wteiken - AbuseIPDB User Profile

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User wteiken , the webmaster of teiken.org, joined AbuseIPDB in December 2021 and has reported 20,385 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇺🇸 71.6.242.111	16 Jul 2026	2026-07-16T17:55:19.708329-04:00 rocinante.teiken.net kernel: [887542.831303] syn_limit:IN=ens5 OUT= ... show more 2026-07-16T17:55:19.708329-04:00 rocinante.teiken.net kernel: [887542.831303] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=71.6.242.111 DST=192.168.16.119 LEN=60 TOS=0x08 PREC=0x20 TTL=51 ID=3215 DF PROTO=TCP SPT=47822 DPT=993 WINDOW=64240 RES=0x00 SYN URGP=0 2026-07-16T17:55:20.729066-04:00 rocinante.teiken.net kernel: [887543.855353] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=71.6.242.111 DST=192.168.16.119 LEN=60 TOS=0x08 PREC=0x20 TTL=51 ID=3216 DF PROTO=TCP SPT=47822 DPT=993 WINDOW=64240 RES=0x00 SYN URGP=0 2026-07-16T17:55:24.736703-04:00 rocinante.teiken.net kernel: [887547.862876] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=71.6.242.111 DST=192.168.16.119 LEN=60 TOS=0x08 PREC=0x20 TTL=51 ID=44224 DF PROTO=TCP SPT=42312 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 2026-07-16T17:55:25.186351-04:00 rocinante.teiken.net kernel: [887548.312518] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:0 ... show less	Port Scan
🇺🇸 98.83.134.138	16 Jul 2026	www.teiken.org:443 98.83.134.138:60884 - - [16/Jul/2026:17:36:21 -0400] "GET /.git/config HTTP/1.1" ... show more www.teiken.org:443 98.83.134.138:60884 - - [16/Jul/2026:17:36:21 -0400] "GET /.git/config HTTP/1.1" 404 622 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.org:443 98.83.134.138:60884 - - [16/Jul/2026:17:36:21 -0400] "GET /.env HTTP/1.1" 404 622 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.org:443 98.83.134.138:60884 - - [16/Jul/2026:17:36:21 -0400] "GET /.env.local HTTP/1.1" 404 622 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.org:443 98.83.134.138:60884 - - [16/Jul/2026:17:36:21 -0400] "GET /.env.production HTTP/1.1" 404 622 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.org:443 98.83.134.138:60884 - - [16/Jul/2026:17:36:21 -0400] "GET /.env.staging HTTP/1.1" 404 622 "-" "Mozilla/5.0 (X11; Linux x8 ... show less	Web App Attack
🇫🇮 65.21.124.77	16 Jul 2026	2026-07-16T16:18:32.515340-04:00 rocinante.teiken.net kernel: [881735.742223] syn_limit:IN=ens5 OUT= ... show more 2026-07-16T16:18:32.515340-04:00 rocinante.teiken.net kernel: [881735.742223] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=65.21.124.77 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x20 TTL=48 ID=34784 DF PROTO=TCP SPT=36100 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2026-07-16T16:18:32.518700-04:00 rocinante.teiken.net kernel: [881735.742226] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=65.21.124.77 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x20 TTL=48 ID=8382 DF PROTO=TCP SPT=36118 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2026-07-16T16:18:32.518762-04:00 rocinante.teiken.net kernel: [881735.742531] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=65.21.124.77 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x20 TTL=48 ID=62133 DF PROTO=TCP SPT=18292 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 2026-07-16T16:18:32.518790-04:00 rocinante.teiken.net kernel: [881735.744880] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae: ... show less	Port Scan
🇺🇸 24.188.9.179	16 Jul 2026	2026-07-16T15:17:56.745868-04:00 rocinante.teiken.net sshd-session[282747]: Invalid user pi from 24. ... show more 2026-07-16T15:17:56.745868-04:00 rocinante.teiken.net sshd-session[282747]: Invalid user pi from 24.188.9.179 port 43170 2026-07-16T15:18:06.962438-04:00 rocinante.teiken.net sshd-session[282749]: Invalid user mcserver from 24.188.9.179 port 44618 2026-07-16T15:18:18.217509-04:00 rocinante.teiken.net sshd-session[282751]: Invalid user deploy from 24.188.9.179 port 46366 2026-07-16T15:18:47.439607-04:00 rocinante.teiken.net sshd-session[282758]: Invalid user testuser from 24.188.9.179 port 50904 2026-07-16T15:18:57.472338-04:00 rocinante.teiken.net sshd-session[282760]: Invalid user fa from 24.188.9.179 port 52396 2026-07-16T15:19:05.425654-04:00 rocinante.teiken.net sshd-session[282762]: Invalid user ubuntu from 24.188.9.179 port 54024 ... show less	Brute-Force SSH
🇨🇳 14.103.112.122	16 Jul 2026	2026-07-16T15:03:08.782848-04:00 nostromo.teiken.net sshd-session[416626]: pam_unix(sshd:auth): auth ... show more 2026-07-16T15:03:08.782848-04:00 nostromo.teiken.net sshd-session[416626]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.103.112.122 2026-07-16T15:03:11.048258-04:00 nostromo.teiken.net sshd-session[416626]: Failed password for invalid user reports from 14.103.112.122 port 47568 ssh2 2026-07-16T15:06:33.758537-04:00 nostromo.teiken.net sshd-session[416808]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.103.112.122 user=root 2026-07-16T15:06:36.101493-04:00 nostromo.teiken.net sshd-session[416808]: Failed password for root from 14.103.112.122 port 33156 ssh2 2026-07-16T15:13:13.611621-04:00 nostromo.teiken.net sshd-session[417150]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.103.112.122 user=root 2026-07-16T15:13:14.917208-04:00 nostromo.teiken.net sshd-session[417150]: Failed password for root from 14.103.112.122 port 60954 ssh2 ... show less	Brute-Force SSH
🇩🇪 18.193.48.153	16 Jul 2026	www.teiken.net:443 18.193.48.153:59174 - - [16/Jul/2026:12:36:29 -0400] "GET /.git/config HTTP/1.1" ... show more www.teiken.net:443 18.193.48.153:59174 - - [16/Jul/2026:12:36:29 -0400] "GET /.git/config HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 18.193.48.153:59174 - - [16/Jul/2026:12:36:30 -0400] "GET /.env HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 18.193.48.153:59174 - - [16/Jul/2026:12:36:30 -0400] "GET /.env.local HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 18.193.48.153:59174 - - [16/Jul/2026:12:36:30 -0400] "GET /.env.production HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 18.193.48.153:59174 - - [16/Jul/2026:12:36:30 -0400] "GET /.env.staging HTTP/1.1" ... show less	Web App Attack
🇷🇺 176.77.37.179	16 Jul 2026	2026-07-16T12:11:03.156013-04:00 narcissus.teiken.net sshd-session[1345303]: Failed password for roo ... show more 2026-07-16T12:11:03.156013-04:00 narcissus.teiken.net sshd-session[1345303]: Failed password for root from 176.77.37.179 port 48238 ssh2 2026-07-16T12:11:07.440638-04:00 narcissus.teiken.net sshd-session[1345303]: Failed password for root from 176.77.37.179 port 48238 ssh2 2026-07-16T12:11:10.927433-04:00 narcissus.teiken.net sshd-session[1345303]: Failed password for root from 176.77.37.179 port 48238 ssh2 2026-07-16T12:11:14.520154-04:00 narcissus.teiken.net sshd-session[1345303]: Failed password for root from 176.77.37.179 port 48238 ssh2 2026-07-16T12:11:18.518335-04:00 narcissus.teiken.net sshd-session[1345303]: Failed password for root from 176.77.37.179 port 48238 ssh2 2026-07-16T12:11:22.006634-04:00 narcissus.teiken.net sshd-session[1345303]: Failed password for root from 176.77.37.179 port 48238 ssh2 ... show less	Brute-Force SSH
🇺🇸 137.184.83.74	16 Jul 2026	2026-07-16T11:20:26.300693-04:00 nostromo.teiken.net sshd-session[400168]: pam_unix(sshd:auth): auth ... show more 2026-07-16T11:20:26.300693-04:00 nostromo.teiken.net sshd-session[400168]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.184.83.74 user=root 2026-07-16T11:20:28.598979-04:00 nostromo.teiken.net sshd-session[400168]: Failed password for root from 137.184.83.74 port 51252 ssh2 2026-07-16T11:24:55.309673-04:00 nostromo.teiken.net sshd-session[400403]: Invalid user claude from 137.184.83.74 port 59220 2026-07-16T11:24:55.333730-04:00 nostromo.teiken.net sshd-session[400403]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.184.83.74 2026-07-16T11:24:57.321130-04:00 nostromo.teiken.net sshd-session[400403]: Failed password for invalid user claude from 137.184.83.74 port 59220 ssh2 2026-07-16T11:29:34.757266-04:00 nostromo.teiken.net sshd-session[400640]: Invalid user ubuntu from 137.184.83.74 port 43098 ... show less	Brute-Force SSH
🇨🇳 203.212.9.221	16 Jul 2026	2026-07-16T10:58:05.681844-04:00 nostromo.teiken.net sshd-session[398706]: Invalid user dspace from ... show more 2026-07-16T10:58:05.681844-04:00 nostromo.teiken.net sshd-session[398706]: Invalid user dspace from 203.212.9.221 port 52174 2026-07-16T10:58:05.706393-04:00 nostromo.teiken.net sshd-session[398706]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.212.9.221 2026-07-16T10:58:08.347575-04:00 nostromo.teiken.net sshd-session[398706]: Failed password for invalid user dspace from 203.212.9.221 port 52174 ssh2 2026-07-16T10:58:54.722588-04:00 nostromo.teiken.net sshd-session[398748]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.212.9.221 user=root 2026-07-16T10:58:56.436748-04:00 nostromo.teiken.net sshd-session[398748]: Failed password for root from 203.212.9.221 port 40110 ssh2 2026-07-16T11:11:18.469166-04:00 nostromo.teiken.net sshd-session[399607]: Invalid user demo from 203.212.9.221 port 54626 ... show less	Brute-Force SSH
🇯🇵 8.209.228.250	16 Jul 2026	2026-07-16T05:36:51.970200-04:00 nostromo.teiken.net sshd-session[369514]: Invalid user ubuntu from ... show more 2026-07-16T05:36:51.970200-04:00 nostromo.teiken.net sshd-session[369514]: Invalid user ubuntu from 8.209.228.250 port 60554 2026-07-16T05:36:52.138413-04:00 nostromo.teiken.net sshd-session[369514]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.209.228.250 2026-07-16T05:36:53.778249-04:00 nostromo.teiken.net sshd-session[369514]: Failed password for invalid user ubuntu from 8.209.228.250 port 60554 ssh2 2026-07-16T05:36:55.072131-04:00 nostromo.teiken.net sshd-session[369518]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.209.228.250 user=root 2026-07-16T05:36:57.358270-04:00 nostromo.teiken.net sshd-session[369518]: Failed password for root from 8.209.228.250 port 60558 ssh2 2026-07-16T05:36:59.640647-04:00 nostromo.teiken.net sshd-session[369525]: Invalid user developer from 8.209.228.250 port 57798 ... show less	Brute-Force SSH
🇺🇸 207.90.244.28	16 Jul 2026	2026-07-16T05:32:02.368163-04:00 nostromo.teiken.net kernel: [284016.186547] syn_limit:IN=en-wan OUT ... show more 2026-07-16T05:32:02.368163-04:00 nostromo.teiken.net kernel: [284016.186547] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=207.90.244.28 DST=173.52.106.128 LEN=60 TOS=0x08 PREC=0x20 TTL=56 ID=21090 DF PROTO=TCP SPT=40152 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-07-16T05:32:03.381264-04:00 nostromo.teiken.net kernel: [284017.205888] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=207.90.244.28 DST=173.52.106.128 LEN=60 TOS=0x08 PREC=0x20 TTL=56 ID=21091 DF PROTO=TCP SPT=40152 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-07-16T05:32:05.397527-04:00 nostromo.teiken.net kernel: [284019.222132] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=207.90.244.28 DST=173.52.106.128 LEN=60 TOS=0x08 PREC=0x20 TTL=56 ID=21092 DF PROTO=TCP SPT=40152 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-07-16T05:32:24.021528-04:00 nostromo.teiken.net kernel: [284037.845947] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00: ... show less	Port Scan
