:00 nostromo.teiken.net sshd-session[7721]: Failed password for invalid user ubnt from 171.231.183.147 port 55628 ssh2 2026-06-27T05:54:14.872081-04:00 nostromo.teiken.net sshd-session[8157]: Invalid user config from 171.231.183.147 port 59160 2026-06-27T05:58:28.296403-04:00 nostromo.teiken.net sshd-session[8521]: Invalid user support from 171.231.183.147 port 34288 ... show less	Brute-Force SSH
🇿🇦 154.16.95.41	27 Jun 2026	rocinante.teiken.net:443 154.16.95.41:48369 - - [27/Jun/2026:04:40:25 -0400] "GET /public/.env HTTP/ ... show more rocinante.teiken.net:443 154.16.95.41:48369 - - [27/Jun/2026:04:40:25 -0400] "GET /public/.env HTTP/1.1" 404 554 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15" rocinante.teiken.net:443 154.16.95.41:48369 - - [27/Jun/2026:04:40:26 -0400] "GET /laravel/.env HTTP/1.1" 404 554 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15" rocinante.teiken.net:443 154.16.95.41:48369 - - [27/Jun/2026:04:40:28 -0400] "GET /infophp.php HTTP/1.1" 404 554 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15" rocinante.teiken.net:443 154.16.95.41:48369 - - [27/Jun/2026:04:40:30 -0400] "GET /php_info.php HTTP/1.1" 404 554 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15" rocinante.teiken.net:443 154.16.95.41:48369 - - [2 ... show less	Web App Attack
🇿🇦 154.16.95.91	27 Jun 2026	rocinante.teiken.net:80 154.16.95.91:51941 - - [27/Jun/2026:04:40:24 -0400] "GET /public/.env HTTP/1 ... show more rocinante.teiken.net:80 154.16.95.91:51941 - - [27/Jun/2026:04:40:24 -0400] "GET /public/.env HTTP/1.1" 301 629 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15" rocinante.teiken.net:80 154.16.95.91:51941 - - [27/Jun/2026:04:40:26 -0400] "GET /laravel/.env HTTP/1.1" 301 631 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15" rocinante.teiken.net:80 154.16.95.91:51941 - - [27/Jun/2026:04:40:27 -0400] "GET /infophp.php HTTP/1.1" 301 629 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15" rocinante.teiken.net:80 154.16.95.91:51941 - - [27/Jun/2026:04:40:29 -0400] "GET /php_info.php HTTP/1.1" 301 631 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15" rocinante.teiken.net:80 154.16.95.91:51941 - - [27/Jun ... show less	Web App Attack
🇮🇩 8.215.68.251	27 Jun 2026	2026-06-26T23:41:07.799189-04:00 narcissus.teiken.net sshd-session[801192]: Invalid user neu from 8. ... show more 2026-06-26T23:41:07.799189-04:00 narcissus.teiken.net sshd-session[801192]: Invalid user neu from 8.215.68.251 port 46290 2026-06-26T23:41:07.823386-04:00 narcissus.teiken.net sshd-session[801192]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.215.68.251 2026-06-26T23:41:09.688220-04:00 narcissus.teiken.net sshd-session[801192]: Failed password for invalid user neu from 8.215.68.251 port 46290 ssh2 2026-06-26T23:43:51.481959-04:00 narcissus.teiken.net sshd-session[801360]: Invalid user standard from 8.215.68.251 port 43112 2026-06-26T23:43:51.506307-04:00 narcissus.teiken.net sshd-session[801360]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.215.68.251 2026-06-26T23:43:53.432849-04:00 narcissus.teiken.net sshd-session[801360]: Failed password for invalid user standard from 8.215.68.251 port 43112 ssh2 ... show less	Brute-Force SSH
🇺🇸 162.141.167.16	27 Jun 2026	rocinante.teiken.net:443 162.141.167.16:43592 - - [26/Jun/2026:23:40:00 -0400] "GET /.git/HEAD HTTP/ ... show more rocinante.teiken.net:443 162.141.167.16:43592 - - [26/Jun/2026:23:40:00 -0400] "GET /.git/HEAD HTTP/1.1" 404 4437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" rocinante.teiken.net:443 162.141.167.16:43580 - - [26/Jun/2026:23:40:00 -0400] "GET /.env HTTP/1.1" 404 506 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15.7; rv:149.0) Gecko/20100101 Firefox/149.0" rocinante.teiken.net:443 162.141.167.16:43592 - - [26/Jun/2026:23:40:00 -0400] "GET /.env.production HTTP/1.1" 404 506 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0" rocinante.teiken.net:443 162.141.167.16:43580 - - [26/Jun/2026:23:40:00 -0400] "GET /.env.local HTTP/1.1" 404 506 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" rocinante.teiken.net:443 162.141.167.16:43580 - - [26/Jun/2026:23:40:00 -0400] "GET /.env.development HTTP/1.1" 404 506 "-" "Mo ... show less	Web App Attack
🇨🇳 203.189.219.195	27 Jun 2026	2026-06-26T22:08:53.264433-04:00 narcissus.teiken.net sshd-session[794205]: pam_unix(sshd:auth): aut ... show more 2026-06-26T22:08:53.264433-04:00 narcissus.teiken.net sshd-session[794205]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.189.219.195 2026-06-26T22:08:55.580243-04:00 narcissus.teiken.net sshd-session[794205]: Failed password for invalid user shiva from 203.189.219.195 port 53424 ssh2 2026-06-26T22:15:12.313474-04:00 narcissus.teiken.net sshd-session[794596]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.189.219.195 user=root 2026-06-26T22:15:14.466970-04:00 narcissus.teiken.net sshd-session[794596]: Failed password for root from 203.189.219.195 port 33686 ssh2 2026-06-26T22:18:53.902323-04:00 narcissus.teiken.net sshd-session[794809]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.189.219.195 user=root 2026-06-26T22:18:55.963901-04:00 narcissus.teiken.net sshd-session[794809]: Failed password for root from 203.189.219.195 port 54244 ssh2 ... show less	Brute-Force SSH
🇺🇸 2620:96:a005::259	27 Jun 2026	2026-06-26T21:52:28.495246-04:00 nostromo.teiken.net kernel: [16590.338135] syn_limit:IN=sit1 OUT= M ... show more 2026-06-26T21:52:28.495246-04:00 nostromo.teiken.net kernel: [16590.338135] syn_limit:IN=sit1 OUT= MAC= SRC=2620:0096:a005:0000:0000:0000:0000:0259 DST=2001:0470:1f06:00d2:0000:0000:0000:0002 LEN=60 TC=0 HOPLIMIT=247 FLOWLBL=0 PROTO=TCP SPT=45142 DPT=802 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-26T21:52:29.038389-04:00 nostromo.teiken.net kernel: [16590.881269] syn_limit:IN=sit1 OUT= MAC= SRC=2620:0096:a005:0000:0000:0000:0000:0259 DST=2001:0470:1f06:00d2:0000:0000:0000:0002 LEN=60 TC=0 HOPLIMIT=247 FLOWLBL=0 PROTO=TCP SPT=45142 DPT=11740 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-26T21:52:29.239716-04:00 nostromo.teiken.net kernel: [16591.081486] syn_limit:IN=sit1 OUT= MAC= SRC=2620:0096:a005:0000:0000:0000:0000:0259 DST=2001:0470:1f06:00d2:0000:0000:0000:0002 LEN=60 TC=0 HOPLIMIT=247 FLOWLBL=0 PROTO=TCP SPT=45142 DPT=102 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-26T21:52:30.612500-04:00 nostromo.teiken.net kernel: [16592.455367] syn_limit:IN=sit1 OUT= MAC= SRC=2620:0096:a005:0000:0000:0 ... show less	Port Scan
🇹🇷 91.241.49.92	26 Jun 2026	2026-06-26T15:09:42.292991-04:00 nostromo.teiken.net sshd-session[203737]: pam_unix(sshd:auth): auth ... show more 2026-06-26T15:09:42.292991-04:00 nostromo.teiken.net sshd-session[203737]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.241.49.92 user=root 2026-06-26T15:09:43.765022-04:00 nostromo.teiken.net sshd-session[203737]: Failed password for root from 91.241.49.92 port 60964 ssh2 2026-06-26T15:09:42.249813-04:00 nostromo.teiken.net sshd-session[203736]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.241.49.92 user=root 2026-06-26T15:09:44.298611-04:00 nostromo.teiken.net sshd-session[203736]: Failed password for root from 91.241.49.92 port 60960 ssh2 2026-06-26T15:09:42.368637-04:00 nostromo.teiken.net sshd-session[203738]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.241.49.92 user=root 2026-06-26T15:09:44.559582-04:00 nostromo.teiken.net sshd-session[203738]: Failed password for root from 91.241.49.92 port 60952 ssh2 ... show less	Brute-Force SSH
