AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User wteiken , the webmaster of teiken.org, joined AbuseIPDB in December 2021 and has reported 23,542 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇩🇪 34.32.97.67	25 Oct 2026	www.teiken.net:443 34.32.97.67:48614 - - [25/Oct/2026:16:57:22 -0400] "GET /.git/config HTTP/1.1" 40 ... show more www.teiken.net:443 34.32.97.67:48614 - - [25/Oct/2026:16:57:22 -0400] "GET /.git/config HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.32.97.67:48614 - - [25/Oct/2026:16:57:22 -0400] "GET /.env HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.32.97.67:48614 - - [25/Oct/2026:16:57:22 -0400] "GET /.env.local HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.32.97.67:48614 - - [25/Oct/2026:16:57:22 -0400] "GET /.env.production HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.32.97.67:48614 - - [25/Oct/2026:16:57:22 -0400] "GET /.env.sta ... show less	Web App Attack
🇪🇸 34.175.50.248	25 Oct 2026	www.teiken.net:443 34.175.50.248:47428 - - [25/Oct/2026:16:29:44 -0400] "GET /.git/config HTTP/1.1" ... show more www.teiken.net:443 34.175.50.248:47428 - - [25/Oct/2026:16:29:44 -0400] "GET /.git/config HTTP/1.1" 404 562 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.175.50.248:47428 - - [25/Oct/2026:16:29:44 -0400] "GET /.env HTTP/1.1" 404 562 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.175.50.248:47428 - - [25/Oct/2026:16:29:44 -0400] "GET /.env.local HTTP/1.1" 404 562 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.175.50.248:47428 - - [25/Oct/2026:16:29:44 -0400] "GET /.env.production HTTP/1.1" 404 562 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.175.50.248:47428 - - [25/Oct/2026:16:29:44 -0400] "GET /.env.staging HTTP/1.1" 404 562 "-" "Mozilla/5.0 (X11; Linux x8 ... show less	Web App Attack
🇺🇸 2605:9880:0:529:225:90ff:fe66:fe9	25 Oct 2026	2026-10-25T15:36:23.952666-04:00 nostromo.teiken.net kernel: [364132.814621] syn_limit:IN=en-wan OUT ... show more 2026-10-25T15:36:23.952666-04:00 nostromo.teiken.net kernel: [364132.814621] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2605:9880:0000:0529:0225:90ff:fe66:0fe9 DST=2600:4041:5c67:fd8c:da58:d7c2:f48f:4aa8 LEN=64 TC=0 HOPLIMIT=11 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-10-25T15:36:23.986722-04:00 nostromo.teiken.net kernel: [364132.848701] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2605:9880:0000:0529:0225:90ff:fe66:0fe9 DST=2600:4041:5c67:fd8c:da58:d7c2:f48f:4aa8 LEN=64 TC=0 HOPLIMIT=12 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-10-25T15:36:24.021793-04:00 nostromo.teiken.net kernel: [364132.883771] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2605:9880:0000:0529:0225:90ff:fe66:0fe9 DST=2600:4041:5c67:fd8c:da58:d7c2:f48f:4aa8 LEN=64 TC=0 HOPLIMIT=13 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x0 ... show less	Port Scan
🇺🇸 156.225.64.194	25 Oct 2026	2026-10-25T15:32:55.511310-04:00 narcissus.teiken.net sshd-session[631722]: pam_unix(sshd:auth): aut ... show more 2026-10-25T15:32:55.511310-04:00 narcissus.teiken.net sshd-session[631722]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.225.64.194 2026-10-25T15:32:57.494758-04:00 narcissus.teiken.net sshd-session[631722]: Failed password for invalid user curl from 156.225.64.194 port 40194 ssh2 2026-10-25T15:34:34.162384-04:00 narcissus.teiken.net sshd-session[631842]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.225.64.194 user=root 2026-10-25T15:34:36.227069-04:00 narcissus.teiken.net sshd-session[631842]: Failed password for root from 156.225.64.194 port 33610 ssh2 2026-10-25T15:36:10.022595-04:00 narcissus.teiken.net sshd-session[631996]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.225.64.194 user=root 2026-10-25T15:36:12.531814-04:00 narcissus.teiken.net sshd-session[631996]: Failed password for root from 156.225.64.194 port 54316 ssh2 ... show less	Brute-Force SSH