🇰🇷 43.108.20.67	16 Jul 2026	2026-07-16T04:46:00.469370-04:00 nostromo.teiken.net sshd-session[366238]: Invalid user marcus from ... show more 2026-07-16T04:46:00.469370-04:00 nostromo.teiken.net sshd-session[366238]: Invalid user marcus from 43.108.20.67 port 56074 2026-07-16T04:46:00.493472-04:00 nostromo.teiken.net sshd-session[366238]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.108.20.67 2026-07-16T04:46:02.772613-04:00 nostromo.teiken.net sshd-session[366238]: Failed password for invalid user marcus from 43.108.20.67 port 56074 ssh2 2026-07-16T04:48:47.991068-04:00 nostromo.teiken.net sshd-session[366381]: Invalid user super from 43.108.20.67 port 52382 2026-07-16T04:48:48.015320-04:00 nostromo.teiken.net sshd-session[366381]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.108.20.67 2026-07-16T04:48:50.238346-04:00 nostromo.teiken.net sshd-session[366381]: Failed password for invalid user super from 43.108.20.67 port 52382 ssh2 ... show less	Brute-Force SSH
🇩🇪 82.39.212.241	16 Jul 2026	www.teiken.org:443 82.39.212.241:53244 - - [16/Jul/2026:04:36:13 -0400] "GET /.git/HEAD HTTP/1.1" 40 ... show more www.teiken.org:443 82.39.212.241:53244 - - [16/Jul/2026:04:36:13 -0400] "GET /.git/HEAD HTTP/1.1" 404 567 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" www.teiken.org:443 82.39.212.241:53244 - - [16/Jul/2026:04:36:16 -0400] "GET /.env HTTP/1.1" 404 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" www.teiken.org:443 82.39.212.241:53244 - - [16/Jul/2026:04:36:18 -0400] "GET /.env.local HTTP/1.1" 404 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0" www.teiken.org:443 82.39.212.241:58652 - - [16/Jul/2026:04:36:18 -0400] "GET /backend/.env HTTP/1.1" 404 4508 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" www.teiken.org:443 82.39.212.241:58694 - - [16/Jul/2026:04:36:18 -0400] "GET /api/.env HTTP/1.1" 404 4508 "-" "Mozilla/5.0 ( ... show less	Web App Attack
🇦🇺 2400:6180:10:200::d173:2000	16 Jul 2026	2026-07-16T04:32:48.176625-04:00 rocinante.teiken.net kernel: [839392.208272] syn_limit:IN=ens5 OUT= ... show more 2026-07-16T04:32:48.176625-04:00 rocinante.teiken.net kernel: [839392.208272] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:86:dd SRC=2400:6180:0010:0200:0000:0000:d173:2000 DST=2600:1f18:0596:2501:0000:0000:0000:1001 LEN=80 TC=0 HOPLIMIT=53 FLOWLBL=186663 PROTO=TCP SPT=12402 DPT=53 WINDOW=64800 RES=0x00 SYN URGP=0 2026-07-16T04:32:48.210074-04:00 rocinante.teiken.net kernel: [839392.244746] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:86:dd SRC=2400:6180:0010:0200:0000:0000:d173:2000 DST=2600:1f18:0596:2501:0000:0000:0000:1001 LEN=80 TC=0 HOPLIMIT=53 FLOWLBL=250445 PROTO=TCP SPT=12418 DPT=53 WINDOW=64800 RES=0x00 SYN URGP=0 2026-07-16T04:32:49.180334-04:00 rocinante.teiken.net kernel: [839393.213424] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:86:dd SRC=2400:6180:0010:0200:0000:0000:d173:2000 DST=2600:1f18:0596:2501:0000:0000:0000:1001 LEN=80 TC=0 HOPLIMIT=53 FLOWLBL=997917 PROTO=TCP SPT=12402 DPT=53 WINDOW=64800 RES=0x00 SYN URG ... show less	Port Scan
🇦🇺 209.38.30.111	16 Jul 2026	2026-07-16T04:32:48.176780-04:00 rocinante.teiken.net kernel: [839392.211870] syn_limit:IN=ens5 OUT= ... show more 2026-07-16T04:32:48.176780-04:00 rocinante.teiken.net kernel: [839392.211870] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=209.38.30.111 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=39005 DF PROTO=TCP SPT=30712 DPT=53 WINDOW=64240 RES=0x00 SYN URGP=0 2026-07-16T04:32:48.469463-04:00 rocinante.teiken.net kernel: [839392.504644] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=209.38.30.111 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=43211 DF PROTO=TCP SPT=30726 DPT=53 WINDOW=64240 RES=0x00 SYN URGP=0 2026-07-16T04:32:48.505345-04:00 rocinante.teiken.net kernel: [839392.540528] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=209.38.30.111 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=43664 DF PROTO=TCP SPT=30732 DPT=53 WINDOW=64240 RES=0x00 SYN URGP=0 2026-07-16T04:32:49.493098-04:00 rocinante.teiken.net kernel: [839393.528264] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:a ... show less	Port Scan
🇯🇵 56.155.74.17	16 Jul 2026	mta-sts.teiken.org:443 56.155.74.17:53250 - - [16/Jul/2026:03:31:34 -0400] "GET /.git/config HTTP/1. ... show more mta-sts.teiken.org:443 56.155.74.17:53250 - - [16/Jul/2026:03:31:34 -0400] "GET /.git/config HTTP/1.1" 404 630 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" mta-sts.teiken.org:443 56.155.74.17:53250 - - [16/Jul/2026:03:31:34 -0400] "GET /.env HTTP/1.1" 404 630 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" mta-sts.teiken.org:443 56.155.74.17:53250 - - [16/Jul/2026:03:31:34 -0400] "GET /.env.local HTTP/1.1" 404 630 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" mta-sts.teiken.org:443 56.155.74.17:53250 - - [16/Jul/2026:03:31:34 -0400] "GET /.env.production HTTP/1.1" 404 630 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" mta-sts.teiken.org:443 56.155.74.17:53250 - - [16/Jul/2026:03:31 ... show less	Web App Attack
🇨🇳 61.129.155.204	16 Jul 2026	2026-07-16T03:24:02.112322-04:00 rocinante.teiken.net kernel: [835266.223179] syn_limit:IN=ens5 OUT= ... show more 2026-07-16T03:24:02.112322-04:00 rocinante.teiken.net kernel: [835266.223179] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=61.129.155.204 DST=192.168.16.119 LEN=44 TOS=0x00 PREC=0x00 TTL=40 ID=6384 PROTO=TCP SPT=51181 DPT=993 WINDOW=1024 RES=0x00 SYN URGP=0 2026-07-16T03:24:03.519320-04:00 rocinante.teiken.net kernel: [835267.630152] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=61.129.155.204 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=61646 DF PROTO=TCP SPT=40790 DPT=587 WINDOW=64240 RES=0x00 SYN URGP=0 2026-07-16T03:24:03.533348-04:00 rocinante.teiken.net kernel: [835267.636112] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=61.129.155.204 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=54143 DF PROTO=TCP SPT=35568 DPT=22 WINDOW=64240 RES=0x00 SYN URGP=0 2026-07-16T03:24:03.533454-04:00 rocinante.teiken.net kernel: [835267.637984] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:a ... show less	Port Scan
🇫🇷 13.38.63.7	16 Jul 2026	www.teiken.org:443 13.38.63.7:55898 - - [16/Jul/2026:03:17:43 -0400] "GET /.git/config HTTP/1.1" 404 ... show more www.teiken.org:443 13.38.63.7:55898 - - [16/Jul/2026:03:17:43 -0400] "GET /.git/config HTTP/1.1" 404 622 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.org:443 13.38.63.7:55898 - - [16/Jul/2026:03:17:43 -0400] "GET /.env HTTP/1.1" 404 622 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.org:443 13.38.63.7:55898 - - [16/Jul/2026:03:17:44 -0400] "GET /.env.local HTTP/1.1" 404 622 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.org:443 13.38.63.7:55898 - - [16/Jul/2026:03:17:44 -0400] "GET /.env.production HTTP/1.1" 404 622 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.org:443 13.38.63.7:55898 - - [16/Jul/2026:03:17:44 -0400] "GET /.env.staging HTTP/1.1" 404 622 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebK ... show less	Web App Attack
