AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User wteiken , the webmaster of teiken.org, joined AbuseIPDB in December 2021 and has reported 23,525 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇺🇸 35.199.45.92	27 Oct 2026	www.teiken.net:443 35.199.45.92:37498 - - [27/Oct/2026:10:38:22 -0400] "GET /.git/config HTTP/1.1" 4 ... show more www.teiken.net:443 35.199.45.92:37498 - - [27/Oct/2026:10:38:22 -0400] "GET /.git/config HTTP/1.1" 404 4546 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:138.0) Gecko/20100101 Firefox/138.0" www.teiken.net:443 35.199.45.92:37492 - - [27/Oct/2026:10:38:22 -0400] "GET /.git/config HTTP/1.1" 404 4545 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:138.0) Gecko/20100101 Firefox/138.0" www.teiken.net:443 35.199.45.92:37488 - - [27/Oct/2026:10:38:23 -0400] "GET /.git/config HTTP/1.1" 404 4544 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:138.0) Gecko/20100101 Firefox/138.0" www.teiken.net:443 35.199.45.92:60752 - - [27/Oct/2026:10:38:26 -0400] "GET /.git/credentials HTTP/1.1" 404 4544 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:138.0) Gecko/20100101 Firefox/138.0" www.teiken.net:443 35.199.45.92:60760 - - [27/Oct/2026:10:38:26 -0400] "GET /.env HTTP/1.1" 404 4545 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:138.0) Gecko/20100101 Firefox/138.0" www.teiken.net:443 35.199.45.92:60792 - - [27/Oct/2026:10:38:33 -0400] "GET / ... show less	Web App Attack
🇮🇩 36.95.15.107	27 Oct 2026	2026-10-27T08:44:54.309357-04:00 nostromo.teiken.net sshd-session[818799]: pam_unix(sshd:auth): auth ... show more 2026-10-27T08:44:54.309357-04:00 nostromo.teiken.net sshd-session[818799]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.95.15.107 user=root 2026-10-27T08:44:56.308767-04:00 nostromo.teiken.net sshd-session[818799]: Failed password for root from 36.95.15.107 port 61694 ssh2 2026-10-27T09:28:08.197097-04:00 nostromo.teiken.net sshd-session[822106]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.95.15.107 user=root 2026-10-27T09:28:09.826002-04:00 nostromo.teiken.net sshd-session[822106]: Failed password for root from 36.95.15.107 port 33563 ssh2 2026-10-27T10:18:59.258941-04:00 nostromo.teiken.net sshd-session[826343]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.95.15.107 user=root 2026-10-27T10:19:00.993618-04:00 nostromo.teiken.net sshd-session[826343]: Failed password for root from 36.95.15.107 port 23108 ssh2 ... show less	Brute-Force SSH
🇨🇦 34.47.24.12	27 Oct 2026	www.teiken.net:443 34.47.24.12:37528 - - [27/Oct/2026:10:08:13 -0400] "GET /.git/config HTTP/1.1" 40 ... show more www.teiken.net:443 34.47.24.12:37528 - - [27/Oct/2026:10:08:13 -0400] "GET /.git/config HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.47.24.12:37528 - - [27/Oct/2026:10:08:13 -0400] "GET /.env HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.47.24.12:37528 - - [27/Oct/2026:10:08:13 -0400] "GET /.env.local HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.47.24.12:37528 - - [27/Oct/2026:10:08:13 -0400] "GET /.env.production HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.47.24.12:37528 - - [27/Oct/2026:10:08:13 -0400] "GET /.env.staging HTTP/1.1" 404 565 " ... show less	Web App Attack
🇩🇪 34.40.87.157	27 Oct 2026	rocinante.teiken.net:443 34.40.87.157:33872 - - [27/Oct/2026:09:58:51 -0400] "GET /.git/config HTTP/ ... show more rocinante.teiken.net:443 34.40.87.157:33872 - - [27/Oct/2026:09:58:51 -0400] "GET /.git/config HTTP/1.1" 404 557 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.40.87.157:33872 - - [27/Oct/2026:09:58:52 -0400] "GET /.env HTTP/1.1" 404 557 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.40.87.157:33872 - - [27/Oct/2026:09:58:52 -0400] "GET /.env.local HTTP/1.1" 404 557 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.40.87.157:33872 - - [27/Oct/2026:09:58:52 -0400] "GET /.env.production HTTP/1.1" 404 557 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.40.87.157:33872 - - [27/Oct/ ... show less	Web App Attack
🇨🇦 85.217.149.71	27 Oct 2026	2026-10-27T07:53:18.065898-04:00 nostromo.teiken.net kernel: [509145.659080] syn_limit:IN=en-wan OUT ... show more 2026-10-27T07:53:18.065898-04:00 nostromo.teiken.net kernel: [509145.659080] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=85.217.149.71 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=31789 DF PROTO=TCP SPT=37450 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-27T07:53:19.071708-04:00 nostromo.teiken.net kernel: [509146.664890] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=85.217.149.71 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=31790 DF PROTO=TCP SPT=37450 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-27T07:53:20.095797-04:00 nostromo.teiken.net kernel: [509147.688969] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=85.217.149.71 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=31791 DF PROTO=TCP SPT=37450 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-27T07:53:21.123735-04:00 nostromo.teiken.net kernel: [509148.716908] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00: ... show less	Port Scan
🇩🇪 34.89.135.129	27 Oct 2026	2026-10-27T05:31:51.116468-04:00 rocinante.teiken.net kernel: [836519.270458] syn_limit:IN=ens5 OUT= ... show more 2026-10-27T05:31:51.116468-04:00 rocinante.teiken.net kernel: [836519.270458] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.89.135.129 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=18813 DF PROTO=TCP SPT=41740 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-10-27T05:31:51.116646-04:00 rocinante.teiken.net kernel: [836519.270968] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.89.135.129 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=43757 DF PROTO=TCP SPT=41752 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-10-27T05:31:51.116671-04:00 rocinante.teiken.net kernel: [836519.273140] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.89.135.129 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=30901 DF PROTO=TCP SPT=41760 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-10-27T05:31:51.121392-04:00 rocinante.teiken.net kernel: [836519.278543] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f ... show less	Port Scan
🇯🇵 45.87.213.54	27 Oct 2026	2026-10-27T05:00:18.606384-04:00 nostromo.teiken.net kernel: [498766.290725] syn_limit:IN=en-wan OUT ... show more 2026-10-27T05:00:18.606384-04:00 nostromo.teiken.net kernel: [498766.290725] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=45.87.213.54 DST=173.52.106.128 LEN=40 TOS=0x08 PREC=0x20 TTL=245 ID=32258 PROTO=TCP SPT=9099 DPT=17962 WINDOW=1024 RES=0x00 SYN URGP=0 2026-10-27T05:00:22.018970-04:00 nostromo.teiken.net kernel: [498769.703279] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=45.87.213.54 DST=173.52.106.128 LEN=40 TOS=0x08 PREC=0x20 TTL=245 ID=42501 PROTO=TCP SPT=9099 DPT=22388 WINDOW=1024 RES=0x00 SYN URGP=0 2026-10-27T05:00:23.046595-04:00 nostromo.teiken.net kernel: [498770.727580] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=45.87.213.54 DST=173.52.106.128 LEN=40 TOS=0x08 PREC=0x20 TTL=245 ID=32957 PROTO=TCP SPT=9099 DPT=36655 WINDOW=1024 RES=0x00 SYN URGP=0 2026-10-27T05:00:23.384041-04:00 nostromo.teiken.net kernel: [498771.068347] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e: ... show less	Port Scan
🇨🇦 85.217.149.66	27 Oct 2026	2026-10-27T04:42:40.826608-04:00 nostromo.teiken.net kernel: [497708.516032] syn_limit:IN=en-wan OUT ... show more 2026-10-27T04:42:40.826608-04:00 nostromo.teiken.net kernel: [497708.516032] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=85.217.149.66 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=296 DF PROTO=TCP SPT=39566 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-27T04:42:41.839275-04:00 nostromo.teiken.net kernel: [497709.532853] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=85.217.149.66 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=297 DF PROTO=TCP SPT=39566 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-27T04:42:42.866594-04:00 nostromo.teiken.net kernel: [497710.556844] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=85.217.149.66 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=298 DF PROTO=TCP SPT=39566 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-27T04:42:43.887264-04:00 nostromo.teiken.net kernel: [497711.580824] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2: ... show less	Port Scan
🇺🇸 173.211.37.152	27 Oct 2026	2026-10-27T02:50:39.613459-04:00 nostromo.teiken.net kernel: [490987.366435] syn_limit:IN=en-wan OUT ... show more 2026-10-27T02:50:39.613459-04:00 nostromo.teiken.net kernel: [490987.366435] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=173.211.37.152 DST=173.52.106.128 LEN=60 TOS=0x08 PREC=0x20 TTL=57 ID=14007 DF PROTO=TCP SPT=52664 DPT=1723 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-27T02:50:39.616577-04:00 nostromo.teiken.net kernel: [490987.367938] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=173.211.37.152 DST=173.52.106.128 LEN=60 TOS=0x08 PREC=0x20 TTL=57 ID=15434 DF PROTO=TCP SPT=62320 DPT=23 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-27T02:50:39.646065-04:00 nostromo.teiken.net kernel: [490987.399070] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=173.211.37.152 DST=173.52.106.128 LEN=60 TOS=0x08 PREC=0x20 TTL=57 ID=7180 DF PROTO=TCP SPT=43484 DPT=3389 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-27T02:50:40.253521-04:00 nostromo.teiken.net kernel: [490988.006494] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2: ... show less	Port Scan
🇨🇦 15.235.85.161	27 Oct 2026	2026-10-26T21:13:19.626597-04:00 nostromo.teiken.net kernel: [470747.558267] syn_limit:IN=en-wan OUT ... show more 2026-10-26T21:13:19.626597-04:00 nostromo.teiken.net kernel: [470747.558267] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=15.235.85.161 DST=173.52.106.128 LEN=60 TOS=0x08 PREC=0x20 TTL=51 ID=34953 DF PROTO=TCP SPT=56846 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-26T21:13:19.627037-04:00 nostromo.teiken.net kernel: [470747.558359] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=15.235.85.161 DST=173.52.106.128 LEN=60 TOS=0x08 PREC=0x20 TTL=51 ID=9294 DF PROTO=TCP SPT=56728 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-26T21:13:19.627208-04:00 nostromo.teiken.net kernel: [470747.558412] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=15.235.85.161 DST=173.52.106.128 LEN=60 TOS=0x08 PREC=0x20 TTL=51 ID=57956 DF PROTO=TCP SPT=56826 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-26T21:13:19.627294-04:00 nostromo.teiken.net kernel: [470747.558469] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:8 ... show less	Port Scan
🇯🇵 140.245.85.22	27 Oct 2026	www.teiken.org:443 140.245.85.22:49750 - - [26/Oct/2026:20:41:30 -0400] "GET /wp-login.php HTTP/1.1" ... show more www.teiken.org:443 140.245.85.22:49750 - - [26/Oct/2026:20:41:30 -0400] "GET /wp-login.php HTTP/1.1" 404 3501 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" www.teiken.org:443 140.245.85.22:49750 - - [26/Oct/2026:20:41:30 -0400] "GET /wp-admin/admin-ajax.php HTTP/1.1" 404 626 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15" www.teiken.org:443 140.245.85.22:49750 - - [26/Oct/2026:20:41:30 -0400] "GET /wp-admin/load-scripts.php HTTP/1.1" 404 626 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Safari/605.1.15" www.teiken.org:443 140.245.85.22:49750 - - [26/Oct/2026:20:41:31 -0400] "GET /wp-admin/load-styles.php HTTP/1.1" 404 626 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15" www.teiken.org:443 140.245.85.2 ... show less	Web App Attack
🇺🇸 143.244.168.161	26 Oct 2026	2026-10-26T18:26:18.221127-04:00 nostromo.teiken.net kernel: [460726.241621] syn_limit:IN=en-wan OUT ... show more 2026-10-26T18:26:18.221127-04:00 nostromo.teiken.net kernel: [460726.241621] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=143.244.168.161 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=31520 DF PROTO=TCP SPT=47590 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-26T18:26:19.228491-04:00 nostromo.teiken.net kernel: [460727.248978] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=143.244.168.161 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=31521 DF PROTO=TCP SPT=47590 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-26T18:26:21.247228-04:00 nostromo.teiken.net kernel: [460729.267695] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=143.244.168.161 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=32534 DF PROTO=TCP SPT=46466 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-26T18:26:22.268101-04:00 nostromo.teiken.net kernel: [460730.288558] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2: ... show less	Port Scan
🇨🇦 167.99.181.249	26 Oct 2026	2026-10-26T18:26:16.511534-04:00 nostromo.teiken.net kernel: [460724.532038] syn_limit:IN=en-wan OUT ... show more 2026-10-26T18:26:16.511534-04:00 nostromo.teiken.net kernel: [460724.532038] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=167.99.181.249 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=25721 DF PROTO=TCP SPT=47878 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-26T18:26:17.530171-04:00 nostromo.teiken.net kernel: [460725.550675] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=167.99.181.249 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=25722 DF PROTO=TCP SPT=47878 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-26T18:26:19.506585-04:00 nostromo.teiken.net kernel: [460727.523989] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=167.99.181.249 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=56260 DF PROTO=TCP SPT=47888 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-26T18:26:19.546166-04:00 nostromo.teiken.net kernel: [460727.566648] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2: ... show less	Port Scan
🇸🇬 2400:6180:0:d0::13e9:e001	26 Oct 2026	2026-10-26T18:26:09.236601-04:00 nostromo.teiken.net kernel: [460717.251503] syn_limit:IN=en-wan OUT ... show more 2026-10-26T18:26:09.236601-04:00 nostromo.teiken.net kernel: [460717.251503] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2400:6180:0000:00d0:0000:0000:13e9:e001 DST=2600:4041:5c67:fdff:0000:0000:0000:0001 LEN=80 TC=0 HOPLIMIT=51 FLOWLBL=923873 PROTO=TCP SPT=55224 DPT=8443 WINDOW=64800 RES=0x00 SYN URGP=0 2026-10-26T18:26:09.246584-04:00 nostromo.teiken.net kernel: [460717.266660] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2400:6180:0000:00d0:0000:0000:13e9:e001 DST=2600:4041:5c67:fdff:0000:0000:0000:0001 LEN=80 TC=0 HOPLIMIT=51 FLOWLBL=134135 PROTO=TCP SPT=52522 DPT=80 WINDOW=64800 RES=0x00 SYN URGP=0 2026-10-26T18:26:09.555469-04:00 nostromo.teiken.net kernel: [460717.576040] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2400:6180:0000:00d0:0000:0000:13e9:e001 DST=2600:4041:5c67:fdff:0000:0000:0000:0001 LEN=80 TC=0 HOPLIMIT=51 FLOWLBL=546554 PROTO=TCP SPT=52538 DPT=80 WINDOW=64800 RES=0x00 SY ... show less	Port Scan
🇧🇷 177.74.153.10	26 Oct 2026	2026-10-26T16:31:53.111943-04:00 nostromo.teiken.net sshd-session[720369]: pam_unix(sshd:auth): auth ... show more 2026-10-26T16:31:53.111943-04:00 nostromo.teiken.net sshd-session[720369]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.74.153.10 user=root 2026-10-26T16:31:55.369416-04:00 nostromo.teiken.net sshd-session[720369]: Failed password for root from 177.74.153.10 port 57852 ssh2 2026-10-26T16:32:01.154184-04:00 nostromo.teiken.net sshd-session[720381]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.74.153.10 user=root 2026-10-26T16:32:02.749317-04:00 nostromo.teiken.net sshd-session[720381]: Failed password for root from 177.74.153.10 port 59006 ssh2 2026-10-26T16:32:05.118664-04:00 nostromo.teiken.net sshd-session[720389]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.74.153.10 user=root 2026-10-26T16:32:07.318649-04:00 nostromo.teiken.net sshd-session[720389]: Failed password for root from 177.74.153.10 port 43050 ssh2 ... show less	Brute-Force SSH
🇶🇦 34.18.242.190	26 Oct 2026	www.teiken.net:443 34.18.242.190:56384 - - [26/Oct/2026:13:45:23 -0400] "GET /.git/config HTTP/1.1" ... show more www.teiken.net:443 34.18.242.190:56384 - - [26/Oct/2026:13:45:23 -0400] "GET /.git/config HTTP/1.1" 404 562 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.18.242.190:56384 - - [26/Oct/2026:13:45:23 -0400] "GET /.env HTTP/1.1" 404 562 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.18.242.190:56384 - - [26/Oct/2026:13:45:24 -0400] "GET /.env.local HTTP/1.1" 404 562 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.18.242.190:56384 - - [26/Oct/2026:13:45:24 -0400] "GET /.env.production HTTP/1.1" 404 562 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.18.242.190:56384 - - [26/Oct/2026:13:45:24 -0400] "GET ... show less	Web App Attack
🇦🇷 186.123.100.72	26 Oct 2026	www.teiken.net:80 186.123.100.72:50770 - - [26/Oct/2026:11:52:40 -0400] "GET /phpMyAdmin2/index.php? ... show more www.teiken.net:80 186.123.100.72:50770 - - [26/Oct/2026:11:52:40 -0400] "GET /phpMyAdmin2/index.php?lang=en HTTP/1.1" 301 675 "-" "Go Web Pentest Tool" www.teiken.net:80 186.123.100.72:50770 - - [26/Oct/2026:11:52:40 -0400] "GET /phpMyAdmin-3/index.php?lang=en HTTP/1.1" 301 676 "-" "Go Web Pentest Tool" www.teiken.net:80 186.123.100.72:50770 - - [26/Oct/2026:11:52:40 -0400] "GET /1phpmyadmin/index.php?lang=en HTTP/1.1" 301 674 "-" "Go Web Pentest Tool" www.teiken.net:80 186.123.100.72:50770 - - [26/Oct/2026:11:52:41 -0400] "GET /phpMyAdmin-5.2.1-english/index.php?lang=en HTTP/1.1" 301 700 "-" "Go Web Pentest Tool" www.teiken.net:80 186.123.100.72:50770 - - [26/Oct/2026:11:52:41 -0400] "GET /phpMyAdmin-4/index.php?lang=en HTTP/1.1" 301 676 "-" "Go Web Pentest Tool" www.teiken.net:80 186.123.100.72:50770 - - [26/Oct/2026:11:52:41 -0400] "GET /phpMyAdmin-latest-english/index.php?lang=en HTTP/1.1" 301 702 "-" "Go Web Pentest Tool" www.teiken.net:80 186.123.100.72:50770 - - [26/Oct/2026:11: ... show less	Web App Attack
🇸🇬 178.128.121.42	26 Oct 2026	rocinante.teiken.net:443 178.128.121.42:45460 - - [26/Oct/2026:11:07:38 -0400] "GET /.git/config HTT ... show more rocinante.teiken.net:443 178.128.121.42:45460 - - [26/Oct/2026:11:07:38 -0400] "GET /.git/config HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 178.128.121.42:45460 - - [26/Oct/2026:11:07:38 -0400] "GET /.env HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 178.128.121.42:45460 - - [26/Oct/2026:11:07:38 -0400] "GET /.env.local HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 178.128.121.42:45460 - - [26/Oct/2026:11:07:39 -0400] "GET /.env.production HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 178.128.121.42:45460 - ... show less	Web App Attack
🇸🇬 129.226.154.148	26 Oct 2026	www.teiken.net:443 129.226.154.148:50922 - - [26/Oct/2026:08:50:18 -0400] "GET /.env HTTP/1.1" 404 4 ... show more www.teiken.net:443 129.226.154.148:50922 - - [26/Oct/2026:08:50:18 -0400] "GET /.env HTTP/1.1" 404 498 "-" "Go-http-client/1.1" www.teiken.net:443 129.226.154.148:50922 - - [26/Oct/2026:08:50:19 -0400] "GET /.env.backup HTTP/1.1" 404 498 "-" "Go-http-client/1.1" www.teiken.net:443 129.226.154.148:50922 - - [26/Oct/2026:08:50:20 -0400] "GET /.env.bak HTTP/1.1" 404 498 "-" "Go-http-client/1.1" www.teiken.net:443 129.226.154.148:50922 - - [26/Oct/2026:08:50:22 -0400] "GET /.env.config HTTP/1.1" 404 498 "-" "Go-http-client/1.1" www.teiken.net:443 129.226.154.148:50922 - - [26/Oct/2026:08:50:23 -0400] "GET /.env.dev HTTP/1.1" 404 498 "-" "Go-http-client/1.1" www.teiken.net:443 129.226.154.148:50922 - - [26/Oct/2026:08:50:24 -0400] "GET /.env.live HTTP/1.1" 404 498 "-" "Go-http-client/1.1" www.teiken.net:443 129.226.154.148:50922 - - [26/Oct/2026:08:50:26 -0400] "GET /.env.local HTTP/1.1" 404 498 "-" "Go-http-client/1.1" www.teiken.net:443 129.226.154.148:50922 - - [26/Oct/2026:08:50:27 -040 ... show less	Web App Attack
🇨🇳 106.52.169.134	26 Oct 2026	2026-10-26T07:46:36.149909-04:00 narcissus.teiken.net sshd-session[735171]: Failed password for root ... show more 2026-10-26T07:46:36.149909-04:00 narcissus.teiken.net sshd-session[735171]: Failed password for root from 106.52.169.134 port 60570 ssh2 2026-10-26T07:46:39.902376-04:00 narcissus.teiken.net sshd-session[735171]: Failed password for root from 106.52.169.134 port 60570 ssh2 2026-10-26T07:46:43.501740-04:00 narcissus.teiken.net sshd-session[735171]: Failed password for root from 106.52.169.134 port 60570 ssh2 2026-10-26T07:46:47.313076-04:00 narcissus.teiken.net sshd-session[735171]: Failed password for root from 106.52.169.134 port 60570 ssh2 2026-10-26T07:46:51.406251-04:00 narcissus.teiken.net sshd-session[735171]: Failed password for root from 106.52.169.134 port 60570 ssh2 2026-10-26T07:46:53.167103-04:00 narcissus.teiken.net sshd-session[735171]: Disconnecting authenticating user root 106.52.169.134 port 60570: Change of username or service not allowed: (root,ssh-connection) -> (test,ssh-connection) [preauth] ... show less	Brute-Force SSH
🇨🇳 49.232.4.60	26 Oct 2026	www.teiken.net:443 49.232.4.60:56264 - - [26/Oct/2026:07:12:43 -0400] "POST /index.php?%25ADd+allow_ ... show more www.teiken.net:443 49.232.4.60:56264 - - [26/Oct/2026:07:12:43 -0400] "POST /index.php?%25ADd+allow_url_include%3D1+%25ADd+auto_prepend_file%3Dphp://input HTTP/1.1" 404 555 "-" "libredtail-http" www.teiken.net:443 49.232.4.60:56264 - - [26/Oct/2026:07:12:46 -0400] "POST /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//input HTTP/1.1" 404 555 "-" "libredtail-http" www.teiken.net:443 49.232.4.60:56264 - - [26/Oct/2026:07:12:47 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 555 "-" "libredtail-http" www.teiken.net:443 49.232.4.60:56264 - - [26/Oct/2026:07:12:48 -0400] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 555 "-" "libredtail-http" www.teiken.net:443 49.232.4.60:56264 - - [26/Oct/2026:07:12:48 -0400] "GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 555 "-" "libredtail-http" www.teiken.net:443 49.232.4.60:56264 - - [26/Oct/2026:07:12:48 -0400] "GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 4 ... show less	Web App Attack
🇨🇳 111.228.13.149	26 Oct 2026	2026-10-26T06:44:02.600876-04:00 narcissus.teiken.net sshd-session[723312]: pam_unix(sshd:auth): aut ... show more 2026-10-26T06:44:02.600876-04:00 narcissus.teiken.net sshd-session[723312]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.228.13.149 user=root 2026-10-26T06:44:04.815172-04:00 narcissus.teiken.net sshd-session[723312]: Failed password for root from 111.228.13.149 port 49736 ssh2 2026-10-26T06:44:09.538512-04:00 narcissus.teiken.net sshd-session[723320]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.228.13.149 user=root 2026-10-26T06:44:11.304407-04:00 narcissus.teiken.net sshd-session[723320]: Failed password for root from 111.228.13.149 port 49748 ssh2 2026-10-26T06:44:15.413055-04:00 narcissus.teiken.net sshd-session[723332]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.228.13.149 user=root 2026-10-26T06:44:17.233055-04:00 narcissus.teiken.net sshd-session[723332]: Failed password for root from 111.228.13.149 port 45742 ssh2 ... show less	Brute-Force SSH
🇺🇸 159.65.229.174	26 Oct 2026	2026-10-26T05:50:38.796603-04:00 nostromo.teiken.net kernel: [415387.201217] syn_limit:IN=en-wan OUT ... show more 2026-10-26T05:50:38.796603-04:00 nostromo.teiken.net kernel: [415387.201217] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=159.65.229.174 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=22324 DF PROTO=TCP SPT=52640 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-26T05:50:39.817824-04:00 nostromo.teiken.net kernel: [415388.232170] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=159.65.229.174 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=22325 DF PROTO=TCP SPT=52640 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-26T05:50:40.841409-04:00 nostromo.teiken.net kernel: [415389.255750] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=159.65.229.174 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=22326 DF PROTO=TCP SPT=52640 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-26T05:50:41.806437-04:00 nostromo.teiken.net kernel: [415390.220766] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2: ... show less	Port Scan
🇨🇭 34.65.75.121	26 Oct 2026	www.teiken.org:443 34.65.75.121:40722 - - [26/Oct/2026:05:23:34 -0400] "GET /.git/config HTTP/1.1" 4 ... show more www.teiken.org:443 34.65.75.121:40722 - - [26/Oct/2026:05:23:34 -0400] "GET /.git/config HTTP/1.1" 404 622 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.org:443 34.65.75.121:40722 - - [26/Oct/2026:05:23:34 -0400] "GET /.env HTTP/1.1" 404 622 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.org:443 34.65.75.121:40722 - - [26/Oct/2026:05:23:35 -0400] "GET /.env.local HTTP/1.1" 404 622 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.org:443 34.65.75.121:40722 - - [26/Oct/2026:05:23:35 -0400] "GET /.env.production HTTP/1.1" 404 622 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.org:443 34.65.75.121:40722 - - [26/Oct/2026:05:23:35 -0400] "GET /.env.staging HTTP/1.1" 404 ... show less	Web App Attack
🇺🇸 34.20.173.43	26 Oct 2026	www.teiken.net:443 34.20.173.43:48788 - - [26/Oct/2026:04:09:54 -0400] "GET /.git/config HTTP/1.1" 4 ... show more www.teiken.net:443 34.20.173.43:48788 - - [26/Oct/2026:04:09:54 -0400] "GET /.git/config HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.20.173.43:48788 - - [26/Oct/2026:04:09:54 -0400] "GET /.env HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.20.173.43:48788 - - [26/Oct/2026:04:09:54 -0400] "GET /.env.local HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.20.173.43:48788 - - [26/Oct/2026:04:09:54 -0400] "GET /.env.production HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.20.173.43:48788 - - [26/Oct/2026:04:09:54 -0400] "GET /.env.staging HTTP/1.1" 404 ... show less	Web App Attack