2.98.81.203 Fraud Risk

High Risk
← Lowest Risk
Highest Risk →
0
Fraud Score: 98
100
IP address 2.98.81.203 is a very high fraud risk. This IP address is owned by TalkTalk who are themselves a low risk ISP. Scamalytics see very high levels of traffic from this IP address across our global network, almost all of which is fraudulent. We apply a risk score of 98/100 to 2.98.81.203, meaning that of the traffic where we have visibility, 98% is suspected to be fraudulent. If you see traffic from this IP address there is a very high risk that it is criminals engaged in fraudulent activity.
Operator
Hostname host-2-98-81-203.as13285.net
ASN 13285 - OPALTELECOM-AS TalkTalk Communications Limited
ISP Name TalkTalk
Organization Name TalkTalk
Connection type dsl
Location
Country Name United Kingdom
Country Code GB
Region England
City Stoke-on-Trent
Postal Code ST6
Metro Code n/a
Area Code n/a
Latitude 53.0792
Longitude -2.1401
Port Scan
TCP
22/ssh
Open
OpenSSH 7.2 (protocol 2.0)
TCP
80/http
Closed
TCP
88/kerberos-sec
Closed
TCP
443/http-proxy
Open
Squid http proxy 3.5.25
TCP
3389/ms-wbt-server
Open
Microsoft Terminal Service
TCP
23/telnet
Filtered
TCP
53/domain
Open
Unbound 1.5.8
TCP
1723/pptp
Open
linux (Firmware: 1)
TCP
8080/http-proxy
Filtered
TCP
37/time
Closed
TCP
2000/cisco-sccp
Closed
TCP
49155/unknown
Closed
TCP
139/netbios-ssn
Open
Samba smbd 3.X - 4.X (workgroup: WORKGROUP)
TCP
445/netbios-ssn
Open
Samba smbd 3.X - 4.X (workgroup: WORKGROUP)
TCP
548/afp
Open
Netatalk 3.1.8 (name: Synology; protocol 3.4)
TCP
554/rtsp
Open
D-Link DCS-2130 or Pelco IDE10DN webcam rtspd
TCP
5000/http
Open
nginx
TCP
21/ftp
Open
Synology DiskStation NAS ftpd
TCP
111/rpcbind
Open
2-4 (RPC #100000)
TCP
873/rsync
Open
TCP
2049/nfs
Open
2-3 (RPC #100003)
TCP
3306/mysql
Open
MariaDB (unauthorized)
TCP
5357/wsdapi?
Open
TCP
8081/http
Open
CherryPy httpd 3.2.0rc1
TCP
135/msrpc
Open
Microsoft Windows RPC
TCP
515/printer?
Open
TCP
5666/tcpwrapped
Open
Proxies
Anonymizing VPN
No
Tor Exit Node
No
Server
No
Public Proxy
No
Web Proxy
No
Domain Names
host-2-98-81-203.as13285.net
host-2-98-81-203.as13285.net

IP address data sponsored by IP2Location

Execution time: 11ms