🇩🇪 2a05:e740:1145::2	25 Oct 2026	2026-10-25T15:35:51.936619-04:00 nostromo.teiken.net kernel: [364100.794714] syn_limit:IN=en-wan OUT ... show more 2026-10-25T15:35:51.936619-04:00 nostromo.teiken.net kernel: [364100.794714] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1145:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7c2:f48f:4aa8 LEN=64 TC=0 HOPLIMIT=11 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-10-25T15:35:51.976436-04:00 nostromo.teiken.net kernel: [364100.838622] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1145:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7c2:f48f:4aa8 LEN=64 TC=0 HOPLIMIT=12 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-10-25T15:35:52.026604-04:00 nostromo.teiken.net kernel: [364100.882403] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1145:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7c2:f48f:4aa8 LEN=64 TC=0 HOPLIMIT=13 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x0 ... show less	Port Scan
🇩🇪 2a05:e740:9161::2	25 Oct 2026	2026-10-25T15:35:51.987822-04:00 nostromo.teiken.net kernel: [364100.850017] syn_limit:IN=en-wan OUT ... show more 2026-10-25T15:35:51.987822-04:00 nostromo.teiken.net kernel: [364100.850017] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:9161:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7c2:f48f:4aa8 LEN=64 TC=0 HOPLIMIT=11 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-10-25T15:35:52.036626-04:00 nostromo.teiken.net kernel: [364100.893835] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:9161:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7c2:f48f:4aa8 LEN=64 TC=0 HOPLIMIT=12 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-10-25T15:35:52.076631-04:00 nostromo.teiken.net kernel: [364100.937496] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:9161:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7c2:f48f:4aa8 LEN=64 TC=0 HOPLIMIT=13 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x0 ... show less	Port Scan
🇩🇪 2a05:e740:1146::2	25 Oct 2026	2026-10-25T15:35:51.486580-04:00 nostromo.teiken.net kernel: [364100.346147] syn_limit:IN=en-wan OUT ... show more 2026-10-25T15:35:51.486580-04:00 nostromo.teiken.net kernel: [364100.346147] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1146:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7c2:f48f:4aa8 LEN=64 TC=0 HOPLIMIT=11 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-10-25T15:35:51.536620-04:00 nostromo.teiken.net kernel: [364100.390302] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1146:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7c2:f48f:4aa8 LEN=64 TC=0 HOPLIMIT=12 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-10-25T15:35:51.576615-04:00 nostromo.teiken.net kernel: [364100.434374] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1146:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7c2:f48f:4aa8 LEN=64 TC=0 HOPLIMIT=13 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x0 ... show less	Port Scan
🇩🇪 2a05:e740:9160::2	25 Oct 2026	2026-10-25T15:35:51.746654-04:00 nostromo.teiken.net kernel: [364100.602764] syn_limit:IN=en-wan OUT ... show more 2026-10-25T15:35:51.746654-04:00 nostromo.teiken.net kernel: [364100.602764] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:9160:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7c2:f48f:4aa8 LEN=64 TC=0 HOPLIMIT=11 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-10-25T15:35:51.786614-04:00 nostromo.teiken.net kernel: [364100.646676] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:9160:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7c2:f48f:4aa8 LEN=64 TC=0 HOPLIMIT=12 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-10-25T15:35:51.828449-04:00 nostromo.teiken.net kernel: [364100.690671] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:9160:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7c2:f48f:4aa8 LEN=64 TC=0 HOPLIMIT=13 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x0 ... show less	Port Scan
🇩🇪 2a05:e740:1144::2	25 Oct 2026	2026-10-25T15:35:51.166635-04:00 nostromo.teiken.net kernel: [364100.023939] syn_limit:IN=en-wan OUT ... show more 2026-10-25T15:35:51.166635-04:00 nostromo.teiken.net kernel: [364100.023939] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1144:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7c2:f48f:4aa8 LEN=64 TC=0 HOPLIMIT=11 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-10-25T15:35:51.206616-04:00 nostromo.teiken.net kernel: [364100.067729] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1144:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7c2:f48f:4aa8 LEN=64 TC=0 HOPLIMIT=12 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-10-25T15:35:51.256619-04:00 nostromo.teiken.net kernel: [364100.111613] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1144:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7c2:f48f:4aa8 LEN=64 TC=0 HOPLIMIT=13 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x0 ... show less	Port Scan
🇩🇪 2a05:e740:1947::2	25 Oct 2026	2026-10-25T15:35:50.389403-04:00 nostromo.teiken.net kernel: [364099.251641] syn_limit:IN=en-wan OUT ... show more 2026-10-25T15:35:50.389403-04:00 nostromo.teiken.net kernel: [364099.251641] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1947:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7c2:f48f:4aa8 LEN=64 TC=0 HOPLIMIT=11 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-10-25T15:35:50.433380-04:00 nostromo.teiken.net kernel: [364099.295615] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1947:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7c2:f48f:4aa8 LEN=64 TC=0 HOPLIMIT=12 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-10-25T15:35:50.477342-04:00 nostromo.teiken.net kernel: [364099.339601] syn_limit:IN=en-wan OUT=vlan140 MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a05:e740:1947:0000:0000:0000:0000:0002 DST=2600:4041:5c67:fd8c:da58:d7c2:f48f:4aa8 LEN=64 TC=0 HOPLIMIT=13 FLOWLBL=0 PROTO=TCP SPT=49152 DPT=80 WINDOW=29200 RES=0x0 ... show less	Port Scan
🇿🇦 34.35.124.215	25 Oct 2026	www.teiken.net:443 34.35.124.215:44644 - - [25/Oct/2026:09:57:50 -0400] "GET /.git/config HTTP/1.1" ... show more www.teiken.net:443 34.35.124.215:44644 - - [25/Oct/2026:09:57:50 -0400] "GET /.git/config HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.35.124.215:44644 - - [25/Oct/2026:09:57:50 -0400] "GET /.env HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.35.124.215:44644 - - [25/Oct/2026:09:57:50 -0400] "GET /.env.local HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.35.124.215:44644 - - [25/Oct/2026:09:57:51 -0400] "GET /.env.production HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.35.124.215:44644 - - [25/Oct/2026:09:57:51 -0400] "GET ... show less	Web App Attack
🇿🇦 34.35.106.116	25 Oct 2026	www.teiken.net:443 34.35.106.116:57646 - - [25/Oct/2026:08:14:45 -0400] "GET /.git/config HTTP/1.1" ... show more www.teiken.net:443 34.35.106.116:57646 - - [25/Oct/2026:08:14:45 -0400] "GET /.git/config HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.35.106.116:57646 - - [25/Oct/2026:08:14:45 -0400] "GET /.env HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.35.106.116:57646 - - [25/Oct/2026:08:14:45 -0400] "GET /.env.local HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.35.106.116:57646 - - [25/Oct/2026:08:14:46 -0400] "GET /.env.production HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.35.106.116:57646 - - [25/Oct/2026:08:14:46 -0400] "GET ... show less	Web App Attack
🇺🇸 167.71.20.69	25 Oct 2026	2026-10-25T08:01:00.613798-04:00 nostromo.teiken.net kernel: [336809.711651] syn_limit:IN=en-wan OUT ... show more 2026-10-25T08:01:00.613798-04:00 nostromo.teiken.net kernel: [336809.711651] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=167.71.20.69 DST=173.52.106.128 LEN=52 TOS=0x00 PREC=0x00 TTL=56 ID=26046 PROTO=TCP SPT=57486 DPT=7788 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-25T08:01:00.742299-04:00 nostromo.teiken.net kernel: [336809.840178] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=167.71.20.69 DST=173.52.106.128 LEN=52 TOS=0x00 PREC=0x00 TTL=56 ID=37201 PROTO=TCP SPT=44798 DPT=8022 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-25T08:01:00.861791-04:00 nostromo.teiken.net kernel: [336809.959660] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=167.71.20.69 DST=173.52.106.128 LEN=52 TOS=0x00 PREC=0x00 TTL=56 ID=8166 PROTO=TCP SPT=39215 DPT=8181 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-25T08:01:00.955406-04:00 nostromo.teiken.net kernel: [336810.053262] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1 ... show less	Port Scan
🇺🇸 64.227.2.162	25 Oct 2026	2026-10-25T07:48:18.804153-04:00 nostromo.teiken.net kernel: [336047.908628] syn_limit:IN=en-wan OUT ... show more 2026-10-25T07:48:18.804153-04:00 nostromo.teiken.net kernel: [336047.908628] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=64.227.2.162 DST=173.52.106.128 LEN=52 TOS=0x00 PREC=0x00 TTL=56 ID=23590 PROTO=TCP SPT=52885 DPT=5701 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-25T07:48:18.956586-04:00 nostromo.teiken.net kernel: [336048.060618] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=64.227.2.162 DST=173.52.106.128 LEN=52 TOS=0x00 PREC=0x00 TTL=56 ID=24461 PROTO=TCP SPT=36178 DPT=2087 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-25T07:48:19.501543-04:00 nostromo.teiken.net kernel: [336048.606013] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=64.227.2.162 DST=173.52.106.128 LEN=52 TOS=0x00 PREC=0x00 TTL=56 ID=40565 PROTO=TCP SPT=37880 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-25T07:48:19.666585-04:00 nostromo.teiken.net kernel: [336048.767101] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1 ... show less	Port Scan
🇿🇦 34.35.160.135	25 Oct 2026	www.teiken.net:443 34.35.160.135:60242 - - [25/Oct/2026:07:13:30 -0400] "GET /.git/config HTTP/1.1" ... show more www.teiken.net:443 34.35.160.135:60242 - - [25/Oct/2026:07:13:30 -0400] "GET /.git/config HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.35.160.135:60242 - - [25/Oct/2026:07:13:31 -0400] "GET /.env HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.35.160.135:60242 - - [25/Oct/2026:07:13:31 -0400] "GET /.env.local HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.35.160.135:60242 - - [25/Oct/2026:07:13:31 -0400] "GET /.env.production HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.35.160.135:60242 - - [25/Oct/2026:07:13:31 -0400] "GET ... show less	Web App Attack
🇮🇩 103.120.66.67	25 Oct 2026	2026-10-25T06:46:02.046599-04:00 nostromo.teiken.net kernel: [332311.178068] syn_limit:IN=en-wan OUT ... show more 2026-10-25T06:46:02.046599-04:00 nostromo.teiken.net kernel: [332311.178068] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=103.120.66.67 DST=173.52.106.128 LEN=40 TOS=0x08 PREC=0x20 TTL=245 ID=26401 PROTO=TCP SPT=9099 DPT=9999 WINDOW=1024 RES=0x00 SYN URGP=0 2026-10-25T06:46:02.179419-04:00 nostromo.teiken.net kernel: [332311.316404] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=103.120.66.67 DST=173.52.106.128 LEN=40 TOS=0x08 PREC=0x20 TTL=244 ID=44901 PROTO=TCP SPT=9099 DPT=10198 WINDOW=1024 RES=0x00 SYN URGP=0 2026-10-25T06:46:02.936597-04:00 nostromo.teiken.net kernel: [332312.071875] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=103.120.66.67 DST=173.52.106.128 LEN=40 TOS=0x08 PREC=0x20 TTL=245 ID=16570 PROTO=TCP SPT=9099 DPT=53250 WINDOW=1024 RES=0x00 SYN URGP=0 2026-10-25T06:46:03.372555-04:00 nostromo.teiken.net kernel: [332312.509531] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5 ... show less	Port Scan
🇳🇱 34.6.178.62	25 Oct 2026	rocinante.teiken.net:443 34.6.178.62:56152 - - [25/Oct/2026:06:12:04 -0400] "GET /.git/config HTTP/1 ... show more rocinante.teiken.net:443 34.6.178.62:56152 - - [25/Oct/2026:06:12:04 -0400] "GET /.git/config HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.6.178.62:56152 - - [25/Oct/2026:06:12:04 -0400] "GET /.env HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.6.178.62:56152 - - [25/Oct/2026:06:12:04 -0400] "GET /.env.local HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.6.178.62:56152 - - [25/Oct/2026:06:12:05 -0400] "GET /.env.production HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.6.178.62:56152 - - [25/Oct/2026: ... show less	Web App Attack
🇶🇦 34.18.168.5	25 Oct 2026	rocinante.teiken.net:443 34.18.168.5:42304 - - [25/Oct/2026:06:07:40 -0400] "GET /.git/config HTTP/1 ... show more rocinante.teiken.net:443 34.18.168.5:42304 - - [25/Oct/2026:06:07:40 -0400] "GET /.git/config HTTP/1.1" 404 556 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.18.168.5:42304 - - [25/Oct/2026:06:07:40 -0400] "GET /.env HTTP/1.1" 404 556 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.18.168.5:42304 - - [25/Oct/2026:06:07:40 -0400] "GET /.env.local HTTP/1.1" 404 556 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.18.168.5:42304 - - [25/Oct/2026:06:07:40 -0400] "GET /.env.production HTTP/1.1" 404 556 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.18.168.5:42304 - - [25/Oct/2026: ... show less	Web App Attack
🇨🇱 34.176.11.251	25 Oct 2026	www.teiken.net:443 34.176.11.251:35462 - - [25/Oct/2026:05:55:21 -0400] "GET /.git/config HTTP/1.1" ... show more www.teiken.net:443 34.176.11.251:35462 - - [25/Oct/2026:05:55:21 -0400] "GET /.git/config HTTP/1.1" 404 562 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.176.11.251:35462 - - [25/Oct/2026:05:55:21 -0400] "GET /.env HTTP/1.1" 404 562 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.176.11.251:35462 - - [25/Oct/2026:05:55:21 -0400] "GET /.env.local HTTP/1.1" 404 562 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.176.11.251:35462 - - [25/Oct/2026:05:55:21 -0400] "GET /.env.production HTTP/1.1" 404 562 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.teiken.net:443 34.176.11.251:35462 - - [25/Oct/2026:05:55:21 -0400] "GET /.env.staging HTTP/1.1" ... show less	Web App Attack
🇺🇸 67.205.187.150	25 Oct 2026	2026-10-25T05:32:54.784224-04:00 nostromo.teiken.net kernel: [327923.959054] syn_limit:IN=en-wan OUT ... show more 2026-10-25T05:32:54.784224-04:00 nostromo.teiken.net kernel: [327923.959054] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=67.205.187.150 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=24921 DF PROTO=TCP SPT=39948 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-25T05:32:55.797905-04:00 nostromo.teiken.net kernel: [327924.972729] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=67.205.187.150 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=24922 DF PROTO=TCP SPT=39948 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-25T05:32:56.821185-04:00 nostromo.teiken.net kernel: [327925.995997] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=67.205.187.150 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=24923 DF PROTO=TCP SPT=39948 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-25T05:32:57.793880-04:00 nostromo.teiken.net kernel: [327926.968683] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2: ... show less	Port Scan
🇺🇸 34.55.183.248	25 Oct 2026	rocinante.teiken.net:443 34.55.183.248:36684 - - [25/Oct/2026:03:54:32 -0400] "GET /.git/config HTTP ... show more rocinante.teiken.net:443 34.55.183.248:36684 - - [25/Oct/2026:03:54:32 -0400] "GET /.git/config HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.55.183.248:36684 - - [25/Oct/2026:03:54:32 -0400] "GET /.env HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.55.183.248:36684 - - [25/Oct/2026:03:54:32 -0400] "GET /.env.local HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.55.183.248:36684 - - [25/Oct/2026:03:54:32 -0400] "GET /.env.production HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" rocinante.teiken.net:443 34.55.183.248:36684 - - [25/Oct/2026:03:54:32 -0400 ... show less	Web App Attack