🇺🇸 64.236.134.215	26 Jun 2026	2026-06-26T07:47:19.309466-04:00 nostromo.teiken.net kernel: [113583.687116] syn_limit:IN=en-wan2 OU ... show more 2026-06-26T07:47:19.309466-04:00 nostromo.teiken.net kernel: [113583.687116] syn_limit:IN=en-wan2 OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=64.236.134.215 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=61952 DF PROTO=TCP SPT=49209 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 2026-06-26T07:47:20.330751-04:00 nostromo.teiken.net kernel: [113584.712008] syn_limit:IN=en-wan2 OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=64.236.134.215 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=61953 DF PROTO=TCP SPT=49209 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 2026-06-26T07:47:20.339454-04:00 nostromo.teiken.net kernel: [113584.719108] syn_limit:IN=en-wan2 OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=64.236.134.215 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=21602 DF PROTO=TCP SPT=49281 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 2026-06-26T07:47:21.138425-04:00 nostromo.teiken.net kernel: [113585.519664] syn_limit:IN=en-wan2 OUT= MAC=00:50:43:37:c2 ... show less	Port Scan
🇭🇰 52.175.54.32	26 Jun 2026	mta-sts.teiken.org:80 52.175.54.32:49331 - - [26/Jun/2026:06:58:21 -0400] "GET /wp-content/plugins/h ... show more mta-sts.teiken.org:80 52.175.54.32:49331 - - [26/Jun/2026:06:58:21 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 663 "-" "-" mta-sts.teiken.org:443 52.175.54.32:48188 - - [26/Jun/2026:06:58:22 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 3205 "-" "-" mta-sts.teiken.org:80 52.175.54.32:49331 - - [26/Jun/2026:06:58:22 -0400] "GET /this_is_a_new_hello_world.php HTTP/1.1" 301 625 "-" "-" mta-sts.teiken.org:443 52.175.54.32:48188 - - [26/Jun/2026:06:58:23 -0400] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 575 "-" "-" mta-sts.teiken.org:80 52.175.54.32:49331 - - [26/Jun/2026:06:58:23 -0400] "GET //sql.php HTTP/1.1" 301 581 "-" "-" mta-sts.teiken.org:443 52.175.54.32:48188 - - [26/Jun/2026:06:58:23 -0400] "GET /sql.php HTTP/1.1" 404 575 "-" "-" mta-sts.teiken.org:80 52.175.54.32:49331 - - [26/Jun/2026:06:58:23 -0400] "GET /1index.php HTTP/1.1" 301 587 "-" "-" mta-sts.teiken.org:443 52.175.54.32:48188 - - [26/Jun/2026:06:58:23 ... show less	Web App Attack
🇦🇺 2400:6180:10:200::ccd9:f000	26 Jun 2026	2026-06-26T04:30:40.903492-04:00 rocinante.teiken.net kernel: [281910.273332] syn_limit:IN=ens5 OUT= ... show more 2026-06-26T04:30:40.903492-04:00 rocinante.teiken.net kernel: [281910.273332] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:86:dd SRC=2400:6180:0010:0200:0000:0000:ccd9:f000 DST=2600:1f18:0596:2501:0000:0000:0000:1001 LEN=80 TC=0 HOPLIMIT=53 FLOWLBL=972232 PROTO=TCP SPT=32302 DPT=53 WINDOW=64800 RES=0x00 SYN URGP=0 2026-06-26T04:30:40.903635-04:00 rocinante.teiken.net kernel: [281910.273445] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:86:dd SRC=2400:6180:0010:0200:0000:0000:ccd9:f000 DST=2600:1f18:0596:2501:0000:0000:0000:1001 LEN=80 TC=0 HOPLIMIT=53 FLOWLBL=406596 PROTO=TCP SPT=32272 DPT=53 WINDOW=64800 RES=0x00 SYN URGP=0 2026-06-26T04:30:40.909937-04:00 rocinante.teiken.net kernel: [281910.279789] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:86:dd SRC=2400:6180:0010:0200:0000:0000:ccd9:f000 DST=2600:1f18:0596:2501:0000:0000:0000:1001 LEN=80 TC=0 HOPLIMIT=53 FLOWLBL=8288 PROTO=TCP SPT=32312 DPT=53 WINDOW=64800 RES=0x00 SYN URGP= ... show less	Port Scan