AbuseIPDB » 185.47.94.42
185.47.94.42 was found in our database!
This IP was reported 6 times. Confidence of
Abuse
is 8% : ?
ISP
UAB Bite Lietuva
Usage Type
Fixed Line ISP
ASN
AS210906
Domain Name
bi.lt
Country
๐บ๐ธ
United States of America
City
Los Angeles, California
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 185.47.94.42 :
This IP address has been reported a total of
6
times from
6 distinct
sources.
185.47.94.42 was first reported on
October 19th 2025 , and the most recent report was
1 month ago .
Old Reports:
The most recent abuse report for this IP address is from
1 month ago
. It is possible that this IP is no longer involved in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
๐ฆ๐บ
prologic
2026-06-12 20:51:47
(1 month ago)
Coordinated application-layer DDoS against git.mills.io (self-hosted Gitea), 2026-06-12 ~20:30-21:10 ...
show more
Coordinated application-layer DDoS against git.mills.io (self-hosted Gitea), 2026-06-12 ~20:30-21:10 UTC. Deliberately expensive multi-label Gitea issue-search queries (/issues?type=all&state=closed&sort=...&labels=<multiple IDs>, ~60-113s CPU each) flooded the backend via proxy/hosting networks. ~36,700 source IPs, ~1 request per IP, identical TLS fingerprint (TLS1.3 0x1301) and one spoofed Chrome UA = single automated tool.
show less
DDoS Attack
Web App Attack
Anonymous
2026-06-08 09:01:17
(1 month ago)
Malicious activity detected
Hacking
Web App Attack
๐บ๐ธ
ipblock.com
2025-12-25 05:47:00
(6 months ago)
IPBlock protected site ID [1365-l].
Robotic site crawling, undeclared spider
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-12-20 11:13:04
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 185.47.94.42 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 185.47.94.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 20 06:12:58.020295 2025] [security2:error] [pid 4415:tid 4415] [client 185.47.94.42:40202] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.vangentholding.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.vangentholding.com"] [uri "/wp-json/wp/v2/users/357786"] [unique_id "aUaEunBi7c2tLWp5gVJddAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2025-10-19 16:02:33
(8 months ago)
Web attack
Bad Web Bot
Web App Attack
๐ณ๐ฑ
exxos
2025-10-19 03:08:18
(8 months ago)
Attacks with Bad user agents
Hacking
Showing 1 to
6
of 6 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ
Recently Reported IPs: