AbuseIPDB » 194.120.230.55
194.120.230.55
This IP was reported 7 times. Confidence of
Abuse
is 20% : ?
ISP
IPv4 Superhub Limited
Usage Type
Data Center/Web Hosting/Transit
ASN
AS198584
Domain Name
ipv4superhub.com
Country
🇳🇱
Netherlands
City
Amsterdam, North Holland
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 194.120.230.55 :
This IP address has been reported a total of
7
times from
7 distinct
sources.
194.120.230.55 was first reported on
March 4th 2026 , and the most recent report was
2 weeks ago
Old Reports:
The most recent abuse report for this IP address is from
2 weeks ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇵🇱
nfsec.pl
2026-06-18 14:02:16
(2 weeks ago)
194.120.230.55 - - [18/Jun/2026:14:02:12 +0000] "GET /media/ghdb.pdf HTTP/1.1" 403 4521 "-" "sqlmap/ ...
show more
194.120.230.55 - - [18/Jun/2026:14:02:12 +0000] "GET /media/ghdb.pdf HTTP/1.1" 403 4521 "-" "sqlmap/1.10.1.55#dev (https://sqlmap.org)"
194.120.230.55 - - [18/Jun/2026:14:02:12 +0000] "GET /media/ghdb.pdf HTTP/1.1" 403 4520 "-" "sqlmap/1.10.1.55#dev (https://sqlmap.org)"
194.120.230.55 - - [18/Jun/2026:14:02:12 +0000] "GET /media/ghdb.pdf HTTP/1.1" 403 4520 "-" "sqlmap/1.10.1.55#dev (https://sqlmap.org)"
194.120.230.55 - - [18/Jun/2026:14:02:12 +0000] "GET /media/ghdb.pdf HTTP/1.1" 403 4520 "-" "sqlmap/1.10.1.55#dev (https://sqlmap.org)"
194.120.230.55 - - [18/Jun/2026:14:02:16 +0000] "GET /media/ghdb2.pdf HTTP/1.1" 403 4521 "-" "sqlmap/1.10.1.55#dev (https://sqlmap.org)"
...
show less
Web App Attack
Exploited Host
🇺🇸
TPI-Abuse
2026-06-13 15:06:29
(2 weeks ago)
(mod_security) mod_security (id:210801) triggered by 194.120.230.55 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210801) triggered by 194.120.230.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 11:06:23.047989 2026] [security2:error] [pid 8754:tid 8754] [client 194.120.230.55:50457] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "sqlmap" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "17"] [id "210801"] [rev "2"] [msg "COMODO WAF: Request Indicates a Security Scanner Scanned the Site||www.dmasoftlab.com|F|2"] [data "sqlmap/1.10.1.55#dev (https://sqlmap.org)"] [severity "CRITICAL"] [tag "CWAF"] [tag "Agents"] [hostname "www.dmasoftlab.com"] [uri "/download/"] [unique_id "ai1x7wmINEVgSfppVQ0F-AAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Aetherweb Ark
2026-06-13 12:18:29
(2 weeks ago)
(mod_security) mod_security (id:949110) triggered by 194.120.230.55 (HK/Hong Kong/-): N in the last ...
show more
(mod_security) mod_security (id:949110) triggered by 194.120.230.55 (HK/Hong Kong/-): N in the last X secs
show less
Web App Attack
🇺🇸
ipblock.com
2026-05-09 23:01:00
(1 month ago)
IPBlock protected site ID [4055-d][s=06].
Rogue crawler, does not respect robots.txt
Bad Web Bot
2026-04-26 09:14:11
(2 months ago)
SQL Injection Attack (/forums/forums/thread-view.asp?tid=18307%20ORDER%20BY%201--%20jWeY&start=1)
SQL Injection
Hacking
2026-03-31 23:40:04
(3 months ago)
| SQL injection attempt.
Web App Attack
Hacking
SQL Injection
2026-03-04 20:43:02
(3 months ago)
Malicious activity detected
Hacking
Web App Attack
Showing 1 to
7
of 7 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: