π©πͺ
netclix.gr
2026-06-07 16:47:00
(6 days ago)
(security_scan) Sensitive File Scan Blocked 172.69.22.88 (US/United States/-): 1 in the last 4600 se ...
show more
(security_scan) Sensitive File Scan Blocked 172.69.22.88 (US/United States/-): 1 in the last 4600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 172.69.22.88 - - [07/Jun/2026:19:46:54 +0300] "GET /.git/config HTTP/2.0" 404 532 "-" "Mozilla/5.0 (l9scan/2.0.9373e27313e21323e2430313; +https://leakix.net)" "164.92.107.174"'/error_docs/404.html' '' '/opt/psa/admin/htdocs'
show less
Port Scan
π©πͺ
acadeova
2026-05-06 18:34:27
(1 month ago)
π¨ Recon detected (nft drop)
SRC=172.69.22.88
Observed=TCP dpt=2087 in=enp0s6 ttl=54
Time=recent(jour ...
show more
π¨ Recon detected (nft drop)
SRC=172.69.22.88
Observed=TCP dpt=2087 in=enp0s6 ttl=54
Time=recent(journalctl: 10 minutes ago)
Assessment=Generic scanning / reconnaissance (PORT_SCAN)
show less
Port Scan
π§π·
leolemos
2026-03-27 00:47:36
(2 months ago)
[Thu Mar 26 21:47:34.383816 2026] [proxy_fcgi:error] [pid 1321684] [client 172.69.22.88:13945] AH010 ...
show more
[Thu Mar 26 21:47:34.383816 2026] [proxy_fcgi:error] [pid 1321684] [client 172.69.22.88:13945] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 21:47:34.552940 2026] [proxy_fcgi:error] [pid 1321684] [client 172.69.22.88:13945] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 21:47:34.632326 2026] [proxy_fcgi:error] [pid 1321684] [client 172.69.22.88:13945] AH01071: Got error 'Primary script unknown'
show less
Brute-Force
Web App Attack
π¬π§
OptimusGO
2026-03-26 06:12:02
(2 months ago)
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Time ...
show more
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Timestamp: 2026-03-26 06:12:02 UTC
Log evidence:
03/26/2026-06:12:01.431315 [**] [1:1000101:2] SECURITY Port Scan Detected - Multiple Unauthorized Ports [**] [Classification: Attempted Information Leak] [Priority: 1] {TCP} 172.69.22.88:13885 -> 185.127.18.66:2087
show less
Port Scan
Brute-Force
π¬π§
OptimusGO
2026-02-11 04:16:59
(4 months ago)
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Time ...
show more
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Timestamp: 2026-02-11 04:16:59 UTC
Log evidence:
02/11/2026-04:16:57.235008 [**] [1:1000101:2] SECURITY Port Scan Detected - Multiple Unauthorized Ports [**] [Classification: Attempted Information Leak] [Priority: 1] {TCP} 172.69.22.88:10136 -> 185.127.18.66:2087
02/11/2026-04:16:57.828093 [**] [1:1000101:2] SECURITY Port Scan Detected - Multiple Unauthorized Ports [**] [Classification: Attempted Information Leak] [Priority: 1] {TCP} 172.69.22.88:10136 -> 185.127.18.66:2087
show less
Port Scan
Brute-Force
πΊπΈ
MirrorImageGaming
2026-02-08 22:30:23
(4 months ago)
HTTP probe(s) @ TCP 80 US
Port Scan
πΏπ¦
agentics
2025-11-21 00:48:05
(6 months ago)
172.69.22.88 report :
DDoS Attack
FTP Brute-Force
Port Scan
Hacking
Spoofing
Brute-Force
Exploited Host
π§π·
leolemos
2025-10-26 09:57:02
(7 months ago)
[Sat Oct 25 17:15:43.700351 2025] [proxy_fcgi:error] [pid 2539557] [client 172.69.22.88:12897] AH010 ...
show more
[Sat Oct 25 17:15:43.700351 2025] [proxy_fcgi:error] [pid 2539557] [client 172.69.22.88:12897] AH01071: Got error 'Primary script unknown'
[Sun Oct 26 06:56:57.162296 2025] [proxy_fcgi:error] [pid 2756947] [client 172.69.22.88:13692] AH01071: Got error 'Primary script unknown'
[Sun Oct 26 06:57:01.452039 2025] [proxy_fcgi:error] [pid 2756947] [client 172.69.22.88:13692] AH01071: Got error 'Primary script unknown'
show less
Brute-Force
Web App Attack
πΊπΈ
TPI-Abuse
2025-06-05 02:44:19
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 172.69.22.88 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.22.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 04 22:44:12.031711 2025] [security2:error] [pid 4076251:tid 4076251] [client 172.69.22.88:64026] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "efko.group"] [uri "/test/.git/config"] [unique_id "aEEEfFXN8syN0cJPPQCYpgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
mawan
2025-06-04 04:59:10
(1 year ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
Anonymous
2025-05-13 09:15:28
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
π³π±
Study Bitcoin π€
2025-04-13 20:36:38
(1 year ago)
Port probe to tcp/80 (http)
[srv125]
Port Scan
Bad Web Bot
Web App Attack
Anonymous
2025-04-01 14:20:30
(1 year ago)
Excessive crawling/scraping
Hacking
Brute-Force
π³π±
Study Bitcoin π€
2025-01-20 02:10:43
(1 year ago)
Port probe to tcp/80 (http)
[srv125]
Port Scan
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2025-01-19 02:51:57
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 172.69.22.88 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.22.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 18 21:51:51.324439 2025] [security2:error] [pid 29688:tid 29688] [client 172.69.22.88:46296] [client 172.69.22.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.istanbulicerik.com"] [uri "/.env"] [unique_id "Z4xox7vlvC8SfvCnYCvZXgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack