AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User wteiken , the webmaster of teiken.org, joined AbuseIPDB in December 2021 and has reported 23,641 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇶🇦 34.18.231.38	23 Oct 2026	rocinante.teiken.net:443 34.18.231.38:38392 - - [23/Oct/2026:09:00:06 -0400] "GET /.git/config HTTP/ ... show more rocinante.teiken.net:443 34.18.231.38:38392 - - [23/Oct/2026:09:00:06 -0400] "GET /.git/config HTTP/1.1" 404 557 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.18.231.38:38392 - - [23/Oct/2026:09:00:06 -0400] "GET /.env HTTP/1.1" 404 557 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.18.231.38:38392 - - [23/Oct/2026:09:00:06 -0400] "GET /.env.local HTTP/1.1" 404 557 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.18.231.38:38392 - - [23/Oct/2026:09:00:06 -0400] "GET /.env.production HTTP/1.1" 404 557 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.18.231.38:38392 - - [23/Oct/2026:09:00:07 -0400] "GET /.env.staging HTTP/1.1" 404 557 "-" "M ... show less	Web App Attack
🇧🇪 34.38.135.185	23 Oct 2026	rocinante.teiken.net:443 34.38.135.185:48174 - - [23/Oct/2026:08:49:59 -0400] "GET /.git/config HTTP ... show more rocinante.teiken.net:443 34.38.135.185:48174 - - [23/Oct/2026:08:49:59 -0400] "GET /.git/config HTTP/1.1" 404 561 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.38.135.185:48174 - - [23/Oct/2026:08:49:59 -0400] "GET /.env HTTP/1.1" 404 561 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.38.135.185:48174 - - [23/Oct/2026:08:49:59 -0400] "GET /.env.local HTTP/1.1" 404 561 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.38.135.185:48174 - - [23/Oct/2026:08:49:59 -0400] "GET /.env.production HTTP/1.1" 404 561 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.38.135.185:48174 - - [23/Oct/2026:08:49:59 -0400] "GET /.env.staging HTTP/1.1" 404 561 " ... show less	Web App Attack
🇩🇪 34.32.75.177	23 Oct 2026	www.teiken.net:443 34.32.75.177:39674 - - [23/Oct/2026:08:46:15 -0400] "GET /.git/config HTTP/1.1" 4 ... show more www.teiken.net:443 34.32.75.177:39674 - - [23/Oct/2026:08:46:15 -0400] "GET /.git/config HTTP/1.1" 404 560 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.32.75.177:39674 - - [23/Oct/2026:08:46:15 -0400] "GET /.env HTTP/1.1" 404 560 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.32.75.177:39674 - - [23/Oct/2026:08:46:15 -0400] "GET /.env.local HTTP/1.1" 404 560 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.32.75.177:39674 - - [23/Oct/2026:08:46:15 -0400] "GET /.env.production HTTP/1.1" 404 560 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.32.75.177:39674 - - [23/Oct/2026:08:46:15 -0400] "GET /.env.staging HTTP/1.1" 404 ... show less	Web App Attack
🇶🇦 34.18.84.58	23 Oct 2026	www.teiken.net:443 34.18.84.58:55228 - - [23/Oct/2026:08:43:56 -0400] "GET /.git/config HTTP/1.1" 40 ... show more www.teiken.net:443 34.18.84.58:55228 - - [23/Oct/2026:08:43:56 -0400] "GET /.git/config HTTP/1.1" 404 565 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.18.84.58:55228 - - [23/Oct/2026:08:43:57 -0400] "GET /.env HTTP/1.1" 404 565 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.18.84.58:55228 - - [23/Oct/2026:08:43:57 -0400] "GET /.env.local HTTP/1.1" 404 565 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.18.84.58:55228 - - [23/Oct/2026:08:43:57 -0400] "GET /.env.production HTTP/1.1" 404 565 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.18.84.58:55228 - - [23/Oct/2026:08:43:57 -0400] "GET /.env.staging HTTP/1.1" 404 565 "-" "Mozilla/5.0 (X11; Linux x86_64) Appl ... show less	Web App Attack
🇺🇸 198.44.133.150	23 Oct 2026	2026-10-23T08:37:19.836639-04:00 nostromo.teiken.net kernel: [166190.426117] syn_limit:IN=en-wan OUT ... show more 2026-10-23T08:37:19.836639-04:00 nostromo.teiken.net kernel: [166190.426117] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=198.44.133.150 DST=173.52.106.128 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=55744 PROTO=TCP SPT=9099 DPT=443 WINDOW=1024 RES=0x00 SYN URGP=0 2026-10-23T08:37:20.280662-04:00 nostromo.teiken.net kernel: [166190.873660] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=198.44.133.150 DST=173.52.106.128 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=26655 PROTO=TCP SPT=9099 DPT=7391 WINDOW=1024 RES=0x00 SYN URGP=0 2026-10-23T08:37:21.576302-04:00 nostromo.teiken.net kernel: [166192.169291] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=198.44.133.150 DST=173.52.106.128 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=52302 PROTO=TCP SPT=9099 DPT=9999 WINDOW=1024 RES=0x00 SYN URGP=0 2026-10-23T08:37:21.897068-04:00 nostromo.teiken.net kernel: [166192.490053] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5 ... show less	Port Scan
🇺🇸 34.185.91.8	23 Oct 2026	www.teiken.net:443 34.185.91.8:59166 - - [23/Oct/2026:08:30:50 -0400] "GET /.git/config HTTP/1.1" 40 ... show more www.teiken.net:443 34.185.91.8:59166 - - [23/Oct/2026:08:30:50 -0400] "GET /.git/config HTTP/1.1" 404 564 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.185.91.8:59166 - - [23/Oct/2026:08:30:51 -0400] "GET /.env HTTP/1.1" 404 564 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.185.91.8:59166 - - [23/Oct/2026:08:30:51 -0400] "GET /.env.local HTTP/1.1" 404 564 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.185.91.8:59166 - - [23/Oct/2026:08:30:51 -0400] "GET /.env.production HTTP/1.1" 404 564 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.185.91.8:59166 - - [23/Oct/2026:08:30:51 -0400] "GET /.env.staging HTTP/1.1" 404 564 "-" "Mozilla/5.0 (X11; Linux x86_64) Appl ... show less	Web App Attack
🇨🇭 34.158.27.51	23 Oct 2026	www.teiken.net:443 34.158.27.51:47910 - - [23/Oct/2026:08:28:41 -0400] "GET /.git/config HTTP/1.1" 4 ... show more www.teiken.net:443 34.158.27.51:47910 - - [23/Oct/2026:08:28:41 -0400] "GET /.git/config HTTP/1.1" 404 562 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.158.27.51:47910 - - [23/Oct/2026:08:28:42 -0400] "GET /.env HTTP/1.1" 404 562 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.158.27.51:47910 - - [23/Oct/2026:08:28:42 -0400] "GET /.env.local HTTP/1.1" 404 562 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.158.27.51:47910 - - [23/Oct/2026:08:28:42 -0400] "GET /.env.production HTTP/1.1" 404 562 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.158.27.51:47910 - - [23/Oct/2026:08:28:42 -0400] "GET /.env.staging HTTP/1.1" 404 562 "-" "Mozilla/5.0 (X11; Linux x86_64) ... show less	Web App Attack
🇺🇸 206.189.202.198	23 Oct 2026	2026-10-23T04:48:06.746604-04:00 nostromo.teiken.net kernel: [152437.455582] syn_limit:IN=en-wan OUT ... show more 2026-10-23T04:48:06.746604-04:00 nostromo.teiken.net kernel: [152437.455582] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=206.189.202.198 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=56556 DF PROTO=TCP SPT=54816 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-23T04:48:07.756314-04:00 nostromo.teiken.net kernel: [152438.471086] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=206.189.202.198 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=56557 DF PROTO=TCP SPT=54816 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-23T04:48:08.779836-04:00 nostromo.teiken.net kernel: [152439.494602] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=206.189.202.198 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=56558 DF PROTO=TCP SPT=54816 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-23T04:48:09.741537-04:00 nostromo.teiken.net kernel: [152440.456297] syn_limit:IN=en-wan OUT= MAC=00:50:43:37: ... show less	Port Scan
🇨🇳 117.156.78.8	23 Oct 2026	2026-10-23T04:00:34.232058-04:00 narcissus.teiken.net sshd-session[259981]: Failed password for root ... show more 2026-10-23T04:00:34.232058-04:00 narcissus.teiken.net sshd-session[259981]: Failed password for root from 117.156.78.8 port 54085 ssh2 2026-10-23T04:00:38.793291-04:00 narcissus.teiken.net sshd-session[259981]: Failed password for root from 117.156.78.8 port 54085 ssh2 2026-10-23T04:00:42.179463-04:00 narcissus.teiken.net sshd-session[259981]: Failed password for root from 117.156.78.8 port 54085 ssh2 2026-10-23T04:00:46.685065-04:00 narcissus.teiken.net sshd-session[259981]: Failed password for root from 117.156.78.8 port 54085 ssh2 2026-10-23T04:00:50.329539-04:00 narcissus.teiken.net sshd-session[259981]: Failed password for root from 117.156.78.8 port 54085 ssh2 2026-10-23T04:00:54.472410-04:00 narcissus.teiken.net sshd-session[259981]: Failed password for root from 117.156.78.8 port 54085 ssh2 ... show less	Brute-Force SSH
🇺🇸 2600:4041:5c67:fd8a:edc7:8bfb:365:dd51	23 Oct 2026	2026-10-23T03:46:58.920471-04:00 rocinante.teiken.net kernel: [484632.385443] syn_limit:IN=ens5 OUT= ... show more 2026-10-23T03:46:58.920471-04:00 rocinante.teiken.net kernel: [484632.385443] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:86:dd SRC=2600:4041:5c67:fd8a:edc7:8bfb:0365:dd51 DST=2600:1f18:0596:2501:0000:0000:0000:1001 LEN=84 TC=0 HOPLIMIT=55 FLOWLBL=932099 PROTO=TCP SPT=50204 DPT=993 WINDOW=65535 RES=0x00 CWR ECE SYN URGP=0 2026-10-23T03:46:58.953498-04:00 rocinante.teiken.net kernel: [484632.421595] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:86:dd SRC=2600:4041:5c67:fd8a:edc7:8bfb:0365:dd51 DST=2600:1f18:0596:2501:0000:0000:0000:1001 LEN=84 TC=0 HOPLIMIT=55 FLOWLBL=932099 PROTO=TCP SPT=50204 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-23T03:46:58.984122-04:00 rocinante.teiken.net kernel: [484632.452219] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:86:dd SRC=2600:4041:5c67:fd8a:edc7:8bfb:0365:dd51 DST=2600:1f18:0596:2501:0000:0000:0000:1001 LEN=84 TC=0 HOPLIMIT=55 FLOWLBL=932099 PROTO=TCP SPT=50204 DPT=993 WINDOW=65535 RES=0 ... show less	Port Scan
🇺🇸 34.86.153.112	23 Oct 2026	2026-10-23T03:43:25.168233-04:00 rocinante.teiken.net kernel: [484418.601908] syn_limit:IN=ens5 OUT= ... show more 2026-10-23T03:43:25.168233-04:00 rocinante.teiken.net kernel: [484418.601908] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.86.153.112 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=47398 DF PROTO=TCP SPT=39216 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-10-23T03:43:25.168417-04:00 rocinante.teiken.net kernel: [484418.603152] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.86.153.112 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x60 TTL=58 ID=21693 DF PROTO=TCP SPT=39250 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-10-23T03:43:25.168472-04:00 rocinante.teiken.net kernel: [484418.604575] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.86.153.112 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=57487 DF PROTO=TCP SPT=39226 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-10-23T03:43:25.168516-04:00 rocinante.teiken.net kernel: [484418.607306] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f ... show less	Port Scan
🇮🇩 36.95.15.107	23 Oct 2026	2026-10-22T18:58:12.174291-04:00 nostromo.teiken.net sshd-session[186260]: pam_unix(sshd:auth): auth ... show more 2026-10-22T18:58:12.174291-04:00 nostromo.teiken.net sshd-session[186260]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.95.15.107 user=root 2026-10-22T18:58:14.327650-04:00 nostromo.teiken.net sshd-session[186260]: Failed password for root from 36.95.15.107 port 41026 ssh2 2026-10-22T19:13:27.042075-04:00 nostromo.teiken.net sshd-session[187465]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.95.15.107 user=root 2026-10-22T19:13:28.876696-04:00 nostromo.teiken.net sshd-session[187465]: Failed password for root from 36.95.15.107 port 11238 ssh2 2026-10-22T20:47:02.934739-04:00 nostromo.teiken.net sshd-session[195771]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.95.15.107 user=root 2026-10-22T20:47:05.157653-04:00 nostromo.teiken.net sshd-session[195771]: Failed password for root from 36.95.15.107 port 31258 ssh2 ... show less	Brute-Force SSH
🇸🇬 129.212.238.80	23 Oct 2026	www.teiken.net:80 129.212.238.80:37364 - - [22/Oct/2026:20:41:36 -0400] "GET //.env HTTP/1.1" 301 70 ... show more www.teiken.net:80 129.212.238.80:37364 - - [22/Oct/2026:20:41:36 -0400] "GET //.env HTTP/1.1" 301 706 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" www.teiken.net:443 129.212.238.80:59788 - - [22/Oct/2026:20:41:37 -0400] "GET /.env HTTP/1.1" 404 3546 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" www.teiken.net:80 129.212.238.80:37376 - - [22/Oct/2026:20:41:37 -0400] "GET //.env.backup HTTP/1.1" 301 720 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" www.teiken.net:443 129.212.238.80:59794 - - [22/Oct/2026:20:41:38 -0400] "GET /.env.backup HTTP/1.1" 404 3546 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Ge ... show less	Web App Attack
🇿🇦 34.35.122.139	22 Oct 2026	rocinante.teiken.net:443 34.35.122.139:57046 - - [22/Oct/2026:19:17:22 -0400] "GET /.git/config HTTP ... show more rocinante.teiken.net:443 34.35.122.139:57046 - - [22/Oct/2026:19:17:22 -0400] "GET /.git/config HTTP/1.1" 404 557 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.35.122.139:57046 - - [22/Oct/2026:19:17:22 -0400] "GET /.env HTTP/1.1" 404 557 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.35.122.139:57046 - - [22/Oct/2026:19:17:22 -0400] "GET /.env.local HTTP/1.1" 404 557 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.35.122.139:57046 - - [22/Oct/2026:19:17:22 -0400] "GET /.env.production HTTP/1.1" 404 557 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.35.122.139:57046 - - [22/Oct/2026:19:17:23 -0400] "GET /.env.staging HTTP/1.1" 404 557 " ... show less	Web App Attack
🇳🇱 185.218.86.26	22 Oct 2026	rocinante.teiken.net:443 185.218.86.26:58742 - - [22/Oct/2026:18:23:02 -0400] "GET /wp-login.php HTT ... show more rocinante.teiken.net:443 185.218.86.26:58742 - - [22/Oct/2026:18:23:02 -0400] "GET /wp-login.php HTTP/1.1" 404 886 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" rocinante.teiken.net:443 185.218.86.26:58750 - - [22/Oct/2026:18:23:04 -0400] "GET /backend/.env HTTP/1.1" 404 506 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" rocinante.teiken.net:443 185.218.86.26:58750 - - [22/Oct/2026:18:23:05 -0400] "GET /.env HTTP/1.1" 404 506 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" rocinante.teiken.net:443 185.218.86.26:58750 - - [22/Oct/2026:18:23:05 -0400] "GET /.env.production HTTP/1.1" 404 506 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" rocinante.teiken.net:443 185.218.86.26:58750 - - [22/Oct/2026:18:23:06 -0 ... show less	Web App Attack
🇺🇸 68.183.22.148	22 Oct 2026	2026-10-22T17:44:50.036597-04:00 nostromo.teiken.net kernel: [112641.102133] syn_limit:IN=en-wan OUT ... show more 2026-10-22T17:44:50.036597-04:00 nostromo.teiken.net kernel: [112641.102133] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=68.183.22.148 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=46189 DF PROTO=TCP SPT=60818 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-22T17:44:52.069028-04:00 nostromo.teiken.net kernel: [112643.139204] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=68.183.22.148 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=46191 DF PROTO=TCP SPT=60818 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-22T17:44:53.034595-04:00 nostromo.teiken.net kernel: [112644.104759] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=68.183.22.148 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=39544 DF PROTO=TCP SPT=60824 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-22T17:44:54.052922-04:00 nostromo.teiken.net kernel: [112645.123069] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00: ... show less	Port Scan
🇺🇸 144.172.114.51	22 Oct 2026	www.teiken.net:443 144.172.114.51:35164 - - [22/Oct/2026:16:32:33 -0400] "GET /.env HTTP/1.1" 404 50 ... show more www.teiken.net:443 144.172.114.51:35164 - - [22/Oct/2026:16:32:33 -0400] "GET /.env HTTP/1.1" 404 509 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" www.teiken.net:443 144.172.114.51:35164 - - [22/Oct/2026:16:32:38 -0400] "GET /.env.local HTTP/1.1" 404 509 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" www.teiken.net:443 144.172.114.51:35164 - - [22/Oct/2026:16:32:39 -0400] "GET /.env.production HTTP/1.1" 404 509 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" www.teiken.net:443 144.172.114.51:35164 - - [22/Oct/2026:16:32:43 -0400] "GET /.env.development HTTP/1.1" 404 509 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" www.teiken.net:443 144.172.114.51:35164 - - [22/Oct/2026:16:32:47 -0400] "GET /.env.staging HTTP/1.1" 404 509 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" www.teiken.net:443 144.172.114.51:54744 - - [22/Oct/2026:16:33:12 -0400] "GET /.env.bak HTTP/1.1" 404 4527 "-" "Mozill ... show less	Web App Attack
🇺🇸 165.22.5.227	22 Oct 2026	2026-10-22T15:15:48.976603-04:00 nostromo.teiken.net kernel: [103700.122977] syn_limit:IN=en-wan OUT ... show more 2026-10-22T15:15:48.976603-04:00 nostromo.teiken.net kernel: [103700.122977] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=165.22.5.227 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=5075 DF PROTO=TCP SPT=41376 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-22T15:15:49.979132-04:00 nostromo.teiken.net kernel: [103701.128828] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=165.22.5.227 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=5076 DF PROTO=TCP SPT=41376 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-22T15:15:51.003100-04:00 nostromo.teiken.net kernel: [103702.152788] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=165.22.5.227 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=5077 DF PROTO=TCP SPT=41376 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-22T15:15:51.989798-04:00 nostromo.teiken.net kernel: [103703.139476] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2: ... show less	Port Scan
🇰🇷 34.47.79.206	22 Oct 2026	www.teiken.net:443 34.47.79.206:52932 - - [22/Oct/2026:14:01:49 -0400] "GET /.git/config HTTP/1.1" 4 ... show more www.teiken.net:443 34.47.79.206:52932 - - [22/Oct/2026:14:01:49 -0400] "GET /.git/config HTTP/1.1" 404 560 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.47.79.206:52932 - - [22/Oct/2026:14:01:49 -0400] "GET /.env HTTP/1.1" 404 560 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.47.79.206:52932 - - [22/Oct/2026:14:01:49 -0400] "GET /.env.local HTTP/1.1" 404 560 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.47.79.206:52932 - - [22/Oct/2026:14:01:49 -0400] "GET /.env.production HTTP/1.1" 404 560 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.47.79.206:52932 - - [22/Oct/2026:14:01:50 -0400] "GET /.env.staging HTTP/1.1" 404 ... show less	Web App Attack
🇨🇳 36.163.118.106	22 Oct 2026	2026-10-22T13:17:26.867355-04:00 narcissus.teiken.net sshd-session[168669]: pam_unix(sshd:auth): aut ... show more 2026-10-22T13:17:26.867355-04:00 narcissus.teiken.net sshd-session[168669]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.163.118.106 user=root 2026-10-22T13:17:28.974291-04:00 narcissus.teiken.net sshd-session[168669]: Failed password for root from 36.163.118.106 port 56970 ssh2 2026-10-22T13:17:32.109266-04:00 narcissus.teiken.net sshd-session[168712]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.163.118.106 user=root 2026-10-22T13:17:34.080326-04:00 narcissus.teiken.net sshd-session[168712]: Failed password for root from 36.163.118.106 port 43700 ssh2 2026-10-22T13:17:37.314899-04:00 narcissus.teiken.net sshd-session[168722]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.163.118.106 user=root 2026-10-22T13:17:39.240850-04:00 narcissus.teiken.net sshd-session[168722]: Failed password for root from 36.163.118.106 port 49332 ssh2 ... show less	Brute-Force SSH
🇺🇸 157.245.91.125	22 Oct 2026	2026-10-22T09:05:04.134565-04:00 nostromo.teiken.net kernel: [81455.481247] syn_limit:IN=en-wan OUT= ... show more 2026-10-22T09:05:04.134565-04:00 nostromo.teiken.net kernel: [81455.481247] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=157.245.91.125 DST=173.52.106.128 LEN=52 TOS=0x00 PREC=0x00 TTL=56 ID=15202 PROTO=TCP SPT=50716 DPT=5997 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-22T09:05:04.226584-04:00 nostromo.teiken.net kernel: [81455.570245] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=157.245.91.125 DST=173.52.106.128 LEN=52 TOS=0x00 PREC=0x00 TTL=56 ID=57263 PROTO=TCP SPT=45470 DPT=7020 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-22T09:05:04.236576-04:00 nostromo.teiken.net kernel: [81455.579327] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=157.245.91.125 DST=173.52.106.128 LEN=52 TOS=0x00 PREC=0x00 TTL=56 ID=26130 PROTO=TCP SPT=57956 DPT=5901 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-22T09:05:04.272542-04:00 nostromo.teiken.net kernel: [81455.619258] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5 ... show less	Port Scan
🇹🇼 35.236.159.49	22 Oct 2026	www.teiken.net:443 35.236.159.49:45232 - - [22/Oct/2026:06:08:40 -0400] "GET /.git/config HTTP/1.1" ... show more www.teiken.net:443 35.236.159.49:45232 - - [22/Oct/2026:06:08:40 -0400] "GET /.git/config HTTP/1.1" 404 562 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 35.236.159.49:45232 - - [22/Oct/2026:06:08:40 -0400] "GET /.env HTTP/1.1" 404 562 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 35.236.159.49:45232 - - [22/Oct/2026:06:08:41 -0400] "GET /.env.local HTTP/1.1" 404 562 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 35.236.159.49:45232 - - [22/Oct/2026:06:08:41 -0400] "GET /.env.production HTTP/1.1" 404 562 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 35.236.159.49:45232 - - [22/Oct/2026:06:08:41 -0400] "GET /.env.staging HTTP/1.1" 404 562 "-" "Mozilla/5.0 (X11; Linux x8 ... show less	Web App Attack
🇳🇱 34.6.32.107	22 Oct 2026	rocinante.teiken.net:443 34.6.32.107:36442 - - [22/Oct/2026:04:49:28 -0400] "GET /.git/config HTTP/1 ... show more rocinante.teiken.net:443 34.6.32.107:36442 - - [22/Oct/2026:04:49:28 -0400] "GET /.git/config HTTP/1.1" 404 561 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.6.32.107:36442 - - [22/Oct/2026:04:49:28 -0400] "GET /.env HTTP/1.1" 404 561 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.6.32.107:36442 - - [22/Oct/2026:04:49:28 -0400] "GET /.env.local HTTP/1.1" 404 561 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.6.32.107:36442 - - [22/Oct/2026:04:49:29 -0400] "GET /.env.production HTTP/1.1" 404 561 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.6.32.107:36442 - - [22/Oct/2026:04:49:29 -0400] "GET /.env.staging HTTP/1.1" 404 561 "-" "Mozill ... show less	Web App Attack
🇸🇬 129.212.238.80	22 Oct 2026	www.teiken.net:80 129.212.238.80:38218 - - [22/Oct/2026:04:22:55 -0400] "GET //.env HTTP/1.1" 301 61 ... show more www.teiken.net:80 129.212.238.80:38218 - - [22/Oct/2026:04:22:55 -0400] "GET //.env HTTP/1.1" 301 619 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" www.teiken.net:443 129.212.238.80:36686 - - [22/Oct/2026:04:22:56 -0400] "GET /.env HTTP/1.1" 404 3518 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" www.teiken.net:80 129.212.238.80:37724 - - [22/Oct/2026:04:22:56 -0400] "GET //.env.backup HTTP/1.1" 301 633 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" www.teiken.net:443 129.212.238.80:36688 - - [22/Oct/2026:04:22:57 -0400] "GET /.env.backup HTTP/1.1" 404 3519 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Ge ... show less	Web App Attack
🇵🇰 101.53.236.155	22 Oct 2026	2026-10-22T03:50:17.752769-04:00 narcissus.teiken.net sshd-session[107715]: Invalid user harry from ... show more 2026-10-22T03:50:17.752769-04:00 narcissus.teiken.net sshd-session[107715]: Invalid user harry from 101.53.236.155 port 30908 2026-10-22T03:50:17.776889-04:00 narcissus.teiken.net sshd-session[107715]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.53.236.155 2026-10-22T03:50:19.706132-04:00 narcissus.teiken.net sshd-session[107715]: Failed password for invalid user harry from 101.53.236.155 port 30908 ssh2 2026-10-22T03:51:09.725721-04:00 narcissus.teiken.net sshd-session[107787]: Invalid user vhserver3 from 101.53.236.155 port 40983 2026-10-22T03:51:09.749733-04:00 narcissus.teiken.net sshd-session[107787]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.53.236.155 2026-10-22T03:51:11.643174-04:00 narcissus.teiken.net sshd-session[107787]: Failed password for invalid user vhserver3 from 101.53.236.155 port 40983 ssh2 ... show less	Brute-Force SSH