AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User wteiken , the webmaster of teiken.org, joined AbuseIPDB in December 2021 and has reported 23,638 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇸🇬 152.42.199.115	20 Oct 2026	www.teiken.net:443 152.42.199.115:56052 - - [20/Oct/2026:00:47:25 -0400] "GET /.git/config HTTP/1.1" ... show more www.teiken.net:443 152.42.199.115:56052 - - [20/Oct/2026:00:47:25 -0400] "GET /.git/config HTTP/1.1" 404 562 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 152.42.199.115:56052 - - [20/Oct/2026:00:47:25 -0400] "GET /.env HTTP/1.1" 404 562 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 152.42.199.115:56052 - - [20/Oct/2026:00:47:26 -0400] "GET /.env.local HTTP/1.1" 404 562 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 152.42.199.115:56052 - - [20/Oct/2026:00:47:26 -0400] "GET /.env.production HTTP/1.1" 404 562 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 152.42.199.115:56052 - - [20/Oct/2026:00:47:26 -0400] "GET /.env.staging HTTP ... show less	Web App Attack
🇨🇦 85.217.149.11	20 Oct 2026	2026-10-19T23:27:44.946570-04:00 nostromo.teiken.net kernel: [386158.468950] syn_limit:IN=en-wan OUT ... show more 2026-10-19T23:27:44.946570-04:00 nostromo.teiken.net kernel: [386158.468950] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=85.217.149.11 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=53403 DF PROTO=TCP SPT=44228 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-19T23:27:45.944297-04:00 nostromo.teiken.net kernel: [386159.473333] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=85.217.149.11 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=53404 DF PROTO=TCP SPT=44228 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-19T23:27:46.972279-04:00 nostromo.teiken.net kernel: [386160.501305] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=85.217.149.11 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=53405 DF PROTO=TCP SPT=44228 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-19T23:27:47.992274-04:00 nostromo.teiken.net kernel: [386161.521294] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00: ... show less	Port Scan
🇺🇸 134.209.116.217	20 Oct 2026	2026-10-19T22:10:50.266579-04:00 nostromo.teiken.net kernel: [381543.834802] syn_limit:IN=en-wan OUT ... show more 2026-10-19T22:10:50.266579-04:00 nostromo.teiken.net kernel: [381543.834802] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=134.209.116.217 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=26416 DF PROTO=TCP SPT=36050 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-19T22:10:51.265180-04:00 nostromo.teiken.net kernel: [381544.835753] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=134.209.116.217 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=26417 DF PROTO=TCP SPT=36050 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-19T22:10:52.296566-04:00 nostromo.teiken.net kernel: [381545.859786] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=134.209.116.217 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=26418 DF PROTO=TCP SPT=36050 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-19T22:10:53.276557-04:00 nostromo.teiken.net kernel: [381546.841678] syn_limit:IN=en-wan OUT= MAC=00:50:43:37: ... show less	Port Scan
🇺🇸 163.192.210.102	20 Oct 2026	2026-10-19T20:51:58.882090-04:00 rocinante.teiken.net kernel: [200535.993422] syn_limit:IN=ens5 OUT= ... show more 2026-10-19T20:51:58.882090-04:00 rocinante.teiken.net kernel: [200535.993422] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=163.192.210.102 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=14154 DF PROTO=TCP SPT=35450 DPT=443 WINDOW=62720 RES=0x00 SYN URGP=0 2026-10-19T20:51:58.882270-04:00 rocinante.teiken.net kernel: [200535.993525] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=163.192.210.102 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=17392 DF PROTO=TCP SPT=35432 DPT=443 WINDOW=62720 RES=0x00 SYN URGP=0 2026-10-19T20:51:58.882304-04:00 rocinante.teiken.net kernel: [200535.996130] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=163.192.210.102 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=38517 DF PROTO=TCP SPT=35444 DPT=443 WINDOW=62720 RES=0x00 SYN URGP=0 2026-10-19T20:51:58.882339-04:00 rocinante.teiken.net kernel: [200535.998817] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:b ... show less	Port Scan
🇺🇸 147.224.151.163	20 Oct 2026	2026-10-19T20:51:19.087905-04:00 rocinante.teiken.net kernel: [200496.843130] syn_limit:IN=ens5 OUT= ... show more 2026-10-19T20:51:19.087905-04:00 rocinante.teiken.net kernel: [200496.843130] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=147.224.151.163 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=15885 DF PROTO=TCP SPT=56620 DPT=80 WINDOW=62720 RES=0x00 SYN URGP=0 2026-10-19T20:51:19.530441-04:00 rocinante.teiken.net kernel: [200496.843130] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=147.224.151.163 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=23251 DF PROTO=TCP SPT=56650 DPT=80 WINDOW=62720 RES=0x00 SYN URGP=0 2026-10-19T20:51:19.530490-04:00 rocinante.teiken.net kernel: [200496.843204] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=147.224.151.163 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=20644 DF PROTO=TCP SPT=56666 DPT=80 WINDOW=62720 RES=0x00 SYN URGP=0 2026-10-19T20:51:19.530518-04:00 rocinante.teiken.net kernel: [200496.845832] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0 ... show less	Port Scan
🇺🇸 138.197.127.39	20 Oct 2026	2026-10-19T20:45:41.666560-04:00 nostromo.teiken.net kernel: [376435.281060] syn_limit:IN=en-wan OUT ... show more 2026-10-19T20:45:41.666560-04:00 nostromo.teiken.net kernel: [376435.281060] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=138.197.127.39 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=42471 DF PROTO=TCP SPT=48858 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-19T20:45:42.673321-04:00 nostromo.teiken.net kernel: [376436.290104] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=138.197.127.39 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=42472 DF PROTO=TCP SPT=48858 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-19T20:45:43.696806-04:00 nostromo.teiken.net kernel: [376437.313583] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=138.197.127.39 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=42473 DF PROTO=TCP SPT=48858 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-19T20:45:44.676564-04:00 nostromo.teiken.net kernel: [376438.290749] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2: ... show less	Port Scan
🇲🇾 59.153.151.176	20 Oct 2026	2026-10-19T20:18:30.900756-04:00 narcissus.teiken.net sshd-session[654541]: pam_unix(sshd:auth): aut ... show more 2026-10-19T20:18:30.900756-04:00 narcissus.teiken.net sshd-session[654541]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.153.151.176 2026-10-19T20:18:32.775269-04:00 narcissus.teiken.net sshd-session[654541]: Failed password for invalid user mysql from 59.153.151.176 port 53066 ssh2 2026-10-19T20:20:31.537989-04:00 narcissus.teiken.net sshd-session[654711]: Invalid user admin from 59.153.151.176 port 55732 2026-10-19T20:20:31.562663-04:00 narcissus.teiken.net sshd-session[654711]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.153.151.176 2026-10-19T20:20:33.682123-04:00 narcissus.teiken.net sshd-session[654711]: Failed password for invalid user admin from 59.153.151.176 port 55732 ssh2 2026-10-19T20:26:20.130314-04:00 narcissus.teiken.net sshd-session[655354]: Invalid user shiva from 59.153.151.176 port 38784 ... show less	Brute-Force SSH
🇨🇦 34.19.131.209	19 Oct 2026	www.teiken.net:443 34.19.131.209:49348 - - [19/Oct/2026:19:23:37 -0400] "GET /.git/config HTTP/1.1" ... show more www.teiken.net:443 34.19.131.209:49348 - - [19/Oct/2026:19:23:37 -0400] "GET /.git/config HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.19.131.209:49348 - - [19/Oct/2026:19:23:37 -0400] "GET /.env HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.19.131.209:49348 - - [19/Oct/2026:19:23:37 -0400] "GET /.env.local HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.19.131.209:49348 - - [19/Oct/2026:19:23:38 -0400] "GET /.env.production HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.19.131.209:49348 - - [19/Oct/2026:19:23:38 -0400] "GET ... show less	Web App Attack
🇺🇸 34.185.83.25	19 Oct 2026	www.teiken.net:443 34.185.83.25:58938 - - [19/Oct/2026:19:20:05 -0400] "GET /.git/config HTTP/1.1" 4 ... show more www.teiken.net:443 34.185.83.25:58938 - - [19/Oct/2026:19:20:05 -0400] "GET /.git/config HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.185.83.25:58938 - - [19/Oct/2026:19:20:05 -0400] "GET /.env HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.185.83.25:58938 - - [19/Oct/2026:19:20:05 -0400] "GET /.env.local HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.185.83.25:58938 - - [19/Oct/2026:19:20:05 -0400] "GET /.env.production HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.185.83.25:58938 - - [19/Oct/2026:19:20:05 -0400] "GET /.env.staging HTTP/1.1" 404 ... show less	Web App Attack
🇿🇦 34.35.95.181	19 Oct 2026	rocinante.teiken.net:443 34.35.95.181:45620 - - [19/Oct/2026:19:12:26 -0400] "GET /.git/config HTTP/ ... show more rocinante.teiken.net:443 34.35.95.181:45620 - - [19/Oct/2026:19:12:26 -0400] "GET /.git/config HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.35.95.181:45620 - - [19/Oct/2026:19:12:27 -0400] "GET /.env HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.35.95.181:45620 - - [19/Oct/2026:19:12:27 -0400] "GET /.env.local HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.35.95.181:45620 - - [19/Oct/2026:19:12:27 -0400] "GET /.env.production HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.35.95.181:45620 - - [19/Oct/ ... show less	Web App Attack
🇯🇵 34.180.66.115	19 Oct 2026	rocinante.teiken.net:443 34.180.66.115:39806 - - [19/Oct/2026:19:06:57 -0400] "GET /.git/config HTTP ... show more rocinante.teiken.net:443 34.180.66.115:39806 - - [19/Oct/2026:19:06:57 -0400] "GET /.git/config HTTP/1.1" 404 557 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.180.66.115:39806 - - [19/Oct/2026:19:06:58 -0400] "GET /.env HTTP/1.1" 404 557 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.180.66.115:39806 - - [19/Oct/2026:19:06:58 -0400] "GET /.env.local HTTP/1.1" 404 557 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.180.66.115:39806 - - [19/Oct/2026:19:06:58 -0400] "GET /.env.production HTTP/1.1" 404 557 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.180.66.115:39806 - - [19/Oct/2026:19:06:58 -0400] "GET /.env.staging HTTP/1.1" 404 557 " ... show less	Web App Attack
🇩🇪 34.32.97.151	19 Oct 2026	www.teiken.net:443 34.32.97.151:58304 - - [19/Oct/2026:18:54:07 -0400] "GET /.git/config HTTP/1.1" 4 ... show more www.teiken.net:443 34.32.97.151:58304 - - [19/Oct/2026:18:54:07 -0400] "GET /.git/config HTTP/1.1" 404 560 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.32.97.151:58304 - - [19/Oct/2026:18:54:07 -0400] "GET /.env HTTP/1.1" 404 560 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.32.97.151:58304 - - [19/Oct/2026:18:54:07 -0400] "GET /.env.local HTTP/1.1" 404 560 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.32.97.151:58304 - - [19/Oct/2026:18:54:07 -0400] "GET /.env.production HTTP/1.1" 404 560 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.32.97.151:58304 - - [19/Oct/2026:18:54:07 -0400] "GET /.env.staging HTTP/1.1" 404 560 "-" "Mozilla/5.0 (X11; Linux x86_64) ... show less	Web App Attack
🇺🇸 35.212.230.226	19 Oct 2026	2026-10-19T18:04:15.565070-04:00 narcissus.teiken.net sshd-session[642080]: pam_unix(sshd:auth): aut ... show more 2026-10-19T18:04:15.565070-04:00 narcissus.teiken.net sshd-session[642080]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.212.230.226 user=root 2026-10-19T18:04:17.489640-04:00 narcissus.teiken.net sshd-session[642080]: Failed password for root from 35.212.230.226 port 34162 ssh2 2026-10-19T18:04:31.074320-04:00 narcissus.teiken.net sshd-session[642093]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.212.230.226 user=root 2026-10-19T18:04:33.606555-04:00 narcissus.teiken.net sshd-session[642093]: Failed password for root from 35.212.230.226 port 53782 ssh2 2026-10-19T18:04:53.816132-04:00 narcissus.teiken.net sshd-session[642111]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.212.230.226 user=root 2026-10-19T18:04:55.443354-04:00 narcissus.teiken.net sshd-session[642111]: Failed password for root from 35.212.230.226 port 33948 ssh2 ... show less	Brute-Force SSH
🇺🇸 64.225.24.255	19 Oct 2026	2026-10-19T17:32:24.310464-04:00 nostromo.teiken.net kernel: [364838.030825] syn_limit:IN=en-wan OUT ... show more 2026-10-19T17:32:24.310464-04:00 nostromo.teiken.net kernel: [364838.030825] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=64.225.24.255 DST=173.52.106.128 LEN=44 TOS=0x00 PREC=0x00 TTL=248 ID=5590 PROTO=TCP SPT=45557 DPT=443 WINDOW=1025 RES=0x00 SYN URGP=0 2026-10-19T17:32:24.395313-04:00 nostromo.teiken.net kernel: [364838.115690] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=64.225.24.255 DST=173.52.106.128 LEN=44 TOS=0x00 PREC=0x00 TTL=248 ID=5590 PROTO=TCP SPT=45557 DPT=443 WINDOW=1025 RES=0x00 SYN URGP=0 2026-10-19T17:32:24.506556-04:00 nostromo.teiken.net kernel: [364838.221612] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=64.225.24.255 DST=173.52.106.128 LEN=44 TOS=0x00 PREC=0x00 TTL=248 ID=48699 PROTO=TCP SPT=45541 DPT=443 WINDOW=1025 RES=0x00 SYN URGP=0 2026-10-19T17:32:24.664373-04:00 nostromo.teiken.net kernel: [364838.384735] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c ... show less	Port Scan
🇨🇦 158.69.117.45	19 Oct 2026	2026-10-19T16:15:20.984482-04:00 rocinante.teiken.net kernel: [183938.993801] syn_limit:IN=ens5 OUT= ... show more 2026-10-19T16:15:20.984482-04:00 rocinante.teiken.net kernel: [183938.993801] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=158.69.117.45 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=40036 DF PROTO=TCP SPT=51474 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-19T16:15:21.992077-04:00 rocinante.teiken.net kernel: [183940.002122] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=158.69.117.45 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=40037 DF PROTO=TCP SPT=51474 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-19T16:15:23.016104-04:00 rocinante.teiken.net kernel: [183941.026124] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=158.69.117.45 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=40038 DF PROTO=TCP SPT=51474 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-19T16:15:23.983914-04:00 rocinante.teiken.net kernel: [183941.993936] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f ... show less	Port Scan
🇩🇪 176.119.150.247	19 Oct 2026	2026-10-19T14:58:42.876574-04:00 nostromo.teiken.net kernel: [355616.678194] syn_limit:IN=en-wan OUT ... show more 2026-10-19T14:58:42.876574-04:00 nostromo.teiken.net kernel: [355616.678194] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=176.119.150.247 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=19117 DF PROTO=TCP SPT=47224 DPT=443 WINDOW=64320 RES=0x00 SYN URGP=0 2026-10-19T14:58:44.925517-04:00 nostromo.teiken.net kernel: [355618.728562] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=176.119.150.247 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=19119 DF PROTO=TCP SPT=47224 DPT=443 WINDOW=64320 RES=0x00 SYN URGP=0 2026-10-19T14:58:45.956560-04:00 nostromo.teiken.net kernel: [355619.751526] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=176.119.150.247 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=19120 DF PROTO=TCP SPT=47224 DPT=443 WINDOW=64320 RES=0x00 SYN URGP=0 2026-10-19T14:58:46.972402-04:00 nostromo.teiken.net kernel: [355620.775428] syn_limit:IN=en-wan OUT= MAC=00:50:43:37: ... show less	Port Scan
🇺🇸 67.205.186.69	19 Oct 2026	2026-10-19T12:00:28.486557-04:00 nostromo.teiken.net kernel: [344922.383381] syn_limit:IN=en-wan OUT ... show more 2026-10-19T12:00:28.486557-04:00 nostromo.teiken.net kernel: [344922.383381] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=67.205.186.69 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=16463 DF PROTO=TCP SPT=33764 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-19T12:00:29.501193-04:00 nostromo.teiken.net kernel: [344923.399575] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=67.205.186.69 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=16464 DF PROTO=TCP SPT=33764 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-19T12:00:30.521012-04:00 nostromo.teiken.net kernel: [344924.419395] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=67.205.186.69 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=16465 DF PROTO=TCP SPT=33764 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-19T12:00:31.529122-04:00 nostromo.teiken.net kernel: [344925.427485] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00: ... show less	Port Scan
🇧🇪 62.235.17.85	19 Oct 2026	2026-10-19T11:49:07.760707-04:00 nostromo.teiken.net kernel: [344241.665130] syn_limit:IN=en-wan OUT ... show more 2026-10-19T11:49:07.760707-04:00 nostromo.teiken.net kernel: [344241.665130] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=62.235.17.85 DST=173.52.106.128 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=63265 DF PROTO=TCP SPT=57221 DPT=22 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-19T11:49:07.761121-04:00 nostromo.teiken.net kernel: [344241.665239] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=62.235.17.85 DST=173.52.106.128 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=63263 DF PROTO=TCP SPT=57219 DPT=22 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-19T11:49:07.761253-04:00 nostromo.teiken.net kernel: [344241.665332] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=62.235.17.85 DST=173.52.106.128 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=63261 DF PROTO=TCP SPT=57217 DPT=22 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-19T11:49:07.766546-04:00 nostromo.teiken.net kernel: [344241.667728] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88: ... show less	Port Scan
🇸🇬 43.134.76.140	19 Oct 2026	2026-10-19T11:32:29.497576-04:00 narcissus.teiken.net sshd-session[600500]: pam_unix(sshd:auth): aut ... show more 2026-10-19T11:32:29.497576-04:00 narcissus.teiken.net sshd-session[600500]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.134.76.140 2026-10-19T11:32:31.521135-04:00 narcissus.teiken.net sshd-session[600500]: Failed password for invalid user ubuntu from 43.134.76.140 port 38018 ssh2 2026-10-19T11:33:41.074141-04:00 narcissus.teiken.net sshd-session[600617]: Invalid user tunnel from 43.134.76.140 port 59164 2026-10-19T11:33:41.098028-04:00 narcissus.teiken.net sshd-session[600617]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.134.76.140 2026-10-19T11:33:43.253812-04:00 narcissus.teiken.net sshd-session[600617]: Failed password for invalid user tunnel from 43.134.76.140 port 59164 ssh2 2026-10-19T11:35:01.844622-04:00 narcissus.teiken.net sshd-session[600721]: Invalid user luis from 43.134.76.140 port 46870 ... show less	Brute-Force SSH
🇩🇪 2a05:e740:9161::2	19 Oct 2026	2026-10-19T08:38:07.916684-04:00 nostromo.teiken.net kernel: [332781.914885] syn_limit:IN=en-wan OUT ... show more 2026-10-19T08:38:07.916684-04:00 nostromo.teiken.net kernel: [332781.914885] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:9161:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7ff:fe03:01de LEN=64 TC=0 HOPLIMIT=11 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-10-19T08:38:07.956886-04:00 nostromo.teiken.net kernel: [332781.958726] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:9161:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7ff:fe03:01de LEN=64 TC=0 HOPLIMIT=12 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-10-19T08:38:07.996927-04:00 nostromo.teiken.net kernel: [332782.002599] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:9161:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7ff:fe03:01de LEN=64 TC=0 HOPLIMIT=13 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x0 ... show less	Port Scan
🇩🇪 2a05:e740:1947::2	19 Oct 2026	2026-10-19T08:38:07.816555-04:00 nostromo.teiken.net kernel: [332781.813050] syn_limit:IN=en-wan OUT ... show more 2026-10-19T08:38:07.816555-04:00 nostromo.teiken.net kernel: [332781.813050] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1947:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7ff:fe03:01de LEN=64 TC=0 HOPLIMIT=11 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-10-19T08:38:07.856546-04:00 nostromo.teiken.net kernel: [332781.856994] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1947:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7ff:fe03:01de LEN=64 TC=0 HOPLIMIT=12 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-10-19T08:38:07.896726-04:00 nostromo.teiken.net kernel: [332781.900852] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1947:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7ff:fe03:01de LEN=64 TC=0 HOPLIMIT=13 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x0 ... show less	Port Scan
🇩🇪 2a05:e740:9160::2	19 Oct 2026	2026-10-19T08:38:07.906545-04:00 nostromo.teiken.net kernel: [332781.911875] syn_limit:IN=en-wan OUT ... show more 2026-10-19T08:38:07.906545-04:00 nostromo.teiken.net kernel: [332781.911875] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:9160:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7ff:fe03:01de LEN=64 TC=0 HOPLIMIT=11 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-10-19T08:38:07.956592-04:00 nostromo.teiken.net kernel: [332781.956689] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:9160:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7ff:fe03:01de LEN=64 TC=0 HOPLIMIT=12 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-10-19T08:38:07.996678-04:00 nostromo.teiken.net kernel: [332782.000659] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:9160:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7ff:fe03:01de LEN=64 TC=0 HOPLIMIT=13 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x0 ... show less	Port Scan
🇩🇪 2a05:e740:1144::2	19 Oct 2026	2026-10-19T08:38:07.756579-04:00 nostromo.teiken.net kernel: [332781.761445] syn_limit:IN=en-wan OUT ... show more 2026-10-19T08:38:07.756579-04:00 nostromo.teiken.net kernel: [332781.761445] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1144:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7ff:fe03:01de LEN=64 TC=0 HOPLIMIT=11 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-10-19T08:38:07.806584-04:00 nostromo.teiken.net kernel: [332781.805216] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1144:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7ff:fe03:01de LEN=64 TC=0 HOPLIMIT=12 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-10-19T08:38:07.846553-04:00 nostromo.teiken.net kernel: [332781.848969] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1144:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7ff:fe03:01de LEN=64 TC=0 HOPLIMIT=13 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x0 ... show less	Port Scan
🇩🇪 2a05:e740:1146::2	19 Oct 2026	2026-10-19T08:38:07.106574-04:00 nostromo.teiken.net kernel: [332781.110324] syn_limit:IN=en-wan OUT ... show more 2026-10-19T08:38:07.106574-04:00 nostromo.teiken.net kernel: [332781.110324] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1146:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7ff:fe03:01de LEN=64 TC=0 HOPLIMIT=11 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-10-19T08:38:07.148312-04:00 nostromo.teiken.net kernel: [332781.154287] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1146:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7ff:fe03:01de LEN=64 TC=0 HOPLIMIT=12 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-10-19T08:38:07.192275-04:00 nostromo.teiken.net kernel: [332781.198252] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1146:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7ff:fe03:01de LEN=64 TC=0 HOPLIMIT=13 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x0 ... show less	Port Scan
🇩🇪 2a05:e740:1145::2	19 Oct 2026	2026-10-19T08:38:07.030370-04:00 nostromo.teiken.net kernel: [332781.036317] syn_limit:IN=en-wan OUT ... show more 2026-10-19T08:38:07.030370-04:00 nostromo.teiken.net kernel: [332781.036317] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1145:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7ff:fe03:01de LEN=64 TC=0 HOPLIMIT=11 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-10-19T08:38:07.074114-04:00 nostromo.teiken.net kernel: [332781.080082] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1145:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7ff:fe03:01de LEN=64 TC=0 HOPLIMIT=12 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-10-19T08:38:07.117935-04:00 nostromo.teiken.net kernel: [332781.123905] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1145:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7ff:fe03:01de LEN=64 TC=0 HOPLIMIT=13 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x0 ... show less	Port Scan