AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User wteiken , the webmaster of teiken.org, joined AbuseIPDB in December 2021 and has reported 23,511 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇺🇸 143.244.164.137	28 Oct 2026	2026-10-28T04:32:35.331727-04:00 nostromo.teiken.net kernel: [65001.304322] syn_limit:IN=en-wan OUT= ... show more 2026-10-28T04:32:35.331727-04:00 nostromo.teiken.net kernel: [65001.304322] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=143.244.164.137 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=56873 DF PROTO=TCP SPT=43994 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-28T04:32:36.363991-04:00 nostromo.teiken.net kernel: [65002.336578] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=143.244.164.137 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=56874 DF PROTO=TCP SPT=43994 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-28T04:32:37.387515-04:00 nostromo.teiken.net kernel: [65003.360094] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=143.244.164.137 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=56875 DF PROTO=TCP SPT=43994 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-28T04:32:38.380123-04:00 nostromo.teiken.net kernel: [65004.352694] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:0 ... show less	Port Scan
🇳🇱 86.54.31.40	28 Oct 2026	2026-10-28T03:07:16.921495-04:00 nostromo.teiken.net kernel: [59882.937599] syn_limit:IN=en-wan OUT= ... show more 2026-10-28T03:07:16.921495-04:00 nostromo.teiken.net kernel: [59882.937599] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=86.54.31.40 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0xA0 TTL=58 ID=36183 DF PROTO=TCP SPT=45964 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-28T03:07:17.941493-04:00 nostromo.teiken.net kernel: [59883.951238] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=86.54.31.40 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0xA0 TTL=58 ID=36184 DF PROTO=TCP SPT=45964 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-28T03:07:26.766257-04:00 nostromo.teiken.net kernel: [59892.783144] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=86.54.31.40 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0xA0 TTL=58 ID=45556 DF PROTO=TCP SPT=52842 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-28T03:07:28.782255-04:00 nostromo.teiken.net kernel: [59894.799125] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1 ... show less	Port Scan
🇨🇦 85.217.149.20	28 Oct 2026	2026-10-28T00:57:33.451499-04:00 nostromo.teiken.net kernel: [52099.533534] syn_limit:IN=en-wan OUT= ... show more 2026-10-28T00:57:33.451499-04:00 nostromo.teiken.net kernel: [52099.533534] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=85.217.149.20 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=40638 DF PROTO=TCP SPT=35442 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-28T00:57:34.473469-04:00 nostromo.teiken.net kernel: [52100.558238] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=85.217.149.20 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=40639 DF PROTO=TCP SPT=35442 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-28T00:57:35.497502-04:00 nostromo.teiken.net kernel: [52101.582261] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=85.217.149.20 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=40640 DF PROTO=TCP SPT=35442 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-28T00:57:36.525462-04:00 nostromo.teiken.net kernel: [52102.610212] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a ... show less	Port Scan
🇺🇸 2600:480a:8933:258c:312b:adc3:9818:75c6	28 Oct 2026	2026-10-27T21:36:53.571495-04:00 nostromo.teiken.net kernel: [40059.754576] syn_limit:IN=en-wan OUT= ... show more 2026-10-27T21:36:53.571495-04:00 nostromo.teiken.net kernel: [40059.754576] syn_limit:IN=en-wan OUT=vlan137 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2600:480a:8933:258c:312b:adc3:9818:75c6 DST=2600:4041:5c67:fd89:265e:beff:fe7b:39a9 LEN=84 TC=28 HOPLIMIT=51 FLOWLBL=559599 PROTO=TCP SPT=50416 DPT=445 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-27T21:36:55.564253-04:00 nostromo.teiken.net kernel: [40061.754688] syn_limit:IN=en-wan OUT=vlan137 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2600:480a:8933:258c:312b:adc3:9818:75c6 DST=2600:4041:5c67:fd89:265e:beff:fe7b:39a9 LEN=84 TC=28 HOPLIMIT=51 FLOWLBL=559599 PROTO=TCP SPT=50416 DPT=445 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-27T21:37:19.679577-04:00 nostromo.teiken.net kernel: [40085.869792] syn_limit:IN=en-wan OUT=vlan137 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2600:480a:8933:258c:312b:adc3:9818:75c6 DST=2600:4041:5c67:fd89:265e:beff:fe7b:39a9 LEN=84 TC=28 HOPLIMIT=51 FLOWLBL=559599 PROTO=TCP SPT=50420 DPT=139 WI ... show less	Port Scan
🇺🇸 134.209.53.130	28 Oct 2026	2026-10-27T20:27:35.312824-04:00 narcissus.teiken.net sshd-session[12102]: Invalid user user from 13 ... show more 2026-10-27T20:27:35.312824-04:00 narcissus.teiken.net sshd-session[12102]: Invalid user user from 134.209.53.130 port 50470 2026-10-27T20:27:35.698775-04:00 narcissus.teiken.net sshd-session[12102]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.53.130 2026-10-27T20:27:37.216975-04:00 narcissus.teiken.net sshd-session[12102]: Failed password for invalid user user from 134.209.53.130 port 50470 ssh2 2026-10-27T20:31:24.017789-04:00 narcissus.teiken.net sshd-session[12591]: Invalid user user from 134.209.53.130 port 60936 2026-10-27T20:31:24.391582-04:00 narcissus.teiken.net sshd-session[12591]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.53.130 2026-10-27T20:31:26.239734-04:00 narcissus.teiken.net sshd-session[12591]: Failed password for invalid user user from 134.209.53.130 port 60936 ssh2 ... show less	Brute-Force SSH
🇺🇸 167.99.96.25	28 Oct 2026	2026-10-27T20:12:50.614699-04:00 narcissus.teiken.net sshd-session[10840]: Invalid user edge from 16 ... show more 2026-10-27T20:12:50.614699-04:00 narcissus.teiken.net sshd-session[10840]: Invalid user edge from 167.99.96.25 port 46588 2026-10-27T20:12:51.123779-04:00 narcissus.teiken.net sshd-session[10840]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.96.25 2026-10-27T20:12:52.728265-04:00 narcissus.teiken.net sshd-session[10840]: Failed password for invalid user edge from 167.99.96.25 port 46588 ssh2 2026-10-27T20:17:11.230173-04:00 narcissus.teiken.net sshd-session[11223]: Invalid user edge from 167.99.96.25 port 40644 2026-10-27T20:17:11.702151-04:00 narcissus.teiken.net sshd-session[11223]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.96.25 2026-10-27T20:17:13.590439-04:00 narcissus.teiken.net sshd-session[11223]: Failed password for invalid user edge from 167.99.96.25 port 40644 ssh2 ... show less	Brute-Force SSH
🇸🇬 47.237.214.166	27 Oct 2026	2026-10-27T19:34:11.211494-04:00 nostromo.teiken.net kernel: [32697.457239] syn_limit:IN=en-wan OUT= ... show more 2026-10-27T19:34:11.211494-04:00 nostromo.teiken.net kernel: [32697.457239] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=47.237.214.166 DST=173.52.106.128 LEN=52 TOS=0x14 PREC=0x00 TTL=119 ID=12958 DF PROTO=TCP SPT=50518 DPT=7547 WINDOW=5120 RES=0x00 SYN URGP=0 2026-10-27T19:34:11.345049-04:00 nostromo.teiken.net kernel: [32697.600571] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=47.237.214.166 DST=173.52.106.128 LEN=52 TOS=0x14 PREC=0x00 TTL=119 ID=14234 DF PROTO=TCP SPT=50520 DPT=3306 WINDOW=4624 RES=0x00 SYN URGP=0 2026-10-27T19:34:11.491524-04:00 nostromo.teiken.net kernel: [32697.742841] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=47.237.214.166 DST=173.52.106.128 LEN=52 TOS=0x14 PREC=0x00 TTL=119 ID=15519 DF PROTO=TCP SPT=50522 DPT=2000 WINDOW=6128 RES=0x00 SYN URGP=0 2026-10-27T19:34:11.623474-04:00 nostromo.teiken.net kernel: [32697.878977] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:0 ... show less	Port Scan
🇨🇦 85.217.149.0	27 Oct 2026	2026-10-27T19:18:50.369660-04:00 nostromo.teiken.net kernel: [31776.633234] syn_limit:IN=en-wan OUT= ... show more 2026-10-27T19:18:50.369660-04:00 nostromo.teiken.net kernel: [31776.633234] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=85.217.149.0 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=45108 DF PROTO=TCP SPT=45278 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-27T19:18:51.394779-04:00 nostromo.teiken.net kernel: [31777.658353] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=85.217.149.0 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=45109 DF PROTO=TCP SPT=45278 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-27T19:18:52.418778-04:00 nostromo.teiken.net kernel: [31778.682341] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=85.217.149.0 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=45110 DF PROTO=TCP SPT=45278 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-27T19:18:53.438804-04:00 nostromo.teiken.net kernel: [31779.702356] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5 ... show less	Port Scan
🇬🇧 178.62.37.36	27 Oct 2026	2026-10-27T16:24:58.706819-04:00 nostromo.teiken.net kernel: [21345.061513] syn_limit:IN=en-wan OUT= ... show more 2026-10-27T16:24:58.706819-04:00 nostromo.teiken.net kernel: [21345.061513] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=178.62.37.36 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=47886 DF PROTO=TCP SPT=60160 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-27T16:24:59.707595-04:00 nostromo.teiken.net kernel: [21346.062292] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=178.62.37.36 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=47887 DF PROTO=TCP SPT=60160 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-27T16:25:00.731669-04:00 nostromo.teiken.net kernel: [21347.086353] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=178.62.37.36 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=47888 DF PROTO=TCP SPT=60160 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-27T16:25:02.715697-04:00 nostromo.teiken.net kernel: [21349.070367] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5 ... show less	Port Scan
🇳🇱 94.102.49.190	27 Oct 2026	2026-10-27T16:22:43.991500-04:00 nostromo.teiken.net kernel: [21210.344114] syn_limit:IN=en-wan OUT= ... show more 2026-10-27T16:22:43.991500-04:00 nostromo.teiken.net kernel: [21210.344114] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=94.102.49.190 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x20 TTL=59 ID=10803 DF PROTO=TCP SPT=60796 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-27T16:22:45.018686-04:00 nostromo.teiken.net kernel: [21211.374585] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=94.102.49.190 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x20 TTL=59 ID=10804 DF PROTO=TCP SPT=60796 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-27T16:22:46.051493-04:00 nostromo.teiken.net kernel: [21212.398573] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=94.102.49.190 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x20 TTL=59 ID=10805 DF PROTO=TCP SPT=60796 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-27T16:22:47.066663-04:00 nostromo.teiken.net kernel: [21213.422545] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a ... show less	Port Scan
🇰🇷 34.64.139.222	27 Oct 2026	www.teiken.net:443 34.64.139.222:47720 - - [27/Oct/2026:16:10:55 -0400] "GET /.git/config HTTP/1.1" ... show more www.teiken.net:443 34.64.139.222:47720 - - [27/Oct/2026:16:10:55 -0400] "GET /.git/config HTTP/1.1" 404 560 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.64.139.222:47720 - - [27/Oct/2026:16:10:55 -0400] "GET /.env HTTP/1.1" 404 560 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.64.139.222:47720 - - [27/Oct/2026:16:10:55 -0400] "GET /.env.local HTTP/1.1" 404 560 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.64.139.222:47720 - - [27/Oct/2026:16:10:56 -0400] "GET /.env.production HTTP/1.1" 404 560 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.64.139.222:47720 - - [27/Oct/2026:16:10:56 -0400] "GET /.env.staging HTTP/1.1" ... show less	Web App Attack
🇭🇰 45.249.247.109	27 Oct 2026	2026-10-27T12:09:44.461037-04:00 nostromo.teiken.net kernel: [ 6030.951274] syn_limit:IN=en-wan OUT= ... show more 2026-10-27T12:09:44.461037-04:00 nostromo.teiken.net kernel: [ 6030.951274] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=45.249.247.109 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=9516 DF PROTO=TCP SPT=27404 DPT=443 WINDOW=1412 RES=0x00 SYN URGP=0 2026-10-27T12:09:45.471501-04:00 nostromo.teiken.net kernel: [ 6031.961047] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=45.249.247.109 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=9517 DF PROTO=TCP SPT=27404 DPT=443 WINDOW=1412 RES=0x00 SYN URGP=0 2026-10-27T12:09:47.518968-04:00 nostromo.teiken.net kernel: [ 6034.009187] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=45.249.247.109 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=9518 DF PROTO=TCP SPT=27404 DPT=443 WINDOW=1412 RES=0x00 SYN URGP=0 2026-10-27T12:09:52.456457-04:00 nostromo.teiken.net kernel: [ 6038.946630] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5 ... show less	Port Scan
🇺🇸 35.199.45.92	27 Oct 2026	www.teiken.net:443 35.199.45.92:37498 - - [27/Oct/2026:10:38:22 -0400] "GET /.git/config HTTP/1.1" 4 ... show more www.teiken.net:443 35.199.45.92:37498 - - [27/Oct/2026:10:38:22 -0400] "GET /.git/config HTTP/1.1" 404 4546 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:138.0) Gecko/20100101 Firefox/138.0" www.teiken.net:443 35.199.45.92:37492 - - [27/Oct/2026:10:38:22 -0400] "GET /.git/config HTTP/1.1" 404 4545 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:138.0) Gecko/20100101 Firefox/138.0" www.teiken.net:443 35.199.45.92:37488 - - [27/Oct/2026:10:38:23 -0400] "GET /.git/config HTTP/1.1" 404 4544 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:138.0) Gecko/20100101 Firefox/138.0" www.teiken.net:443 35.199.45.92:60752 - - [27/Oct/2026:10:38:26 -0400] "GET /.git/credentials HTTP/1.1" 404 4544 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:138.0) Gecko/20100101 Firefox/138.0" www.teiken.net:443 35.199.45.92:60760 - - [27/Oct/2026:10:38:26 -0400] "GET /.env HTTP/1.1" 404 4545 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:138.0) Gecko/20100101 Firefox/138.0" www.teiken.net:443 35.199.45.92:60792 - - [27/Oct/2026:10:38:33 -0400] "GET / ... show less	Web App Attack
🇮🇩 36.95.15.107	27 Oct 2026	2026-10-27T08:44:54.309357-04:00 nostromo.teiken.net sshd-session[818799]: pam_unix(sshd:auth): auth ... show more 2026-10-27T08:44:54.309357-04:00 nostromo.teiken.net sshd-session[818799]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.95.15.107 user=root 2026-10-27T08:44:56.308767-04:00 nostromo.teiken.net sshd-session[818799]: Failed password for root from 36.95.15.107 port 61694 ssh2 2026-10-27T09:28:08.197097-04:00 nostromo.teiken.net sshd-session[822106]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.95.15.107 user=root 2026-10-27T09:28:09.826002-04:00 nostromo.teiken.net sshd-session[822106]: Failed password for root from 36.95.15.107 port 33563 ssh2 2026-10-27T10:18:59.258941-04:00 nostromo.teiken.net sshd-session[826343]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.95.15.107 user=root 2026-10-27T10:19:00.993618-04:00 nostromo.teiken.net sshd-session[826343]: Failed password for root from 36.95.15.107 port 23108 ssh2 ... show less	Brute-Force SSH
🇨🇦 34.47.24.12	27 Oct 2026	www.teiken.net:443 34.47.24.12:37528 - - [27/Oct/2026:10:08:13 -0400] "GET /.git/config HTTP/1.1" 40 ... show more www.teiken.net:443 34.47.24.12:37528 - - [27/Oct/2026:10:08:13 -0400] "GET /.git/config HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.47.24.12:37528 - - [27/Oct/2026:10:08:13 -0400] "GET /.env HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.47.24.12:37528 - - [27/Oct/2026:10:08:13 -0400] "GET /.env.local HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.47.24.12:37528 - - [27/Oct/2026:10:08:13 -0400] "GET /.env.production HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.47.24.12:37528 - - [27/Oct/2026:10:08:13 -0400] "GET /.env.staging HTTP/1.1" 404 565 " ... show less	Web App Attack
🇩🇪 34.40.87.157	27 Oct 2026	rocinante.teiken.net:443 34.40.87.157:33872 - - [27/Oct/2026:09:58:51 -0400] "GET /.git/config HTTP/ ... show more rocinante.teiken.net:443 34.40.87.157:33872 - - [27/Oct/2026:09:58:51 -0400] "GET /.git/config HTTP/1.1" 404 557 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.40.87.157:33872 - - [27/Oct/2026:09:58:52 -0400] "GET /.env HTTP/1.1" 404 557 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.40.87.157:33872 - - [27/Oct/2026:09:58:52 -0400] "GET /.env.local HTTP/1.1" 404 557 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.40.87.157:33872 - - [27/Oct/2026:09:58:52 -0400] "GET /.env.production HTTP/1.1" 404 557 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.40.87.157:33872 - - [27/Oct/ ... show less	Web App Attack
🇨🇦 85.217.149.71	27 Oct 2026	2026-10-27T07:53:18.065898-04:00 nostromo.teiken.net kernel: [509145.659080] syn_limit:IN=en-wan OUT ... show more 2026-10-27T07:53:18.065898-04:00 nostromo.teiken.net kernel: [509145.659080] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=85.217.149.71 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=31789 DF PROTO=TCP SPT=37450 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-27T07:53:19.071708-04:00 nostromo.teiken.net kernel: [509146.664890] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=85.217.149.71 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=31790 DF PROTO=TCP SPT=37450 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-27T07:53:20.095797-04:00 nostromo.teiken.net kernel: [509147.688969] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=85.217.149.71 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=31791 DF PROTO=TCP SPT=37450 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-27T07:53:21.123735-04:00 nostromo.teiken.net kernel: [509148.716908] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00: ... show less	Port Scan
🇩🇪 34.89.135.129	27 Oct 2026	2026-10-27T05:31:51.116468-04:00 rocinante.teiken.net kernel: [836519.270458] syn_limit:IN=ens5 OUT= ... show more 2026-10-27T05:31:51.116468-04:00 rocinante.teiken.net kernel: [836519.270458] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.89.135.129 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=18813 DF PROTO=TCP SPT=41740 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-10-27T05:31:51.116646-04:00 rocinante.teiken.net kernel: [836519.270968] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.89.135.129 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=43757 DF PROTO=TCP SPT=41752 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-10-27T05:31:51.116671-04:00 rocinante.teiken.net kernel: [836519.273140] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.89.135.129 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=30901 DF PROTO=TCP SPT=41760 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-10-27T05:31:51.121392-04:00 rocinante.teiken.net kernel: [836519.278543] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f ... show less	Port Scan
🇯🇵 45.87.213.54	27 Oct 2026	2026-10-27T05:00:18.606384-04:00 nostromo.teiken.net kernel: [498766.290725] syn_limit:IN=en-wan OUT ... show more 2026-10-27T05:00:18.606384-04:00 nostromo.teiken.net kernel: [498766.290725] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=45.87.213.54 DST=173.52.106.128 LEN=40 TOS=0x08 PREC=0x20 TTL=245 ID=32258 PROTO=TCP SPT=9099 DPT=17962 WINDOW=1024 RES=0x00 SYN URGP=0 2026-10-27T05:00:22.018970-04:00 nostromo.teiken.net kernel: [498769.703279] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=45.87.213.54 DST=173.52.106.128 LEN=40 TOS=0x08 PREC=0x20 TTL=245 ID=42501 PROTO=TCP SPT=9099 DPT=22388 WINDOW=1024 RES=0x00 SYN URGP=0 2026-10-27T05:00:23.046595-04:00 nostromo.teiken.net kernel: [498770.727580] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=45.87.213.54 DST=173.52.106.128 LEN=40 TOS=0x08 PREC=0x20 TTL=245 ID=32957 PROTO=TCP SPT=9099 DPT=36655 WINDOW=1024 RES=0x00 SYN URGP=0 2026-10-27T05:00:23.384041-04:00 nostromo.teiken.net kernel: [498771.068347] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e: ... show less	Port Scan
🇨🇦 85.217.149.66	27 Oct 2026	2026-10-27T04:42:40.826608-04:00 nostromo.teiken.net kernel: [497708.516032] syn_limit:IN=en-wan OUT ... show more 2026-10-27T04:42:40.826608-04:00 nostromo.teiken.net kernel: [497708.516032] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=85.217.149.66 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=296 DF PROTO=TCP SPT=39566 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-27T04:42:41.839275-04:00 nostromo.teiken.net kernel: [497709.532853] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=85.217.149.66 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=297 DF PROTO=TCP SPT=39566 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-27T04:42:42.866594-04:00 nostromo.teiken.net kernel: [497710.556844] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=85.217.149.66 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=298 DF PROTO=TCP SPT=39566 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-27T04:42:43.887264-04:00 nostromo.teiken.net kernel: [497711.580824] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2: ... show less	Port Scan
🇺🇸 173.211.37.152	27 Oct 2026	2026-10-27T02:50:39.613459-04:00 nostromo.teiken.net kernel: [490987.366435] syn_limit:IN=en-wan OUT ... show more 2026-10-27T02:50:39.613459-04:00 nostromo.teiken.net kernel: [490987.366435] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=173.211.37.152 DST=173.52.106.128 LEN=60 TOS=0x08 PREC=0x20 TTL=57 ID=14007 DF PROTO=TCP SPT=52664 DPT=1723 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-27T02:50:39.616577-04:00 nostromo.teiken.net kernel: [490987.367938] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=173.211.37.152 DST=173.52.106.128 LEN=60 TOS=0x08 PREC=0x20 TTL=57 ID=15434 DF PROTO=TCP SPT=62320 DPT=23 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-27T02:50:39.646065-04:00 nostromo.teiken.net kernel: [490987.399070] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=173.211.37.152 DST=173.52.106.128 LEN=60 TOS=0x08 PREC=0x20 TTL=57 ID=7180 DF PROTO=TCP SPT=43484 DPT=3389 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-27T02:50:40.253521-04:00 nostromo.teiken.net kernel: [490988.006494] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2: ... show less	Port Scan
🇨🇦 15.235.85.161	27 Oct 2026	2026-10-26T21:13:19.626597-04:00 nostromo.teiken.net kernel: [470747.558267] syn_limit:IN=en-wan OUT ... show more 2026-10-26T21:13:19.626597-04:00 nostromo.teiken.net kernel: [470747.558267] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=15.235.85.161 DST=173.52.106.128 LEN=60 TOS=0x08 PREC=0x20 TTL=51 ID=34953 DF PROTO=TCP SPT=56846 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-26T21:13:19.627037-04:00 nostromo.teiken.net kernel: [470747.558359] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=15.235.85.161 DST=173.52.106.128 LEN=60 TOS=0x08 PREC=0x20 TTL=51 ID=9294 DF PROTO=TCP SPT=56728 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-26T21:13:19.627208-04:00 nostromo.teiken.net kernel: [470747.558412] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=15.235.85.161 DST=173.52.106.128 LEN=60 TOS=0x08 PREC=0x20 TTL=51 ID=57956 DF PROTO=TCP SPT=56826 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-26T21:13:19.627294-04:00 nostromo.teiken.net kernel: [470747.558469] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:8 ... show less	Port Scan
🇯🇵 140.245.85.22	27 Oct 2026	www.teiken.org:443 140.245.85.22:49750 - - [26/Oct/2026:20:41:30 -0400] "GET /wp-login.php HTTP/1.1" ... show more www.teiken.org:443 140.245.85.22:49750 - - [26/Oct/2026:20:41:30 -0400] "GET /wp-login.php HTTP/1.1" 404 3501 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" www.teiken.org:443 140.245.85.22:49750 - - [26/Oct/2026:20:41:30 -0400] "GET /wp-admin/admin-ajax.php HTTP/1.1" 404 626 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15" www.teiken.org:443 140.245.85.22:49750 - - [26/Oct/2026:20:41:30 -0400] "GET /wp-admin/load-scripts.php HTTP/1.1" 404 626 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Safari/605.1.15" www.teiken.org:443 140.245.85.22:49750 - - [26/Oct/2026:20:41:31 -0400] "GET /wp-admin/load-styles.php HTTP/1.1" 404 626 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15" www.teiken.org:443 140.245.85.2 ... show less	Web App Attack
🇺🇸 143.244.168.161	26 Oct 2026	2026-10-26T18:26:18.221127-04:00 nostromo.teiken.net kernel: [460726.241621] syn_limit:IN=en-wan OUT ... show more 2026-10-26T18:26:18.221127-04:00 nostromo.teiken.net kernel: [460726.241621] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=143.244.168.161 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=31520 DF PROTO=TCP SPT=47590 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-26T18:26:19.228491-04:00 nostromo.teiken.net kernel: [460727.248978] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=143.244.168.161 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=31521 DF PROTO=TCP SPT=47590 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-26T18:26:21.247228-04:00 nostromo.teiken.net kernel: [460729.267695] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=143.244.168.161 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=32534 DF PROTO=TCP SPT=46466 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-26T18:26:22.268101-04:00 nostromo.teiken.net kernel: [460730.288558] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2: ... show less	Port Scan
🇨🇦 167.99.181.249	26 Oct 2026	2026-10-26T18:26:16.511534-04:00 nostromo.teiken.net kernel: [460724.532038] syn_limit:IN=en-wan OUT ... show more 2026-10-26T18:26:16.511534-04:00 nostromo.teiken.net kernel: [460724.532038] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=167.99.181.249 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=25721 DF PROTO=TCP SPT=47878 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-26T18:26:17.530171-04:00 nostromo.teiken.net kernel: [460725.550675] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=167.99.181.249 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=25722 DF PROTO=TCP SPT=47878 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-26T18:26:19.506585-04:00 nostromo.teiken.net kernel: [460727.523989] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=167.99.181.249 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=56260 DF PROTO=TCP SPT=47888 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-26T18:26:19.546166-04:00 nostromo.teiken.net kernel: [460727.566648] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2: ... show less	Port Scan