JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

83.220.170.146

Neutral Activity

Abuse Confidence Score

0% Low Risk

58 reports

38 reporters · latest 4 months ago

ISP: JSC Datacenter
Usage Type: Data Center/Web Hosting/Transit
ASN: AS29182
Hostname(s): pawpaw.one
Domain Name: webdc.ru
Country: 🇷🇺 Russian Federation
City: Moscow, Moscow

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

83.220.170.146 has been reported 58 times. The most recent report is from 4 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

58 from 38 distinct reporters

First reported

April 8th 2026

Most recent report

4 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-06-29 10:48:52 UTC · (4 months ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇮🇳 evicky2002	2026-06-29 10:48:52 UTC · (4 months ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇨🇱 SinaiCL	2026-05-30 20:27:25 UTC · (5 months ago)	Automated Nginx block. Attack type: Scan for config files. Total malicious requests: 9 across multiple servers.	Bad Web Bot
🇩🇪 sdos.es	2026-05-30 17:54:42 UTC · (5 months ago)	"Restricted File Access Attempt - Matched Data: /.env found within REQUEST_FILENAME: /api/.env"	Web App Attack
🇬🇧 consul.to	2026-05-30 17:36:37 UTC · (5 months ago)	Web attack/malicious scanning detected	Web App Attack
Anonymous	2026-05-30 16:16:33 UTC · (5 months ago)	(caddyscan) Scanner path probe from 83.220.170.146 (RU/Russia/pawpaw.one): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 83.220.170.146 - - [30/May/2026:16:16:30 +0000] "GET /admin/.env HTTP ... show more (caddyscan) Scanner path probe from 83.220.170.146 (RU/Russia/pawpaw.one): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 83.220.170.146 - - [30/May/2026:16:16:30 +0000] "GET /admin/.env HTTP/1.1" [REDACTED] 200 2627 83.220.170.146 - - [30/May/2026:16:16:30 +0000] "GET /new/.env HTTP/1.1" [REDACTED] 200 2627 83.220.170.146 - - [30/May/2026:16:16:30 +0000] "GET /bank/.env HTTP/1.1" [REDACTED] 200 2627 83.220.170.146 - - [30/May/2026:16:16:30 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 83.220.170.146 - - [30/May/2026:16:16:30 +0000] "GET /app/.env HTTP/1.1" show less	Port Scan
🇩🇪 Bedios GmbH	2026-05-30 14:16:51 UTC · (5 months ago)	Login credentials theft attempt	Hacking
Anonymous	2026-05-30 13:33:28 UTC · (5 months ago)	(caddyscan) Scanner path probe from 83.220.170.146 (RU/Russia/pawpaw.one): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 83.220.170.146 - - [30/May/2026:13:33:26 +0000] "GET /admin/.env HTTP ... show more (caddyscan) Scanner path probe from 83.220.170.146 (RU/Russia/pawpaw.one): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 83.220.170.146 - - [30/May/2026:13:33:26 +0000] "GET /admin/.env HTTP/1.1" [REDACTED] 200 2627 83.220.170.146 - - [30/May/2026:13:33:26 +0000] "GET /api/.env HTTP/1.1" [REDACTED] 200 2627 83.220.170.146 - - [30/May/2026:13:33:26 +0000] "GET /member/.env HTTP/1.1" [REDACTED] 200 2627 83.220.170.146 - - [30/May/2026:13:33:26 +0000] "GET /app/.env HTTP/1.1" [REDACTED] 200 2627 83.220.170.146 - - [30/May/2026:13:33:26 +0000] "GET /new/.env HTTP/1.1" show less	Port Scan
🇺🇸 TPI-Abuse	2026-05-30 09:12:39 UTC · (5 months ago)	(mod_security) mod_security (id:210492) triggered by 83.220.170.146 (pawpaw.one): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 30 05:12:34.508942 2026] [security2:error] [pid 2479:tid 2479] [client 83.220.170.146 ... show more (mod_security) mod_security (id:210492) triggered by 83.220.170.146 (pawpaw.one): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 30 05:12:34.508942 2026] [security2:error] [pid 2479:tid 2479] [client 83.220.170.146:43480] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "naominixon.com"] [uri "/bank/.env"] [unique_id "ahqqAmHVW5FbDQWQfFiclAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-30 04:37:17 UTC · (5 months ago)	(mod_security) mod_security (id:210492) triggered by 83.220.170.146 (pawpaw.one): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 30 00:37:10.400939 2026] [security2:error] [pid 25087:tid 25104] [client 83.220.170.1 ... show more (mod_security) mod_security (id:210492) triggered by 83.220.170.146 (pawpaw.one): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 30 00:37:10.400939 2026] [security2:error] [pid 25087:tid 25104] [client 83.220.170.146:38746] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agrigrailtechnologies.com"] [uri "/member/.env"] [unique_id "ahppdtyOyGO4NtOSP5vTXAAAAM8"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-05-30 04:00:09 UTC · (5 months ago)	Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-197)	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-05-30 02:24:38 UTC · (5 months ago)	(mod_security) mod_security (id:210492) triggered by 83.220.170.146 (pawpaw.one): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 29 22:24:33.822341 2026] [security2:error] [pid 28080:tid 28080] [client 83.220.170.1 ... show more (mod_security) mod_security (id:210492) triggered by 83.220.170.146 (pawpaw.one): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 29 22:24:33.822341 2026] [security2:error] [pid 28080:tid 28080] [client 83.220.170.146:47190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kimmimorikawa.com"] [uri "/core/.env"] [unique_id "ahpKYaUE9Q7QcFzxgmtNwQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 tentwentyfour	2026-05-30 01:59:13 UTC · (5 months ago)	Blocked for probing for sensitive web application components	Brute-Force Web App Attack
🇺🇸 kosada.com	2026-05-30 01:58:56 UTC · (5 months ago)	Web vulnerability probing: /member/.env	Web App Attack
🇩🇪 EGP Abuse Dept	2026-05-30 01:05:57 UTC · (5 months ago)	Scanning for web/db/file exploits on www.meijerpotato.com	SQL Injection Bad Web Bot Web App Attack

Showing 1 to 15 of 58 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇰🇷 220.122.115.9

🇹🇭 203.156.108.110

🇺🇸 162.216.149.188

🇮🇳 117.247.23.131

🇮🇹 87.20.45.81

🇺🇸 35.84.134.253

🇳🇱 195.178.110.242

🇫🇷 195.36.164.162

🇨🇴 185.42.22.218

🇺🇸 162.216.149.95

🇨🇳 139.212.71.53

🇸🇬 129.212.227.5

🇻🇳 118.70.182.193

🇮🇳 117.205.34.37

🇨🇳 117.173.65.4

🇰🇷 116.123.150.231

🇻🇳 116.118.47.214

🇨🇳 115.191.79.153

🇻🇳 103.154.63.62

🇨🇦 76.66.111.104