This IP address has been reported a total of
5
times from
5 distinct
sources.
179.108.61.208 was first reported on
January 30th 2025 , and the most recent report was
1 week ago Germany
with 1
report.
The most common categories in these recent reports were:
Web App Attack
1
time;
DDoS Attack
1
time.
Old Reports
The most recent abuse report for this IP address is from
1 week ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇩🇪
LRob
2026-10-16 04:58:38
(1 week ago)
Calendar filter flood (L7 DDoS) | host: escrime-auvergnerhonealpes.fr | path: /calendrier-2/action~a ...
show more
Calendar filter flood (L7 DDoS) | host: escrime-auvergnerhonealpes.fr | path: /calendrier-2/action~agenda/time_limit~1763852400/tag_ids~645,405,730,596,571,757,488,332/request_format~json/ | src_port: 42883
show less
DDoS Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-07-17 17:37:44
(3 months ago)
(mod_security) mod_security (id:210381) triggered by 179.108.61.208 (ip-179.108.61.208.redeatel.com. ...
show more
(mod_security) mod_security (id:210381) triggered by 179.108.61.208 (ip-179.108.61.208.redeatel.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 13:37:38.394786 2026] [security2:error] [pid 1474072:tid 1474135] [client 179.108.61.208:53859] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "82"] [id "210381"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||www.mentzlaw.com|F|4"] [data "REQUEST_URI=/louisianaemergencyroomerrorlawyer/%url%"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.mentzlaw.com"] [uri "/louisianaemergencyroomerrorlawyer/%url%"] [unique_id "alpoYm5RXLX8qjXw8YikIwAAAcM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
gtabomber
2026-03-05 17:48:30
(7 months ago)
2026-03-05T17:48:16.148087 espaceonline.co.uk auth[30126]: pam_unix(dovecot:auth): authentication fa ...
show more
2026-03-05T17:48:16.148087 espaceonline.co.uk auth[30126]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=179.108.61.208 [email protected]
2026-03-05T17:48:17.996763 espaceonline.co.uk dovecot[23296]: auth-worker(30126): pam([email protected] ,179.108.61.208,<6w6OikpMx2mzbD3Q>): pam_authenticate() failed: Authentication failure (password mismatch?)
2026-03-05T17:48:19.901805 espaceonline.co.uk dovecot[23296]: imap-login: Aborted login (auth failed, 1 attempts in 3 secs): user=<[email protected] >, method=PLAIN, rip=179.108.61.208, lip=176.126.240.132, TLS, session=<6w6OikpMx2mzbD3Q>
...
show less
Brute-Force
SSH
2025-11-25 18:59:05
(10 months ago)
scanning http requests from known botnet
Web App Attack
2025-01-30 03:32:35
(1 year ago)
Ports: 2077,2078,2082,2083,2086,2087,2095,2096; Direction: 0; Trigger: LF_DISTATTACK
Brute-Force
SSH
Showing 1 to
5
of 5 reports
