(mod_security) mod_security (id:900006) triggered by 34.21.201.175 (SG/Singapore/175.201.21.34.bc.googleusercontent.com): 3 in the last 900 secs (CF_ENABLE)
Automated report from web, SSH and FTP server logs: 2174 requests probing for exposed secrets (.env, .git, config files). First reported 2026-10-30 06:05 UTC, last reported 2026-10-30 07:05 UTC; counts cover the current log rotation window.
{"level":"info","ts":1793308509.5925832,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.21.201.175","remote_port":"46556","client_ip":"34.21.201.175","proto":"HTTP/2.0","method":"GET","host":"status.nolt.io","uri":" ...
show more{"level":"info","ts":1793308509.5925832,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.21.201.175","remote_port":"46556","client_ip":"34.21.201.175","proto":"HTTP/2.0","method":"GET","host":"status.nolt.io","uri":"/.env.old","headers":{"X-Nextjs-Data":["1"],"User-Agent":["Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"],"Accept":["*/*"],"Accept-Encoding":["gzip"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"status.nolt.io","ech":false}},"bytes_read":0,"user_id":"","duration":0.00042424,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}}
{"level":"info","ts":1793308509.593898,"logger":"http.log.access.log1","msg":"handled request","request":{"remote
...
show less
DDoS Attack
Web App Attack
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown
