AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User wteiken , the webmaster of teiken.org, joined AbuseIPDB in December 2021 and has reported 23,641 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇳🇱 107.189.22.50	25 Oct 2026	2026-10-25T01:47:34.666599-04:00 nostromo.teiken.net kernel: [314403.955683] syn_limit:IN=en-wan OUT ... show more 2026-10-25T01:47:34.666599-04:00 nostromo.teiken.net kernel: [314403.955683] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=107.189.22.50 DST=173.52.106.128 LEN=52 TOS=0x00 PREC=0x00 TTL=120 ID=65457 DF PROTO=TCP SPT=57966 DPT=88 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-25T01:47:34.696576-04:00 nostromo.teiken.net kernel: [314403.987131] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=107.189.22.50 DST=173.52.106.128 LEN=52 TOS=0x00 PREC=0x00 TTL=120 ID=65458 DF PROTO=TCP SPT=57968 DPT=81 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-25T01:47:34.714801-04:00 nostromo.teiken.net kernel: [314404.007761] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=107.189.22.50 DST=173.52.106.128 LEN=52 TOS=0x00 PREC=0x00 TTL=120 ID=65460 DF PROTO=TCP SPT=57969 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-25T01:47:34.730289-04:00 nostromo.teiken.net kernel: [314404.023248] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00 ... show less	Port Scan
🇨🇳 120.211.50.45	25 Oct 2026	2026-10-24T22:22:46.268260-04:00 nostromo.teiken.net sshd-session[481567]: pam_unix(sshd:auth): auth ... show more 2026-10-24T22:22:46.268260-04:00 nostromo.teiken.net sshd-session[481567]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.211.50.45 user=root 2026-10-24T22:22:48.505943-04:00 nostromo.teiken.net sshd-session[481567]: Failed password for root from 120.211.50.45 port 41422 ssh2 2026-10-24T22:22:52.528414-04:00 nostromo.teiken.net sshd-session[481578]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.211.50.45 user=root 2026-10-24T22:22:54.560000-04:00 nostromo.teiken.net sshd-session[481578]: Failed password for root from 120.211.50.45 port 56822 ssh2 2026-10-24T22:22:58.646555-04:00 nostromo.teiken.net sshd-session[481587]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.211.50.45 user=root 2026-10-24T22:23:00.721704-04:00 nostromo.teiken.net sshd-session[481587]: Failed password for root from 120.211.50.45 port 39440 ssh2 ... show less	Brute-Force SSH
🇳🇱 34.34.86.254	25 Oct 2026	rocinante.teiken.net:443 34.34.86.254:43148 - - [24/Oct/2026:22:10:12 -0400] "GET /.git/config HTTP/ ... show more rocinante.teiken.net:443 34.34.86.254:43148 - - [24/Oct/2026:22:10:12 -0400] "GET /.git/config HTTP/1.1" 404 557 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.34.86.254:43148 - - [24/Oct/2026:22:10:13 -0400] "GET /.env HTTP/1.1" 404 557 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.34.86.254:43148 - - [24/Oct/2026:22:10:13 -0400] "GET /.env.local HTTP/1.1" 404 557 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.34.86.254:43148 - - [24/Oct/2026:22:10:13 -0400] "GET /.env.production HTTP/1.1" 404 557 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.34.86.254:43148 - - [24/Oct/2026:22:10:13 -0400] "GET /.env.staging HTTP/1.1" 404 557 "-" "M ... show less	Web App Attack
🇨🇳 118.145.82.180	24 Oct 2026	2026-10-24T19:20:10.259192-04:00 nostromo.teiken.net sshd-session[465109]: Failed password for root ... show more 2026-10-24T19:20:10.259192-04:00 nostromo.teiken.net sshd-session[465109]: Failed password for root from 118.145.82.180 port 36476 ssh2 2026-10-24T19:20:14.365971-04:00 nostromo.teiken.net sshd-session[465109]: Failed password for root from 118.145.82.180 port 36476 ssh2 2026-10-24T19:20:18.260400-04:00 nostromo.teiken.net sshd-session[465109]: Failed password for root from 118.145.82.180 port 36476 ssh2 2026-10-24T19:20:20.247995-04:00 nostromo.teiken.net sshd-session[465109]: Failed password for root from 118.145.82.180 port 36476 ssh2 2026-10-24T19:20:22.839876-04:00 nostromo.teiken.net sshd-session[465109]: Failed password for root from 118.145.82.180 port 36476 ssh2 2026-10-24T19:20:24.788856-04:00 nostromo.teiken.net sshd-session[465109]: Disconnecting authenticating user root 118.145.82.180 port 36476: Change of username or service not allowed: (root,ssh-connection) -> (test,ssh-connection) [preauth] ... show less	Brute-Force SSH
🇮🇳 34.47.234.53	24 Oct 2026	www.teiken.net:443 34.47.234.53:41888 - - [24/Oct/2026:18:28:11 -0400] "GET /.git/config HTTP/1.1" 4 ... show more www.teiken.net:443 34.47.234.53:41888 - - [24/Oct/2026:18:28:11 -0400] "GET /.git/config HTTP/1.1" 404 560 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.47.234.53:41888 - - [24/Oct/2026:18:28:11 -0400] "GET /.env HTTP/1.1" 404 560 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.47.234.53:41888 - - [24/Oct/2026:18:28:11 -0400] "GET /.env.local HTTP/1.1" 404 560 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.47.234.53:41888 - - [24/Oct/2026:18:28:12 -0400] "GET /.env.production HTTP/1.1" 404 560 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.47.234.53:41888 - - [24/Oct/2026:18:28:12 -0400] "GET /.env.staging HTTP/1.1" 404 560 "-" "Mozilla/5.0 (X11; Linux x86_64) ... show less	Web App Attack
🇶🇦 34.18.188.191	24 Oct 2026	rocinante.teiken.net:443 34.18.188.191:40788 - - [24/Oct/2026:18:22:31 -0400] "GET /.git/config HTTP ... show more rocinante.teiken.net:443 34.18.188.191:40788 - - [24/Oct/2026:18:22:31 -0400] "GET /.git/config HTTP/1.1" 404 556 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.18.188.191:40788 - - [24/Oct/2026:18:22:32 -0400] "GET /.env HTTP/1.1" 404 556 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.18.188.191:40788 - - [24/Oct/2026:18:22:32 -0400] "GET /.env.local HTTP/1.1" 404 556 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.18.188.191:40788 - - [24/Oct/2026:18:22:32 -0400] "GET /.env.production HTTP/1.1" 404 556 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.18.188.191:40788 - - [24 ... show less	Web App Attack
🇺🇸 172.206.179.243	24 Oct 2026	rocinante.teiken.net:443 172.206.179.243:47128 - - [24/Oct/2026:16:56:51 -0400] "GET /.env HTTP/1.1" ... show more rocinante.teiken.net:443 172.206.179.243:47128 - - [24/Oct/2026:16:56:51 -0400] "GET /.env HTTP/1.1" 404 3399 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" rocinante.teiken.net:443 172.206.179.243:47128 - - [24/Oct/2026:16:56:51 -0400] "GET /.env.local HTTP/1.1" 404 554 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" rocinante.teiken.net:443 172.206.179.243:47128 - - [24/Oct/2026:16:56:52 -0400] "GET /.env.production HTTP/1.1" 404 554 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" rocinante.teiken.net:443 172.206.179.243:47128 - - [24/Oct/2026:16:56:52 -0400] "GET /.env.production.local HTTP/1.1" 404 554 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" rocinante.teiken.net:443 172.206.179.243:47128 - - [24/Oc ... show less	Web App Attack
🇨🇳 106.124.147.169	24 Oct 2026	2026-10-24T16:25:11.137505-04:00 narcissus.teiken.net sshd-session[487827]: pam_unix(sshd:auth): aut ... show more 2026-10-24T16:25:11.137505-04:00 narcissus.teiken.net sshd-session[487827]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.124.147.169 user=root 2026-10-24T16:25:13.654536-04:00 narcissus.teiken.net sshd-session[487827]: Failed password for root from 106.124.147.169 port 34460 ssh2 2026-10-24T16:25:16.396451-04:00 narcissus.teiken.net sshd-session[487836]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.124.147.169 user=root 2026-10-24T16:25:18.397766-04:00 narcissus.teiken.net sshd-session[487836]: Failed password for root from 106.124.147.169 port 34694 ssh2 2026-10-24T16:25:21.651006-04:00 narcissus.teiken.net sshd-session[487845]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.124.147.169 user=root 2026-10-24T16:25:23.871330-04:00 narcissus.teiken.net sshd-session[487845]: Failed password for root from 106.124.147.169 port 34974 ssh2 ... show less	Brute-Force SSH