🇮🇩 36.95.15.107	25 Oct 2026	2026-10-25T00:58:18.671182-04:00 nostromo.teiken.net sshd-session[499206]: pam_unix(sshd:auth): auth ... show more 2026-10-25T00:58:18.671182-04:00 nostromo.teiken.net sshd-session[499206]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.95.15.107 user=root 2026-10-25T00:58:20.951576-04:00 nostromo.teiken.net sshd-session[499206]: Failed password for root from 36.95.15.107 port 56604 ssh2 2026-10-25T02:24:50.964143-04:00 nostromo.teiken.net sshd-session[506254]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.95.15.107 user=root 2026-10-25T02:24:52.931447-04:00 nostromo.teiken.net sshd-session[506254]: Failed password for root from 36.95.15.107 port 61660 ssh2 2026-10-25T03:15:59.000278-04:00 nostromo.teiken.net sshd-session[511009]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.95.15.107 user=root 2026-10-25T03:16:00.534922-04:00 nostromo.teiken.net sshd-session[511009]: Failed password for root from 36.95.15.107 port 50133 ssh2 ... show less	Brute-Force SSH
🇺🇸 97.74.230.245	25 Oct 2026	2026-10-25T02:56:06.487456-04:00 nostromo.teiken.net kernel: [318515.744550] syn_limit:IN=en-wan OUT ... show more 2026-10-25T02:56:06.487456-04:00 nostromo.teiken.net kernel: [318515.744550] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=97.74.230.245 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=47 ID=57340 DF PROTO=TCP SPT=38606 DPT=80 WINDOW=14600 RES=0x00 SYN URGP=0 2026-10-25T02:56:07.470763-04:00 nostromo.teiken.net kernel: [318516.727843] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=97.74.230.245 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=47 ID=57341 DF PROTO=TCP SPT=38606 DPT=80 WINDOW=14600 RES=0x00 SYN URGP=0 2026-10-25T02:56:13.480869-04:00 nostromo.teiken.net kernel: [318522.737895] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=97.74.230.245 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=47 ID=57343 DF PROTO=TCP SPT=38606 DPT=80 WINDOW=14600 RES=0x00 SYN URGP=0 2026-10-25T02:56:20.393082-04:00 nostromo.teiken.net kernel: [318529.650049] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88: ... show less	Port Scan
🇩🇪 104.28.197.15	25 Oct 2026	2026-10-25T02:35:46.715271-04:00 nostromo.teiken.net kernel: [317295.983003] syn_limit:IN=en-wan OUT ... show more 2026-10-25T02:35:46.715271-04:00 nostromo.teiken.net kernel: [317295.983003] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=104.28.197.15 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x20 TTL=55 ID=40455 DF PROTO=TCP SPT=54410 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-25T02:35:47.140526-04:00 nostromo.teiken.net kernel: [317296.408258] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=104.28.197.15 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x20 TTL=55 ID=38933 DF PROTO=TCP SPT=54412 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-25T02:35:47.737175-04:00 nostromo.teiken.net kernel: [317297.004898] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=104.28.197.15 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x20 TTL=55 ID=40456 DF PROTO=TCP SPT=54410 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-25T02:35:48.186120-04:00 nostromo.teiken.net kernel: [317297.453836] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00: ... show less	Port Scan
🇩🇪 104.28.197.13	25 Oct 2026	www.teiken.dev:443 104.28.197.13:21842 - - [25/Oct/2026:02:35:37 -0400] "GET /.env.local HTTP/1.1" 4 ... show more www.teiken.dev:443 104.28.197.13:21842 - - [25/Oct/2026:02:35:37 -0400] "GET /.env.local HTTP/1.1" 404 3466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" www.teiken.dev:443 104.28.197.13:9397 - - [25/Oct/2026:02:35:37 -0400] "GET /.env.production HTTP/1.1" 404 3466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0" www.teiken.dev:443 104.28.197.13:39584 - - [25/Oct/2026:02:35:37 -0400] "GET /.git/HEAD HTTP/1.1" 404 3465 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0" www.teiken.dev:443 104.28.197.13:25291 - - [25/Oct/2026:02:35:37 -0400] "GET /.env HTTP/1.1" 404 3467 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15" www.teiken.dev:443 104.28.197.13:11345 - - [25/Oct/2026:02:35:42 -0400] "GET /.env.save HTTP/1.1" 404 3466 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7 ... show less	Web App Attack