37.201.240.176 to present a potentially low fraud risk. This IP address is operated by Vodafone NRW GmbH whose web traffic we consider to present a potentially medium fraud risk, and is owned by Vodafone whose web traffic we also consider to present a potentially medium fraud risk. In each of these cases, non-web traffic may present a different risk or no risk at all. Scamalytics see high levels of web traffic from this IP address across our global network, little of which we suspect to be potentially fraudulent. Considering only the web traffic where we have visibility, we apply a risk score of 0/100 to 37.201.240.176, which reflects the proportion of this traffic which we suspect to be potentially fraudulent.
{
"ip":"37.201.240.176",
"score":"0",
"risk":"low"
}
| Operator | |
|---|---|
| Hostname | aftr-37-201-240-176.unity-media.net |
| ASN | 3209 - VODANET International IP-Backbone of Vodafone |
| ISP Name | Vodafone |
| Organization Name | Vodafone NRW GmbH |
| Connection type | n/a |
| Location | |
| Country Name | Germany |
| Country Code | DE |
| Region | Hesse |
| City | Frankfurt am Main |
| Postal Code | 60313 |
| Metro Code | n/a |
| Area Code | n/a |
| Latitude | 50.1109 |
| Longitude | 8.6821 |
| Port Scan | |
TCP 21/ftp |
Filtered |
TCP 22/ssh |
Filtered |
TCP 23/telnet |
Filtered |
TCP 53/domain |
Filtered |
TCP 80/http |
Filtered |
TCP 135/msrpc |
Filtered |
TCP 139/netbios-ssn |
Filtered |
TCP 443/https |
Filtered |
TCP 445/microsoft-ds |
Filtered |
TCP 1720/h323q931 |
Filtered |
TCP 1723/pptp |
Open MikroTik (Firmware: 1) |
TCP 2000/bandwidth-test |
Open MikroTik bandwidth-test server |
TCP 6000/ssl |
Open Microsoft SChannel TLS |
TCP 6001/X11:1 |
Filtered |
TCP 5000/upnp |
Filtered |
TCP 179/bgp |
Filtered |
TCP 1900/upnp |
Filtered |
TCP 5060/sip |
Filtered |
TCP 25/smtp |
Open Postfix smtpd |
TCP 106/pop3pw |
Open poppassd |
TCP 110/pop3 |
Open Dovecot pop3d |
TCP 143/imap |
Open Dovecot imapd |
TCP 465/ssl/smtp |
Open Postfix smtpd |
TCP 587/smtp |
Open Postfix smtpd |
TCP 993/ssl/imap |
Open Dovecot imapd |
TCP 995/ssl/pop3 |
Open Dovecot pop3d |
TCP 8443/ssl/https-alt |
Open sw-cp-server |
TCP 646/ldp |
Filtered |
TCP 5666/tcpwrapped |
Open |
TCP 111/rpcbind |
Open 2-4 (RPC #100000) |
TCP 444/ssl/http |
Open nginx 1.18.0 |
TCP 3306/mysql? |
Open |
TCP 8080/http |
Open nginx |
TCP 8888/http |
Open lighttpd 1.4.28 |
TCP 554/rtsp |
Open |
TCP 2001/dc |
Filtered |
TCP 3128/squid-http |
Filtered |
TCP 8081/blackice-icecap |
Filtered |
TCP 49152/unknown |
Open |
TCP 113/ident |
Closed |
TCP 8000/http-alt |
Filtered |
| Proxies | |
| Anonymizing VPN | No |
| Tor Exit Node | No |
| Server | No |
| Public Proxy | No |
| Web Proxy | No |
| Search Engine Robot | No |
| Domain Names | |
| aftr-37-201-240-176.unity-media.net | |
IP Address data partner DB-IP.com:
Proxy data sponsored by IP2Proxy:
IMPORTANT: Scamalytics Ltd operate a fraud-detection network with visibility into many millions of internet users per month. We do not have visibility into the entire internet. The statements on this page represent our opinion based on the limited information we have available to us, and specifically only cover web connections made by internet users to websites and applications, not other connections such as server to server connections.