🇩🇪 46.101.111.185	24 Oct 2026	2026-10-24T07:08:15.002594-04:00 rocinante.teiken.net kernel: [583107.000662] syn_limit:IN=ens5 OUT= ... show more 2026-10-24T07:08:15.002594-04:00 rocinante.teiken.net kernel: [583107.000662] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=46.101.111.185 DST=192.168.16.119 LEN=60 TOS=0x08 PREC=0x20 TTL=50 ID=3507 DF PROTO=TCP SPT=35290 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-24T07:08:16.014075-04:00 rocinante.teiken.net kernel: [583108.012141] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=46.101.111.185 DST=192.168.16.119 LEN=60 TOS=0x08 PREC=0x20 TTL=50 ID=3508 DF PROTO=TCP SPT=35290 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-24T07:08:18.010602-04:00 rocinante.teiken.net kernel: [583110.008583] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=46.101.111.185 DST=192.168.16.119 LEN=60 TOS=0x08 PREC=0x20 TTL=50 ID=62721 DF PROTO=TCP SPT=50166 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-24T07:08:18.032504-04:00 rocinante.teiken.net kernel: [583110.028141] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a: ... show less	Port Scan
🇨🇦 146.190.242.161	24 Oct 2026	2026-10-24T07:08:13.224484-04:00 rocinante.teiken.net kernel: [583105.221138] syn_limit:IN=ens5 OUT= ... show more 2026-10-24T07:08:13.224484-04:00 rocinante.teiken.net kernel: [583105.221138] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=146.190.242.161 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=23903 DF PROTO=TCP SPT=54134 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-24T07:08:14.228471-04:00 rocinante.teiken.net kernel: [583106.225300] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=146.190.242.161 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=23904 DF PROTO=TCP SPT=54134 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-24T07:08:16.243274-04:00 rocinante.teiken.net kernel: [583108.241334] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=146.190.242.161 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=23905 DF PROTO=TCP SPT=54134 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-24T07:08:17.235111-04:00 rocinante.teiken.net kernel: [583109.233146] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:b ... show less	Port Scan
🇩🇪 164.90.228.79	24 Oct 2026	2026-10-24T07:08:14.956462-04:00 rocinante.teiken.net kernel: [583106.952435] syn_limit:IN=ens5 OUT= ... show more 2026-10-24T07:08:14.956462-04:00 rocinante.teiken.net kernel: [583106.952435] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=164.90.228.79 DST=192.168.16.119 LEN=60 TOS=0x08 PREC=0x20 TTL=50 ID=26854 DF PROTO=TCP SPT=58124 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-24T07:08:15.983785-04:00 rocinante.teiken.net kernel: [583107.981854] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=164.90.228.79 DST=192.168.16.119 LEN=60 TOS=0x08 PREC=0x20 TTL=50 ID=26855 DF PROTO=TCP SPT=58124 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-24T07:08:17.955941-04:00 rocinante.teiken.net kernel: [583109.953969] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=164.90.228.79 DST=192.168.16.119 LEN=60 TOS=0x08 PREC=0x20 TTL=50 ID=12362 DF PROTO=TCP SPT=41864 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-24T07:08:18.000108-04:00 rocinante.teiken.net kernel: [583109.997850] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f ... show less	Port Scan
🇺🇸 134.209.211.221	24 Oct 2026	2026-10-24T04:55:20.272488-04:00 rocinante.teiken.net kernel: [575132.378808] syn_limit:IN=ens5 OUT= ... show more 2026-10-24T04:55:20.272488-04:00 rocinante.teiken.net kernel: [575132.378808] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=134.209.211.221 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=22344 DF PROTO=TCP SPT=49592 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-24T04:55:21.280708-04:00 rocinante.teiken.net kernel: [575133.390671] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=134.209.211.221 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=22345 DF PROTO=TCP SPT=49592 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-24T04:55:23.348150-04:00 rocinante.teiken.net kernel: [575135.455391] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=134.209.211.221 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=8431 DF PROTO=TCP SPT=49594 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-24T04:55:23.348317-04:00 rocinante.teiken.net kernel: [575135.455649] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb ... show less	Port Scan
🇩🇪 34.40.38.86	24 Oct 2026	rocinante.teiken.net:443 34.40.38.86:48362 - - [24/Oct/2026:04:29:40 -0400] "GET /.git/config HTTP/1 ... show more rocinante.teiken.net:443 34.40.38.86:48362 - - [24/Oct/2026:04:29:40 -0400] "GET /.git/config HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.40.38.86:48362 - - [24/Oct/2026:04:29:40 -0400] "GET /.env HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.40.38.86:48362 - - [24/Oct/2026:04:29:40 -0400] "GET /.env.local HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.40.38.86:48362 - - [24/Oct/2026:04:29:41 -0400] "GET /.env.production HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.40.38.86:48362 - - [24/Oct/2026: ... show less	Web App Attack
🇨🇦 198.245.55.61	24 Oct 2026	2026-10-24T04:15:55.890091-04:00 nostromo.teiken.net sshd-session[381294]: pam_unix(sshd:auth): auth ... show more 2026-10-24T04:15:55.890091-04:00 nostromo.teiken.net sshd-session[381294]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.245.55.61 user=root 2026-10-24T04:15:57.441664-04:00 nostromo.teiken.net sshd-session[381294]: Failed password for root from 198.245.55.61 port 64841 ssh2 2026-10-24T04:15:57.201348-04:00 nostromo.teiken.net sshd-session[381298]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.245.55.61 user=root 2026-10-24T04:15:59.321044-04:00 nostromo.teiken.net sshd-session[381298]: Failed password for root from 198.245.55.61 port 64849 ssh2 2026-10-24T04:15:58.508601-04:00 nostromo.teiken.net sshd-session[381301]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.245.55.61 user=root 2026-10-24T04:16:00.672735-04:00 nostromo.teiken.net sshd-session[381301]: Failed password for root from 198.245.55.61 port 64860 ssh2 ... show less	Brute-Force SSH
🇩🇪 34.32.26.235	24 Oct 2026	www.teiken.net:443 34.32.26.235:47394 - - [24/Oct/2026:00:33:43 -0400] "GET /.git/config HTTP/1.1" 4 ... show more www.teiken.net:443 34.32.26.235:47394 - - [24/Oct/2026:00:33:43 -0400] "GET /.git/config HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.32.26.235:47394 - - [24/Oct/2026:00:33:44 -0400] "GET /.env HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.32.26.235:47394 - - [24/Oct/2026:00:33:44 -0400] "GET /.env.local HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.32.26.235:47394 - - [24/Oct/2026:00:33:44 -0400] "GET /.env.production HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.32.26.235:47394 - - [24/Oct/2026:00:33:45 -0400] "GET /.en ... show less	Web App Attack
🇩🇪 147.78.241.74	24 Oct 2026	2026-10-24T00:11:43.816495-04:00 rocinante.teiken.net kernel: [558116.170968] syn_limit:IN=ens5 OUT= ... show more 2026-10-24T00:11:43.816495-04:00 rocinante.teiken.net kernel: [558116.170968] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=147.78.241.74 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=30203 DF PROTO=TCP SPT=54304 DPT=443 WINDOW=64320 RES=0x00 SYN URGP=0 2026-10-24T00:11:43.988545-04:00 rocinante.teiken.net kernel: [558116.345031] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=147.78.241.74 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=1367 DF PROTO=TCP SPT=54312 DPT=443 WINDOW=64320 RES=0x00 SYN URGP=0 2026-10-24T00:11:45.030140-04:00 rocinante.teiken.net kernel: [558117.384953] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=147.78.241.74 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=1368 DF PROTO=TCP SPT=54312 DPT=443 WINDOW=64320 RES=0x00 SYN URGP=0 2026-10-24T00:11:45.860514-04:00 rocinante.teiken.net kernel: [558118.214846] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3: ... show less	Port Scan
🇩🇪 164.90.178.230	24 Oct 2026	2026-10-23T21:51:31.253338-04:00 nostromo.teiken.net kernel: [213841.424020] syn_limit:IN=en-wan OUT ... show more 2026-10-23T21:51:31.253338-04:00 nostromo.teiken.net kernel: [213841.424020] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=164.90.178.230 DST=173.52.106.128 LEN=60 TOS=0x08 PREC=0x20 TTL=54 ID=57292 DF PROTO=TCP SPT=33704 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-23T21:51:32.279793-04:00 nostromo.teiken.net kernel: [213842.450549] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=164.90.178.230 DST=173.52.106.128 LEN=60 TOS=0x08 PREC=0x20 TTL=54 ID=57293 DF PROTO=TCP SPT=33704 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-23T21:51:33.303257-04:00 nostromo.teiken.net kernel: [213843.474004] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=164.90.178.230 DST=173.52.106.128 LEN=60 TOS=0x08 PREC=0x20 TTL=54 ID=57294 DF PROTO=TCP SPT=33704 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-23T21:51:34.266597-04:00 nostromo.teiken.net kernel: [213844.436087] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2: ... show less	Port Scan
🇺🇸 198.199.75.105	24 Oct 2026	2026-10-23T21:50:04.557840-04:00 nostromo.teiken.net kernel: [213754.729343] syn_limit:IN=en-wan OUT ... show more 2026-10-23T21:50:04.557840-04:00 nostromo.teiken.net kernel: [213754.729343] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=198.199.75.105 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=8127 DF PROTO=TCP SPT=51396 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-23T21:50:05.560779-04:00 nostromo.teiken.net kernel: [213755.732287] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=198.199.75.105 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=8128 DF PROTO=TCP SPT=51396 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-23T21:50:06.586607-04:00 nostromo.teiken.net kernel: [213756.754273] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=198.199.75.105 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=8129 DF PROTO=TCP SPT=51396 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-23T21:50:07.559292-04:00 nostromo.teiken.net kernel: [213757.730793] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00: ... show less	Port Scan
🇺🇸 15.204.122.159	24 Oct 2026	2026-10-23T21:05:31.793482-04:00 nostromo.teiken.net sshd-session[340313]: pam_unix(sshd:auth): auth ... show more 2026-10-23T21:05:31.793482-04:00 nostromo.teiken.net sshd-session[340313]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=15.204.122.159 user=root 2026-10-23T21:05:33.466250-04:00 nostromo.teiken.net sshd-session[340313]: Failed password for root from 15.204.122.159 port 55835 ssh2 2026-10-23T21:05:37.983237-04:00 nostromo.teiken.net sshd-session[340323]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=15.204.122.159 user=root 2026-10-23T21:05:39.433510-04:00 nostromo.teiken.net sshd-session[340323]: Failed password for root from 15.204.122.159 port 56928 ssh2 2026-10-23T21:05:50.138957-04:00 nostromo.teiken.net sshd-session[340341]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=15.204.122.159 user=root 2026-10-23T21:05:52.279836-04:00 nostromo.teiken.net sshd-session[340341]: Failed password for root from 15.204.122.159 port 59348 ssh2 ... show less	Brute-Force SSH
🇬🇧 34.39.116.255	23 Oct 2026	www.teiken.net:443 34.39.116.255:57920 - - [23/Oct/2026:19:32:54 -0400] "GET /.git/config HTTP/1.1" ... show more www.teiken.net:443 34.39.116.255:57920 - - [23/Oct/2026:19:32:54 -0400] "GET /.git/config HTTP/1.1" 404 560 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.39.116.255:57920 - - [23/Oct/2026:19:32:55 -0400] "GET /.env HTTP/1.1" 404 560 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.39.116.255:57920 - - [23/Oct/2026:19:32:55 -0400] "GET /.env.local HTTP/1.1" 404 560 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.39.116.255:57920 - - [23/Oct/2026:19:32:55 -0400] "GET /.env.production HTTP/1.1" 404 560 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.39.116.255:57920 - - [23/Oct/2026:19:32:56 -0400] "GET ... show less	Web App Attack
🇺🇸 209.87.169.50	23 Oct 2026	2026-10-23T17:28:13.425237-04:00 nostromo.teiken.net sshd-session[317183]: pam_unix(sshd:auth): auth ... show more 2026-10-23T17:28:13.425237-04:00 nostromo.teiken.net sshd-session[317183]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.87.169.50 user=root 2026-10-23T17:28:14.872848-04:00 nostromo.teiken.net sshd-session[317183]: Failed password for root from 209.87.169.50 port 41610 ssh2 2026-10-23T17:28:22.737091-04:00 nostromo.teiken.net sshd-session[317195]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.87.169.50 user=root 2026-10-23T17:28:25.090914-04:00 nostromo.teiken.net sshd-session[317195]: Failed password for root from 209.87.169.50 port 50835 ssh2 2026-10-23T17:28:26.093756-04:00 nostromo.teiken.net sshd-session[317207]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.87.169.50 user=root 2026-10-23T17:28:27.632932-04:00 nostromo.teiken.net sshd-session[317207]: Failed password for root from 209.87.169.50 port 9694 ssh2 ... show less	Brute-Force SSH
