wteiken - AbuseIPDB User Profile

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User wteiken , the webmaster of teiken.org, joined AbuseIPDB in December 2021 and has reported 19,999 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇱🇻 31.56.204.99	20 hours ago	2026-06-29T06:17:20.829107-04:00 narcissus.teiken.net sshd-session[143844]: Failed password for root ... show more 2026-06-29T06:17:20.829107-04:00 narcissus.teiken.net sshd-session[143844]: Failed password for root from 31.56.204.99 port 51228 ssh2 2026-06-29T06:23:18.165192-04:00 narcissus.teiken.net sshd-session[144243]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.56.204.99 user=root 2026-06-29T06:23:19.913292-04:00 narcissus.teiken.net sshd-session[144243]: Failed password for root from 31.56.204.99 port 50432 ssh2 2026-06-29T06:29:15.035374-04:00 narcissus.teiken.net sshd-session[144705]: Invalid user admin from 31.56.204.99 port 51358 2026-06-29T06:29:15.060280-04:00 narcissus.teiken.net sshd-session[144705]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.56.204.99 2026-06-29T06:29:17.269258-04:00 narcissus.teiken.net sshd-session[144705]: Failed password for invalid user admin from 31.56.204.99 port 51358 ssh2 ... show less	Brute-Force SSH
🇧🇷 191.5.216.35	20 hours ago	2026-06-29T06:12:25.144591-04:00 narcissus.teiken.net sshd-session[143495]: pam_unix(sshd:auth): aut ... show more 2026-06-29T06:12:25.144591-04:00 narcissus.teiken.net sshd-session[143495]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.5.216.35 user=root 2026-06-29T06:12:27.143218-04:00 narcissus.teiken.net sshd-session[143495]: Failed password for root from 191.5.216.35 port 60770 ssh2 2026-06-29T06:14:59.820654-04:00 narcissus.teiken.net sshd-session[143632]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.5.216.35 user=root 2026-06-29T06:15:01.956850-04:00 narcissus.teiken.net sshd-session[143632]: Failed password for root from 191.5.216.35 port 41396 ssh2 2026-06-29T06:17:38.221393-04:00 narcissus.teiken.net sshd-session[143866]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.5.216.35 user=root 2026-06-29T06:17:40.771586-04:00 narcissus.teiken.net sshd-session[143866]: Failed password for root from 191.5.216.35 port 52898 ssh2 ... show less	Brute-Force SSH
🇧🇩 45.120.115.150	20 hours ago	2026-06-29T06:10:05.111469-04:00 narcissus.teiken.net sshd-session[143304]: pam_unix(sshd:auth): aut ... show more 2026-06-29T06:10:05.111469-04:00 narcissus.teiken.net sshd-session[143304]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.120.115.150 user=root 2026-06-29T06:10:07.049010-04:00 narcissus.teiken.net sshd-session[143304]: Failed password for root from 45.120.115.150 port 44522 ssh2 2026-06-29T06:12:49.813482-04:00 narcissus.teiken.net sshd-session[143518]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.120.115.150 user=root 2026-06-29T06:12:52.142476-04:00 narcissus.teiken.net sshd-session[143518]: Failed password for root from 45.120.115.150 port 58492 ssh2 2026-06-29T06:15:29.024955-04:00 narcissus.teiken.net sshd-session[143681]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.120.115.150 user=root 2026-06-29T06:15:30.570350-04:00 narcissus.teiken.net sshd-session[143681]: Failed password for root from 45.120.115.150 port 44230 ssh2 ... show less	Brute-Force SSH
🇫🇷 51.91.156.22	20 hours ago	2026-06-29T06:06:52.537749-04:00 narcissus.teiken.net sshd-session[143073]: pam_unix(sshd:auth): aut ... show more 2026-06-29T06:06:52.537749-04:00 narcissus.teiken.net sshd-session[143073]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.156.22 user=root 2026-06-29T06:06:54.228821-04:00 narcissus.teiken.net sshd-session[143073]: Failed password for root from 51.91.156.22 port 55494 ssh2 2026-06-29T06:09:07.998586-04:00 narcissus.teiken.net sshd-session[143192]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.156.22 user=root 2026-06-29T06:09:10.140177-04:00 narcissus.teiken.net sshd-session[143192]: Failed password for root from 51.91.156.22 port 33510 ssh2 2026-06-29T06:11:27.253176-04:00 narcissus.teiken.net sshd-session[143386]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.156.22 user=root 2026-06-29T06:11:28.946391-04:00 narcissus.teiken.net sshd-session[143386]: Failed password for root from 51.91.156.22 port 39018 ssh2 ... show less	Brute-Force SSH
🇸🇬 43.156.235.179	20 hours ago	2026-06-29T06:04:14.297628-04:00 narcissus.teiken.net sshd-session[142901]: Failed password for root ... show more 2026-06-29T06:04:14.297628-04:00 narcissus.teiken.net sshd-session[142901]: Failed password for root from 43.156.235.179 port 47694 ssh2 2026-06-29T06:06:53.885359-04:00 narcissus.teiken.net sshd-session[143077]: Invalid user admin from 43.156.235.179 port 47276 2026-06-29T06:06:53.909764-04:00 narcissus.teiken.net sshd-session[143077]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.235.179 2026-06-29T06:06:56.487891-04:00 narcissus.teiken.net sshd-session[143077]: Failed password for invalid user admin from 43.156.235.179 port 47276 ssh2 2026-06-29T06:09:29.193648-04:00 narcissus.teiken.net sshd-session[143212]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.235.179 user=root 2026-06-29T06:09:30.855377-04:00 narcissus.teiken.net sshd-session[143212]: Failed password for root from 43.156.235.179 port 46724 ssh2 ... show less	Brute-Force SSH
🇨🇳 211.97.69.110	21 hours ago	2026-06-28T21:41:11.260810-04:00 nostromo.teiken.net sshd-session[100678]: Failed password for root ... show more 2026-06-28T21:41:11.260810-04:00 nostromo.teiken.net sshd-session[100678]: Failed password for root from 211.97.69.110 port 42880 ssh2 2026-06-29T05:13:59.778550-04:00 nostromo.teiken.net sshd-session[135571]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.97.69.110 user=root 2026-06-29T05:14:01.866179-04:00 nostromo.teiken.net sshd-session[135571]: Failed password for root from 211.97.69.110 port 56436 ssh2 2026-06-29T05:33:38.776124-04:00 nostromo.teiken.net sshd-session[136826]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.97.69.110 user=root 2026-06-29T05:33:40.412896-04:00 nostromo.teiken.net sshd-session[136826]: Failed password for root from 211.97.69.110 port 48258 ssh2 2026-06-29T05:34:38.958084-04:00 nostromo.teiken.net sshd-session[136878]: Invalid user ubuntu from 211.97.69.110 port 33470 ... show less	Brute-Force SSH
🇮🇳 117.200.93.93	21 hours ago	2026-06-29T05:29:26.454736-04:00 nostromo.teiken.net sshd-session[136376]: Invalid user admin from 1 ... show more 2026-06-29T05:29:26.454736-04:00 nostromo.teiken.net sshd-session[136376]: Invalid user admin from 117.200.93.93 port 44049 2026-06-29T05:29:26.479038-04:00 nostromo.teiken.net sshd-session[136376]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.200.93.93 2026-06-29T05:29:28.380148-04:00 nostromo.teiken.net sshd-session[136376]: Failed password for invalid user admin from 117.200.93.93 port 44049 ssh2 2026-06-29T05:32:46.437257-04:00 nostromo.teiken.net sshd-session[136735]: Invalid user test from 117.200.93.93 port 51582 2026-06-29T05:32:46.461385-04:00 nostromo.teiken.net sshd-session[136735]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.200.93.93 2026-06-29T05:32:48.461740-04:00 nostromo.teiken.net sshd-session[136735]: Failed password for invalid user test from 117.200.93.93 port 51582 ssh2 ... show less	Brute-Force SSH
🇳🇱 192.142.28.77	22 hours ago	2026-06-29T04:42:51.783442-04:00 nostromo.teiken.net kernel: [100658.322834] syn_limit:IN=en-wan OUT ... show more 2026-06-29T04:42:51.783442-04:00 nostromo.teiken.net kernel: [100658.322834] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=192.142.28.77 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=31807 DF PROTO=TCP SPT=52206 DPT=8443 WINDOW=42340 RES=0x00 SYN URGP=0 2026-06-29T04:42:52.807411-04:00 nostromo.teiken.net kernel: [100659.346800] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=192.142.28.77 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=31808 DF PROTO=TCP SPT=52206 DPT=8443 WINDOW=42340 RES=0x00 SYN URGP=0 2026-06-29T04:42:55.890289-04:00 nostromo.teiken.net kernel: [100662.420808] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=192.142.28.77 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=58 ID=54622 DF PROTO=TCP SPT=36452 DPT=8888 WINDOW=42340 RES=0x00 SYN URGP=0 2026-06-29T04:42:56.903963-04:00 nostromo.teiken.net kernel: [100663.443319] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2: ... show less	Port Scan
🇩🇪 109.71.252.174	23 hours ago	2026-06-29T03:16:34.490278-04:00 nostromo.teiken.net kernel: [95481.075845] syn_limit:IN=en-wan OUT= ... show more 2026-06-29T03:16:34.490278-04:00 nostromo.teiken.net kernel: [95481.075845] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=109.71.252.174 DST=173.52.106.128 LEN=60 TOS=0x08 PREC=0x20 TTL=54 ID=42621 DF PROTO=TCP SPT=52214 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-06-29T03:16:34.490534-04:00 nostromo.teiken.net kernel: [95481.075845] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=109.71.252.174 DST=173.52.106.128 LEN=60 TOS=0x08 PREC=0x20 TTL=55 ID=60442 DF PROTO=TCP SPT=52176 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-06-29T03:16:34.490613-04:00 nostromo.teiken.net kernel: [95481.076967] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=109.71.252.174 DST=173.52.106.128 LEN=60 TOS=0x08 PREC=0x20 TTL=55 ID=22550 DF PROTO=TCP SPT=52182 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-06-29T03:16:35.504518-04:00 nostromo.teiken.net kernel: [95482.091866] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:8 ... show less	Port Scan
🇩🇪 2a0e:97c0:3e3:3cb::1	23 hours ago	2026-06-29T03:16:34.181329-04:00 nostromo.teiken.net kernel: [95480.768676] syn_limit:IN=en-wan OUT= ... show more 2026-06-29T03:16:34.181329-04:00 nostromo.teiken.net kernel: [95480.768676] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a0e:97c0:03e3:03cb:0000:0000:0000:0001 DST=2600:4041:5c7d:4dff:0000:0000:0000:0001 LEN=80 TC=40 HOPLIMIT=54 FLOWLBL=414654 PROTO=TCP SPT=34794 DPT=443 WINDOW=64800 RES=0x00 SYN URGP=0 2026-06-29T03:16:34.190268-04:00 nostromo.teiken.net kernel: [95480.769305] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a0e:97c0:03e3:03cb:0000:0000:0000:0001 DST=2600:4041:5c7d:4dff:0000:0000:0000:0001 LEN=80 TC=40 HOPLIMIT=54 FLOWLBL=353888 PROTO=TCP SPT=34816 DPT=443 WINDOW=64800 RES=0x00 SYN URGP=0 2026-06-29T03:16:34.190371-04:00 nostromo.teiken.net kernel: [95480.769601] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a0e:97c0:03e3:03cb:0000:0000:0000:0001 DST=2600:4041:5c7d:4dff:0000:0000:0000:0001 LEN=80 TC=40 HOPLIMIT=54 FLOWLBL=154212 PROTO=TCP SPT=34826 DPT=443 WINDOW=64800 RES=0x00 S ... show less	Port Scan
🇺🇸 13.64.25.184	23 hours ago	rocinante.teiken.net:80 13.64.25.184:28737 - - [29/Jun/2026:03:12:04 -0400] "GET /.git/HEAD HTTP/1.1 ... show more rocinante.teiken.net:80 13.64.25.184:28737 - - [29/Jun/2026:03:12:04 -0400] "GET /.git/HEAD HTTP/1.1" 301 589 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15" rocinante.teiken.net:80 13.64.25.184:28738 - - [29/Jun/2026:03:12:05 -0400] "GET /.git/config HTTP/1.1" 301 593 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" rocinante.teiken.net:80 13.64.25.184:28739 - - [29/Jun/2026:03:12:05 -0400] "GET /.git/logs/HEAD HTTP/1.1" 301 599 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" rocinante.teiken.net:80 13.64.25.184:28740 - - [29/Jun/2026:03:12:05 -0400] "GET /.git/refs/heads/master HTTP/1.1" 301 615 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" rocinante.teiken.net:80 13.64.25.184:28741 - - [29/Jun/2026:03:12:05 -0400] "GET /.git/refs/heads/main HTTP/1.1" 301 611 "-" "Mozilla/5 ... show less	Web App Attack
🇫🇷 104.28.158.140	29 Jun 2026	2026-06-29T02:56:54.664461-04:00 nostromo.teiken.net kernel: [94301.262635] syn_limit:IN=en-wan OUT= ... show more 2026-06-29T02:56:54.664461-04:00 nostromo.teiken.net kernel: [94301.262635] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=104.28.158.140 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=19633 DF PROTO=TCP SPT=45290 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2026-06-29T02:56:54.664901-04:00 nostromo.teiken.net kernel: [94301.262950] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=104.28.158.140 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=2937 DF PROTO=TCP SPT=45272 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2026-06-29T02:56:54.670281-04:00 nostromo.teiken.net kernel: [94301.263972] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=104.28.158.140 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=10897 DF PROTO=TCP SPT=45298 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2026-06-29T02:56:54.672453-04:00 nostromo.teiken.net kernel: [94301.264158] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88 ... show less	Port Scan
🇫🇷 104.28.211.187	29 Jun 2026	2026-06-29T02:56:22.913737-04:00 nostromo.teiken.net kernel: [94269.512494] syn_limit:IN=en-wan OUT= ... show more 2026-06-29T02:56:22.913737-04:00 nostromo.teiken.net kernel: [94269.512494] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=104.28.211.187 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=10260 DF PROTO=TCP SPT=29164 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2026-06-29T02:56:23.941616-04:00 nostromo.teiken.net kernel: [94270.540379] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=104.28.211.187 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=10261 DF PROTO=TCP SPT=29164 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2026-06-29T02:56:24.965543-04:00 nostromo.teiken.net kernel: [94271.564298] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=104.28.211.187 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=10262 DF PROTO=TCP SPT=29164 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2026-06-29T02:56:25.990286-04:00 nostromo.teiken.net kernel: [94272.588336] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:8 ... show less	Port Scan
🇧🇷 34.95.246.178	29 Jun 2026	2026-06-28T23:12:13.086685-04:00 rocinante.teiken.net kernel: [521998.154409] syn_limit:IN=ens5 OUT= ... show more 2026-06-28T23:12:13.086685-04:00 rocinante.teiken.net kernel: [521998.154409] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.95.246.178 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=37182 DF PROTO=TCP SPT=55504 DPT=80 WINDOW=65320 RES=0x00 SYN URGP=0 2026-06-28T23:12:13.094261-04:00 rocinante.teiken.net kernel: [521998.162018] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.95.246.178 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=57323 DF PROTO=TCP SPT=55510 DPT=80 WINDOW=65320 RES=0x00 SYN URGP=0 2026-06-28T23:12:13.103465-04:00 rocinante.teiken.net kernel: [521998.169535] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.95.246.178 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=62281 DF PROTO=TCP SPT=55516 DPT=80 WINDOW=65320 RES=0x00 SYN URGP=0 2026-06-28T23:12:13.104386-04:00 rocinante.teiken.net kernel: [521998.174515] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:a ... show less	Port Scan
🇭🇰 152.32.240.167	29 Jun 2026	2026-06-28T22:30:07.032226-04:00 nostromo.teiken.net sshd-session[103742]: Failed password for root ... show more 2026-06-28T22:30:07.032226-04:00 nostromo.teiken.net sshd-session[103742]: Failed password for root from 152.32.240.167 port 54061 ssh2 2026-06-28T22:30:11.095572-04:00 nostromo.teiken.net sshd-session[103742]: Failed password for root from 152.32.240.167 port 54061 ssh2 2026-06-28T22:30:15.597677-04:00 nostromo.teiken.net sshd-session[103742]: Failed password for root from 152.32.240.167 port 54061 ssh2 2026-06-28T22:30:19.532743-04:00 nostromo.teiken.net sshd-session[103742]: Failed password for root from 152.32.240.167 port 54061 ssh2 2026-06-28T22:30:23.282997-04:00 nostromo.teiken.net sshd-session[103742]: Failed password for root from 152.32.240.167 port 54061 ssh2 2026-06-28T22:30:25.254854-04:00 nostromo.teiken.net sshd-session[103742]: Disconnecting authenticating user root 152.32.240.167 port 54061: Change of username or service not allowed: (root,ssh-connection) -> (test,ssh-connection) [preauth] ... show less	Brute-Force SSH
🇹🇼 34.81.142.115	29 Jun 2026	2026-06-28T22:10:56.992747-04:00 rocinante.teiken.net kernel: [518322.126104] syn_limit:IN=ens5 OUT= ... show more 2026-06-28T22:10:56.992747-04:00 rocinante.teiken.net kernel: [518322.126104] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.81.142.115 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=20376 DF PROTO=TCP SPT=49164 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-06-28T22:10:56.999770-04:00 rocinante.teiken.net kernel: [518322.133162] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.81.142.115 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=51208 DF PROTO=TCP SPT=49176 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-06-28T22:10:57.043479-04:00 rocinante.teiken.net kernel: [518322.172821] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.81.142.115 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x60 TTL=58 ID=24594 DF PROTO=TCP SPT=49190 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-06-28T22:10:57.059473-04:00 rocinante.teiken.net kernel: [518322.190699] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f ... show less	Port Scan
🇧🇷 35.199.77.208	28 Jun 2026	2026-06-28T19:45:11.843775-04:00 rocinante.teiken.net kernel: [509577.134021] syn_limit:IN=ens5 OUT= ... show more 2026-06-28T19:45:11.843775-04:00 rocinante.teiken.net kernel: [509577.134021] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=35.199.77.208 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=27070 DF PROTO=TCP SPT=36784 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-06-28T19:45:11.843935-04:00 rocinante.teiken.net kernel: [509577.136713] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=35.199.77.208 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=63436 DF PROTO=TCP SPT=36798 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-06-28T19:45:11.849200-04:00 rocinante.teiken.net kernel: [509577.139379] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=35.199.77.208 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=28385 DF PROTO=TCP SPT=36808 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-06-28T19:45:11.849312-04:00 rocinante.teiken.net kernel: [509577.142112] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f ... show less	Port Scan
🇩🇪 2a0e:97c0:3ea:320::1	28 Jun 2026	2026-06-28T17:19:21.595647-04:00 nostromo.teiken.net kernel: [59648.521124] syn_limit:IN=en-wan OUT= ... show more 2026-06-28T17:19:21.595647-04:00 nostromo.teiken.net kernel: [59648.521124] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a0e:97c0:03ea:0320:0000:0000:0000:0001 DST=2600:4041:5c7d:4dff:0000:0000:0000:0001 LEN=80 TC=40 HOPLIMIT=54 FLOWLBL=767101 PROTO=TCP SPT=35952 DPT=443 WINDOW=64800 RES=0x00 SYN URGP=0 2026-06-28T17:19:21.596095-04:00 nostromo.teiken.net kernel: [59648.521210] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a0e:97c0:03ea:0320:0000:0000:0000:0001 DST=2600:4041:5c7d:4dff:0000:0000:0000:0001 LEN=80 TC=40 HOPLIMIT=54 FLOWLBL=898357 PROTO=TCP SPT=35894 DPT=443 WINDOW=64800 RES=0x00 SYN URGP=0 2026-06-28T17:19:21.600273-04:00 nostromo.teiken.net kernel: [59648.522331] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a0e:97c0:03ea:0320:0000:0000:0000:0001 DST=2600:4041:5c7d:4dff:0000:0000:0000:0001 LEN=80 TC=40 HOPLIMIT=54 FLOWLBL=286975 PROTO=TCP SPT=35978 DPT=443 WINDOW=64800 RES=0x00 S ... show less	Port Scan
🇷🇴 45.43.166.116	28 Jun 2026	rocinante.teiken.net:443 45.43.166.116:53010 - - [28/Jun/2026:16:03:29 -0400] "GET /.git/HEAD HTTP/1 ... show more rocinante.teiken.net:443 45.43.166.116:53010 - - [28/Jun/2026:16:03:29 -0400] "GET /.git/HEAD HTTP/1.1" 404 506 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" rocinante.teiken.net:443 45.43.166.116:52892 - - [28/Jun/2026:16:03:30 -0400] "GET /.env HTTP/1.1" 404 4437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/146.0.3856.109" rocinante.teiken.net:443 45.43.166.116:53010 - - [28/Jun/2026:16:03:30 -0400] "GET /.env.local HTTP/1.1" 404 506 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" rocinante.teiken.net:443 45.43.166.116:52892 - - [28/Jun/2026:16:03:31 -0400] "GET /.env.production HTTP/1.1" 404 506 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/146.0.3856.109" rocinante.teiken.net:443 45.43.166 ... show less	Web App Attack
🇺🇸 3.101.102.203	28 Jun 2026	rocinante.teiken.net:443 3.101.102.203:37912 - - [28/Jun/2026:15:30:05 -0400] "GET /.git/config HTTP ... show more rocinante.teiken.net:443 3.101.102.203:37912 - - [28/Jun/2026:15:30:05 -0400] "GET /.git/config HTTP/1.1" 404 554 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 3.101.102.203:37912 - - [28/Jun/2026:15:30:05 -0400] "GET /.env HTTP/1.1" 404 554 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 3.101.102.203:37912 - - [28/Jun/2026:15:30:05 -0400] "GET /.env.local HTTP/1.1" 404 554 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 3.101.102.203:37912 - - [28/Jun/2026:15:30:05 -0400] "GET /.env.production HTTP/1.1" 404 554 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 3.101.102.203:37912 - - [28 ... show less	Web App Attack
🇺🇸 2a04:c300:400::178	28 Jun 2026	2026-06-28T15:02:16.219704-04:00 nostromo.teiken.net kernel: [51423.221207] syn_limit:IN=en-wan OUT= ... show more 2026-06-28T15:02:16.219704-04:00 nostromo.teiken.net kernel: [51423.221207] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a04:c300:0400:0000:0000:0000:0000:0178 DST=2600:4041:5c7d:4dff:0000:0000:0000:0001 LEN=80 TC=40 HOPLIMIT=55 FLOWLBL=785301 PROTO=TCP SPT=41960 DPT=443 WINDOW=43200 RES=0x00 SYN URGP=0 2026-06-28T15:02:16.220074-04:00 nostromo.teiken.net kernel: [51423.221251] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a04:c300:0400:0000:0000:0000:0000:0178 DST=2600:4041:5c7d:4dff:0000:0000:0000:0001 LEN=80 TC=40 HOPLIMIT=55 FLOWLBL=625462 PROTO=TCP SPT=41940 DPT=443 WINDOW=43200 RES=0x00 SYN URGP=0 2026-06-28T15:02:16.220208-04:00 nostromo.teiken.net kernel: [51423.221465] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a04:c300:0400:0000:0000:0000:0000:0178 DST=2600:4041:5c7d:4dff:0000:0000:0000:0001 LEN=80 TC=40 HOPLIMIT=55 FLOWLBL=589744 PROTO=TCP SPT=41958 DPT=443 WINDOW=43200 RES=0x00 S ... show less	Port Scan
🇳🇱 31.58.51.38	28 Jun 2026	rocinante.teiken.net:443 31.58.51.38:59634 - - [28/Jun/2026:14:48:22 -0400] "GET /.git/HEAD HTTP/1.1 ... show more rocinante.teiken.net:443 31.58.51.38:59634 - - [28/Jun/2026:14:48:22 -0400] "GET /.git/HEAD HTTP/1.1" 404 501 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0" rocinante.teiken.net:443 31.58.51.38:59634 - - [28/Jun/2026:14:48:24 -0400] "GET /.env HTTP/1.1" 404 501 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" rocinante.teiken.net:443 31.58.51.38:59634 - - [28/Jun/2026:14:48:27 -0400] "GET /.env.local HTTP/1.1" 404 501 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15.7; rv:149.0) Gecko/20100101 Firefox/149.0" rocinante.teiken.net:443 31.58.51.38:59644 - - [28/Jun/2026:14:48:27 -0400] "GET /.env.production HTTP/1.1" 404 501 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/146.0.3856.109" rocinante.teiken.net:443 31.58.51.38:44164 - - [28/Jun/2026:14:48:27 -0400] "GET /backend/.env HTTP/1.1" 404 4429 "-" "Mo ... show less	Web App Attack
🇨🇳 117.164.191.217	28 Jun 2026	2026-06-28T12:48:57.798499-04:00 narcissus.teiken.net sshd-session[64869]: pam_unix(sshd:auth): auth ... show more 2026-06-28T12:48:57.798499-04:00 narcissus.teiken.net sshd-session[64869]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.164.191.217 2026-06-28T12:49:00.059427-04:00 narcissus.teiken.net sshd-session[64869]: Failed password for invalid user orangepi from 117.164.191.217 port 36830 ssh2 2026-06-28T12:50:07.246838-04:00 narcissus.teiken.net sshd-session[64933]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.164.191.217 user=root 2026-06-28T12:50:09.579752-04:00 narcissus.teiken.net sshd-session[64933]: Failed password for root from 117.164.191.217 port 53098 ssh2 2026-06-28T12:51:07.410057-04:00 narcissus.teiken.net sshd-session[64999]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.164.191.217 user=root 2026-06-28T12:51:09.476573-04:00 narcissus.teiken.net sshd-session[64999]: Failed password for root from 117.164.191.217 port 42566 ssh2 ... show less	Brute-Force SSH
🇮🇳 13.201.137.40	28 Jun 2026	rocinante.teiken.net:443 13.201.137.40:44678 - - [28/Jun/2026:08:54:34 -0400] "GET /.git/config HTTP ... show more rocinante.teiken.net:443 13.201.137.40:44678 - - [28/Jun/2026:08:54:34 -0400] "GET /.git/config HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 13.201.137.40:44678 - - [28/Jun/2026:08:54:35 -0400] "GET /.env HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 13.201.137.40:44678 - - [28/Jun/2026:08:54:35 -0400] "GET /.env.local HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 13.201.137.40:44678 - - [28/Jun/2026:08:54:35 -0400] "GET /.env.production HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 13.201.137.40:44678 - - [28 ... show less	Web App Attack
🇮🇳 206.1.21.1	28 Jun 2026	2026-06-28T03:13:01.639650-04:00 narcissus.teiken.net sshd-session[17062]: pam_unix(sshd:auth): auth ... show more 2026-06-28T03:13:01.639650-04:00 narcissus.teiken.net sshd-session[17062]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.1.21.1 2026-06-28T03:13:03.498620-04:00 narcissus.teiken.net sshd-session[17062]: Failed password for invalid user webadmin from 206.1.21.1 port 30412 ssh2 2026-06-28T03:33:15.132024-04:00 narcissus.teiken.net sshd-session[18437]: Invalid user ftp from 206.1.21.1 port 41424 2026-06-28T03:33:15.331280-04:00 narcissus.teiken.net sshd-session[18437]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.1.21.1 2026-06-28T03:33:17.448602-04:00 narcissus.teiken.net sshd-session[18437]: Failed password for invalid user ftp from 206.1.21.1 port 41424 ssh2 2026-06-28T03:53:57.361549-04:00 narcissus.teiken.net sshd-session[20078]: Invalid user test from 206.1.21.1 port 44966 ... show less	Brute-Force SSH