2026-07-23 13:31:21
(2 hours ago)
(PERMBLOCK) 167.233.219.53 (DE/Germany/static.53.219.233.167.clients.your-server.de) has had more th ...
show more
(PERMBLOCK) 167.233.219.53 (DE/Germany/static.53.219.233.167.clients.your-server.de) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs:
show less
Port Scan
2026-07-23 12:31:15
(3 hours ago)
(caddyscan) Scanner path probe from 167.233.219.53 (DE/Germany/static.53.219.233.167.clients.your-se ...
show more
(caddyscan) Scanner path probe from 167.233.219.53 (DE/Germany/static.53.219.233.167.clients.your-server.de): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 167.233.219.53 - - [23/Jul/2026:12:31:12 +0000] "GET /actuator/env HTTP/1.1"
[REDACTED] 200 2627 167.233.219.53 - - [23/Jul/2026:12:31:13 +0000] "GET /server-status HTTP/1.1"
[REDACTED] 200 2627 167.233.219.53 - - [23/Jul/2026:12:31:13 +0000] "GET /actuator/configprops HTTP/1.1"
[REDACTED] 200 2627 167.233.219.53 - - [23/Jul/2026:12:31:14 +0000] "GET /.env HTTP/1.1"
[REDACTED] 200 2627 167.233.219.53 - - [23/Jul/2026:12:31:15 +0000] "GET /.env.local HTTP/1.1"
show less
Port Scan
2026-07-23 10:22:15
(6 hours ago)
(caddyscan) Scanner path probe from 167.233.219.53 (DE/Germany/static.53.219.233.167.clients.your-se ...
show more
(caddyscan) Scanner path probe from 167.233.219.53 (DE/Germany/static.53.219.233.167.clients.your-server.de): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 167.233.219.53 - - [23/Jul/2026:10:21:34 +0000] "GET /.aws/credentials HTTP/1.1"
[REDACTED] 200 2627 167.233.219.53 - - [23/Jul/2026:10:21:35 +0000] "GET /.aws/config HTTP/1.1"
[REDACTED] 200 2627 167.233.219.53 - - [23/Jul/2026:10:21:42 +0000] "GET /.env.json HTTP/1.1"
[REDACTED] 200 2627 167.233.219.53 - - [23/Jul/2026:10:22:12 +0000] "GET /.vscode/sftp.json HTTP/1.1"
[REDACTED] 200 2627 167.233.219.53 - - [23/Jul/2026:10:22:12 +0000] "GET /.vscode/settings.json HTTP/1.1"
show less
Port Scan
🇺🇸
TPI-Abuse
2026-07-23 09:53:58
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 167.233.219.53 (static.53.219.233.167.clients.y ...
show more
(mod_security) mod_security (id:210492) triggered by 167.233.219.53 (static.53.219.233.167.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 05:53:54.207595 2026] [security2:error] [pid 2559459:tid 2559459] [client 167.233.219.53:58198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "polarisled.com"] [uri "/core/.env"] [unique_id "amHksnRrfVAYWCcThrcigAAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-23 09:21:16
(7 hours ago)
(caddyscan) Scanner path probe from 167.233.219.53 (DE/Germany/static.53.219.233.167.clients.your-se ...
show more
(caddyscan) Scanner path probe from 167.233.219.53 (DE/Germany/static.53.219.233.167.clients.your-server.de): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 167.233.219.53 - - [23/Jul/2026:09:21:12 +0000] "GET /wp-config.php.bak HTTP/1.1"
[REDACTED] 200 2627 167.233.219.53 - - [23/Jul/2026:09:21:12 +0000] "GET /wp-config.php.old HTTP/1.1"
[REDACTED] 200 2627 167.233.219.53 - - [23/Jul/2026:09:21:12 +0000] "GET /wp-config.php.txt HTTP/1.1"
[REDACTED] 200 2627 167.233.219.53 - - [23/Jul/2026:09:21:13 +0000] "GET /wp-config.php.save HTTP/1.1"
[REDACTED] 200 2627 167.233.219.53 - - [23/Jul/2026:09:21:13 +0000] "GET /wp-config.php~ HTTP/1.1"
show less
Port Scan
🇩🇪
Blexyel
2026-07-23 09:15:12
(7 hours ago)
167.233.219.53 - - [23/Jul/2026:11:15:10 +0200] "GET /.git/config HTTP/1.1" 404 14 "-" "Mozilla/5.0 ...
show more
167.233.219.53 - - [23/Jul/2026:11:15:10 +0200] "GET /.git/config HTTP/1.1" 404 14 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
Brute-Force
Web App Attack
2026-07-23 08:21:07
(8 hours ago)
(caddyscan) Scanner path probe from 167.233.219.53 (DE/Germany/static.53.219.233.167.clients.your-se ...
show more
(caddyscan) Scanner path probe from 167.233.219.53 (DE/Germany/static.53.219.233.167.clients.your-server.de): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 167.233.219.53 - - [23/Jul/2026:08:20:59 +0000] "GET /actuator/env HTTP/1.1"
[REDACTED] 200 2627 167.233.219.53 - - [23/Jul/2026:08:21:00 +0000] "GET /actuator/configprops HTTP/1.1"
[REDACTED] 200 2627 167.233.219.53 - - [23/Jul/2026:08:21:00 +0000] "GET /server-status HTTP/1.1"
[REDACTED] 200 2627 167.233.219.53 - - [23/Jul/2026:08:21:01 +0000] "GET /.env HTTP/1.1"
[REDACTED] 200 2627 167.233.219.53 - - [23/Jul/2026:08:21:01 +0000] "GET /.env.local HTTP/1.1"
show less
Port Scan
🇫🇷
Octopuce
2026-07-22 21:29:22
(18 hours ago)
Aggressive web search of vulnerable pages: /.env /.env.local /api/.env /backend/.env /admin/.env .. ...
show more
Aggressive web search of vulnerable pages: /.env /.env.local /api/.env /backend/.env /admin/.env ...
show less
Web App Attack
2026-07-22 15:05:13
(1 day ago)
Blocked: Reason='Vulnerability probing — PHP scan detected (26/60 min)'; Requests=26
Port Scan
🇳🇱
e.fierstra
2026-07-22 14:34:37
(1 day ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
2026-07-22 05:47:52
(1 day ago)
suspicious behavior
Blog Spam
Brute-Force
Web App Attack
🇩🇪
Tha_14
2026-07-22 03:34:43
(1 day ago)
{"ts":"2026-07-22T05:34:42+02:00","ip":"167.233.219.53","cat":"sensitive_file","src":"uri","mode":"b ...
show more
{"ts":"2026-07-22T05:34:42+02:00","ip":"167.233.219.53","cat":"sensitive_file","src":"uri","mode":"block","status":403,"req":"GET /id_rsa HTTP/2.0"}
show less
Web App Attack
🇩🇪
Tha_14
2026-07-22 03:11:50
(1 day ago)
Multiple erroneous requests
Web App Attack
🇩🇪
NihiliousMonk
2026-07-22 00:08:40
(1 day ago)
Fail2Ban report from jail npm-scanners
Bad Web Bot
Web App Attack