🇰🇷 34.22.78.147	23 Oct 2026	mta-sts.teiken.org:443 34.22.78.147:40980 - - [23/Oct/2026:13:15:16 -0400] "GET /.git/config HTTP/1. ... show more mta-sts.teiken.org:443 34.22.78.147:40980 - - [23/Oct/2026:13:15:16 -0400] "GET /.git/config HTTP/1.1" 404 630 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" mta-sts.teiken.org:443 34.22.78.147:40980 - - [23/Oct/2026:13:15:16 -0400] "GET /.env HTTP/1.1" 404 630 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" mta-sts.teiken.org:443 34.22.78.147:40980 - - [23/Oct/2026:13:15:17 -0400] "GET /.env.local HTTP/1.1" 404 630 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" mta-sts.teiken.org:443 34.22.78.147:40980 - - [23/Oct/2026:13:15:17 -0400] "GET /.env.production HTTP/1.1" 404 630 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" mta-sts.teiken.org:443 34.22.78.147:40980 - - [23/Oct/2026:13:15:17 -0400] "GET /.env.st ... show less	Web App Attack
🇺🇸 142.93.23.63	23 Oct 2026	2026-10-23T10:51:31.987969-04:00 narcissus.teiken.net sshd-session[305774]: Invalid user abdollah fr ... show more 2026-10-23T10:51:31.987969-04:00 narcissus.teiken.net sshd-session[305774]: Invalid user abdollah from 142.93.23.63 port 49484 2026-10-23T10:51:32.060860-04:00 narcissus.teiken.net sshd-session[305774]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.23.63 2026-10-23T10:51:34.249129-04:00 narcissus.teiken.net sshd-session[305774]: Failed password for invalid user abdollah from 142.93.23.63 port 49484 ssh2 2026-10-23T10:54:24.432548-04:00 narcissus.teiken.net sshd-session[306011]: Invalid user abnoos from 142.93.23.63 port 60130 2026-10-23T10:54:24.505201-04:00 narcissus.teiken.net sshd-session[306011]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.23.63 2026-10-23T10:54:27.266135-04:00 narcissus.teiken.net sshd-session[306011]: Failed password for invalid user abnoos from 142.93.23.63 port 60130 ssh2 ... show less	Brute-Force SSH
🇩🇪 172.71.247.148	23 Oct 2026	2026-10-23T09:45:25.380363-04:00 nostromo.teiken.net kernel: [170275.937163] syn_limit:IN=en-wan OUT ... show more 2026-10-23T09:45:25.380363-04:00 nostromo.teiken.net kernel: [170275.937163] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=172.71.247.148 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x20 TTL=53 ID=30575 DF PROTO=TCP SPT=13554 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-23T09:45:25.380658-04:00 nostromo.teiken.net kernel: [170275.937255] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=172.71.247.148 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x20 TTL=49 ID=53047 DF PROTO=TCP SPT=13572 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-23T09:45:25.380758-04:00 nostromo.teiken.net kernel: [170275.937525] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=172.71.247.148 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x20 TTL=49 ID=41163 DF PROTO=TCP SPT=13581 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-23T09:45:26.396594-04:00 nostromo.teiken.net kernel: [170276.952487] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00: ... show less	Port Scan
🇸🇦 178.80.241.161	23 Oct 2026	www.teiken.net:443 178.80.241.161:50752 - - [23/Oct/2026:09:01:30 -0400] "GET /phpmyadmin/setup/inde ... show more www.teiken.net:443 178.80.241.161:50752 - - [23/Oct/2026:09:01:30 -0400] "GET /phpmyadmin/setup/index.php HTTP/1.1" 404 4546 "-" "Mozilla/5.0 (Windows NT 4.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2049.0 Safari/537.36" www.teiken.net:443 178.80.241.161:50768 - - [23/Oct/2026:09:01:31 -0400] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 4545 "-" "Mozilla/5.0 (Windows NT 4.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2049.0 Safari/537.36" www.teiken.net:443 178.80.241.161:50778 - - [23/Oct/2026:09:01:31 -0400] "GET /_phpmyadmin/scripts/setup.php HTTP/1.1" 404 4546 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:99.0) Gecko/20100101 Firefox/99.0" www.teiken.net:443 178.80.241.161:50780 - - [23/Oct/2026:09:01:32 -0400] "GET /forum/phpmyadmin/scripts/setup.php HTTP/1.1" 404 4546 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML like Gecko) Chrome/44.0.2403.155 Safari/537.36" www.teiken.net:443 178.80.241.161:50786 - - [23/Oct/2026:09 ... show less	Web App Attack