34.90.176.46

Blocked 50 connection attempts due to Spamhaus RBL (RJCT05) in the past 4 hours. To request delisting, visit https://www.spamhaus.org/lookup/ to check your IP status and submit a delist request if eligible.

categories: Email Spam

2026-10-07T08:37:17.273422-04:00 Host-KEWR-E amavis[57642]: (57642-15) Blocked SPAM {RejectedOpenRelay}, AM.PDP-SOCK [34.90.176.46] [34.90.176.46] <[email protected]> -> <[email protected]>, Queue-ID: 766FA816, Message-ID: <6dfe87e247db4350aa88dc7520c ... show more 2026-10-07T08:37:17.273422-04:00 Host-KEWR-E amavis[57642]: (57642-15) Blocked SPAM {RejectedOpenRelay}, AM.PDP-SOCK [34.90.176.46] [34.90.176.46] <[email protected]> -> <[email protected]>, Queue-ID: 766FA816, Message-ID: <[email protected]>, mail_id: VgkKyHR27qAE, Hits: 28.759, size: 20828, 4455 ms ... show less

Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-08.

3.375 requests with url.path *.git/* 3.372 requests with url.path */.git/config

Unauthorized access attempts: [GET] /.git/config UA: Unknown

trolling for resource vulnerabilities

General hacking/exploits/scanning

(mod_security) mod_security (id:210492) triggered by 34.90.176.46 (46.176.90.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 08 12:13:55.580401 2026] [security2:error] [pid 967018:tid 9 ... show more (mod_security) mod_security (id:210492) triggered by 34.90.176.46 (46.176.90.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 08 12:13:55.580401 2026] [security2:error] [pid 967018:tid 967021] [client 34.90.176.46:60974] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "killerrockandroll.com"] [uri "/.git/config"] [unique_id "andVw7ucPPx_b3o_bKzvygAAAIA"] show less

suspicious request in access.log

(mod_security) mod_security (id:210492) triggered by 34.90.176.46 (46.176.90.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 08 11:44:18.141997 2026] [security2:error] [pid 298773:tid 2 ... show more (mod_security) mod_security (id:210492) triggered by 34.90.176.46 (46.176.90.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 08 11:44:18.141997 2026] [security2:error] [pid 298773:tid 298773] [client 34.90.176.46:52744] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jerusalem-temple-today.com"] [uri "/.git/config"] [unique_id "andO0lyaJWx4rqRet47TPAAAABM"] show less

(mod_security) mod_security (id:210492) triggered by 34.90.176.46 (46.176.90.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 08 11:23:47.122090 2026] [security2:error] [pid 2430355:tid ... show more (mod_security) mod_security (id:210492) triggered by 34.90.176.46 (46.176.90.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 08 11:23:47.122090 2026] [security2:error] [pid 2430355:tid 2430355] [client 34.90.176.46:38536] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nodepot.com"] [uri "/.git/config"] [unique_id "andKA8z6n9AxBJ3r_qLS1wAAACM"] show less

(mod_security) mod_security (id:949110) triggered by 34.90.176.46 (46.176.90.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 08 11:06:40.186932 2026] [security2:error] [pid 3580596:tid ... show more (mod_security) mod_security (id:949110) triggered by 34.90.176.46 (46.176.90.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 08 11:06:40.186932 2026] [security2:error] [pid 3580596:tid 3580596] [client 34.90.176.46:54802] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pleasejustfixit.org"] [uri "/.git/config"] [unique_id "andGAPngMFu1GOxU6k9m0wAAAAg"] show less

malicious-web-requests-vulnerability-scanning

(mod_security) mod_security (id:210492) triggered by 34.90.176.46 (46.176.90.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 08 10:25:26.331147 2026] [security2:error] [pid 2444111:tid ... show more (mod_security) mod_security (id:210492) triggered by 34.90.176.46 (46.176.90.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 08 10:25:26.331147 2026] [security2:error] [pid 2444111:tid 2444111] [client 34.90.176.46:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nyemdr.com"] [uri "/.git/config"] [unique_id "anc8VhgsfuVaMUtrJOKlEQAAAAY"] show less