AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User wteiken , the webmaster of teiken.org, joined AbuseIPDB in December 2021 and has reported 23,536 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇸🇬 2400:6180:0:d0::13e9:e001	26 Oct 2026	2026-10-26T18:26:09.236601-04:00 nostromo.teiken.net kernel: [460717.251503] syn_limit:IN=en-wan OUT ... show more 2026-10-26T18:26:09.236601-04:00 nostromo.teiken.net kernel: [460717.251503] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2400:6180:0000:00d0:0000:0000:13e9:e001 DST=2600:4041:5c67:fdff:0000:0000:0000:0001 LEN=80 TC=0 HOPLIMIT=51 FLOWLBL=923873 PROTO=TCP SPT=55224 DPT=8443 WINDOW=64800 RES=0x00 SYN URGP=0 2026-10-26T18:26:09.246584-04:00 nostromo.teiken.net kernel: [460717.266660] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2400:6180:0000:00d0:0000:0000:13e9:e001 DST=2600:4041:5c67:fdff:0000:0000:0000:0001 LEN=80 TC=0 HOPLIMIT=51 FLOWLBL=134135 PROTO=TCP SPT=52522 DPT=80 WINDOW=64800 RES=0x00 SYN URGP=0 2026-10-26T18:26:09.555469-04:00 nostromo.teiken.net kernel: [460717.576040] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2400:6180:0000:00d0:0000:0000:13e9:e001 DST=2600:4041:5c67:fdff:0000:0000:0000:0001 LEN=80 TC=0 HOPLIMIT=51 FLOWLBL=546554 PROTO=TCP SPT=52538 DPT=80 WINDOW=64800 RES=0x00 SY ... show less	Port Scan
🇧🇷 177.74.153.10	26 Oct 2026	2026-10-26T16:31:53.111943-04:00 nostromo.teiken.net sshd-session[720369]: pam_unix(sshd:auth): auth ... show more 2026-10-26T16:31:53.111943-04:00 nostromo.teiken.net sshd-session[720369]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.74.153.10 user=root 2026-10-26T16:31:55.369416-04:00 nostromo.teiken.net sshd-session[720369]: Failed password for root from 177.74.153.10 port 57852 ssh2 2026-10-26T16:32:01.154184-04:00 nostromo.teiken.net sshd-session[720381]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.74.153.10 user=root 2026-10-26T16:32:02.749317-04:00 nostromo.teiken.net sshd-session[720381]: Failed password for root from 177.74.153.10 port 59006 ssh2 2026-10-26T16:32:05.118664-04:00 nostromo.teiken.net sshd-session[720389]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.74.153.10 user=root 2026-10-26T16:32:07.318649-04:00 nostromo.teiken.net sshd-session[720389]: Failed password for root from 177.74.153.10 port 43050 ssh2 ... show less	Brute-Force SSH
🇶🇦 34.18.242.190	26 Oct 2026	www.teiken.net:443 34.18.242.190:56384 - - [26/Oct/2026:13:45:23 -0400] "GET /.git/config HTTP/1.1" ... show more www.teiken.net:443 34.18.242.190:56384 - - [26/Oct/2026:13:45:23 -0400] "GET /.git/config HTTP/1.1" 404 562 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.18.242.190:56384 - - [26/Oct/2026:13:45:23 -0400] "GET /.env HTTP/1.1" 404 562 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.18.242.190:56384 - - [26/Oct/2026:13:45:24 -0400] "GET /.env.local HTTP/1.1" 404 562 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.18.242.190:56384 - - [26/Oct/2026:13:45:24 -0400] "GET /.env.production HTTP/1.1" 404 562 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.18.242.190:56384 - - [26/Oct/2026:13:45:24 -0400] "GET ... show less	Web App Attack
🇦🇷 186.123.100.72	26 Oct 2026	www.teiken.net:80 186.123.100.72:50770 - - [26/Oct/2026:11:52:40 -0400] "GET /phpMyAdmin2/index.php? ... show more www.teiken.net:80 186.123.100.72:50770 - - [26/Oct/2026:11:52:40 -0400] "GET /phpMyAdmin2/index.php?lang=en HTTP/1.1" 301 675 "-" "Go Web Pentest Tool" www.teiken.net:80 186.123.100.72:50770 - - [26/Oct/2026:11:52:40 -0400] "GET /phpMyAdmin-3/index.php?lang=en HTTP/1.1" 301 676 "-" "Go Web Pentest Tool" www.teiken.net:80 186.123.100.72:50770 - - [26/Oct/2026:11:52:40 -0400] "GET /1phpmyadmin/index.php?lang=en HTTP/1.1" 301 674 "-" "Go Web Pentest Tool" www.teiken.net:80 186.123.100.72:50770 - - [26/Oct/2026:11:52:41 -0400] "GET /phpMyAdmin-5.2.1-english/index.php?lang=en HTTP/1.1" 301 700 "-" "Go Web Pentest Tool" www.teiken.net:80 186.123.100.72:50770 - - [26/Oct/2026:11:52:41 -0400] "GET /phpMyAdmin-4/index.php?lang=en HTTP/1.1" 301 676 "-" "Go Web Pentest Tool" www.teiken.net:80 186.123.100.72:50770 - - [26/Oct/2026:11:52:41 -0400] "GET /phpMyAdmin-latest-english/index.php?lang=en HTTP/1.1" 301 702 "-" "Go Web Pentest Tool" www.teiken.net:80 186.123.100.72:50770 - - [26/Oct/2026:11: ... show less	Web App Attack
🇸🇬 178.128.121.42	26 Oct 2026	rocinante.teiken.net:443 178.128.121.42:45460 - - [26/Oct/2026:11:07:38 -0400] "GET /.git/config HTT ... show more rocinante.teiken.net:443 178.128.121.42:45460 - - [26/Oct/2026:11:07:38 -0400] "GET /.git/config HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 178.128.121.42:45460 - - [26/Oct/2026:11:07:38 -0400] "GET /.env HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 178.128.121.42:45460 - - [26/Oct/2026:11:07:38 -0400] "GET /.env.local HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 178.128.121.42:45460 - - [26/Oct/2026:11:07:39 -0400] "GET /.env.production HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 178.128.121.42:45460 - ... show less	Web App Attack
🇸🇬 129.226.154.148	26 Oct 2026	www.teiken.net:443 129.226.154.148:50922 - - [26/Oct/2026:08:50:18 -0400] "GET /.env HTTP/1.1" 404 4 ... show more www.teiken.net:443 129.226.154.148:50922 - - [26/Oct/2026:08:50:18 -0400] "GET /.env HTTP/1.1" 404 498 "-" "Go-http-client/1.1" www.teiken.net:443 129.226.154.148:50922 - - [26/Oct/2026:08:50:19 -0400] "GET /.env.backup HTTP/1.1" 404 498 "-" "Go-http-client/1.1" www.teiken.net:443 129.226.154.148:50922 - - [26/Oct/2026:08:50:20 -0400] "GET /.env.bak HTTP/1.1" 404 498 "-" "Go-http-client/1.1" www.teiken.net:443 129.226.154.148:50922 - - [26/Oct/2026:08:50:22 -0400] "GET /.env.config HTTP/1.1" 404 498 "-" "Go-http-client/1.1" www.teiken.net:443 129.226.154.148:50922 - - [26/Oct/2026:08:50:23 -0400] "GET /.env.dev HTTP/1.1" 404 498 "-" "Go-http-client/1.1" www.teiken.net:443 129.226.154.148:50922 - - [26/Oct/2026:08:50:24 -0400] "GET /.env.live HTTP/1.1" 404 498 "-" "Go-http-client/1.1" www.teiken.net:443 129.226.154.148:50922 - - [26/Oct/2026:08:50:26 -0400] "GET /.env.local HTTP/1.1" 404 498 "-" "Go-http-client/1.1" www.teiken.net:443 129.226.154.148:50922 - - [26/Oct/2026:08:50:27 -040 ... show less	Web App Attack
🇨🇳 106.52.169.134	26 Oct 2026	2026-10-26T07:46:36.149909-04:00 narcissus.teiken.net sshd-session[735171]: Failed password for root ... show more 2026-10-26T07:46:36.149909-04:00 narcissus.teiken.net sshd-session[735171]: Failed password for root from 106.52.169.134 port 60570 ssh2 2026-10-26T07:46:39.902376-04:00 narcissus.teiken.net sshd-session[735171]: Failed password for root from 106.52.169.134 port 60570 ssh2 2026-10-26T07:46:43.501740-04:00 narcissus.teiken.net sshd-session[735171]: Failed password for root from 106.52.169.134 port 60570 ssh2 2026-10-26T07:46:47.313076-04:00 narcissus.teiken.net sshd-session[735171]: Failed password for root from 106.52.169.134 port 60570 ssh2 2026-10-26T07:46:51.406251-04:00 narcissus.teiken.net sshd-session[735171]: Failed password for root from 106.52.169.134 port 60570 ssh2 2026-10-26T07:46:53.167103-04:00 narcissus.teiken.net sshd-session[735171]: Disconnecting authenticating user root 106.52.169.134 port 60570: Change of username or service not allowed: (root,ssh-connection) -> (test,ssh-connection) [preauth] ... show less	Brute-Force SSH
🇨🇳 49.232.4.60	26 Oct 2026	www.teiken.net:443 49.232.4.60:56264 - - [26/Oct/2026:07:12:43 -0400] "POST /index.php?%25ADd+allow_ ... show more www.teiken.net:443 49.232.4.60:56264 - - [26/Oct/2026:07:12:43 -0400] "POST /index.php?%25ADd+allow_url_include%3D1+%25ADd+auto_prepend_file%3Dphp://input HTTP/1.1" 404 555 "-" "libredtail-http" www.teiken.net:443 49.232.4.60:56264 - - [26/Oct/2026:07:12:46 -0400] "POST /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//input HTTP/1.1" 404 555 "-" "libredtail-http" www.teiken.net:443 49.232.4.60:56264 - - [26/Oct/2026:07:12:47 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 555 "-" "libredtail-http" www.teiken.net:443 49.232.4.60:56264 - - [26/Oct/2026:07:12:48 -0400] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 555 "-" "libredtail-http" www.teiken.net:443 49.232.4.60:56264 - - [26/Oct/2026:07:12:48 -0400] "GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 555 "-" "libredtail-http" www.teiken.net:443 49.232.4.60:56264 - - [26/Oct/2026:07:12:48 -0400] "GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 4 ... show less	Web App Attack
🇨🇳 111.228.13.149	26 Oct 2026	2026-10-26T06:44:02.600876-04:00 narcissus.teiken.net sshd-session[723312]: pam_unix(sshd:auth): aut ... show more 2026-10-26T06:44:02.600876-04:00 narcissus.teiken.net sshd-session[723312]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.228.13.149 user=root 2026-10-26T06:44:04.815172-04:00 narcissus.teiken.net sshd-session[723312]: Failed password for root from 111.228.13.149 port 49736 ssh2 2026-10-26T06:44:09.538512-04:00 narcissus.teiken.net sshd-session[723320]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.228.13.149 user=root 2026-10-26T06:44:11.304407-04:00 narcissus.teiken.net sshd-session[723320]: Failed password for root from 111.228.13.149 port 49748 ssh2 2026-10-26T06:44:15.413055-04:00 narcissus.teiken.net sshd-session[723332]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.228.13.149 user=root 2026-10-26T06:44:17.233055-04:00 narcissus.teiken.net sshd-session[723332]: Failed password for root from 111.228.13.149 port 45742 ssh2 ... show less	Brute-Force SSH
🇺🇸 159.65.229.174	26 Oct 2026	2026-10-26T05:50:38.796603-04:00 nostromo.teiken.net kernel: [415387.201217] syn_limit:IN=en-wan OUT ... show more 2026-10-26T05:50:38.796603-04:00 nostromo.teiken.net kernel: [415387.201217] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=159.65.229.174 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=22324 DF PROTO=TCP SPT=52640 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-26T05:50:39.817824-04:00 nostromo.teiken.net kernel: [415388.232170] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=159.65.229.174 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=22325 DF PROTO=TCP SPT=52640 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-26T05:50:40.841409-04:00 nostromo.teiken.net kernel: [415389.255750] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=159.65.229.174 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=22326 DF PROTO=TCP SPT=52640 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-26T05:50:41.806437-04:00 nostromo.teiken.net kernel: [415390.220766] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2: ... show less	Port Scan
🇨🇭 34.65.75.121	26 Oct 2026	www.teiken.org:443 34.65.75.121:40722 - - [26/Oct/2026:05:23:34 -0400] "GET /.git/config HTTP/1.1" 4 ... show more www.teiken.org:443 34.65.75.121:40722 - - [26/Oct/2026:05:23:34 -0400] "GET /.git/config HTTP/1.1" 404 622 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.org:443 34.65.75.121:40722 - - [26/Oct/2026:05:23:34 -0400] "GET /.env HTTP/1.1" 404 622 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.org:443 34.65.75.121:40722 - - [26/Oct/2026:05:23:35 -0400] "GET /.env.local HTTP/1.1" 404 622 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.org:443 34.65.75.121:40722 - - [26/Oct/2026:05:23:35 -0400] "GET /.env.production HTTP/1.1" 404 622 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.org:443 34.65.75.121:40722 - - [26/Oct/2026:05:23:35 -0400] "GET /.env.staging HTTP/1.1" 404 ... show less	Web App Attack
🇺🇸 34.20.173.43	26 Oct 2026	www.teiken.net:443 34.20.173.43:48788 - - [26/Oct/2026:04:09:54 -0400] "GET /.git/config HTTP/1.1" 4 ... show more www.teiken.net:443 34.20.173.43:48788 - - [26/Oct/2026:04:09:54 -0400] "GET /.git/config HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.20.173.43:48788 - - [26/Oct/2026:04:09:54 -0400] "GET /.env HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.20.173.43:48788 - - [26/Oct/2026:04:09:54 -0400] "GET /.env.local HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.20.173.43:48788 - - [26/Oct/2026:04:09:54 -0400] "GET /.env.production HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.20.173.43:48788 - - [26/Oct/2026:04:09:54 -0400] "GET /.env.staging HTTP/1.1" 404 ... show less	Web App Attack
🇺🇸 162.243.171.139	26 Oct 2026	2026-10-26T02:27:58.186636-04:00 nostromo.teiken.net kernel: [403226.697217] syn_limit:IN=en-wan OUT ... show more 2026-10-26T02:27:58.186636-04:00 nostromo.teiken.net kernel: [403226.697217] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=162.243.171.139 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=57736 DF PROTO=TCP SPT=44890 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-26T02:27:59.194596-04:00 nostromo.teiken.net kernel: [403227.714545] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=162.243.171.139 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=57737 DF PROTO=TCP SPT=44890 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-26T02:28:01.216601-04:00 nostromo.teiken.net kernel: [403229.730001] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=162.243.171.139 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=57738 DF PROTO=TCP SPT=44890 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-26T02:28:01.368075-04:00 nostromo.teiken.net kernel: [403229.888012] syn_limit:IN=en-wan OUT= MAC=00:50:43:37: ... show less	Port Scan
🇺🇸 45.63.21.236	26 Oct 2026	2026-10-26T02:06:14.236489-04:00 rocinante.teiken.net kernel: [737783.925934] syn_limit:IN=ens5 OUT= ... show more 2026-10-26T02:06:14.236489-04:00 rocinante.teiken.net kernel: [737783.925934] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=45.63.21.236 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=10476 DF PROTO=TCP SPT=50114 DPT=443 WINDOW=42340 RES=0x00 SYN URGP=0 2026-10-26T02:06:14.245350-04:00 rocinante.teiken.net kernel: [737783.927986] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=45.63.21.236 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=62148 DF PROTO=TCP SPT=35880 DPT=80 WINDOW=42340 RES=0x00 SYN URGP=0 2026-10-26T02:06:14.245406-04:00 rocinante.teiken.net kernel: [737783.931287] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=45.63.21.236 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=28539 DF PROTO=TCP SPT=50130 DPT=443 WINDOW=42340 RES=0x00 SYN URGP=0 2026-10-26T02:06:14.245493-04:00 rocinante.teiken.net kernel: [737783.933139] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae ... show less	Port Scan
🇺🇸 157.230.211.81	26 Oct 2026	2026-10-25T23:24:15.806604-04:00 nostromo.teiken.net kernel: [392204.420125] syn_limit:IN=en-wan OUT ... show more 2026-10-25T23:24:15.806604-04:00 nostromo.teiken.net kernel: [392204.420125] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=157.230.211.81 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=61350 DF PROTO=TCP SPT=59482 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-25T23:24:16.832618-04:00 nostromo.teiken.net kernel: [392205.449102] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=157.230.211.81 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=61351 DF PROTO=TCP SPT=59482 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-25T23:24:17.856138-04:00 nostromo.teiken.net kernel: [392206.472619] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=157.230.211.81 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=61352 DF PROTO=TCP SPT=59482 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-25T23:24:19.816592-04:00 nostromo.teiken.net kernel: [392208.424336] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2: ... show less	Port Scan
🇸🇪 34.51.230.30	26 Oct 2026	rocinante.teiken.net:443 34.51.230.30:38550 - - [25/Oct/2026:20:39:44 -0400] "GET /.git/config HTTP/ ... show more rocinante.teiken.net:443 34.51.230.30:38550 - - [25/Oct/2026:20:39:44 -0400] "GET /.git/config HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.51.230.30:38550 - - [25/Oct/2026:20:39:44 -0400] "GET /.env HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.51.230.30:38550 - - [25/Oct/2026:20:39:44 -0400] "GET /.env.local HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.51.230.30:38550 - - [25/Oct/2026:20:39:44 -0400] "GET /.env.production HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.51.230.30:38550 - - [25/Oct/ ... show less	Web App Attack
🇺🇸 138.197.10.252	26 Oct 2026	2026-10-25T20:20:45.182676-04:00 rocinante.teiken.net kernel: [717055.184146] syn_limit:IN=ens5 OUT= ... show more 2026-10-25T20:20:45.182676-04:00 rocinante.teiken.net kernel: [717055.184146] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=138.197.10.252 DST=192.168.16.119 LEN=44 TOS=0x00 PREC=0x00 TTL=244 ID=12522 PROTO=TCP SPT=54039 DPT=80 WINDOW=1025 RES=0x00 SYN URGP=0 2026-10-25T20:20:46.380485-04:00 rocinante.teiken.net kernel: [717056.380368] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=138.197.10.252 DST=192.168.16.119 LEN=44 TOS=0x00 PREC=0x00 TTL=246 ID=52231 PROTO=TCP SPT=54039 DPT=443 WINDOW=1025 RES=0x00 SYN URGP=0 2026-10-25T20:20:46.550919-04:00 rocinante.teiken.net kernel: [717056.552364] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=138.197.10.252 DST=192.168.16.119 LEN=44 TOS=0x00 PREC=0x00 TTL=246 ID=10733 PROTO=TCP SPT=54055 DPT=443 WINDOW=1025 RES=0x00 SYN URGP=0 2026-10-25T20:20:46.601095-04:00 rocinante.teiken.net kernel: [717056.602523] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05 ... show less	Port Scan
🇿🇦 34.35.133.142	25 Oct 2026	www.teiken.net:443 34.35.133.142:41780 - - [25/Oct/2026:19:34:40 -0400] "GET /.git/config HTTP/1.1" ... show more www.teiken.net:443 34.35.133.142:41780 - - [25/Oct/2026:19:34:40 -0400] "GET /.git/config HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.35.133.142:41780 - - [25/Oct/2026:19:34:41 -0400] "GET /.env HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.35.133.142:41780 - - [25/Oct/2026:19:34:41 -0400] "GET /.env.local HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.35.133.142:41780 - - [25/Oct/2026:19:34:41 -0400] "GET /.env.production HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.35.133.142:41780 - - [25/Oct/2026:19:34:41 -0400] "GET ... show less	Web App Attack
🇩🇿 193.194.91.148	25 Oct 2026	www.teiken.net:80 193.194.91.148:35222 - - [25/Oct/2026:18:34:44 -0400] "GET /sql/sql-admin/index.ph ... show more www.teiken.net:80 193.194.91.148:35222 - - [25/Oct/2026:18:34:44 -0400] "GET /sql/sql-admin/index.php?lang=en HTTP/1.1" 301 679 "-" "Go Web Pentest Tool" www.teiken.net:80 193.194.91.148:35222 - - [25/Oct/2026:18:34:44 -0400] "GET /sql/phpMyAdmin2/index.php?lang=en HTTP/1.1" 301 682 "-" "Go Web Pentest Tool" www.teiken.net:80 193.194.91.148:35222 - - [25/Oct/2026:18:34:44 -0400] "GET /db/phpmyadmin3/index.php?lang=en HTTP/1.1" 301 680 "-" "Go Web Pentest Tool" www.teiken.net:80 193.194.91.148:35222 - - [25/Oct/2026:18:34:44 -0400] "GET /phpmyadmin2021/index.php?lang=en HTTP/1.1" 301 680 "-" "Go Web Pentest Tool" www.teiken.net:80 193.194.91.148:35222 - - [25/Oct/2026:18:34:44 -0400] "GET /phpmyAdmin/index.php?lang=en HTTP/1.1" 301 672 "-" "Go Web Pentest Tool" www.teiken.net:80 193.194.91.148:35222 - - [25/Oct/2026:18:34:44 -0400] "GET /index.php?lang=en HTTP/1.1" 301 650 "-" "Go Web Pentest Tool" www.teiken.net:80 193.194.91.148:35222 - - [25/Oct/2026:18:34:44 -0400] "GET /phpMyAdmin1 ... show less	Web App Attack
🇨🇦 34.47.46.105	25 Oct 2026	www.teiken.net:443 34.47.46.105:48680 - - [25/Oct/2026:17:10:49 -0400] "GET /.git/config HTTP/1.1" 4 ... show more www.teiken.net:443 34.47.46.105:48680 - - [25/Oct/2026:17:10:49 -0400] "GET /.git/config HTTP/1.1" 404 560 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.47.46.105:48680 - - [25/Oct/2026:17:10:49 -0400] "GET /.env HTTP/1.1" 404 560 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.47.46.105:48680 - - [25/Oct/2026:17:10:49 -0400] "GET /.env.local HTTP/1.1" 404 560 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.47.46.105:48680 - - [25/Oct/2026:17:10:49 -0400] "GET /.env.production HTTP/1.1" 404 560 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.47.46.105:48680 - - [25/Oct/2026:17:10:49 -0400] "GET /.env.staging HTTP/1.1" 404 560 "-" "Mozilla/5.0 (X11; Linux x86_64) ... show less	Web App Attack
🇩🇪 34.32.97.67	25 Oct 2026	www.teiken.net:443 34.32.97.67:48614 - - [25/Oct/2026:16:57:22 -0400] "GET /.git/config HTTP/1.1" 40 ... show more www.teiken.net:443 34.32.97.67:48614 - - [25/Oct/2026:16:57:22 -0400] "GET /.git/config HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.32.97.67:48614 - - [25/Oct/2026:16:57:22 -0400] "GET /.env HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.32.97.67:48614 - - [25/Oct/2026:16:57:22 -0400] "GET /.env.local HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.32.97.67:48614 - - [25/Oct/2026:16:57:22 -0400] "GET /.env.production HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.32.97.67:48614 - - [25/Oct/2026:16:57:22 -0400] "GET /.env.sta ... show less	Web App Attack
🇪🇸 34.175.50.248	25 Oct 2026	www.teiken.net:443 34.175.50.248:47428 - - [25/Oct/2026:16:29:44 -0400] "GET /.git/config HTTP/1.1" ... show more www.teiken.net:443 34.175.50.248:47428 - - [25/Oct/2026:16:29:44 -0400] "GET /.git/config HTTP/1.1" 404 562 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.175.50.248:47428 - - [25/Oct/2026:16:29:44 -0400] "GET /.env HTTP/1.1" 404 562 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.175.50.248:47428 - - [25/Oct/2026:16:29:44 -0400] "GET /.env.local HTTP/1.1" 404 562 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.175.50.248:47428 - - [25/Oct/2026:16:29:44 -0400] "GET /.env.production HTTP/1.1" 404 562 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.175.50.248:47428 - - [25/Oct/2026:16:29:44 -0400] "GET /.env.staging HTTP/1.1" 404 562 "-" "Mozilla/5.0 (X11; Linux x8 ... show less	Web App Attack
🇺🇸 2605:9880:0:529:225:90ff:fe66:fe9	25 Oct 2026	2026-10-25T15:36:23.952666-04:00 nostromo.teiken.net kernel: [364132.814621] syn_limit:IN=en-wan OUT ... show more 2026-10-25T15:36:23.952666-04:00 nostromo.teiken.net kernel: [364132.814621] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2605:9880:0000:0529:0225:90ff:fe66:0fe9 DST=2600:4041:5c67:fd8c:da58:d7c2:f48f:4aa8 LEN=64 TC=0 HOPLIMIT=11 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-10-25T15:36:23.986722-04:00 nostromo.teiken.net kernel: [364132.848701] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2605:9880:0000:0529:0225:90ff:fe66:0fe9 DST=2600:4041:5c67:fd8c:da58:d7c2:f48f:4aa8 LEN=64 TC=0 HOPLIMIT=12 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-10-25T15:36:24.021793-04:00 nostromo.teiken.net kernel: [364132.883771] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2605:9880:0000:0529:0225:90ff:fe66:0fe9 DST=2600:4041:5c67:fd8c:da58:d7c2:f48f:4aa8 LEN=64 TC=0 HOPLIMIT=13 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x0 ... show less	Port Scan
🇺🇸 156.225.64.194	25 Oct 2026	2026-10-25T15:32:55.511310-04:00 narcissus.teiken.net sshd-session[631722]: pam_unix(sshd:auth): aut ... show more 2026-10-25T15:32:55.511310-04:00 narcissus.teiken.net sshd-session[631722]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.225.64.194 2026-10-25T15:32:57.494758-04:00 narcissus.teiken.net sshd-session[631722]: Failed password for invalid user curl from 156.225.64.194 port 40194 ssh2 2026-10-25T15:34:34.162384-04:00 narcissus.teiken.net sshd-session[631842]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.225.64.194 user=root 2026-10-25T15:34:36.227069-04:00 narcissus.teiken.net sshd-session[631842]: Failed password for root from 156.225.64.194 port 33610 ssh2 2026-10-25T15:36:10.022595-04:00 narcissus.teiken.net sshd-session[631996]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.225.64.194 user=root 2026-10-25T15:36:12.531814-04:00 narcissus.teiken.net sshd-session[631996]: Failed password for root from 156.225.64.194 port 54316 ssh2 ... show less	Brute-Force SSH
🇩🇪 2a05:e740:1145::2	25 Oct 2026	2026-10-25T15:35:51.936619-04:00 nostromo.teiken.net kernel: [364100.794714] syn_limit:IN=en-wan OUT ... show more 2026-10-25T15:35:51.936619-04:00 nostromo.teiken.net kernel: [364100.794714] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1145:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7c2:f48f:4aa8 LEN=64 TC=0 HOPLIMIT=11 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-10-25T15:35:51.976436-04:00 nostromo.teiken.net kernel: [364100.838622] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1145:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7c2:f48f:4aa8 LEN=64 TC=0 HOPLIMIT=12 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-10-25T15:35:52.026604-04:00 nostromo.teiken.net kernel: [364100.882403] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1145:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7c2:f48f:4aa8 LEN=64 TC=0 HOPLIMIT=13 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x0 ... show less	Port Scan