This IP address has been reported a total of
99
times from
38 distinct
sources.
197.221.80.100 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Email received Sat, 7 Mar 2026 at 05:15:46 +0000 claiming to be from โMr. Adnan Anwarโ, allegedly th ...
show moreEmail received Sat, 7 Mar 2026 at 05:15:46 +0000 claiming to be from โMr. Adnan Anwarโ, allegedly the Chief Executive Officer of a bank in Dubai, requesting the recipient to reply to a separate address to discuss a โsignificant business transaction that will benefit our families.โ The message is a classic advance-fee style solicitation attempting to lure the recipient into private contact. The From address uses the domain eba.am while the reply address is a different domain, indicating deceptive intent. The message content attempts to establish false authority and financial opportunity to initiate a scam conversation.
Technical analysis shows the originating IP 197.221.80.100 sending through mail server scpmg.sarpongcapital.com. SPF validation resulted in softfail because the sending IP is not authorized for the domain. DKIM validation produced a permanent failure. DMARC policy status is unknown but alignment is inconsistent. These authentication failures strongly indicate spoofed.
show less
Fraud Orders
Web Spam
Email Spam
Spoofing
Phishing
Unsolicited fraudulent email received Thu, 05 Mar 2026 03:58:04 +0000 claiming to be from โMr. Adnan ...
show moreUnsolicited fraudulent email received Thu, 05 Mar 2026 03:58:04 +0000 claiming to be from โMr. Adnan Anwarโ regarding a โsignificant business transactionโ intended to benefit both families. Message attempts to solicit direct contact through an external Gmail address, a common advance-fee scam tactic. The email originated from IP 197.221.80.100 using mail host scpmg.sarpongcapital.com. Content indicates social-engineering fraud attempting to establish trust by impersonating a financial executive and proposing a vague financial deal.
Email authentication failures strongly indicate abuse of the sending infrastructure. SPF returned softfail because domain eba.am does not authorize IP 197.221.80.100 to send mail. DKIM verification resulted in perm_fail indicating an invalid or broken signature. DMARC authentication is not properly aligned and is reported as unknown. These authentication problems combined with deceptive content strongly suggest spoofed identity and misuse of the mail server scpmg.sarpongcapital
show less
Blocked by UFW on koti [1433/tcp]
Source port: 51198
TTL: 112
Packet length: 52
TOS: 0x00
This repo ...
show moreBlocked by UFW on koti [1433/tcp]
Source port: 51198
TTL: 112
Packet length: 52
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Blocked by UFW (TCP on 1433)
Source port: 51000
TTL: 107
Packet length: 52
TOS: 0x10
This report (f ...
show moreBlocked by UFW (TCP on 1433)
Source port: 51000
TTL: 107
Packet length: 52
TOS: 0x10
This report (for 197.221.80.100) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Blocked by UFW (TCP on 1433)
Source port: 60692
TTL: 107
Packet length: 52
TOS: 0x10
This report (f ...
show moreBlocked by UFW (TCP on 1433)
Source port: 60692
TTL: 107
Packet length: 52
TOS: 0x10
This report (for 197.221.80.100) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Blocked by UFW (TCP on 1433)
Source port: 54754
TTL: 107
Packet length: 52
TOS: 0x10
This report (f ...
show moreBlocked by UFW (TCP on 1433)
Source port: 54754
TTL: 107
Packet length: 52
TOS: 0x10
This report (for 197.221.80.100) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Blocked by UFW (TCP on 1433)
Source port: 50478
TTL: 111
Packet length: 52
TOS: 0x10
This report (f ...
show moreBlocked by UFW (TCP on 1433)
Source port: 50478
TTL: 111
Packet length: 52
TOS: 0x10
This report (for 197.221.80.100) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Blocked by UFW (TCP on 1433)
Source port: 60313
TTL: 112
Packet length: 52
TOS: 0x10
This report (f ...
show moreBlocked by UFW (TCP on 1433)
Source port: 60313
TTL: 112
Packet length: 52
TOS: 0x10
This report (for 197.221.80.100) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Showing 1 to
15
of 99 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