AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User wteiken , the webmaster of teiken.org, joined AbuseIPDB in December 2021 and has reported 22,437 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇻🇳 160.250.128.93	06 Sep 2026	2026-09-06T15:28:10.394142-04:00 nostromo.teiken.net sshd-session[437295]: Failed password for root ... show more 2026-09-06T15:28:10.394142-04:00 nostromo.teiken.net sshd-session[437295]: Failed password for root from 160.250.128.93 port 51148 ssh2 2026-09-06T15:28:13.579886-04:00 nostromo.teiken.net sshd-session[437295]: Failed password for root from 160.250.128.93 port 51148 ssh2 2026-09-06T15:28:16.033253-04:00 nostromo.teiken.net sshd-session[437295]: Failed password for root from 160.250.128.93 port 51148 ssh2 2026-09-06T15:28:18.207035-04:00 nostromo.teiken.net sshd-session[437295]: Failed password for root from 160.250.128.93 port 51148 ssh2 2026-09-06T15:28:20.987335-04:00 nostromo.teiken.net sshd-session[437295]: Failed password for root from 160.250.128.93 port 51148 ssh2 2026-09-06T15:28:25.103907-04:00 nostromo.teiken.net sshd-session[437295]: Failed password for root from 160.250.128.93 port 51148 ssh2 ... show less	Brute-Force SSH
🇬🇧 159.65.48.197	06 Sep 2026	2026-09-06T14:07:06.970119-04:00 nostromo.teiken.net sshd-session[431845]: Invalid user emma from 15 ... show more 2026-09-06T14:07:06.970119-04:00 nostromo.teiken.net sshd-session[431845]: Invalid user emma from 159.65.48.197 port 51728 2026-09-06T14:07:07.238928-04:00 nostromo.teiken.net sshd-session[431845]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.48.197 2026-09-06T14:07:08.848189-04:00 nostromo.teiken.net sshd-session[431845]: Failed password for invalid user emma from 159.65.48.197 port 51728 ssh2 2026-09-06T14:10:34.271636-04:00 nostromo.teiken.net sshd-session[432020]: Invalid user emma from 159.65.48.197 port 57224 2026-09-06T14:10:34.545344-04:00 nostromo.teiken.net sshd-session[432020]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.48.197 2026-09-06T14:10:36.441391-04:00 nostromo.teiken.net sshd-session[432020]: Failed password for invalid user emma from 159.65.48.197 port 57224 ssh2 ... show less	Brute-Force SSH
🇨🇳 113.31.180.18	06 Sep 2026	2026-09-06T10:11:24.927854-04:00 nostromo.teiken.net sshd-session[414415]: pam_unix(sshd:auth): auth ... show more 2026-09-06T10:11:24.927854-04:00 nostromo.teiken.net sshd-session[414415]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.31.180.18 2026-09-06T10:11:26.281667-04:00 nostromo.teiken.net sshd-session[414415]: Failed password for invalid user pydio from 113.31.180.18 port 34724 ssh2 2026-09-06T10:25:49.924442-04:00 nostromo.teiken.net sshd-session[415355]: Invalid user postgres from 113.31.180.18 port 52204 2026-09-06T10:25:49.948178-04:00 nostromo.teiken.net sshd-session[415355]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.31.180.18 2026-09-06T10:25:51.753611-04:00 nostromo.teiken.net sshd-session[415355]: Failed password for invalid user postgres from 113.31.180.18 port 52204 ssh2 2026-09-06T10:29:46.515434-04:00 nostromo.teiken.net sshd-session[415560]: Invalid user devuser from 113.31.180.18 port 51446 ... show less	Brute-Force SSH
🇧🇬 109.160.32.70	06 Sep 2026	2026-09-06T09:32:51.951423-04:00 narcissus.teiken.net sshd-session[418156]: pam_unix(sshd:auth): aut ... show more 2026-09-06T09:32:51.951423-04:00 narcissus.teiken.net sshd-session[418156]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.160.32.70 2026-09-06T09:32:54.196159-04:00 narcissus.teiken.net sshd-session[418156]: Failed password for invalid user milad from 109.160.32.70 port 56474 ssh2 2026-09-06T09:32:55.940956-04:00 narcissus.teiken.net sshd-session[418167]: Invalid user test from 109.160.32.70 port 56494 2026-09-06T09:32:56.360151-04:00 narcissus.teiken.net sshd-session[418167]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.160.32.70 2026-09-06T09:32:58.198484-04:00 narcissus.teiken.net sshd-session[418167]: Failed password for invalid user test from 109.160.32.70 port 56494 ssh2 2026-09-06T09:33:01.183164-04:00 narcissus.teiken.net sshd-session[418173]: Invalid user minecraft from 109.160.32.70 port 38934 ... show less	Brute-Force SSH
🇺🇸 104.131.5.129	06 Sep 2026	2026-09-06T08:31:51.841156-04:00 rocinante.teiken.net kernel: [590552.060696] syn_limit:IN=ens5 OUT= ... show more 2026-09-06T08:31:51.841156-04:00 rocinante.teiken.net kernel: [590552.060696] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=104.131.5.129 DST=192.168.16.119 LEN=44 TOS=0x00 PREC=0x00 TTL=246 ID=11321 PROTO=TCP SPT=57905 DPT=80 WINDOW=1025 RES=0x00 SYN URGP=0 2026-09-06T08:31:51.935161-04:00 rocinante.teiken.net kernel: [590552.154706] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=104.131.5.129 DST=192.168.16.119 LEN=44 TOS=0x00 PREC=0x00 TTL=246 ID=11321 PROTO=TCP SPT=57905 DPT=80 WINDOW=1025 RES=0x00 SYN URGP=0 2026-09-06T08:31:52.078907-04:00 rocinante.teiken.net kernel: [590552.298455] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=104.131.5.129 DST=192.168.16.119 LEN=44 TOS=0x00 PREC=0x00 TTL=246 ID=11321 PROTO=TCP SPT=57905 DPT=80 WINDOW=1025 RES=0x00 SYN URGP=0 2026-09-06T08:31:52.177864-04:00 rocinante.teiken.net kernel: [590552.395203] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b ... show less	Port Scan
🇺🇸 34.30.0.128	06 Sep 2026	2026-09-06T07:41:57.555618-04:00 nostromo.teiken.net kernel: [301440.289854] syn_limit:IN=en-wan OUT ... show more 2026-09-06T07:41:57.555618-04:00 nostromo.teiken.net kernel: [301440.289854] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=34.30.0.128 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x60 TTL=61 ID=40985 DF PROTO=TCP SPT=35088 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-09-06T07:41:57.567139-04:00 nostromo.teiken.net kernel: [301440.292120] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=34.30.0.128 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x60 TTL=61 ID=45382 DF PROTO=TCP SPT=35100 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-09-06T07:41:57.567275-04:00 nostromo.teiken.net kernel: [301440.293584] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=34.30.0.128 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x60 TTL=61 ID=27216 DF PROTO=TCP SPT=35108 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-09-06T07:41:57.587135-04:00 nostromo.teiken.net kernel: [301440.320398] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2: ... show less	Port Scan
🇧🇷 34.95.203.255	06 Sep 2026	2026-09-06T06:45:24.001871-04:00 rocinante.teiken.net kernel: [584164.322634] syn_limit:IN=ens5 OUT= ... show more 2026-09-06T06:45:24.001871-04:00 rocinante.teiken.net kernel: [584164.322634] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.95.203.255 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=4439 DF PROTO=TCP SPT=48084 DPT=80 WINDOW=65320 RES=0x00 SYN URGP=0 2026-09-06T06:45:24.023491-04:00 rocinante.teiken.net kernel: [584164.346843] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.95.203.255 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=28791 DF PROTO=TCP SPT=48088 DPT=80 WINDOW=65320 RES=0x00 SYN URGP=0 2026-09-06T06:45:24.032722-04:00 rocinante.teiken.net kernel: [584164.353394] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.95.203.255 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=62597 DF PROTO=TCP SPT=48098 DPT=80 WINDOW=65320 RES=0x00 SYN URGP=0 2026-09-06T06:45:24.032846-04:00 rocinante.teiken.net kernel: [584164.356046] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae ... show less	Port Scan
🇺🇸 24.144.89.202	06 Sep 2026	2026-09-06T05:55:18.897155-04:00 nostromo.teiken.net kernel: [295041.686336] syn_limit:IN=en-wan OUT ... show more 2026-09-06T05:55:18.897155-04:00 nostromo.teiken.net kernel: [295041.686336] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=24.144.89.202 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=57586 DF PROTO=TCP SPT=47502 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-09-06T05:55:20.924898-04:00 nostromo.teiken.net kernel: [295043.721810] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=24.144.89.202 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=57588 DF PROTO=TCP SPT=47502 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-09-06T05:55:21.897166-04:00 nostromo.teiken.net kernel: [295044.686150] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=24.144.89.202 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=34988 DF PROTO=TCP SPT=49792 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-09-06T05:55:22.917150-04:00 nostromo.teiken.net kernel: [295045.707134] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00: ... show less	Port Scan
🇳🇱 34.187.123.76	06 Sep 2026	2026-09-06T03:38:14.121846-04:00 rocinante.teiken.net kernel: [572934.627077] syn_limit:IN=ens5 OUT= ... show more 2026-09-06T03:38:14.121846-04:00 rocinante.teiken.net kernel: [572934.627077] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.187.123.76 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=47829 DF PROTO=TCP SPT=40758 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-09-06T03:38:14.154317-04:00 rocinante.teiken.net kernel: [572934.662398] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.187.123.76 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=4985 DF PROTO=TCP SPT=40766 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-09-06T03:38:14.176009-04:00 rocinante.teiken.net kernel: [572934.684090] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.187.123.76 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=29577 DF PROTO=TCP SPT=40768 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-09-06T03:38:14.183181-04:00 rocinante.teiken.net kernel: [572934.691322] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3 ... show less	Port Scan
🇺🇸 8.231.218.250	06 Sep 2026	2026-09-06T02:15:44.552809-04:00 rocinante.teiken.net kernel: [567985.136914] syn_limit:IN=ens5 OUT= ... show more 2026-09-06T02:15:44.552809-04:00 rocinante.teiken.net kernel: [567985.136914] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=8.231.218.250 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x40 TTL=58 ID=62235 DF PROTO=TCP SPT=48996 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-09-06T02:15:44.553617-04:00 rocinante.teiken.net kernel: [567985.137131] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=8.231.218.250 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=14559 DF PROTO=TCP SPT=49008 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-09-06T02:15:44.553659-04:00 rocinante.teiken.net kernel: [567985.142315] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=8.231.218.250 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=926 DF PROTO=TCP SPT=48988 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-09-06T02:15:44.553691-04:00 rocinante.teiken.net kernel: [567985.144978] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3: ... show less	Port Scan
🇺🇸 35.231.178.68	06 Sep 2026	2026-09-06T02:14:55.252355-04:00 rocinante.teiken.net kernel: [567935.842736] syn_limit:IN=ens5 OUT= ... show more 2026-09-06T02:14:55.252355-04:00 rocinante.teiken.net kernel: [567935.842736] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=35.231.178.68 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=60853 DF PROTO=TCP SPT=56026 DPT=80 WINDOW=65320 RES=0x00 SYN URGP=0 2026-09-06T02:14:55.259717-04:00 rocinante.teiken.net kernel: [567935.842950] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=35.231.178.68 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x60 TTL=58 ID=49575 DF PROTO=TCP SPT=56034 DPT=80 WINDOW=65320 RES=0x00 SYN URGP=0 2026-09-06T02:14:55.259786-04:00 rocinante.teiken.net kernel: [567935.845368] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=35.231.178.68 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=48873 DF PROTO=TCP SPT=56048 DPT=80 WINDOW=65320 RES=0x00 SYN URGP=0 2026-09-06T02:14:55.259808-04:00 rocinante.teiken.net kernel: [567935.850817] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:a ... show less	Port Scan
🇮🇩 36.95.15.107	06 Sep 2026	2026-09-05T22:40:20.819268-04:00 nostromo.teiken.net sshd-session[358264]: pam_unix(sshd:auth): auth ... show more 2026-09-05T22:40:20.819268-04:00 nostromo.teiken.net sshd-session[358264]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.95.15.107 user=root 2026-09-05T22:40:22.646163-04:00 nostromo.teiken.net sshd-session[358264]: Failed password for root from 36.95.15.107 port 48051 ssh2 2026-09-05T23:47:20.969308-04:00 nostromo.teiken.net sshd-session[362928]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.95.15.107 user=root 2026-09-05T23:47:23.040449-04:00 nostromo.teiken.net sshd-session[362928]: Failed password for root from 36.95.15.107 port 60916 ssh2 2026-09-06T02:02:12.844768-04:00 nostromo.teiken.net sshd-session[373162]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.95.15.107 user=root 2026-09-06T02:02:14.095734-04:00 nostromo.teiken.net sshd-session[373162]: Failed password for root from 36.95.15.107 port 23800 ssh2 ... show less	Brute-Force SSH
🇧🇬 109.160.32.19	06 Sep 2026	2026-09-06T02:00:36.373145-04:00 narcissus.teiken.net sshd-session[378775]: pam_unix(sshd:auth): aut ... show more 2026-09-06T02:00:36.373145-04:00 narcissus.teiken.net sshd-session[378775]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.160.32.19 2026-09-06T02:00:38.150623-04:00 narcissus.teiken.net sshd-session[378775]: Failed password for invalid user minecraft from 109.160.32.19 port 39134 ssh2 2026-09-06T02:00:41.737289-04:00 narcissus.teiken.net sshd-session[378781]: Invalid user localhost from 109.160.32.19 port 39220 2026-09-06T02:00:42.017412-04:00 narcissus.teiken.net sshd-session[378781]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.160.32.19 2026-09-06T02:00:44.396969-04:00 narcissus.teiken.net sshd-session[378781]: Failed password for invalid user localhost from 109.160.32.19 port 39220 ssh2 2026-09-06T02:00:46.447017-04:00 narcissus.teiken.net sshd-session[378787]: Invalid user ftp from 109.160.32.19 port 36402 ... show less	Brute-Force SSH
🇺🇸 34.105.79.46	06 Sep 2026	www.teiken.net:443 34.105.79.46:33586 - - [06/Sep/2026:01:51:04 -0400] "GET /settings%2F.env HTTP/1. ... show more www.teiken.net:443 34.105.79.46:33586 - - [06/Sep/2026:01:51:04 -0400] "GET /settings%2F.env HTTP/1.1" 404 516 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" www.teiken.net:443 34.105.79.46:33568 - - [06/Sep/2026:01:51:04 -0400] "GET /.env.js HTTP/1.1" 404 516 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" www.teiken.net:443 34.105.79.46:33576 - - [06/Sep/2026:01:51:04 -0400] "GET /.git/config HTTP/1.1" 404 516 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" www.teiken.net:443 34.105.79.46:33558 - - [06/Sep/2026:01:51:04 -0400] "GET /.git/HEAD HTTP/1.1" 404 516 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" www.teiken.net:443 34.105.79.46:33560 - - [06/Sep/2026:01:51:04 -0400] "GET /.gitconfig HTTP/1.1" 404 ... show less	Web App Attack
🇨🇭 34.65.19.234	06 Sep 2026	2026-09-06T01:24:20.122136-04:00 nostromo.teiken.net kernel: [278783.078261] syn_limit:IN=en-wan OUT ... show more 2026-09-06T01:24:20.122136-04:00 nostromo.teiken.net kernel: [278783.078261] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=34.65.19.234 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=60 ID=1003 DF PROTO=TCP SPT=59406 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-09-06T01:24:20.122512-04:00 nostromo.teiken.net kernel: [278783.078526] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=34.65.19.234 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=60 ID=15602 DF PROTO=TCP SPT=59426 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-09-06T01:24:21.150106-04:00 nostromo.teiken.net kernel: [278784.106186] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=34.65.19.234 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=60 ID=1004 DF PROTO=TCP SPT=59406 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-09-06T01:24:21.150369-04:00 nostromo.teiken.net kernel: [278784.106281] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2 ... show less	Port Scan
🇺🇸 34.57.161.85	06 Sep 2026	2026-09-06T00:34:40.492483-04:00 rocinante.teiken.net kernel: [561921.185255] syn_limit:IN=ens5 OUT= ... show more 2026-09-06T00:34:40.492483-04:00 rocinante.teiken.net kernel: [561921.185255] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.57.161.85 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x60 TTL=58 ID=39870 DF PROTO=TCP SPT=34450 DPT=80 WINDOW=65320 RES=0x00 SYN URGP=0 2026-09-06T00:34:40.492672-04:00 rocinante.teiken.net kernel: [561921.185789] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.57.161.85 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=45503 DF PROTO=TCP SPT=34438 DPT=80 WINDOW=65320 RES=0x00 SYN URGP=0 2026-09-06T00:34:40.493383-04:00 rocinante.teiken.net kernel: [561921.189726] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.57.161.85 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=62292 DF PROTO=TCP SPT=34452 DPT=80 WINDOW=65320 RES=0x00 SYN URGP=0 2026-09-06T00:34:40.504570-04:00 rocinante.teiken.net kernel: [561921.197397] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:0 ... show less	Port Scan
🇺🇸 34.83.19.15	06 Sep 2026	2026-09-05T22:24:48.313846-04:00 rocinante.teiken.net kernel: [554129.063289] syn_limit:IN=ens5 OUT= ... show more 2026-09-05T22:24:48.313846-04:00 rocinante.teiken.net kernel: [554129.063289] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.83.19.15 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=7249 DF PROTO=TCP SPT=52462 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-09-05T22:24:48.314037-04:00 rocinante.teiken.net kernel: [554129.063418] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.83.19.15 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=60692 DF PROTO=TCP SPT=52536 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-09-05T22:24:48.314081-04:00 rocinante.teiken.net kernel: [554129.065937] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.83.19.15 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x60 TTL=58 ID=31598 DF PROTO=TCP SPT=52624 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-09-05T22:24:48.314116-04:00 rocinante.teiken.net kernel: [554129.068595] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05 ... show less	Port Scan
🇨🇭 34.65.46.78	06 Sep 2026	2026-09-05T22:17:26.434752-04:00 nostromo.teiken.net kernel: [267569.500251] syn_limit:IN=en-wan OUT ... show more 2026-09-05T22:17:26.434752-04:00 nostromo.teiken.net kernel: [267569.500251] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=34.65.46.78 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x60 TTL=61 ID=36339 DF PROTO=TCP SPT=55130 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-09-05T22:17:26.435069-04:00 nostromo.teiken.net kernel: [267569.500344] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=34.65.46.78 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=60 ID=39103 DF PROTO=TCP SPT=55118 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-09-05T22:17:27.469576-04:00 nostromo.teiken.net kernel: [267570.535072] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=34.65.46.78 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x60 TTL=61 ID=36340 DF PROTO=TCP SPT=55130 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-09-05T22:17:27.469841-04:00 nostromo.teiken.net kernel: [267570.535326] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2: ... show less	Port Scan
🇺🇸 35.222.221.138	06 Sep 2026	2026-09-05T22:06:54.691960-04:00 rocinante.teiken.net kernel: [553055.539609] syn_limit:IN=ens5 OUT= ... show more 2026-09-05T22:06:54.691960-04:00 rocinante.teiken.net kernel: [553055.539609] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=35.222.221.138 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x60 TTL=58 ID=7008 DF PROTO=TCP SPT=36296 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-09-05T22:06:54.692133-04:00 rocinante.teiken.net kernel: [553055.540041] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=35.222.221.138 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=65247 DF PROTO=TCP SPT=36310 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-09-05T22:06:54.692178-04:00 rocinante.teiken.net kernel: [553055.545054] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=35.222.221.138 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=33820 DF PROTO=TCP SPT=36312 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-09-05T22:06:54.701824-04:00 rocinante.teiken.net kernel: [553055.551506] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a ... show less	Port Scan
🇬🇧 34.39.10.50	06 Sep 2026	rocinante.teiken.net:443 34.39.10.50:34338 - - [05/Sep/2026:21:34:05 -0400] "GET /.git/config HTTP/1 ... show more rocinante.teiken.net:443 34.39.10.50:34338 - - [05/Sep/2026:21:34:05 -0400] "GET /.git/config HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.39.10.50:34338 - - [05/Sep/2026:21:34:05 -0400] "GET /.env HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.39.10.50:34338 - - [05/Sep/2026:21:34:05 -0400] "GET /.env.local HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.39.10.50:34338 - - [05/Sep/2026:21:34:05 -0400] "GET /.env.production HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.39.10.50:34338 - - [05/Sep/2026:21:34:06 -0400] "GET /.e ... show less	Web App Attack
🇺🇸 167.172.245.142	06 Sep 2026	2026-09-05T21:14:42.726805-04:00 nostromo.teiken.net sshd-session[351765]: pam_unix(sshd:auth): auth ... show more 2026-09-05T21:14:42.726805-04:00 nostromo.teiken.net sshd-session[351765]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.245.142 user=root 2026-09-05T21:14:44.819671-04:00 nostromo.teiken.net sshd-session[351765]: Failed password for root from 167.172.245.142 port 35474 ssh2 2026-09-05T21:14:42.725326-04:00 nostromo.teiken.net sshd-session[351764]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.245.142 user=root 2026-09-05T21:14:45.166009-04:00 nostromo.teiken.net sshd-session[351764]: Failed password for root from 167.172.245.142 port 35466 ssh2 2026-09-05T21:14:43.023687-04:00 nostromo.teiken.net sshd-session[351771]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.245.142 user=root 2026-09-05T21:14:45.442117-04:00 nostromo.teiken.net sshd-session[351771]: Failed password for root from 167.172.245.142 port 35516 ssh2 ... show less	Brute-Force SSH
🇺🇸 34.24.95.237	05 Sep 2026	2026-09-05T19:03:26.722347-04:00 rocinante.teiken.net kernel: [542047.773653] syn_limit:IN=ens5 OUT= ... show more 2026-09-05T19:03:26.722347-04:00 rocinante.teiken.net kernel: [542047.773653] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.24.95.237 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=18858 DF PROTO=TCP SPT=37906 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-09-05T19:03:26.728222-04:00 rocinante.teiken.net kernel: [542047.776834] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.24.95.237 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=11386 DF PROTO=TCP SPT=37936 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-09-05T19:03:26.728328-04:00 rocinante.teiken.net kernel: [542047.777011] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.24.95.237 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x60 TTL=58 ID=63534 DF PROTO=TCP SPT=37922 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-09-05T19:03:26.728359-04:00 rocinante.teiken.net kernel: [542047.779480] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:a ... show less	Port Scan
🇺🇸 34.26.42.176	05 Sep 2026	2026-09-05T18:49:24.292793-04:00 rocinante.teiken.net kernel: [541205.356961] syn_limit:IN=ens5 OUT= ... show more 2026-09-05T18:49:24.292793-04:00 rocinante.teiken.net kernel: [541205.356961] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.26.42.176 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=59179 DF PROTO=TCP SPT=49310 DPT=80 WINDOW=65320 RES=0x00 SYN URGP=0 2026-09-05T18:49:24.313760-04:00 rocinante.teiken.net kernel: [541205.359328] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.26.42.176 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=22565 DF PROTO=TCP SPT=49318 DPT=80 WINDOW=65320 RES=0x00 SYN URGP=0 2026-09-05T18:49:24.313932-04:00 rocinante.teiken.net kernel: [541205.359698] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.26.42.176 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=26943 DF PROTO=TCP SPT=49330 DPT=80 WINDOW=65320 RES=0x00 SYN URGP=0 2026-09-05T18:49:24.314004-04:00 rocinante.teiken.net kernel: [541205.363467] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:0 ... show less	Port Scan
🇺🇸 2605:9880:0:529:225:90ff:fe66:fe9	05 Sep 2026	2026-09-05T18:47:32.383072-04:00 nostromo.teiken.net kernel: [254975.571234] syn_limit:IN=en-wan OUT ... show more 2026-09-05T18:47:32.383072-04:00 nostromo.teiken.net kernel: [254975.571234] syn_limit:IN=en-wan OUT=en-wan MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2605:9880:0000:0529:0225:90ff:fe66:0fe9 DST=2600:4041:5c7d:4dff:cc75:828c:6e8a:df54 LEN=64 TC=0 HOPLIMIT=11 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-09-05T18:47:32.427306-04:00 nostromo.teiken.net kernel: [254975.606166] syn_limit:IN=en-wan OUT=en-wan MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2605:9880:0000:0529:0225:90ff:fe66:0fe9 DST=2600:4041:5c7d:4dff:cc75:828c:6e8a:df54 LEN=64 TC=0 HOPLIMIT=12 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-09-05T18:47:32.452920-04:00 nostromo.teiken.net kernel: [254975.641104] syn_limit:IN=en-wan OUT=en-wan MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2605:9880:0000:0529:0225:90ff:fe66:0fe9 DST=2600:4041:5c7d:4dff:cc75:828c:6e8a:df54 LEN=64 TC=0 HOPLIMIT=13 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 S ... show less	Port Scan
🇮🇹 2a02:29e2:84:6::2	05 Sep 2026	2026-09-05T18:47:25.203780-04:00 nostromo.teiken.net kernel: [254968.392016] syn_limit:IN=en-wan OUT ... show more 2026-09-05T18:47:25.203780-04:00 nostromo.teiken.net kernel: [254968.392016] syn_limit:IN=en-wan OUT=en-wan MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a02:29e2:0084:0006:0000:0000:0000:0002 DST=2600:4041:5c7d:4dff:cc75:828c:6e8a:df54 LEN=64 TC=0 HOPLIMIT=11 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-09-05T18:47:25.247137-04:00 nostromo.teiken.net kernel: [254968.426231] syn_limit:IN=en-wan OUT=en-wan MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a02:29e2:0084:0006:0000:0000:0000:0002 DST=2600:4041:5c7d:4dff:cc75:828c:6e8a:df54 LEN=64 TC=0 HOPLIMIT=12 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-09-05T18:47:25.272191-04:00 nostromo.teiken.net kernel: [254968.460454] syn_limit:IN=en-wan OUT=en-wan MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a02:29e2:0084:0006:0000:0000:0000:0002 DST=2600:4041:5c7d:4dff:cc75:828c:6e8a:df54 LEN=64 TC=0 HOPLIMIT=13 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 S ... show less	Port Scan