AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User wteiken , the webmaster of teiken.org, joined AbuseIPDB in December 2021 and has reported 23,166 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇺🇸 35.219.185.219	05 Oct 2026	www.teiken.dev:443 35.219.185.219:59034 - - [05/Oct/2026:12:31:53 -0400] "GET /.git/config HTTP/1.1" ... show more www.teiken.dev:443 35.219.185.219:59034 - - [05/Oct/2026:12:31:53 -0400] "GET /.git/config HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 35.219.185.219:59050 - - [05/Oct/2026:12:31:53 -0400] "GET /.git/config HTTP/1.1" 404 555 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.dev:443 35.219.185.219:59034 - - [05/Oct/2026:12:31:53 -0400] "GET /.env HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.dev:443 35.219.185.219:59034 - - [05/Oct/2026:12:31:53 -0400] "GET /.env.local HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 35.219.185.219:59050 - - [05/Oct/2026:12:31:53 -0400] "GET /.env HTTP/1.1 ... show less	Web App Attack
🇨🇳 120.48.8.170	05 Oct 2026	2026-10-05T12:07:54.591725-04:00 narcissus.teiken.net sshd-session[321224]: Failed password for root ... show more 2026-10-05T12:07:54.591725-04:00 narcissus.teiken.net sshd-session[321224]: Failed password for root from 120.48.8.170 port 57490 ssh2 2026-10-05T12:15:07.424195-04:00 narcissus.teiken.net sshd-session[321844]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.8.170 user=root 2026-10-05T12:15:09.892239-04:00 narcissus.teiken.net sshd-session[321844]: Failed password for root from 120.48.8.170 port 45190 ssh2 2026-10-05T12:17:39.131282-04:00 narcissus.teiken.net sshd-session[322024]: Invalid user splunk from 120.48.8.170 port 49728 2026-10-05T12:17:39.155180-04:00 narcissus.teiken.net sshd-session[322024]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.8.170 2026-10-05T12:17:41.715446-04:00 narcissus.teiken.net sshd-session[322024]: Failed password for invalid user splunk from 120.48.8.170 port 49728 ssh2 ... show less	Brute-Force SSH
🇺🇸 104.131.176.36	05 Oct 2026	2026-10-05T11:57:27.033712-04:00 nostromo.teiken.net kernel: [167531.550926] syn_limit:IN=en-wan OUT ... show more 2026-10-05T11:57:27.033712-04:00 nostromo.teiken.net kernel: [167531.550926] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=104.131.176.36 DST=173.52.106.128 LEN=44 TOS=0x00 PREC=0x00 TTL=247 ID=63577 PROTO=TCP SPT=55843 DPT=443 WINDOW=1025 RES=0x00 SYN URGP=0 2026-10-05T11:57:27.059764-04:00 nostromo.teiken.net kernel: [167531.569305] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=104.131.176.36 DST=173.52.106.128 LEN=44 TOS=0x00 PREC=0x00 TTL=247 ID=15961 PROTO=TCP SPT=55859 DPT=8080 WINDOW=1025 RES=0x00 SYN URGP=0 2026-10-05T11:57:27.312053-04:00 nostromo.teiken.net kernel: [167531.829267] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=104.131.176.36 DST=173.52.106.128 LEN=44 TOS=0x00 PREC=0x00 TTL=247 ID=18800 PROTO=TCP SPT=55843 DPT=80 WINDOW=1025 RES=0x00 SYN URGP=0 2026-10-05T11:57:27.379773-04:00 nostromo.teiken.net kernel: [167531.896135] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2: ... show less	Port Scan
🇨🇳 36.136.66.44	05 Oct 2026	2026-10-05T11:56:49.978208-04:00 nostromo.teiken.net sshd-session[265042]: Failed password for root ... show more 2026-10-05T11:56:49.978208-04:00 nostromo.teiken.net sshd-session[265042]: Failed password for root from 36.136.66.44 port 60354 ssh2 2026-10-05T11:56:54.750715-04:00 nostromo.teiken.net sshd-session[265042]: Failed password for root from 36.136.66.44 port 60354 ssh2 2026-10-05T11:56:58.724602-04:00 nostromo.teiken.net sshd-session[265042]: Failed password for root from 36.136.66.44 port 60354 ssh2 2026-10-05T11:57:04.284302-04:00 nostromo.teiken.net sshd-session[265042]: Failed password for root from 36.136.66.44 port 60354 ssh2 2026-10-05T11:57:08.250256-04:00 nostromo.teiken.net sshd-session[265042]: Failed password for root from 36.136.66.44 port 60354 ssh2 2026-10-05T11:57:12.497338-04:00 nostromo.teiken.net sshd-session[265042]: Failed password for root from 36.136.66.44 port 60354 ssh2 ... show less	Brute-Force SSH
🇺🇸 103.215.75.19	05 Oct 2026	www.teiken.net:443 103.215.75.19:54300 - - [05/Oct/2026:11:39:52 -0400] "POST /wp-admin/admin-ajax.p ... show more www.teiken.net:443 103.215.75.19:54300 - - [05/Oct/2026:11:39:52 -0400] "POST /wp-admin/admin-ajax.php HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Mobile Safari/537.36" www.teiken.net:80 103.215.75.19:54172 - - [05/Oct/2026:11:39:52 -0400] "POST /wp-admin/admin-ajax.php HTTP/1.1" 301 683 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 OPR/112.0.0.0" www.teiken.net:443 103.215.75.19:54300 - - [05/Oct/2026:11:39:52 -0400] "GET /wp-admin/admin-ajax.php HTTP/1.1" 404 564 "http://nostromo.dyn.teiken.net/wp-admin/admin-ajax.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 OPR/112.0.0.0" www.teiken.net:80 103.215.75.19:54172 - - [05/Oct/2026:11:39:52 -0400] "POST /wp-admin/admin-ajax.php HTTP/1.1" 301 683 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Fi ... show less	Web App Attack
🇵🇭 119.92.70.82	05 Oct 2026	2026-10-05T11:22:54.029324-04:00 narcissus.teiken.net sshd-session[314287]: Failed password for root ... show more 2026-10-05T11:22:54.029324-04:00 narcissus.teiken.net sshd-session[314287]: Failed password for root from 119.92.70.82 port 33930 ssh2 2026-10-05T11:24:47.775980-04:00 narcissus.teiken.net sshd-session[314482]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.92.70.82 user=root 2026-10-05T11:24:49.905999-04:00 narcissus.teiken.net sshd-session[314482]: Failed password for root from 119.92.70.82 port 35014 ssh2 2026-10-05T11:26:42.410927-04:00 narcissus.teiken.net sshd-session[314637]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.92.70.82 user=root 2026-10-05T11:26:44.824478-04:00 narcissus.teiken.net sshd-session[314637]: Failed password for root from 119.92.70.82 port 36084 ssh2 2026-10-05T11:28:25.376812-04:00 narcissus.teiken.net sshd-session[314765]: Invalid user atlassian from 119.92.70.82 port 37154 ... show less	Brute-Force SSH
🇦🇺 79.127.130.98	05 Oct 2026	2026-10-05T10:40:38.712344-04:00 nostromo.teiken.net kernel: [162923.273347] syn_limit:IN=en-wan OUT ... show more 2026-10-05T10:40:38.712344-04:00 nostromo.teiken.net kernel: [162923.273347] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=79.127.130.98 DST=173.52.106.128 LEN=40 TOS=0x08 PREC=0x20 TTL=245 ID=54277 PROTO=TCP SPT=9099 DPT=9999 WINDOW=1024 RES=0x00 SYN URGP=0 2026-10-05T10:40:39.211922-04:00 nostromo.teiken.net kernel: [162923.772918] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=79.127.130.98 DST=173.52.106.128 LEN=40 TOS=0x08 PREC=0x20 TTL=245 ID=9381 PROTO=TCP SPT=9099 DPT=22 WINDOW=1024 RES=0x00 SYN URGP=0 2026-10-05T10:40:42.295709-04:00 nostromo.teiken.net kernel: [162926.856673] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=79.127.130.98 DST=173.52.106.128 LEN=40 TOS=0x08 PREC=0x20 TTL=245 ID=39657 PROTO=TCP SPT=9099 DPT=36655 WINDOW=1024 RES=0x00 SYN URGP=0 2026-10-05T10:40:42.582881-04:00 nostromo.teiken.net kernel: [162927.143863] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c ... show less	Port Scan
🇯🇵 35.213.82.202	05 Oct 2026	www.teiken.net:443 35.213.82.202:51384 - - [05/Oct/2026:08:07:29 -0400] "GET /.git/config HTTP/1.1" ... show more www.teiken.net:443 35.213.82.202:51384 - - [05/Oct/2026:08:07:29 -0400] "GET /.git/config HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 35.213.82.202:51384 - - [05/Oct/2026:08:07:30 -0400] "GET /.env HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 35.213.82.202:51384 - - [05/Oct/2026:08:07:30 -0400] "GET /.env.local HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 35.213.82.202:51384 - - [05/Oct/2026:08:07:30 -0400] "GET /.env.production HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 35.213.82.202:51384 - - [05/Oct/2026:08:07:30 -0400] "GET ... show less	Web App Attack
🇸🇬 138.2.102.66	05 Oct 2026	www.teiken.net:443 138.2.102.66:48132 - - [05/Oct/2026:06:56:17 -0400] "POST /index.php?%25ADd+allow ... show more www.teiken.net:443 138.2.102.66:48132 - - [05/Oct/2026:06:56:17 -0400] "POST /index.php?%25ADd+allow_url_include%3D1+%25ADd+auto_prepend_file%3Dphp://input HTTP/1.1" 404 553 "-" "libredtail-http" www.teiken.net:443 138.2.102.66:48132 - - [05/Oct/2026:06:56:21 -0400] "POST /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//input HTTP/1.1" 404 553 "-" "libredtail-http" www.teiken.net:443 138.2.102.66:48132 - - [05/Oct/2026:06:56:22 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 553 "-" "libredtail-http" www.teiken.net:443 138.2.102.66:48132 - - [05/Oct/2026:06:56:24 -0400] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 553 "-" "libredtail-http" www.teiken.net:443 138.2.102.66:48132 - - [05/Oct/2026:06:56:25 -0400] "GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 553 "-" "libredtail-http" www.teiken.net:443 138.2.102.66:48132 - - [05/Oct/2026:06:56:26 -0400] "GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/ ... show less	Web App Attack
🇮🇳 167.71.233.141	05 Oct 2026	www.teiken.net:443 167.71.233.141:47176 - - [05/Oct/2026:06:51:53 -0400] "POST /index.php?%25ADd+all ... show more www.teiken.net:443 167.71.233.141:47176 - - [05/Oct/2026:06:51:53 -0400] "POST /index.php?%25ADd+allow_url_include%3D1+%25ADd+auto_prepend_file%3Dphp://input HTTP/1.1" 404 553 "-" "libredtail-http" www.teiken.net:443 167.71.233.141:47176 - - [05/Oct/2026:06:51:55 -0400] "POST /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//input HTTP/1.1" 404 553 "-" "libredtail-http" www.teiken.net:443 167.71.233.141:47176 - - [05/Oct/2026:06:51:55 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 553 "-" "libredtail-http" www.teiken.net:443 167.71.233.141:47176 - - [05/Oct/2026:06:51:56 -0400] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 553 "-" "libredtail-http" www.teiken.net:443 167.71.233.141:47176 - - [05/Oct/2026:06:51:56 -0400] "GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 553 "-" "libredtail-http" www.teiken.net:443 167.71.233.141:47176 - - [05/Oct/2026:06:51:57 -0400] "GET /vendor/phpunit/Util/PHP/eval-std ... show less	Web App Attack
🇸🇬 118.194.234.14	05 Oct 2026	2026-10-05T06:13:53.925551-04:00 nostromo.teiken.net kernel: [146918.638537] syn_limit:IN=en-wan OUT ... show more 2026-10-05T06:13:53.925551-04:00 nostromo.teiken.net kernel: [146918.638537] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=118.194.234.14 DST=173.52.106.128 LEN=60 TOS=0x08 PREC=0x20 TTL=48 ID=63171 DF PROTO=TCP SPT=58522 DPT=443 WINDOW=64952 RES=0x00 SYN URGP=0 2026-10-05T06:13:54.986800-04:00 nostromo.teiken.net kernel: [146919.699782] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=118.194.234.14 DST=173.52.106.128 LEN=60 TOS=0x08 PREC=0x20 TTL=48 ID=63172 DF PROTO=TCP SPT=58522 DPT=443 WINDOW=64952 RES=0x00 SYN URGP=0 2026-10-05T06:13:57.034809-04:00 nostromo.teiken.net kernel: [146921.747770] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=118.194.234.14 DST=173.52.106.128 LEN=60 TOS=0x08 PREC=0x20 TTL=48 ID=63174 DF PROTO=TCP SPT=58522 DPT=443 WINDOW=64952 RES=0x00 SYN URGP=0 2026-10-05T06:13:58.059780-04:00 nostromo.teiken.net kernel: [146922.772356] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2: ... show less	Port Scan
🇨🇳 125.94.107.91	05 Oct 2026	2026-10-05T04:29:02.422530-04:00 nostromo.teiken.net sshd-session[219513]: pam_unix(sshd:auth): auth ... show more 2026-10-05T04:29:02.422530-04:00 nostromo.teiken.net sshd-session[219513]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.94.107.91 user=root 2026-10-05T04:29:04.504856-04:00 nostromo.teiken.net sshd-session[219513]: Failed password for root from 125.94.107.91 port 60618 ssh2 2026-10-05T04:29:07.618370-04:00 nostromo.teiken.net sshd-session[219521]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.94.107.91 user=root 2026-10-05T04:29:10.245999-04:00 nostromo.teiken.net sshd-session[219521]: Failed password for root from 125.94.107.91 port 38808 ssh2 2026-10-05T04:29:12.818007-04:00 nostromo.teiken.net sshd-session[219528]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.94.107.91 user=root 2026-10-05T04:29:15.109623-04:00 nostromo.teiken.net sshd-session[219528]: Failed password for root from 125.94.107.91 port 44258 ssh2 ... show less	Brute-Force SSH
🇭🇰 35.215.148.16	05 Oct 2026	rocinante.teiken.net:443 35.215.148.16:42660 - - [05/Oct/2026:02:41:53 -0400] "GET /.git/config HTTP ... show more rocinante.teiken.net:443 35.215.148.16:42660 - - [05/Oct/2026:02:41:53 -0400] "GET /.git/config HTTP/1.1" 404 561 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 35.215.148.16:42660 - - [05/Oct/2026:02:41:54 -0400] "GET /.env HTTP/1.1" 404 561 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 35.215.148.16:42660 - - [05/Oct/2026:02:41:54 -0400] "GET /.env.local HTTP/1.1" 404 561 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 35.215.148.16:42660 - - [05/Oct/2026:02:41:54 -0400] "GET /.env.production HTTP/1.1" 404 561 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 35.215.148.16:42660 - - [05/Oct/2026:02:41:54 -0400] "GET /.env.staging HTTP/1.1" 404 561 " ... show less	Web App Attack
🇬🇧 35.214.59.231	05 Oct 2026	www.teiken.net:443 35.214.59.231:41528 - - [05/Oct/2026:02:17:37 -0400] "GET /.git/config HTTP/1.1" ... show more www.teiken.net:443 35.214.59.231:41528 - - [05/Oct/2026:02:17:37 -0400] "GET /.git/config HTTP/1.1" 404 560 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 35.214.59.231:41528 - - [05/Oct/2026:02:17:37 -0400] "GET /.env HTTP/1.1" 404 560 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 35.214.59.231:41528 - - [05/Oct/2026:02:17:37 -0400] "GET /.env.local HTTP/1.1" 404 560 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 35.214.59.231:41528 - - [05/Oct/2026:02:17:37 -0400] "GET /.env.production HTTP/1.1" 404 560 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 35.214.59.231:41528 - - [05/Oct/2026:02:17:37 -0400] "GET ... show less	Web App Attack
🇬🇧 161.35.37.106	05 Oct 2026	2026-10-04T23:59:07.406598-04:00 nostromo.teiken.net kernel: [124432.334951] syn_limit:IN=en-wan OUT ... show more 2026-10-04T23:59:07.406598-04:00 nostromo.teiken.net kernel: [124432.334951] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=161.35.37.106 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=21600 DF PROTO=TCP SPT=52342 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-04T23:59:08.438317-04:00 nostromo.teiken.net kernel: [124433.366664] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=161.35.37.106 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=21601 DF PROTO=TCP SPT=52342 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-04T23:59:09.462292-04:00 nostromo.teiken.net kernel: [124434.390622] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=161.35.37.106 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=21602 DF PROTO=TCP SPT=52342 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-04T23:59:10.410369-04:00 nostromo.teiken.net kernel: [124435.338702] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00: ... show less	Port Scan
🇵🇱 45.138.12.41	05 Oct 2026	rocinante.teiken.net:443 45.138.12.41:61550 - - [04/Oct/2026:23:55:55 -0400] "POST /wp-admin/admin-a ... show more rocinante.teiken.net:443 45.138.12.41:61550 - - [04/Oct/2026:23:55:55 -0400] "POST /wp-admin/admin-ajax.php HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Mobile Safari/537.36" rocinante.teiken.net:80 45.138.12.41:45398 - - [04/Oct/2026:23:55:56 -0400] "POST /wp-admin/admin-ajax.php HTTP/1.1" 301 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" rocinante.teiken.net:443 45.138.12.41:61550 - - [04/Oct/2026:23:55:56 -0400] "GET /wp-admin/admin-ajax.php HTTP/1.1" 404 561 "http://rocinante.teiken.net/wp-admin/admin-ajax.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" rocinante.teiken.net:80 45.138.12.41:45398 - - [04/Oct/2026:23:55:56 -0400] "POST /wp-admin/admin-ajax.php HTTP/1.1" 301 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, ... show less	Web App Attack
🇸🇬 74.113.234.187	05 Oct 2026	2026-10-04T23:22:13.876933-04:00 narcissus.teiken.net sshd-session[239710]: pam_unix(sshd:auth): aut ... show more 2026-10-04T23:22:13.876933-04:00 narcissus.teiken.net sshd-session[239710]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.113.234.187 2026-10-04T23:22:15.984515-04:00 narcissus.teiken.net sshd-session[239710]: Failed password for invalid user test from 74.113.234.187 port 43528 ssh2 2026-10-04T23:24:00.263112-04:00 narcissus.teiken.net sshd-session[239840]: Invalid user db from 74.113.234.187 port 33058 2026-10-04T23:24:00.287796-04:00 narcissus.teiken.net sshd-session[239840]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.113.234.187 2026-10-04T23:24:01.847763-04:00 narcissus.teiken.net sshd-session[239840]: Failed password for invalid user db from 74.113.234.187 port 33058 ssh2 2026-10-04T23:25:47.239762-04:00 narcissus.teiken.net sshd-session[240042]: Invalid user claude from 74.113.234.187 port 48580 ... show less	Brute-Force SSH
🇺🇸 167.71.249.196	05 Oct 2026	2026-10-04T23:14:30.801031-04:00 nostromo.teiken.net kernel: [121755.754922] syn_limit:IN=en-wan OUT ... show more 2026-10-04T23:14:30.801031-04:00 nostromo.teiken.net kernel: [121755.754922] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=167.71.249.196 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=26432 DF PROTO=TCP SPT=34328 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-04T23:14:31.829777-04:00 nostromo.teiken.net kernel: [121756.777922] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=167.71.249.196 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=26433 DF PROTO=TCP SPT=34328 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-04T23:14:32.847669-04:00 nostromo.teiken.net kernel: [121757.801545] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=167.71.249.196 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=26434 DF PROTO=TCP SPT=34328 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-04T23:14:33.805433-04:00 nostromo.teiken.net kernel: [121758.759301] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2: ... show less	Port Scan
🇺🇸 24.199.109.134	05 Oct 2026	2026-10-04T21:52:56.129783-04:00 nostromo.teiken.net kernel: [116861.126444] syn_limit:IN=en-wan OUT ... show more 2026-10-04T21:52:56.129783-04:00 nostromo.teiken.net kernel: [116861.126444] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=24.199.109.134 DST=173.52.106.128 LEN=60 TOS=0x08 PREC=0x20 TTL=57 ID=60194 DF PROTO=TCP SPT=50370 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-04T21:52:58.163035-04:00 nostromo.teiken.net kernel: [116863.163808] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=24.199.109.134 DST=173.52.106.128 LEN=60 TOS=0x08 PREC=0x20 TTL=57 ID=60196 DF PROTO=TCP SPT=50370 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-04T21:52:59.129776-04:00 nostromo.teiken.net kernel: [116864.128506] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=24.199.109.134 DST=173.52.106.128 LEN=60 TOS=0x08 PREC=0x20 TTL=57 ID=36179 DF PROTO=TCP SPT=40394 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-04T21:53:00.146549-04:00 nostromo.teiken.net kernel: [116865.147299] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2: ... show less	Port Scan
🇰🇷 175.206.113.91	05 Oct 2026	2026-10-04T21:32:56.910474-04:00 narcissus.teiken.net sshd-session[222817]: Invalid user es from 175 ... show more 2026-10-04T21:32:56.910474-04:00 narcissus.teiken.net sshd-session[222817]: Invalid user es from 175.206.113.91 port 52080 2026-10-04T21:32:57.361909-04:00 narcissus.teiken.net sshd-session[222817]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.206.113.91 2026-10-04T21:32:59.537751-04:00 narcissus.teiken.net sshd-session[222817]: Failed password for invalid user es from 175.206.113.91 port 52080 ssh2 2026-10-04T21:33:09.213702-04:00 narcissus.teiken.net sshd-session[222828]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.206.113.91 user=root 2026-10-04T21:33:11.393613-04:00 narcissus.teiken.net sshd-session[222828]: Failed password for root from 175.206.113.91 port 57884 ssh2 2026-10-04T21:33:23.298225-04:00 narcissus.teiken.net sshd-session[222845]: Invalid user guest from 175.206.113.91 port 35518 ... show less	Brute-Force SSH
🇺🇸 15.204.225.168	05 Oct 2026	rocinante.teiken.net:443 15.204.225.168:34974 - - [04/Oct/2026:21:32:33 -0400] "GET /.env HTTP/1.1" ... show more rocinante.teiken.net:443 15.204.225.168:34974 - - [04/Oct/2026:21:32:33 -0400] "GET /.env HTTP/1.1" 404 3361 "-" "Mozilla/5.0" rocinante.teiken.net:443 15.204.225.168:34978 - - [04/Oct/2026:21:32:33 -0400] "GET /.env.local HTTP/1.1" 404 3362 "-" "Mozilla/5.0" rocinante.teiken.net:443 15.204.225.168:34994 - - [04/Oct/2026:21:32:33 -0400] "GET /.env.prod HTTP/1.1" 404 3361 "-" "Mozilla/5.0" rocinante.teiken.net:443 15.204.225.168:34996 - - [04/Oct/2026:21:32:33 -0400] "GET /.env.production HTTP/1.1" 404 3360 "-" "Mozilla/5.0" rocinante.teiken.net:443 15.204.225.168:35010 - - [04/Oct/2026:21:32:33 -0400] "GET /.env.staging HTTP/1.1" 404 3360 "-" "Mozilla/5.0" rocinante.teiken.net:443 15.204.225.168:35020 - - [04/Oct/2026:21:32:33 -0400] "GET /.env.dev HTTP/1.1" 404 3361 "-" "Mozilla/5.0" rocinante.teiken.net:443 15.204.225.168:35028 - - [04/Oct/2026:21:32:33 -0400] "GET /.env.backup HTTP/1.1" 404 3361 "-" "Mozilla/5.0" rocinante.teiken.net:443 15.204.225.168:35034 - - [04/Oct/2026:21:32:3 ... show less	Web App Attack
🇺🇸 151.243.18.193	05 Oct 2026	2026-10-04T21:11:44.874366-04:00 nostromo.teiken.net kernel: [114389.898679] syn_limit:IN=en-wan OUT ... show more 2026-10-04T21:11:44.874366-04:00 nostromo.teiken.net kernel: [114389.898679] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=151.243.18.193 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=52711 DF PROTO=TCP SPT=45162 DPT=9090 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-04T21:11:44.902612-04:00 nostromo.teiken.net kernel: [114389.926955] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=151.243.18.193 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=34733 DF PROTO=TCP SPT=46698 DPT=8880 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-04T21:11:44.909761-04:00 nostromo.teiken.net kernel: [114389.927778] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=151.243.18.193 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=38589 DF PROTO=TCP SPT=59926 DPT=8081 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-04T21:11:44.923645-04:00 nostromo.teiken.net kernel: [114389.947993] syn_limit:IN=en-wan OUT= MAC=00:50:43:37: ... show less	Port Scan
🇺🇸 45.43.57.106	05 Oct 2026	2026-10-04T20:44:24.579788-04:00 nostromo.teiken.net kernel: [112749.619638] syn_limit:IN=en-wan OUT ... show more 2026-10-04T20:44:24.579788-04:00 nostromo.teiken.net kernel: [112749.619638] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=45.43.57.106 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=46882 DF PROTO=TCP SPT=59892 DPT=443 WINDOW=64952 RES=0x00 SYN URGP=0 2026-10-04T20:44:25.583758-04:00 nostromo.teiken.net kernel: [112750.623680] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=45.43.57.106 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=46883 DF PROTO=TCP SPT=59892 DPT=443 WINDOW=64952 RES=0x00 SYN URGP=0 2026-10-04T20:44:27.599734-04:00 nostromo.teiken.net kernel: [112752.639636] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=45.43.57.106 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=46884 DF PROTO=TCP SPT=59892 DPT=443 WINDOW=64952 RES=0x00 SYN URGP=0 2026-10-04T20:44:30.609781-04:00 nostromo.teiken.net kernel: [112755.647240] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88: ... show less	Port Scan
🇧🇷 177.74.153.10	04 Oct 2026	2026-10-04T19:55:22.873902-04:00 narcissus.teiken.net sshd-session[213405]: pam_unix(sshd:auth): aut ... show more 2026-10-04T19:55:22.873902-04:00 narcissus.teiken.net sshd-session[213405]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.74.153.10 user=root 2026-10-04T19:55:24.949604-04:00 narcissus.teiken.net sshd-session[213405]: Failed password for root from 177.74.153.10 port 38370 ssh2 2026-10-04T19:55:27.470961-04:00 narcissus.teiken.net sshd-session[213413]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.74.153.10 user=root 2026-10-04T19:55:29.794326-04:00 narcissus.teiken.net sshd-session[213413]: Failed password for root from 177.74.153.10 port 59742 ssh2 2026-10-04T19:55:33.069504-04:00 narcissus.teiken.net sshd-session[213423]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.74.153.10 user=root 2026-10-04T19:55:34.827026-04:00 narcissus.teiken.net sshd-session[213423]: Failed password for root from 177.74.153.10 port 41498 ssh2 ... show less	Brute-Force SSH
🇨🇳 14.103.107.214	04 Oct 2026	2026-10-04T18:42:40.866719-04:00 narcissus.teiken.net sshd-session[206720]: Invalid user admin from ... show more 2026-10-04T18:42:40.866719-04:00 narcissus.teiken.net sshd-session[206720]: Invalid user admin from 14.103.107.214 port 43566 2026-10-04T18:42:40.890635-04:00 narcissus.teiken.net sshd-session[206720]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.103.107.214 2026-10-04T18:42:42.295093-04:00 narcissus.teiken.net sshd-session[206720]: Failed password for invalid user admin from 14.103.107.214 port 43566 ssh2 2026-10-04T18:48:34.058791-04:00 narcissus.teiken.net sshd-session[207213]: Invalid user celery from 14.103.107.214 port 58406 2026-10-04T18:48:34.082820-04:00 narcissus.teiken.net sshd-session[207213]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.103.107.214 2026-10-04T18:48:35.771876-04:00 narcissus.teiken.net sshd-session[207213]: Failed password for invalid user celery from 14.103.107.214 port 58406 ssh2 ... show less	Brute-Force SSH