AbuseIPDB » 51.20.44.92
51.20.44.92 was found in our database!
This IP was reported 9 times. Confidence of
Abuse
is 0%: ?
| ISP |
A100 ROW Inc
|
| Usage Type |
Data Center/Web Hosting/Transit
|
| ASN |
AS16509
|
| Hostname(s) |
ec2-51-20-44-92.eu-north-1.compute.amazonaws.com
|
| Domain Name |
auth-tec-on-beta.space
|
| Country |
🇸🇪
Sweden
|
| City |
Stockholm, Stockholm
|
IP info including ISP, Usage Type, and Location provided
by IPInfo. Updated weekly.
IP Abuse Reports for 51.20.44.92:
This IP address has been reported a total of
9
times from
6 distinct
sources.
51.20.44.92 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
| Reporter |
IoA Timestamp (UTC)
|
Comment |
Categories |
|
|
🇺🇦
URAN Publishing Service
|
|
51.20.44.92 - - [16/Nov/2025:14:19:34 +0200] "GET /.env HTTP/1.1" 404 2873 "-" "python-httpx/0.24.1" ...
show more
51.20.44.92 - - [16/Nov/2025:14:19:34 +0200] "GET /.env HTTP/1.1" 404 2873 "-" "python-httpx/0.24.1"
51.20.44.92 - - [16/Nov/2025:14:20:50 +0200] "GET /admin/.env HTTP/1.1" 404 2872 "-" "python-httpx/0.24.1"
...
show less
|
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 51.20.44.92 (ec2-51-20-44-92.eu-north-1.compute ...
show more
(mod_security) mod_security (id:210492) triggered by 51.20.44.92 (ec2-51-20-44-92.eu-north-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 16 06:48:08.170625 2025] [security2:error] [pid 8301:tid 8301] [client 51.20.44.92:45476] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "elgarage.com.mx"] [uri "/.env"] [unique_id "aRm5-GEbT5UseQa0xfuJ1gAAAAk"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
Anonymous
|
|
Ports: 80,443; Direction: 0; Trigger: LF_MODSEC
|
Brute-Force
SSH
|
|
|
🇩🇪
dbmwebdesign
|
|
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
|
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 51.20.44.92 (ec2-51-20-44-92.eu-north-1.compute ...
show more
(mod_security) mod_security (id:210492) triggered by 51.20.44.92 (ec2-51-20-44-92.eu-north-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 16 01:49:55.824264 2025] [security2:error] [pid 22742:tid 22742] [client 51.20.44.92:51378] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "egass.info"] [uri "/.env"] [unique_id "aRl0E5gEkKnbB1oD07U1UQAAAAc"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 51.20.44.92 (ec2-51-20-44-92.eu-north-1.compute ...
show more
(mod_security) mod_security (id:210492) triggered by 51.20.44.92 (ec2-51-20-44-92.eu-north-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 15 15:02:28.834020 2025] [security2:error] [pid 21830:tid 21830] [client 51.20.44.92:57454] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "flyingdodostudio.flyingdodopublications.com"] [uri "/.env.staging"] [unique_id "aRjcVIKuspPgxMOcqZLLlwAAAAI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 51.20.44.92 (ec2-51-20-44-92.eu-north-1.compute ...
show more
(mod_security) mod_security (id:210492) triggered by 51.20.44.92 (ec2-51-20-44-92.eu-north-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 14 22:11:57.212397 2025] [security2:error] [pid 14912:tid 14912] [client 51.20.44.92:53984] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "goldenfrytech.net"] [uri "/.git/config"] [unique_id "aRfvfbZKpLSdD_w3VmnKiQAAAAI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇫🇷
greener77176
|
|
|
Web App Attack
|
|
|
🇫🇷
oonux.net
|
|
RouterOS: Scanning detected TCP 51.20.44.92:45884 > x.x.x.x:80
|
Port Scan
|
|
Showing 1 to
9
of 9 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: