185.101.70.218 Fraud Risk

High Risk
← Lowest Risk
Highest Risk →
0
Fraud Score: 99
100
IP address 185.101.70.218 is a very high fraud risk. This IP address is owned by Hosting Telecom Ltd who are themselves a very high risk ISP. Scamalytics see low levels of traffic from this IP address across our global network, almost all of which is fraudulent. We apply a risk score of 99/100 to 185.101.70.218, meaning that of the traffic where we have visibility, 99% is suspected to be fraudulent. If you see traffic from this IP address there is a very high risk that it is criminals engaged in fraudulent activity. 185.101.70.218 is operating a public proxy, which is likely to be proxying traffic from another geographical location. The geographical location of 185.101.70.218 is in the United States, however the geographical location of the user could be anywhere in the world.
Operator
Hostname n/a
ASN 8100 - ASN-QUADRANET-GLOBAL - QuadraNet, Inc
ISP Name Hosting Telecom Ltd
Organization Name QuadraNet
Connection type n/a
Location
Country Name United States
Country Code US
Region California
City Los Angeles
Postal Code 90009
Metro Code 803
Area Code n/a
Latitude 34.0544
Longitude -118.2440
Port Scan
TCP
22/ssh?
Open
TCP
53/domain
Filtered
TCP
80/http
Filtered
TCP
443/openvpn
Open
OpenVPN
TCP
465/smtps
Filtered
TCP
587/submission
Filtered
TCP
993/imaps
Filtered
TCP
995/pop3s
Filtered
TCP
445/microsoft-ds
Filtered
TCP
21/ftp?
Open
TCP
143/imap?
Open
TCP
3306/mysql?
Open
TCP
8080/http-proxy?
Open
TCP
8443/ssl/https-alt?
Open
TCP
25/smtp
Filtered
TCP
3389/ms-wbt-server
Filtered
TCP
49152/unknown
Filtered
TCP
111/rpcbind
Open
2-4 (RPC #100000)
TCP
23/tcpwrapped
Open
TCP
5000/http
Open
nginx
TCP
9999/abyss
Closed
TCP
139/netbios-ssn
Filtered
TCP
631/ipp
Filtered
TCP
5666/tcpwrapped
Open
TCP
88/kerberos-sec
Closed
TCP
110/pop3
Open
Dovecot pop3d
TCP
135/msrpc
Filtered
TCP
1028/unknown
Filtered
TCP
3128/squid-http
Filtered
TCP
106/pop3pw
Open
poppassd
TCP
5432/postgresql
Closed
TCP
49153/unknown
Closed
TCP
49154/unknown
Closed
TCP
49155/unknown
Closed
TCP
49156/unknown
Closed
TCP
49157/unknown
Closed
TCP
990/ftps?
Open
TCP
1723/pptp
Open
linux (Firmware: 1)
TCP
1110/nfsd-status?
Open
TCP
1900/upnp
Filtered
TCP
2000/bandwidth-test
Open
MikroTik bandwidth-test server
TCP
5060/sip
Filtered
TCP
2001/dc?
Open
TCP
81/hosts2-ns
Closed
TCP
554/rtsp
Open
Hikvision DVR rtspd
TCP
113/ident
Closed
TCP
199/smux
Closed
TCP
2049/nfs
Closed
TCP
5900/vnc
Closed
TCP
6000/X11
Closed
TCP
8888/sun-answerbook
Closed
TCP
7/echo
Filtered
TCP
9/discard
Filtered
TCP
10000/snet-sensor-mgmt
Filtered
TCP
37/time
Filtered
TCP
8008/http
Open
TCP
543/klogin
Filtered
TCP
548/afp
Filtered
TCP
873/rsync
Filtered
TCP
1027/IIS
Filtered
TCP
515/printer
Closed
TCP
5101/admdog
Closed
TCP
8009/http
Open
Amazon Whisperplay DIAL REST service
TCP
8081/blackice-icecap
Filtered
TCP
1025/http
Open
Arcnet 3001A powerline network adaptor
TCP
5190/tcpwrapped
Open
TCP
2121/ftp-proxy
Open
CCProxy ftp proxy
TCP
389/ldap
Filtered
TCP
8000/ipcam
Open
Hikvision IPCam control port
TCP
13/daytime
Filtered
TCP
26/rsftp
Filtered
TCP
514/shell
Filtered
TCP
544/kshell
Filtered
TCP
646/ldp
Filtered
TCP
2717/pn-requester
Filtered
TCP
5051/ida-agent
Filtered
TCP
6001/X11:1
Filtered
TCP
7070/realserver
Filtered
TCP
32768/filenet-tms
Filtered
TCP
5631/pcanywheredata?
Open
TCP
5800/vnc-http?
Open
TCP
6646/unknown
Open
TCP
9100/jetdirect?
Open
TCP
1720/h323q931
Closed
TCP
4899/radmin
Closed
TCP
179/tcpwrapped
Open
TCP
444/ssl/ssh
Open
Dropbear sshd 2016.72 (protocol 2.0)
TCP
119/nntp
Closed
TCP
1026/LSA-or-nterm
Filtered
TCP
1029/ms-lsa
Filtered
Proxies
Anonymizing VPN
No
Tor Exit Node
No
Server
No
Public Proxy
Yes
Web Proxy
No
Domain Names
n/a

IP address data sponsored by IP2Location

Execution time: 145ms