🇺🇸 104.248.56.87	16 Jul 2026	ca.teiken.net:443 104.248.56.87:58340 - - [16/Jul/2026:00:46:00 -0400] "HEAD /.env HTTP/1.1" 301 308 ... show more ca.teiken.net:443 104.248.56.87:58340 - - [16/Jul/2026:00:46:00 -0400] "HEAD /.env HTTP/1.1" 301 3082 "https://www.google.com/search?q=ca.teiken.net" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15" ca.teiken.net:443 104.248.56.87:58348 - - [16/Jul/2026:00:46:00 -0400] "HEAD /.env.local HTTP/1.1" 301 3088 "https://www.google.com/search?q=ca.teiken.net" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.6422.113 Mobile Safari/537.36" ca.teiken.net:443 104.248.56.87:58364 - - [16/Jul/2026:00:46:00 -0400] "HEAD /.env.backup HTTP/1.1" 301 3089 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" ca.teiken.net:443 104.248.56.87:58366 - - [16/Jul/2026:00:46:00 -0400] "HEAD /.env.production HTTP/1.1" 301 3092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" ca.teiken.net:443 104.248.5 ... show less	Web App Attack
🇺🇸 13.66.246.180	16 Jul 2026	rocinante.teiken.net:80 13.66.246.180:51986 - - [15/Jul/2026:23:01:18 -0400] "GET /storage/logs/lara ... show more rocinante.teiken.net:80 13.66.246.180:51986 - - [15/Jul/2026:23:01:18 -0400] "GET /storage/logs/laravel.log HTTP/1.1" 404 532 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" rocinante.teiken.net:80 13.66.246.180:55483 - - [15/Jul/2026:23:01:24 -0400] "GET /config/application.config.php HTTP/1.1" 404 532 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" rocinante.teiken.net:80 13.66.246.180:57674 - - [15/Jul/2026:23:01:32 -0400] "GET /config/test.config.php HTTP/1.1" 404 532 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" rocinante.teiken.net:80 13.66.246.180:58873 - - [15/Jul/2026:23:01:33 -0400] "GET /config/database.config.php HTTP/1.1" 404 532 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" rocinante.teiken.net:80 13.66.246.180:63086 - - [15/Jul ... show less	Web App Attack
🇨🇴 152.200.181.42	16 Jul 2026	2026-07-15T22:06:14.316413-04:00 nostromo.teiken.net sshd-session[335207]: Failed password for root ... show more 2026-07-15T22:06:14.316413-04:00 nostromo.teiken.net sshd-session[335207]: Failed password for root from 152.200.181.42 port 50895 ssh2 2026-07-15T22:12:15.734686-04:00 nostromo.teiken.net sshd-session[335517]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.200.181.42 user=root 2026-07-15T22:12:17.362437-04:00 nostromo.teiken.net sshd-session[335517]: Failed password for root from 152.200.181.42 port 48711 ssh2 2026-07-15T22:18:26.318886-04:00 nostromo.teiken.net sshd-session[335841]: Invalid user teste from 152.200.181.42 port 46539 2026-07-15T22:18:26.343028-04:00 nostromo.teiken.net sshd-session[335841]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.200.181.42 2026-07-15T22:18:28.665525-04:00 nostromo.teiken.net sshd-session[335841]: Failed password for invalid user teste from 152.200.181.42 port 46539 ssh2 ... show less	Brute-Force SSH
🇨🇦 165.22.224.68	16 Jul 2026	www.teiken.net:80 165.22.224.68:60230 - - [15/Jul/2026:21:44:53 -0400] "GET /app/.env HTTP/1.1" 301 ... show more www.teiken.net:80 165.22.224.68:60230 - - [15/Jul/2026:21:44:53 -0400] "GET /app/.env HTTP/1.1" 301 577 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" www.teiken.net:80 165.22.224.68:60244 - - [15/Jul/2026:21:44:53 -0400] "GET /src/.env HTTP/1.1" 301 577 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" www.teiken.net:80 165.22.224.68:60218 - - [15/Jul/2026:21:44:53 -0400] "GET /api/.env HTTP/1.1" 301 577 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" www.teiken.net:80 165.22.224.68:60262 - - [15/Jul/2026:21:44:53 -0400] "GET /admin/.env HTTP/1.1" 301 581 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" www.teiken.net:80 165.22.224.68:60246 - - [15/Jul/2026:21:44:53 -0400] "GET /backend/.env HTTP ... show less	Web App Attack
