5.61.42.109 Fraud Risk

High Risk
← Lowest Risk
Highest Risk →
0
Fraud Score: 99
100
IP address 5.61.42.109 is a very high fraud risk. This IP address is owned by LeaseWeb DE who are themselves a high risk ISP. Scamalytics see very high levels of traffic from this IP address across our global network, almost all of which is fraudulent. We apply a risk score of 99/100 to 5.61.42.109, meaning that of the traffic where we have visibility, 99% is suspected to be fraudulent. If you see traffic from this IP address there is a very high risk that it is criminals engaged in fraudulent activity. 5.61.42.109 is not a standard domestic connection, it is a commercial server which is likely to be proxying traffic from another geographical location. The geographical location of 5.61.42.109 is in Germany, however the geographical location of the user could be anywhere in the world.
Operator
Hostname n/a
ASN 28753 - LEASEWEB-DE-FRA-10
ISP Name LeaseWeb DE
Organization Name 3NT Solutions LLP
Connection type n/a
Location
Country Name Germany
Country Code DE
Region Hesse
City Frankfurt am Main
Postal Code 60313
Metro Code n/a
Area Code n/a
Latitude 50.1109
Longitude 8.6821
Port Scan
TCP
26/rsftp
Filtered
TCP
135/msrpc
Open
Microsoft Windows RPC
TCP
139/netbios-ssn
Open
Microsoft Windows netbios-ssn
TCP
445/microsoft-ds
Open
Microsoft Windows Server 2008 R2 - 2012 microsoft-ds
TCP
631/ipp
Filtered
TCP
1028/unknown
Filtered
TCP
1029/ms-lsa
Filtered
TCP
3389/ms-wbt-server
Open
Microsoft Terminal Service
TCP
5060/sip
Filtered
TCP
8008/http
Filtered
TCP
8009/ajp13
Filtered
TCP
9100/jetdirect
Filtered
TCP
49152/msrpc
Open
Microsoft Windows RPC
TCP
49153/msrpc
Open
Microsoft Windows RPC
TCP
49154/msrpc
Open
Microsoft Windows RPC
TCP
49155/msrpc
Open
Microsoft Windows RPC
TCP
49156/msrpc
Open
Microsoft Windows RPC
TCP
49157/msrpc
Open
Microsoft Windows RPC
TCP
25/smtp
Filtered
TCP
22/ssh
Filtered
TCP
5666/tcpwrapped
Open
TCP
111/rpcbind
Open
2-4 (RPC #100000)
Proxies
Anonymizing VPN
No
Tor Exit Node
No
Server
Yes
Public Proxy
No
Web Proxy
No
Search Engine Robot
No
Domain Names
n/a

IP address data sponsored by IP2Location

Execution time: 11ms