AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User wteiken , the webmaster of teiken.org, joined AbuseIPDB in December 2021 and has reported 22,015 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇯🇵 34.146.75.248	17 minutes ago	2026-08-29T08:18:49.097567-04:00 nostromo.teiken.net kernel: [122138.396403] syn_limit:IN=en-wan OUT ... show more 2026-08-29T08:18:49.097567-04:00 nostromo.teiken.net kernel: [122138.396403] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=34.146.75.248 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x60 TTL=61 ID=50914 DF PROTO=TCP SPT=45946 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-08-29T08:18:49.098076-04:00 nostromo.teiken.net kernel: [122138.396725] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=34.146.75.248 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x60 TTL=61 ID=36392 DF PROTO=TCP SPT=45958 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-08-29T08:18:50.098992-04:00 nostromo.teiken.net kernel: [122139.397816] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=34.146.75.248 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x60 TTL=61 ID=36393 DF PROTO=TCP SPT=45958 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-08-29T08:18:50.099371-04:00 nostromo.teiken.net kernel: [122139.398004] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00: ... show less	Port Scan
🇺🇸 157.230.3.102	2 hours ago	2026-08-29T06:16:47.973684-04:00 rocinante.teiken.net kernel: [241308.690141] syn_limit:IN=ens5 OUT= ... show more 2026-08-29T06:16:47.973684-04:00 rocinante.teiken.net kernel: [241308.690141] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=157.230.3.102 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=43971 DF PROTO=TCP SPT=44172 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-08-29T06:16:51.995736-04:00 rocinante.teiken.net kernel: [241312.712121] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=157.230.3.102 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=17421 DF PROTO=TCP SPT=40812 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-08-29T06:16:53.974026-04:00 rocinante.teiken.net kernel: [241314.688072] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=157.230.3.102 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=51135 DF PROTO=TCP SPT=40846 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-08-29T06:16:56.974004-04:00 rocinante.teiken.net kernel: [241317.689045] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f ... show less	Port Scan
🇺🇸 34.23.125.105	5 hours ago	www.teiken.org:443 34.23.125.105:36808 - - [29/Aug/2026:03:21:29 -0400] "GET /.git/config HTTP/1.1" ... show more www.teiken.org:443 34.23.125.105:36808 - - [29/Aug/2026:03:21:29 -0400] "GET /.git/config HTTP/1.1" 404 4513 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" www.teiken.org:443 34.23.125.105:36858 - - [29/Aug/2026:03:21:29 -0400] "GET /.git-credentials HTTP/1.1" 404 4513 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" www.teiken.org:443 34.23.125.105:36808 - - [29/Aug/2026:03:21:29 -0400] "GET /.git/HEAD HTTP/1.1" 404 571 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" www.teiken.org:443 34.23.125.105:36808 - - [29/Aug/2026:03:21:29 -0400] "GET /.gitconfig HTTP/1.1" 404 571 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" www.teiken.org:443 34.23.125.105:36794 - - [29/Aug/2026:03:21:29 -0400] "GET /.gitlab-ci.yml HTTP/1.1" 404 571 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sh ... show less	Web App Attack
🇬🇧 34.13.0.236	5 hours ago	2026-08-29T03:10:06.489623-04:00 rocinante.teiken.net kernel: [230107.396292] syn_limit:IN=ens5 OUT= ... show more 2026-08-29T03:10:06.489623-04:00 rocinante.teiken.net kernel: [230107.396292] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.13.0.236 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=27753 DF PROTO=TCP SPT=39514 DPT=80 WINDOW=65320 RES=0x00 SYN URGP=0 2026-08-29T03:10:06.500433-04:00 rocinante.teiken.net kernel: [230107.396630] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.13.0.236 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=25525 DF PROTO=TCP SPT=39492 DPT=80 WINDOW=65320 RES=0x00 SYN URGP=0 2026-08-29T03:10:06.500497-04:00 rocinante.teiken.net kernel: [230107.399114] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.13.0.236 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=33783 DF PROTO=TCP SPT=39536 DPT=80 WINDOW=65320 RES=0x00 SYN URGP=0 2026-08-29T03:10:06.500537-04:00 rocinante.teiken.net kernel: [230107.401612] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2 ... show less	Port Scan
🇻🇳 157.66.100.251	6 hours ago	2026-08-29T02:01:13.846036-04:00 nostromo.teiken.net sshd-session[135591]: Invalid user user from 15 ... show more 2026-08-29T02:01:13.846036-04:00 nostromo.teiken.net sshd-session[135591]: Invalid user user from 157.66.100.251 port 38994 2026-08-29T02:01:13.869900-04:00 nostromo.teiken.net sshd-session[135591]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.66.100.251 2026-08-29T02:01:15.659543-04:00 nostromo.teiken.net sshd-session[135591]: Failed password for invalid user user from 157.66.100.251 port 38994 ssh2 2026-08-29T02:01:58.182639-04:00 nostromo.teiken.net sshd-session[135628]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.66.100.251 user=root 2026-08-29T02:01:59.489725-04:00 nostromo.teiken.net sshd-session[135628]: Failed password for root from 157.66.100.251 port 48594 ssh2 2026-08-29T02:02:42.272960-04:00 nostromo.teiken.net sshd-session[135672]: Invalid user user from 157.66.100.251 port 58622 ... show less	Brute-Force SSH
🇬🇧 2a03:b0c0:1:e0:0:1:b0bf:f001	8 hours ago	2026-08-29T00:31:18.926062-04:00 rocinante.teiken.net kernel: [220579.997153] syn_limit:IN=ens5 OUT= ... show more 2026-08-29T00:31:18.926062-04:00 rocinante.teiken.net kernel: [220579.997153] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:86:dd SRC=2a03:b0c0:0001:00e0:0000:0001:b0bf:f001 DST=2600:1f18:0596:2501:0000:0000:0000:1001 LEN=80 TC=0 HOPLIMIT=49 FLOWLBL=664164 PROTO=TCP SPT=24946 DPT=53 WINDOW=64800 RES=0x00 SYN URGP=0 2026-08-29T00:31:18.926935-04:00 rocinante.teiken.net kernel: [220579.998969] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:86:dd SRC=2a03:b0c0:0001:00e0:0000:0001:b0bf:f001 DST=2600:1f18:0596:2501:0000:0000:0000:1001 LEN=80 TC=0 HOPLIMIT=49 FLOWLBL=821798 PROTO=TCP SPT=24968 DPT=53 WINDOW=64800 RES=0x00 SYN URGP=0 2026-08-29T00:31:18.928293-04:00 rocinante.teiken.net kernel: [220580.000338] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:86:dd SRC=2a03:b0c0:0001:00e0:0000:0001:b0bf:f001 DST=2600:1f18:0596:2501:0000:0000:0000:1001 LEN=80 TC=0 HOPLIMIT=49 FLOWLBL=799291 PROTO=TCP SPT=24996 DPT=53 WINDOW=64800 RES=0x00 SYN URG ... show less	Port Scan
🇬🇧 18.130.13.76	9 hours ago	www.teiken.net:443 18.130.13.76:35816 - - [28/Aug/2026:23:23:13 -0400] "GET /.git/config HTTP/1.1" 4 ... show more www.teiken.net:443 18.130.13.76:35816 - - [28/Aug/2026:23:23:13 -0400] "GET /.git/config HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.dev:443 18.130.13.76:35806 - - [28/Aug/2026:23:23:13 -0400] "GET /.git/config HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 18.130.13.76:35816 - - [28/Aug/2026:23:23:13 -0400] "GET /.env HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.dev:443 18.130.13.76:35806 - - [28/Aug/2026:23:23:13 -0400] "GET /.env HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 18.130.13.76:35816 - - [28/Aug/2026:23:23:13 -0400] "GET /.env.local HT ... show less	Web App Attack
🇺🇸 134.199.215.255	9 hours ago	2026-08-28T23:15:44.053417-04:00 nostromo.teiken.net kernel: [89553.671885] syn_limit:IN=en-wan OUT= ... show more 2026-08-28T23:15:44.053417-04:00 nostromo.teiken.net kernel: [89553.671885] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=134.199.215.255 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=47681 DF PROTO=TCP SPT=57970 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-08-28T23:15:45.087448-04:00 nostromo.teiken.net kernel: [89554.698346] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=134.199.215.255 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=47682 DF PROTO=TCP SPT=57970 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-08-28T23:15:46.103100-04:00 nostromo.teiken.net kernel: [89555.721560] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=134.199.215.255 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=47683 DF PROTO=TCP SPT=57970 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-08-28T23:15:47.072007-04:00 nostromo.teiken.net kernel: [89556.690462] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:0 ... show less	Port Scan
🇺🇸 35.237.19.63	9 hours ago	2026-08-28T23:06:08.157490-04:00 rocinante.teiken.net kernel: [215469.324020] syn_limit:IN=ens5 OUT= ... show more 2026-08-28T23:06:08.157490-04:00 rocinante.teiken.net kernel: [215469.324020] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=35.237.19.63 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x60 TTL=58 ID=47383 DF PROTO=TCP SPT=52272 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-08-28T23:06:08.167586-04:00 rocinante.teiken.net kernel: [215469.326693] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=35.237.19.63 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x60 TTL=58 ID=27066 DF PROTO=TCP SPT=52288 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-08-28T23:06:08.167648-04:00 rocinante.teiken.net kernel: [215469.329367] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=35.237.19.63 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x60 TTL=58 ID=61414 DF PROTO=TCP SPT=52296 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-08-28T23:06:08.167723-04:00 rocinante.teiken.net kernel: [215469.332060] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:a ... show less	Port Scan
🇸🇬 47.129.248.130	9 hours ago	www.teiken.net:443 47.129.248.130:43992 - - [28/Aug/2026:22:54:25 -0400] "GET /.git/config HTTP/1.1" ... show more www.teiken.net:443 47.129.248.130:43992 - - [28/Aug/2026:22:54:25 -0400] "GET /.git/config HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 47.129.248.130:43992 - - [28/Aug/2026:22:54:25 -0400] "GET /.env HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 47.129.248.130:43992 - - [28/Aug/2026:22:54:25 -0400] "GET /.env.local HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 47.129.248.130:43992 - - [28/Aug/2026:22:54:26 -0400] "GET /.env.production HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 47.129.248.130:43992 - - [28/Aug/2026:22:54:26 -0400] "GET /.env.staging HTTP ... show less	Web App Attack
🇸🇬 54.151.158.45	9 hours ago	www.teiken.net:443 54.151.158.45:40258 - - [28/Aug/2026:22:50:45 -0400] "GET /.git/config HTTP/1.1" ... show more www.teiken.net:443 54.151.158.45:40258 - - [28/Aug/2026:22:50:45 -0400] "GET /.git/config HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 54.151.158.45:40258 - - [28/Aug/2026:22:50:46 -0400] "GET /.env HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 54.151.158.45:40258 - - [28/Aug/2026:22:50:46 -0400] "GET /.env.local HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 54.151.158.45:40258 - - [28/Aug/2026:22:50:46 -0400] "GET /.env.production HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 54.151.158.45:40258 - - [28/Aug/2026:22:50:46 -0400] "GET /.env.staging HTTP/1.1" ... show less	Web App Attack
🇺🇸 34.139.47.185	9 hours ago	2026-08-28T22:39:41.820839-04:00 nostromo.teiken.net kernel: [87391.460333] syn_limit:IN=en-wan OUT= ... show more 2026-08-28T22:39:41.820839-04:00 nostromo.teiken.net kernel: [87391.460333] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=34.139.47.185 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=60 ID=7563 DF PROTO=TCP SPT=42840 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-08-28T22:39:41.821201-04:00 nostromo.teiken.net kernel: [87391.460463] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=34.139.47.185 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=60 ID=8568 DF PROTO=TCP SPT=42736 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-08-28T22:39:41.821336-04:00 nostromo.teiken.net kernel: [87391.460837] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=34.139.47.185 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=60 ID=39607 DF PROTO=TCP SPT=42884 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-08-28T22:39:41.821431-04:00 nostromo.teiken.net kernel: [87391.460916] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2: ... show less	Port Scan
🇳🇱 34.12.8.212	10 hours ago	2026-08-28T21:56:08.340122-04:00 rocinante.teiken.net kernel: [211269.575759] syn_limit:IN=ens5 OUT= ... show more 2026-08-28T21:56:08.340122-04:00 rocinante.teiken.net kernel: [211269.575759] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.12.8.212 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=44948 DF PROTO=TCP SPT=47186 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-08-28T21:56:08.340306-04:00 rocinante.teiken.net kernel: [211269.576394] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.12.8.212 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=19017 DF PROTO=TCP SPT=47134 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-08-28T21:56:08.340338-04:00 rocinante.teiken.net kernel: [211269.578422] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.12.8.212 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=36195 DF PROTO=TCP SPT=47108 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-08-28T21:56:08.340391-04:00 rocinante.teiken.net kernel: [211269.581118] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:0 ... show less	Port Scan
🇮🇪 149.88.96.6	11 hours ago	2026-08-28T21:12:55.591016-04:00 narcissus.teiken.net sshd-session[18484]: Invalid user admin from 1 ... show more 2026-08-28T21:12:55.591016-04:00 narcissus.teiken.net sshd-session[18484]: Invalid user admin from 149.88.96.6 port 49328 2026-08-28T21:12:55.615732-04:00 narcissus.teiken.net sshd-session[18484]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.88.96.6 2026-08-28T21:12:57.572584-04:00 narcissus.teiken.net sshd-session[18484]: Failed password for invalid user admin from 149.88.96.6 port 49328 ssh2 2026-08-28T21:30:22.019888-04:00 narcissus.teiken.net sshd-session[19769]: Invalid user admin from 149.88.96.6 port 57988 2026-08-28T21:30:22.044077-04:00 narcissus.teiken.net sshd-session[19769]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.88.96.6 2026-08-28T21:30:24.044649-04:00 narcissus.teiken.net sshd-session[19769]: Failed password for invalid user admin from 149.88.96.6 port 57988 ssh2 ... show less	Brute-Force SSH
🇺🇸 34.23.125.105	11 hours ago	www.teiken.org:443 34.23.125.105:46080 - - [28/Aug/2026:20:47:49 -0400] "GET /@fs/src/.env?raw?? HTT ... show more www.teiken.org:443 34.23.125.105:46080 - - [28/Aug/2026:20:47:49 -0400] "GET /@fs/src/.env?raw?? HTTP/1.1" 404 4511 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" www.teiken.org:443 34.23.125.105:46092 - - [28/Aug/2026:20:47:49 -0400] "GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw?? HTTP/1.1" 404 4511 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" www.teiken.org:443 34.23.125.105:46102 - - [28/Aug/2026:20:47:49 -0400] "GET /@fs/app/.env?raw?? HTTP/1.1" 404 4511 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" www.teiken.org:443 34.23.125.105:46108 - - [28/Aug/2026:20:47:49 -0400] "GET /@fs/../.env?raw?? HTTP/1.1" 404 571 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" www.teiken.org:443 34.23.125.105:46102 - - [28/Aug/2026:20:47:49 -0400] "GET /files../.env HTTP/1.1" 404 571 "-" "meta ... show less	Web App Attack
🇺🇸 34.10.175.116	11 hours ago	2026-08-28T20:37:12.027448-04:00 nostromo.teiken.net kernel: [80041.736544] syn_limit:IN=en-wan OUT= ... show more 2026-08-28T20:37:12.027448-04:00 nostromo.teiken.net kernel: [80041.736544] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=34.10.175.116 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x60 TTL=61 ID=20414 DF PROTO=TCP SPT=50686 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-08-28T20:37:12.027837-04:00 nostromo.teiken.net kernel: [80041.736584] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=34.10.175.116 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x60 TTL=61 ID=58347 DF PROTO=TCP SPT=50716 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-08-28T20:37:12.027942-04:00 nostromo.teiken.net kernel: [80041.736636] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=34.10.175.116 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x60 TTL=61 ID=36576 DF PROTO=TCP SPT=50638 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-08-28T20:37:12.028034-04:00 nostromo.teiken.net kernel: [80041.736752] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a ... show less	Port Scan
🇬🇧 134.122.98.164	12 hours ago	2026-08-28T20:17:39.437451-04:00 nostromo.teiken.net kernel: [78869.154526] syn_limit:IN=en-wan OUT= ... show more 2026-08-28T20:17:39.437451-04:00 nostromo.teiken.net kernel: [78869.154526] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=134.122.98.164 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=9905 DF PROTO=TCP SPT=38602 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-08-28T20:17:40.448719-04:00 nostromo.teiken.net kernel: [78870.170614] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=134.122.98.164 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=9906 DF PROTO=TCP SPT=38602 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-08-28T20:17:41.477450-04:00 nostromo.teiken.net kernel: [78871.195189] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=134.122.98.164 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=9907 DF PROTO=TCP SPT=38602 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-08-28T20:17:42.437444-04:00 nostromo.teiken.net kernel: [78872.158395] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a ... show less	Port Scan
🇺🇸 104.197.134.111	12 hours ago	2026-08-28T20:06:30.833004-04:00 rocinante.teiken.net kernel: [204692.192290] syn_limit:IN=ens5 OUT= ... show more 2026-08-28T20:06:30.833004-04:00 rocinante.teiken.net kernel: [204692.192290] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=104.197.134.111 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=38185 DF PROTO=TCP SPT=38280 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-08-28T20:06:30.833181-04:00 rocinante.teiken.net kernel: [204692.194318] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=104.197.134.111 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=47868 DF PROTO=TCP SPT=38228 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-08-28T20:06:30.833228-04:00 rocinante.teiken.net kernel: [204692.194982] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=104.197.134.111 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=58 ID=60146 DF PROTO=TCP SPT=38200 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-08-28T20:06:30.835763-04:00 rocinante.teiken.net kernel: [204692.200466] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:b ... show less	Port Scan
🇺🇸 34.59.167.120	12 hours ago	2026-08-28T19:54:46.813557-04:00 rocinante.teiken.net kernel: [203988.191341] syn_limit:IN=ens5 OUT= ... show more 2026-08-28T19:54:46.813557-04:00 rocinante.teiken.net kernel: [203988.191341] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.59.167.120 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=58 ID=29688 DF PROTO=TCP SPT=34590 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-08-28T19:54:46.813717-04:00 rocinante.teiken.net kernel: [203988.191341] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.59.167.120 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x60 TTL=58 ID=60183 DF PROTO=TCP SPT=34570 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-08-28T19:54:46.821642-04:00 rocinante.teiken.net kernel: [203988.196788] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.59.167.120 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x60 TTL=58 ID=45231 DF PROTO=TCP SPT=34652 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-08-28T19:54:46.821775-04:00 rocinante.teiken.net kernel: [203988.199451] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f ... show less	Port Scan
🇺🇸 136.108.4.171	12 hours ago	2026-08-28T19:45:24.337446-04:00 nostromo.teiken.net kernel: [76934.070103] syn_limit:IN=en-wan OUT= ... show more 2026-08-28T19:45:24.337446-04:00 nostromo.teiken.net kernel: [76934.070103] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=136.108.4.171 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=60 ID=8180 DF PROTO=TCP SPT=42806 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-08-28T19:45:24.337732-04:00 nostromo.teiken.net kernel: [76934.070528] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=136.108.4.171 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=60 ID=30744 DF PROTO=TCP SPT=42790 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-08-28T19:45:25.380943-04:00 nostromo.teiken.net kernel: [76935.121749] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=136.108.4.171 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=60 ID=8181 DF PROTO=TCP SPT=42806 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-08-28T19:45:25.387436-04:00 nostromo.teiken.net kernel: [76935.122267] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2: ... show less	Port Scan
🇧🇷 151.243.218.153	13 hours ago	2026-08-28T18:41:39.014574-04:00 nostromo.teiken.net sshd-session[101784]: pam_unix(sshd:auth): auth ... show more 2026-08-28T18:41:39.014574-04:00 nostromo.teiken.net sshd-session[101784]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.243.218.153 user=root 2026-08-28T18:41:41.195479-04:00 nostromo.teiken.net sshd-session[101784]: Failed password for root from 151.243.218.153 port 43170 ssh2 2026-08-28T18:46:07.240796-04:00 nostromo.teiken.net sshd-session[102023]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.243.218.153 user=root 2026-08-28T18:46:08.680115-04:00 nostromo.teiken.net sshd-session[102023]: Failed password for root from 151.243.218.153 port 52128 ssh2 2026-08-28T18:50:43.295971-04:00 nostromo.teiken.net sshd-session[102254]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.243.218.153 user=root 2026-08-28T18:50:45.537548-04:00 nostromo.teiken.net sshd-session[102254]: Failed password for root from 151.243.218.153 port 34194 ssh2 ... show less	Brute-Force SSH
🇺🇸 34.125.101.215	13 hours ago	2026-08-28T18:37:01.902010-04:00 rocinante.teiken.net kernel: [199323.314798] syn_limit:IN=ens5 OUT= ... show more 2026-08-28T18:37:01.902010-04:00 rocinante.teiken.net kernel: [199323.314798] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.125.101.215 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x60 TTL=58 ID=53336 DF PROTO=TCP SPT=3608 DPT=443 WINDOW=42600 RES=0x00 SYN URGP=0 2026-08-28T18:37:01.902205-04:00 rocinante.teiken.net kernel: [199323.317293] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.125.101.215 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x60 TTL=58 ID=22456 DF PROTO=TCP SPT=3624 DPT=443 WINDOW=42600 RES=0x00 SYN URGP=0 2026-08-28T18:37:01.902251-04:00 rocinante.teiken.net kernel: [199323.317471] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.125.101.215 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x60 TTL=58 ID=49878 DF PROTO=TCP SPT=3614 DPT=443 WINDOW=42600 RES=0x00 SYN URGP=0 2026-08-28T18:37:01.902281-04:00 rocinante.teiken.net kernel: [199323.320284] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f ... show less	Port Scan
🇸🇬 152.69.214.125	14 hours ago	www.teiken.org:443 152.69.214.125:61667 - - [28/Aug/2026:18:15:49 -0400] "GET /wp-login.php HTTP/1.1 ... show more www.teiken.org:443 152.69.214.125:61667 - - [28/Aug/2026:18:15:49 -0400] "GET /wp-login.php HTTP/1.1" 404 3499 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36" www.teiken.org:443 152.69.214.125:61667 - - [28/Aug/2026:18:15:50 -0400] "GET /wp-admin/admin-ajax.php HTTP/1.1" 404 622 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" www.teiken.org:443 152.69.214.125:61667 - - [28/Aug/2026:18:15:50 -0400] "GET /wp-admin/load-scripts.php HTTP/1.1" 404 622 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36" www.teiken.org:443 152.69.214.125:61667 - - [28/Aug/2026:18:15:51 -0400] "GET /wp-admin/load-styles.php HTTP/1.1" 404 622 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" www.teiken.org:443 152.69.214.125 ... show less	Web App Attack
🇺🇸 34.219.9.97	14 hours ago	www.teiken.net:443 34.219.9.97:41688 - - [28/Aug/2026:18:15:45 -0400] "GET /.git/config HTTP/1.1" 40 ... show more www.teiken.net:443 34.219.9.97:41688 - - [28/Aug/2026:18:15:45 -0400] "GET /.git/config HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.219.9.97:41688 - - [28/Aug/2026:18:15:45 -0400] "GET /.env HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.219.9.97:41688 - - [28/Aug/2026:18:15:45 -0400] "GET /.env.local HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.219.9.97:41688 - - [28/Aug/2026:18:15:45 -0400] "GET /.env.production HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.219.9.97:41688 - - [28/Aug/2026:18:15:45 -0400] "GET /.env.staging HTTP/1.1" 404 564 " ... show less	Web App Attack
🇺🇸 35.243.234.104	15 hours ago	2026-08-28T16:49:37.872234-04:00 nostromo.teiken.net kernel: [66387.717507] syn_limit:IN=en-wan OUT= ... show more 2026-08-28T16:49:37.872234-04:00 nostromo.teiken.net kernel: [66387.717507] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=35.243.234.104 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=60 ID=29659 DF PROTO=TCP SPT=49120 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-08-28T16:49:37.872782-04:00 nostromo.teiken.net kernel: [66387.717648] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=35.243.234.104 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=60 ID=30551 DF PROTO=TCP SPT=49134 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-08-28T16:49:37.872878-04:00 nostromo.teiken.net kernel: [66387.717779] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=35.243.234.104 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=60 ID=53550 DF PROTO=TCP SPT=49062 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-08-28T16:49:37.873012-04:00 nostromo.teiken.net kernel: [66387.717843] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:8 ... show less	Port Scan