JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 197.221.108.78

197.221.108.78 was found in our database!

This IP was reported 93 times. Confidence of Abuse is 100%: ?

100%

ISP	PoP Pool Core - Dedicated
Usage Type	Fixed Line ISP
ASN	AS37334
Domain Name	reflex.co.za
Country	🇿🇦 South Africa
City	Johannesburg, Gauteng

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 197.221.108.78

Whois 197.221.108.78

IP Abuse Reports for 197.221.108.78:

This IP address has been reported a total of 93 times from 38 distinct sources. 197.221.108.78 was first reported on June 11th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 phil2k	2026-07-08 16:01:03 (1 day ago)	ICMP + TCP & UDP portscan on multiple ports : Firewall: Within 2026-06-11 23:34:04 - 2026-07-04 15:3 ... show more ICMP + TCP & UDP portscan on multiple ports : Firewall: Within 2026-06-11 23:34:04 - 2026-07-04 15:33:08 CEST(+0200) identified: port scan from 197.221.108.78/32 on uncommon port/s: 45471(tcp:45471),45333(tcp:45333),12723(udp:12723),3885(udp:3885) (4 trials) Fail2ban: Within 2026-07-01 21:53:49 - 2026-07-04 15:33:08 CEST(+0200) banned: 2 times by fail2ban[firewall] show less	Port Scan Ping of Death
🇧🇷 diego	2026-07-06 04:09:55 (3 days ago)	[rede-44-49] 07/06/2026-01:09:55.218476, 197.221.108.78, Protocol: 6, ET CINS Active Threat Intellig ... show more [rede-44-49] 07/06/2026-01:09:55.218476, 197.221.108.78, Protocol: 6, ET CINS Active Threat Intelligence Poor Reputation IP group 279 show less	Hacking
🇺🇸 MPL	2026-07-05 21:50:35 (3 days ago)	tcp/18261	Port Scan
🇺🇸 MPL	2026-07-05 21:50:35 (3 days ago)	tcp ports: 18261,58598 (3 or more attempts)	Port Scan
🇺🇸 technash	2026-07-05 21:25:00 (3 days ago)	Unauthorized network connection attempt(s) via TCP/UDP port(s) from TI-mapped IP entity detected [Fo ... show more Unauthorized network connection attempt(s) via TCP/UDP port(s) from TI-mapped IP entity detected [Fortinet/Sentinel]. show less	Port Scan
🇩🇪 xserverx.ru	2026-07-05 18:24:10 (4 days ago)	[UFW SCAN!!!!] SRC=197.221.108.78 LEN=552 TOS=0x08 PREC=0x20 TTL=46 PROTO=TCP SPT=21408 DPT=1366 WIN ... show more [UFW SCAN!!!!] SRC=197.221.108.78 LEN=552 TOS=0x08 PREC=0x20 TTL=46 PROTO=TCP SPT=21408 DPT=1366 WINDOW=25025 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇧🇷 diego	2026-07-05 14:59:49 (4 days ago)	[rede-top188] 07/05/2026-11:59:49.171553, 197.221.108.78, Protocol: 6, ET CINS Active Threat Intelli ... show more [rede-top188] 07/05/2026-11:59:49.171553, 197.221.108.78, Protocol: 6, ET CINS Active Threat Intelligence Poor Reputation IP group 279 show less	Hacking
Anonymous	2026-07-05 14:01:49 (4 days ago)	Repeated unauthorized connection attempts to restricted service observed.	Port Scan Hacking Bad Web Bot Web App Attack
🇧🇷 diego	2026-07-05 11:47:11 (4 days ago)	[rede-top188] 07/05/2026-08:47:11.578551, 197.221.108.78, Protocol: 6, ET CINS Active Threat Intelli ... show more [rede-top188] 07/05/2026-08:47:11.578551, 197.221.108.78, Protocol: 6, ET CINS Active Threat Intelligence Poor Reputation IP group 279 show less	Hacking
🇺🇸 en0	2026-07-05 06:38:31 (4 days ago)	197.221.108.78 was recorded attempting unexpectedly to open a GRE tunnel.	Port Scan
🇦🇹 Pingger Shikkoken	2026-07-05 04:57:10 (4 days ago)	2026-07-05T04:57:10+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC ... show more 2026-07-05T04:57:10+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=197.221.108.78 DST=10.1.1.150 LEN=53 TOS=0x00 PREC=0x00 TTL=48 ID=24241 PROTO=UDP SPT=50698 DPT=27015 LEN=33 show less	Port Scan Hacking
🇩🇪 celestialcity	2026-07-05 03:26:34 (4 days ago)	Blocked by UFW on celestialcityeu [5465/tcp] \| SPT: 48571 \| TTL: 54 \| LEN: 552 \| TOS: 0x00 • Reporte ... show more Blocked by UFW on celestialcityeu [5465/tcp] \| SPT: 48571 \| TTL: 54 \| LEN: 552 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 Cyber Crusader	2026-07-05 02:35:33 (4 days ago)	Hundreds of Attempts (at least) to Connect to and Access Firewall Ports	Port Scan Hacking Brute-Force
🇺🇸 MPL	2026-07-04 22:30:21 (4 days ago)	tcp/49519	Port Scan
🇩🇪 ValtonTahiri	2026-07-04 20:05:27 (5 days ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=197.221.108.78; proto=UDP; source_port=21608; target_port=27015 show less	Port Scan

Showing 1 to 15 of 93 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇴 181.59.3.16

🇸🇮 102.220.160.47

🇸🇬 47.128.31.126

🇳🇱 45.148.10.151

🇮🇳 2404:6800:4013:80d::128

🇵🇱 212.127.91.32

🇨🇳 202.46.62.94

🇨🇳 202.46.62.25

🇨🇳 182.135.63.175

🇫🇷 163.172.143.147

🇮🇩 160.187.174.22

🇵🇰 153.117.5.15

🇺🇸 104.28.195.186

🇺🇸 64.225.17.153

🇺🇸 63.153.152.67

🇳🇱 45.148.10.240

🇳🇱 45.148.10.147

🇺🇸 23.129.64.196

🇦🇷 191.81.50.203

🇦🇷 181.12.133.19