AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User wteiken , the webmaster of teiken.org, joined AbuseIPDB in December 2021 and has reported 23,655 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇪🇸 162.158.122.188	15 Oct 2026	www.teiken.org:443 162.158.122.188:11513 - - [14/Oct/2026:23:33:18 -0400] "GET /wp-config.php HTTP/1 ... show more www.teiken.org:443 162.158.122.188:11513 - - [14/Oct/2026:23:33:18 -0400] "GET /wp-config.php HTTP/1.1" 404 4657 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" www.teiken.org:443 162.158.122.188:11534 - - [14/Oct/2026:23:33:19 -0400] "GET /phpinfo.php HTTP/1.1" 404 4656 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" www.teiken.org:80 162.158.122.188:12242 - - [14/Oct/2026:23:33:21 -0400] "GET /.env HTTP/1.1" 301 615 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Mobile/15E148 Safari/604.1" www.teiken.org:80 162.158.122.188:12249 - - [14/Oct/2026:23:33:21 -0400] "GET /.env.production HTTP/1.1" 301 637 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Mobile/15E148 Safari/604.1" www.teiken.org:80 162.158.122.188:122 ... show less	Web App Attack
🇪🇸 162.158.122.187	15 Oct 2026	2026-10-14T23:33:19.639513-04:00 rocinante.teiken.net kernel: [1090005.563908] syn_limit:IN=ens5 OUT ... show more 2026-10-14T23:33:19.639513-04:00 rocinante.teiken.net kernel: [1090005.563908] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=162.158.122.187 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=29888 DF PROTO=TCP SPT=10234 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-14T23:33:20.125517-04:00 rocinante.teiken.net kernel: [1090006.049892] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=162.158.122.187 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=18550 DF PROTO=TCP SPT=10239 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-14T23:33:20.664190-04:00 rocinante.teiken.net kernel: [1090006.588560] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=162.158.122.187 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=29889 DF PROTO=TCP SPT=10234 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-14T23:33:20.837570-04:00 rocinante.teiken.net kernel: [1090006.759091] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1: ... show less	Port Scan
🇩🇪 172.71.164.90	15 Oct 2026	2026-10-14T21:48:13.799728-04:00 rocinante.teiken.net kernel: [1083699.830105] syn_limit:IN=ens5 OUT ... show more 2026-10-14T21:48:13.799728-04:00 rocinante.teiken.net kernel: [1083699.830105] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=172.71.164.90 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=10374 DF PROTO=TCP SPT=9226 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-14T21:48:13.799847-04:00 rocinante.teiken.net kernel: [1083699.832773] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=172.71.164.90 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=44272 DF PROTO=TCP SPT=9220 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-14T21:48:13.799873-04:00 rocinante.teiken.net kernel: [1083699.832783] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=172.71.164.90 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=54453 DF PROTO=TCP SPT=9234 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-14T21:48:13.805165-04:00 rocinante.teiken.net kernel: [1083699.843639] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a: ... show less	Port Scan
🇩🇪 172.71.164.91	15 Oct 2026	2026-10-14T21:48:12.603826-04:00 rocinante.teiken.net kernel: [1083698.634139] syn_limit:IN=ens5 OUT ... show more 2026-10-14T21:48:12.603826-04:00 rocinante.teiken.net kernel: [1083698.634139] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=172.71.164.91 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=15198 DF PROTO=TCP SPT=12501 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-14T21:48:12.604016-04:00 rocinante.teiken.net kernel: [1083698.634627] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=172.71.164.91 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=28726 DF PROTO=TCP SPT=12493 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-14T21:48:12.604071-04:00 rocinante.teiken.net kernel: [1083698.636840] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=172.71.164.91 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=28062 DF PROTO=TCP SPT=12514 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-14T21:48:12.604090-04:00 rocinante.teiken.net kernel: [1083698.639538] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb: ... show less	Port Scan
🇬🇧 141.101.98.239	15 Oct 2026	2026-10-14T21:26:03.023495-04:00 nostromo.teiken.net kernel: [255207.708795] syn_limit:IN=en-wan OUT ... show more 2026-10-14T21:26:03.023495-04:00 nostromo.teiken.net kernel: [255207.708795] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=141.101.98.239 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=50444 DF PROTO=TCP SPT=11030 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-14T21:26:03.501586-04:00 nostromo.teiken.net kernel: [255208.191554] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=141.101.98.239 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=15570 DF PROTO=TCP SPT=11033 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-14T21:26:04.069280-04:00 nostromo.teiken.net kernel: [255208.759241] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=141.101.98.239 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=50445 DF PROTO=TCP SPT=11030 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-14T21:26:04.216288-04:00 nostromo.teiken.net kernel: [255208.906259] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00: ... show less	Port Scan
🇬🇧 141.101.98.99	15 Oct 2026	2026-10-14T21:25:58.699819-04:00 nostromo.teiken.net kernel: [255203.389831] syn_limit:IN=en-wan OUT ... show more 2026-10-14T21:25:58.699819-04:00 nostromo.teiken.net kernel: [255203.389831] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=141.101.98.99 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=8159 DF PROTO=TCP SPT=12626 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-14T21:25:59.887082-04:00 nostromo.teiken.net kernel: [255204.577084] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=141.101.98.99 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=34702 DF PROTO=TCP SPT=12627 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-14T21:26:00.783473-04:00 nostromo.teiken.net kernel: [255205.465014] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=141.101.98.99 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=8161 DF PROTO=TCP SPT=12626 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-14T21:26:00.903459-04:00 nostromo.teiken.net kernel: [255205.584865] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2 ... show less	Port Scan
🇬🇧 141.101.98.98	15 Oct 2026	www.teiken.net:443 141.101.98.98:10137 - - [14/Oct/2026:21:25:53 -0400] "GET /.env.local HTTP/1.1" 4 ... show more www.teiken.net:443 141.101.98.98:10137 - - [14/Oct/2026:21:25:53 -0400] "GET /.env.local HTTP/1.1" 404 4689 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" www.teiken.net:443 141.101.98.98:10145 - - [14/Oct/2026:21:25:53 -0400] "GET /.env.save HTTP/1.1" 404 4690 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" www.teiken.net:443 141.101.98.98:10154 - - [14/Oct/2026:21:25:54 -0400] "GET /.git/config HTTP/1.1" 404 4690 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Mobile/15E148 Safari/604.1" www.teiken.net:443 141.101.98.98:10156 - - [14/Oct/2026:21:25:54 -0400] "GET /.svn/entries HTTP/1.1" 404 4689 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" www.teiken.net:443 141.101.98.98:12062 - - [14/Oct/2026:21:25:57 -0400] "GET /inde ... show less	Web App Attack
🇨🇭 34.65.52.188	14 Oct 2026	www.teiken.net:443 34.65.52.188:49568 - - [14/Oct/2026:16:26:57 -0400] "GET /.git/config HTTP/1.1" 4 ... show more www.teiken.net:443 34.65.52.188:49568 - - [14/Oct/2026:16:26:57 -0400] "GET /.git/config HTTP/1.1" 404 560 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.65.52.188:49568 - - [14/Oct/2026:16:26:57 -0400] "GET /.env HTTP/1.1" 404 560 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.65.52.188:49568 - - [14/Oct/2026:16:26:58 -0400] "GET /.env.local HTTP/1.1" 404 560 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.65.52.188:49568 - - [14/Oct/2026:16:26:58 -0400] "GET /.env.production HTTP/1.1" 404 560 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.65.52.188:49568 - - [14/Oct/2026:16:26:58 -0400] "GET /.env.staging HTTP/1.1" 404 560 "-" "Mozilla/5.0 (X11; Linux x86_64) ... show less	Web App Attack
🇬🇧 103.214.44.50	14 Oct 2026	2026-10-14T15:42:41.815888-04:00 nostromo.teiken.net kernel: [234606.705072] syn_limit:IN=en-wan OUT ... show more 2026-10-14T15:42:41.815888-04:00 nostromo.teiken.net kernel: [234606.705072] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=103.214.44.50 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=15963 DF PROTO=TCP SPT=56298 DPT=443 WINDOW=65170 RES=0x00 SYN URGP=0 2026-10-14T15:42:41.823470-04:00 nostromo.teiken.net kernel: [234606.712198] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=103.214.44.50 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=18921 DF PROTO=TCP SPT=56306 DPT=443 WINDOW=65170 RES=0x00 SYN URGP=0 2026-10-14T15:42:42.836680-04:00 nostromo.teiken.net kernel: [234607.725858] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=103.214.44.50 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=15964 DF PROTO=TCP SPT=56298 DPT=443 WINDOW=65170 RES=0x00 SYN URGP=0 2026-10-14T15:42:42.843463-04:00 nostromo.teiken.net kernel: [234607.732391] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00: ... show less	Port Scan
🇮🇪 54.194.87.185	14 Oct 2026	2026-10-14T14:27:03.023479-04:00 nostromo.teiken.net kernel: [230067.955370] syn_limit:IN=en-wan OUT ... show more 2026-10-14T14:27:03.023479-04:00 nostromo.teiken.net kernel: [230067.955370] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=54.194.87.185 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=119 ID=51597 DF PROTO=TCP SPT=56344 DPT=80 WINDOW=62727 RES=0x00 SYN URGP=0 2026-10-14T14:27:04.053485-04:00 nostromo.teiken.net kernel: [230068.978695] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=54.194.87.185 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=119 ID=51598 DF PROTO=TCP SPT=56344 DPT=80 WINDOW=62727 RES=0x00 SYN URGP=0 2026-10-14T14:27:05.103484-04:00 nostromo.teiken.net kernel: [230070.028689] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=54.194.87.185 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=119 ID=51599 DF PROTO=TCP SPT=56344 DPT=80 WINDOW=62727 RES=0x00 SYN URGP=0 2026-10-14T14:27:06.133495-04:00 nostromo.teiken.net kernel: [230071.058707] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00: ... show less	Port Scan
🇺🇸 34.74.216.88	14 Oct 2026	www.teiken.net:443 34.74.216.88:54312 - - [14/Oct/2026:12:56:50 -0400] "GET /.git/config HTTP/1.1" 4 ... show more www.teiken.net:443 34.74.216.88:54312 - - [14/Oct/2026:12:56:50 -0400] "GET /.git/config HTTP/1.1" 404 564 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.74.216.88:54312 - - [14/Oct/2026:12:56:50 -0400] "GET /.env HTTP/1.1" 404 564 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.74.216.88:54312 - - [14/Oct/2026:12:56:50 -0400] "GET /.env.local HTTP/1.1" 404 564 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.74.216.88:54312 - - [14/Oct/2026:12:56:51 -0400] "GET /.env.production HTTP/1.1" 404 564 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.74.216.88:54312 - - [14/Oct/2026:12:56:51 -0400] "GET /.env.staging HTTP/1.1" 404 564 "-" "Mozilla/5.0 (X11; Linux x86_64) ... show less	Web App Attack
🇺🇸 35.224.35.72	14 Oct 2026	www.teiken.net:443 35.224.35.72:55878 - - [14/Oct/2026:12:55:55 -0400] "GET /.git/config HTTP/1.1" 4 ... show more www.teiken.net:443 35.224.35.72:55878 - - [14/Oct/2026:12:55:55 -0400] "GET /.git/config HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 35.224.35.72:55878 - - [14/Oct/2026:12:55:55 -0400] "GET /.env HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 35.224.35.72:55878 - - [14/Oct/2026:12:55:55 -0400] "GET /.env.local HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 35.224.35.72:55878 - - [14/Oct/2026:12:55:55 -0400] "GET /.env.production HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 35.224.35.72:55878 - - [14/Oct/2026:12:55:55 -0400] "GET /.env.staging HTTP/1.1" 404 ... show less	Web App Attack
🇨🇳 1.27.251.252	14 Oct 2026	2026-10-14T12:03:58.119930-04:00 nostromo.teiken.net sshd-session[344475]: pam_unix(sshd:auth): auth ... show more 2026-10-14T12:03:58.119930-04:00 nostromo.teiken.net sshd-session[344475]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.27.251.252 user=root 2026-10-14T12:04:00.433633-04:00 nostromo.teiken.net sshd-session[344475]: Failed password for root from 1.27.251.252 port 47392 ssh2 2026-10-14T12:04:03.582230-04:00 nostromo.teiken.net sshd-session[344486]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.27.251.252 user=root 2026-10-14T12:04:05.687408-04:00 nostromo.teiken.net sshd-session[344486]: Failed password for root from 1.27.251.252 port 55362 ssh2 2026-10-14T12:04:09.142255-04:00 nostromo.teiken.net sshd-session[344495]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.27.251.252 user=root 2026-10-14T12:04:11.155963-04:00 nostromo.teiken.net sshd-session[344495]: Failed password for root from 1.27.251.252 port 33148 ssh2 ... show less	Brute-Force SSH
🇨🇳 114.235.28.219	14 Oct 2026	2026-10-14T11:17:03.100852-04:00 narcissus.teiken.net sshd-session[369002]: pam_unix(sshd:auth): aut ... show more 2026-10-14T11:17:03.100852-04:00 narcissus.teiken.net sshd-session[369002]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.235.28.219 2026-10-14T11:17:05.011753-04:00 narcissus.teiken.net sshd-session[369002]: Failed password for invalid user admin from 114.235.28.219 port 3259 ssh2 2026-10-14T11:17:07.907349-04:00 narcissus.teiken.net sshd-session[369002]: Failed password for invalid user admin from 114.235.28.219 port 3259 ssh2 2026-10-14T11:17:12.971971-04:00 narcissus.teiken.net sshd-session[369002]: Failed password for invalid user admin from 114.235.28.219 port 3259 ssh2 2026-10-14T11:17:17.606225-04:00 narcissus.teiken.net sshd-session[369002]: Failed password for invalid user admin from 114.235.28.219 port 3259 ssh2 2026-10-14T11:17:20.476590-04:00 narcissus.teiken.net sshd-session[369002]: Failed password for invalid user admin from 114.235.28.219 port 3259 ssh2 ... show less	Brute-Force SSH
🇪🇸 82.102.17.182	14 Oct 2026	2026-10-14T10:47:53.158983-04:00 narcissus.teiken.net sshd-session[366576]: Invalid user admin from ... show more 2026-10-14T10:47:53.158983-04:00 narcissus.teiken.net sshd-session[366576]: Invalid user admin from 82.102.17.182 port 57582 2026-10-14T10:47:53.183264-04:00 narcissus.teiken.net sshd-session[366576]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.102.17.182 2026-10-14T10:47:55.075765-04:00 narcissus.teiken.net sshd-session[366576]: Failed password for invalid user admin from 82.102.17.182 port 57582 ssh2 2026-10-14T10:54:19.599299-04:00 narcissus.teiken.net sshd-session[367048]: Invalid user admin from 82.102.17.182 port 56664 2026-10-14T10:54:19.623326-04:00 narcissus.teiken.net sshd-session[367048]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.102.17.182 2026-10-14T10:54:21.682999-04:00 narcissus.teiken.net sshd-session[367048]: Failed password for invalid user admin from 82.102.17.182 port 56664 ssh2 ... show less	Brute-Force SSH
🇸🇬 47.84.5.135	14 Oct 2026	2026-10-14T09:08:21.441945-04:00 nostromo.teiken.net kernel: [210946.559322] syn_limit:IN=en-wan OUT ... show more 2026-10-14T09:08:21.441945-04:00 nostromo.teiken.net kernel: [210946.559322] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=47.84.5.135 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=42621 DF PROTO=TCP SPT=55114 DPT=6000 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-14T09:08:21.456056-04:00 nostromo.teiken.net kernel: [210946.562099] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=47.84.5.135 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=38581 DF PROTO=TCP SPT=48410 DPT=9999 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-14T09:08:21.463466-04:00 nostromo.teiken.net kernel: [210946.573936] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=47.84.5.135 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=18487 DF PROTO=TCP SPT=44560 DPT=2323 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-14T09:08:21.581363-04:00 nostromo.teiken.net kernel: [210946.698752] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88: ... show less	Port Scan
🇯🇵 34.84.147.162	14 Oct 2026	2026-10-14T07:27:36.207343-04:00 rocinante.teiken.net kernel: [1032063.201075] syn_limit:IN=ens5 OUT ... show more 2026-10-14T07:27:36.207343-04:00 rocinante.teiken.net kernel: [1032063.201075] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.84.147.162 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=51431 DF PROTO=TCP SPT=40376 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-10-14T07:27:36.207524-04:00 rocinante.teiken.net kernel: [1032063.203771] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.84.147.162 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x60 TTL=58 ID=48590 DF PROTO=TCP SPT=40392 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-10-14T07:27:36.207561-04:00 rocinante.teiken.net kernel: [1032063.204906] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.84.147.162 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=34813 DF PROTO=TCP SPT=40402 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-10-14T07:27:36.207589-04:00 rocinante.teiken.net kernel: [1032063.206916] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb: ... show less	Port Scan
🇺🇸 207.211.173.133	14 Oct 2026	2026-10-14T07:13:34.990694-04:00 rocinante.teiken.net kernel: [1031221.968772] syn_limit:IN=ens5 OUT ... show more 2026-10-14T07:13:34.990694-04:00 rocinante.teiken.net kernel: [1031221.968772] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=207.211.173.133 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=58430 DF PROTO=TCP SPT=48406 DPT=80 WINDOW=62720 RES=0x00 SYN URGP=0 2026-10-14T07:13:34.993901-04:00 rocinante.teiken.net kernel: [1031221.968877] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=207.211.173.133 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=17663 DF PROTO=TCP SPT=48472 DPT=80 WINDOW=62720 RES=0x00 SYN URGP=0 2026-10-14T07:13:34.993968-04:00 rocinante.teiken.net kernel: [1031221.971496] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=207.211.173.133 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=23852 DF PROTO=TCP SPT=48454 DPT=80 WINDOW=62720 RES=0x00 SYN URGP=0 2026-10-14T07:13:34.993989-04:00 rocinante.teiken.net kernel: [1031221.974215] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5: ... show less	Port Scan
🇺🇸 147.224.196.190	14 Oct 2026	2026-10-14T07:11:14.592043-04:00 rocinante.teiken.net kernel: [1031081.550354] syn_limit:IN=ens5 OUT ... show more 2026-10-14T07:11:14.592043-04:00 rocinante.teiken.net kernel: [1031081.550354] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=147.224.196.190 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=51232 DF PROTO=TCP SPT=41472 DPT=443 WINDOW=62720 RES=0x00 SYN URGP=0 2026-10-14T07:11:14.592228-04:00 rocinante.teiken.net kernel: [1031081.550365] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=147.224.196.190 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=32446 DF PROTO=TCP SPT=41450 DPT=443 WINDOW=62720 RES=0x00 SYN URGP=0 2026-10-14T07:11:14.594440-04:00 rocinante.teiken.net kernel: [1031081.553035] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=147.224.196.190 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=4720 DF PROTO=TCP SPT=41434 DPT=443 WINDOW=62720 RES=0x00 SYN URGP=0 2026-10-14T07:11:14.595915-04:00 rocinante.teiken.net kernel: [1031081.555813] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a ... show less	Port Scan
🇺🇸 104.196.138.46	14 Oct 2026	www.teiken.net:443 104.196.138.46:49704 - - [14/Oct/2026:06:33:10 -0400] "GET /.git/config HTTP/1.1" ... show more www.teiken.net:443 104.196.138.46:49704 - - [14/Oct/2026:06:33:10 -0400] "GET /.git/config HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 104.196.138.46:49704 - - [14/Oct/2026:06:33:10 -0400] "GET /.env HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 104.196.138.46:49704 - - [14/Oct/2026:06:33:10 -0400] "GET /.env.local HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 104.196.138.46:49704 - - [14/Oct/2026:06:33:10 -0400] "GET /.env.production HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 104.196.138.46:49704 - - [14/Oct/2026:06:33:10 -0400] ... show less	Web App Attack
🇦🇺 180.149.228.248	14 Oct 2026	2026-10-14T06:12:51.363002-04:00 nostromo.teiken.net kernel: [200416.580620] syn_limit:IN=en-wan OUT ... show more 2026-10-14T06:12:51.363002-04:00 nostromo.teiken.net kernel: [200416.580620] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=180.149.228.248 DST=173.52.106.128 LEN=40 TOS=0x08 PREC=0x20 TTL=244 ID=58260 PROTO=TCP SPT=9099 DPT=10998 WINDOW=1024 RES=0x00 SYN URGP=0 2026-10-14T06:12:51.645592-04:00 nostromo.teiken.net kernel: [200416.863190] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=180.149.228.248 DST=173.52.106.128 LEN=40 TOS=0x08 PREC=0x20 TTL=244 ID=20788 PROTO=TCP SPT=9099 DPT=64579 WINDOW=1024 RES=0x00 SYN URGP=0 2026-10-14T06:12:54.215432-04:00 nostromo.teiken.net kernel: [200419.433005] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=180.149.228.248 DST=173.52.106.128 LEN=40 TOS=0x00 PREC=0x20 TTL=244 ID=18733 PROTO=TCP SPT=9099 DPT=61916 WINDOW=1024 RES=0x00 SYN URGP=0 2026-10-14T06:12:55.751774-04:00 nostromo.teiken.net kernel: [200420.969333] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00: ... show less	Port Scan
🇺🇸 34.56.61.7	14 Oct 2026	www.teiken.net:443 34.56.61.7:56740 - - [14/Oct/2026:06:07:06 -0400] "GET /.git/config HTTP/1.1" 404 ... show more www.teiken.net:443 34.56.61.7:56740 - - [14/Oct/2026:06:07:06 -0400] "GET /.git/config HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.56.61.7:56740 - - [14/Oct/2026:06:07:06 -0400] "GET /.env HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.56.61.7:56740 - - [14/Oct/2026:06:07:06 -0400] "GET /.env.local HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.56.61.7:56740 - - [14/Oct/2026:06:07:06 -0400] "GET /.env.production HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.56.61.7:56740 - - [14/Oct/2026:06:07:06 -0400] "GET /.env.staging ... show less	Web App Attack
🇬🇧 34.39.73.45	14 Oct 2026	www.teiken.net:443 34.39.73.45:47712 - - [14/Oct/2026:05:28:40 -0400] "GET /.git/config HTTP/1.1" 40 ... show more www.teiken.net:443 34.39.73.45:47712 - - [14/Oct/2026:05:28:40 -0400] "GET /.git/config HTTP/1.1" 404 562 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.39.73.45:47712 - - [14/Oct/2026:05:28:40 -0400] "GET /.env HTTP/1.1" 404 562 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.39.73.45:47712 - - [14/Oct/2026:05:28:40 -0400] "GET /.env.local HTTP/1.1" 404 562 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.39.73.45:47712 - - [14/Oct/2026:05:28:40 -0400] "GET /.env.production HTTP/1.1" 404 562 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.39.73.45:47712 - - [14/Oct/2026:05:28:40 -0400] "GET /.env.sta ... show less	Web App Attack
🇨🇳 103.219.37.59	14 Oct 2026	2026-10-14T04:47:23.219782-04:00 narcissus.teiken.net sshd-session[326448]: pam_unix(sshd:auth): aut ... show more 2026-10-14T04:47:23.219782-04:00 narcissus.teiken.net sshd-session[326448]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.219.37.59 user=root 2026-10-14T04:47:24.807357-04:00 narcissus.teiken.net sshd-session[326448]: Failed password for root from 103.219.37.59 port 24734 ssh2 2026-10-14T04:47:27.564584-04:00 narcissus.teiken.net sshd-session[326455]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.219.37.59 user=root 2026-10-14T04:47:29.557357-04:00 narcissus.teiken.net sshd-session[326455]: Failed password for root from 103.219.37.59 port 33098 ssh2 2026-10-14T04:47:35.362813-04:00 narcissus.teiken.net sshd-session[326466]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.219.37.59 user=root 2026-10-14T04:47:36.914195-04:00 narcissus.teiken.net sshd-session[326466]: Failed password for root from 103.219.37.59 port 48542 ssh2 ... show less	Brute-Force SSH
🇺🇸 66.228.42.204	14 Oct 2026	2026-10-14T04:06:44.444391-04:00 rocinante.teiken.net kernel: [1020011.655119] syn_limit:IN=ens5 OUT ... show more 2026-10-14T04:06:44.444391-04:00 rocinante.teiken.net kernel: [1020011.655119] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=66.228.42.204 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x40 TTL=49 ID=10793 DF PROTO=TCP SPT=18338 DPT=993 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-14T04:06:44.458460-04:00 rocinante.teiken.net kernel: [1020011.670400] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=66.228.42.204 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x40 TTL=49 ID=13207 DF PROTO=TCP SPT=18348 DPT=993 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-14T04:06:44.458603-04:00 rocinante.teiken.net kernel: [1020011.671297] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=66.228.42.204 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x40 TTL=47 ID=4824 DF PROTO=TCP SPT=18364 DPT=993 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-14T04:06:44.472702-04:00 rocinante.teiken.net kernel: [1020011.681968] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0 ... show less	Port Scan