66.249.84.185 to present a potentially very high fraud risk. This IP address is owned by Google LLC whose web traffic we consider to present a potentially low risk. In both cases, non-web traffic may present a different risk or no risk at all. According to our most recent port scan, the IP address points to a server running the SSH server OpenSSH 8.2p1 Ubuntu 4ubuntu0.3 (Ubuntu Linux; protocol 2.0) on port 22. Scamalytics see very high levels of web traffic from this IP address across our global network, almost all of which we suspect to be potentially fraudulent. Considering only the web traffic where we have visibility, we apply a risk score of 100/100 to 66.249.84.185, which reflects the proportion of this traffic which we suspect to be potentially fraudulent. If you see web traffic from this IP address there is potentially a very high risk that it is criminals engaged in fraudulent activity. Other types of traffic may present a different risk or no risk. The device on 66.249.84.185 is operating a web proxy, which could be proxying traffic from another geographical location. The geographical location of 66.249.84.185 is in the United States, however the geographical location of the user could be anywhere in the world.
{
"ip":"66.249.84.185",
"score":"100",
"risk":"very high"
}
| Operator | |
|---|---|
| Hostname | google-proxy-66-249-84-185.google.com |
| ASN | 15169 - GOOGLE - Google LLC |
| ISP Name | Google LLC |
| Organization Name | Google LLC |
| Connection type | n/a |
| Location | |
| Country Name | United States |
| Country Code | US |
| Region | California |
| City | Mountain View |
| Postal Code | 94043 |
| Metro Code | n/a |
| Area Code | n/a |
| Latitude | 37.4220 |
| Longitude | -122.0840 |
| Port Scan | |
TCP 81/hosts2-ns |
Closed |
TCP 8000/ipcam |
Open Hikvision IPCam control port |
TCP 22/ssh |
Open OpenSSH 8.2p1 Ubuntu 4ubuntu0.3 (Ubuntu Linux; protocol 2.0) |
TCP 23/telnet |
Filtered |
TCP 25/smtp |
Filtered |
TCP 80/http |
Open Apache httpd 2.4.29 |
TCP 443/openvpn |
Open OpenVPN |
TCP 465/smtps |
Filtered |
TCP 587/submission |
Filtered |
TCP 53/tcpwrapped |
Open |
TCP 9100/jetdirect |
Filtered |
TCP 8443/https-alt |
Closed |
TCP 113/ident |
Filtered |
TCP 135/msrpc |
Filtered |
TCP 139/netbios-ssn |
Filtered |
TCP 444/snpp? |
Open |
TCP 646/ldp |
Filtered |
TCP 2000/bandwidth-test |
Open MikroTik bandwidth-test server |
TCP 32768/filenet-tms |
Closed |
TCP 49152/unknown |
Closed |
TCP 49153/unknown |
Closed |
TCP 49154/unknown |
Closed |
TCP 49155/unknown |
Closed |
TCP 49156/unknown |
Closed |
TCP 49157/unknown |
Closed |
| Proxies | |
| Anonymizing VPN | No |
| Tor Exit Node | No |
| Server | No |
| Public Proxy | No |
| Web Proxy | Yes |
| Search Engine Robot | No |
| Domain Names | |
| google-proxy-66-249-84-185.google.com | |
IP Address data partner DB-IP.com:
Proxy data sponsored by IP2Proxy:
IMPORTANT: Scamalytics Ltd operate a fraud-detection network with visibility into many millions of internet users per month. We do not have visibility into the entire internet. The statements on this page represent our opinion based on the limited information we have available to us, and specifically only cover web connections made by internet users to websites and applications, not other connections such as server to server connections.