🇮🇳 168.144.24.60	16 Jul 2026	2026-07-15T21:44:05.158168-04:00 nostromo.teiken.net kernel: [255939.249667] syn_limit:IN=en-wan OUT ... show more 2026-07-15T21:44:05.158168-04:00 nostromo.teiken.net kernel: [255939.249667] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=168.144.24.60 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x20 TTL=54 ID=23559 DF PROTO=TCP SPT=41576 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-07-15T21:44:06.153557-04:00 nostromo.teiken.net kernel: [255940.250871] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=168.144.24.60 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x20 TTL=54 ID=23560 DF PROTO=TCP SPT=41576 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-07-15T21:44:08.152383-04:00 nostromo.teiken.net kernel: [255942.249675] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=168.144.24.60 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x20 TTL=54 ID=9274 DF PROTO=TCP SPT=41580 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-07-15T21:44:09.159112-04:00 nostromo.teiken.net kernel: [255943.256397] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:8 ... show less	Port Scan
🇨🇳 47.110.52.196	15 Jul 2026	2026-07-15T19:26:02.274810-04:00 nostromo.teiken.net sshd-session[323125]: Failed password for root ... show more 2026-07-15T19:26:02.274810-04:00 nostromo.teiken.net sshd-session[323125]: Failed password for root from 47.110.52.196 port 49300 ssh2 2026-07-15T19:26:05.439953-04:00 nostromo.teiken.net sshd-session[323125]: Failed password for root from 47.110.52.196 port 49300 ssh2 2026-07-15T19:26:09.453341-04:00 nostromo.teiken.net sshd-session[323125]: Failed password for root from 47.110.52.196 port 49300 ssh2 2026-07-15T19:26:13.028331-04:00 nostromo.teiken.net sshd-session[323125]: Failed password for root from 47.110.52.196 port 49300 ssh2 2026-07-15T19:26:16.450146-04:00 nostromo.teiken.net sshd-session[323125]: Failed password for root from 47.110.52.196 port 49300 ssh2 2026-07-15T19:26:17.136098-04:00 nostromo.teiken.net sshd-session[323125]: Disconnecting authenticating user root 47.110.52.196 port 49300: Change of username or service not allowed: (root,ssh-connection) -> (test,ssh-connection) [preauth] ... show less	Brute-Force SSH
🇺🇸 192.220.31.56	15 Jul 2026	2026-07-15T18:03:02.815319-04:00 nostromo.teiken.net sshd-session[317454]: Invalid user traefik from ... show more 2026-07-15T18:03:02.815319-04:00 nostromo.teiken.net sshd-session[317454]: Invalid user traefik from 192.220.31.56 port 40752 2026-07-15T18:03:02.839498-04:00 nostromo.teiken.net sshd-session[317454]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.220.31.56 2026-07-15T18:03:05.077808-04:00 nostromo.teiken.net sshd-session[317454]: Failed password for invalid user traefik from 192.220.31.56 port 40752 ssh2 2026-07-15T18:05:28.622883-04:00 nostromo.teiken.net sshd-session[317584]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.220.31.56 user=root 2026-07-15T18:05:30.399927-04:00 nostromo.teiken.net sshd-session[317584]: Failed password for root from 192.220.31.56 port 57544 ssh2 2026-07-15T18:07:52.382842-04:00 nostromo.teiken.net sshd-session[317707]: Invalid user testaccount from 192.220.31.56 port 52572 ... show less	Brute-Force SSH