JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 178.208.66.47

178.208.66.47 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 18%: ?

18%

ISP	Iron Hosting Centre Ltd., London, UK
Usage Type	Data Center/Web Hosting/Transit
ASN	AS216139
Hostname(s)	unknown.ironhostr.me
Domain Name	ihc.host
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 178.208.66.47

Whois 178.208.66.47

IP Abuse Reports for 178.208.66.47:

This IP address has been reported a total of 35 times from 19 distinct sources. 178.208.66.47 was first reported on April 20th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 KelvaTLS	2026-08-16 22:01:57 (1 month ago)	KelvaTLS: TCP connection-limit abuse against TCP port 1194 on our infrastructure. nft veil1194off_co ... show more KelvaTLS: TCP connection-limit abuse against TCP port 1194 on our infrastructure. nft veil1194off_conn: held more concurrent connections to the OpenVPN listener than the per-source limit permits from this source. UTC 2026-08-16T22:01:57Z. incident kelva-20260816-220040Z. show less	DDoS Attack
🇺🇸 Vano Ganzzz	2026-08-14 11:17:29 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from NL. Action taken: BLOCK ASN: 216139 (Iron Hosting Cen ... show more Triggered Cloudflare WAF (firewallCustom) from NL. Action taken: BLOCK ASN: 216139 (Iron Hosting Centre LTD) Protocol: HTTP/2 (GET method) Endpoint: / Timestamp: 2026-08-14T11:17:29Z Ray ID: a2af8da95eb8224e UA: Mozilla/5.0 (Macintosh; ARM Mac OS X 13.2.1) AppleWebKit/537.36 (KHTML, like Gecko) Google Chrome/102.5 Safari/537.36 show less	Bad Web Bot
🇮🇩 sockominfo	2026-08-04 13:00:53 (1 month ago)	Zimbra: Login failures from malicious IP: 178.208.66.47. Threat Score: 6.3/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 178.208.66.47. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-04 12:00:09 (1 month ago)	Zimbra: Login failures from malicious IP: 178.208.66.47. Threat Score: 5.6/10 (MEDIUM). Reported by ... show more Zimbra: Login failures from malicious IP: 178.208.66.47. Threat Score: 5.6/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
Anonymous	2026-08-04 06:58:03 (1 month ago)	BruteForce IMAP/POP3/SMTP	Brute-Force
🇬🇧 Hobby Bob	2026-08-04 04:26:38 (1 month ago)	Aug 4 05:26:37 mail dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in ... show more Aug 4 05:26:37 mail dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 4 secs): user=, method=PLAIN, rip=178.208.66.47, lip=X.X.X.X session= show less	Port Scan Hacking
🇮🇳 liveaspankaj	2026-08-03 21:48:14 (1 month ago)	DDoS attack: 310 requests in 5m (GET / or repair.php).	DDoS Attack
🇺🇸 COMPLEX	2026-07-27 22:40:54 (2 months ago)	Banned by Multi Agent · node …jrh1 · reason=SSH banner invalid / banner exchange invalid format · at ... show more Banned by Multi Agent · node …jrh1 · reason=SSH banner invalid / banner exchange invalid format · attempts=1 · SSH banner invalid / banner exchange invalid format show less	Brute-Force SSH
🇫🇷 MatStef132	2026-07-25 09:07:21 (2 months ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇺🇸 Vano Ganzzz	2026-07-22 23:05:25 (2 months ago)	Triggered Cloudflare WAF (l7ddos) from NL. Action taken: BLOCK ASN: 216139 (Iron Hosting Centre LTD) ... show more Triggered Cloudflare WAF (l7ddos) from NL. Action taken: BLOCK ASN: 216139 (Iron Hosting Centre LTD) Protocol: HTTP/2 (GET method) Endpoint: / Timestamp: 2026-07-22T23:05:25Z Ray ID: a1f617100dfad204 UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36 show less	DDoS Attack Bad Web Bot
🇵🇱 mscode.pl	2026-07-20 16:11:14 (2 months ago)	Triggered Cloudflare WAF (l7ddos) from NL. Action taken: MANAGED_CHALLENGE ASN: 216139 (Iron Hosting ... show more Triggered Cloudflare WAF (l7ddos) from NL. Action taken: MANAGED_CHALLENGE ASN: 216139 (Iron Hosting Centre LTD) Protocol: HTTP/2 (GET method) Zone: mscode.pl Endpoint: /services UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:141.0) Gecko/20100101 Firefox/141.0 show less	DDoS Attack Bad Web Bot
🇫🇷 MatStef132	2026-07-20 12:24:01 (2 months ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
Anonymous	2026-07-20 08:50:18 (2 months ago)	Detected Hacking, SQL Injection or general Web App Attack	Web App Attack
🇫🇷 MatStef132	2026-07-18 19:20:03 (2 months ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇳🇱 WeCloudit-Anti-Abuse	2026-07-18 07:03:35 (2 months ago)	HTTP flood against /retreat-corp on Apache webserver	Brute-Force

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.15.228.240

🇸🇪 171.25.158.87

🇸🇬 101.47.13.135

🇺🇦 193.246.147.135

🇪🇸 158.158.100.150

🇪🇸 158.158.1.227

🇬🇧 158.94.189.61

🇻🇳 103.53.158.121

🇸🇬 101.46.3.52

🇹🇷 101.44.35.141

🇷🇺 77.91.65.151

🇳🇱 45.148.10.157

🇺🇸 35.172.134.248

🇵🇱 193.34.212.54

🇨🇴 191.97.12.90

🇲🇩 178.168.51.106

🇺🇦 178.159.219.76

🇺🇸 157.245.113.227

🇸🇪 157.52.122.53

🇨🇳 123.56.11.51