Context for 103.208.220.195
103.208.220.195 is part of Proton VPN. Proton VPN users can hide their activity online using 103.208.220.195. 103.208.220.195 has indicators of geo-fraud. 103.208.220.195 is hosted in JP, however it's users are located in IR. Users from 103.208.220.195 have connected to VPNs or Proxies. About 250 devices are using 103.208.220.195 at any given time.
Proton VPN
103.208.220.195 belongs to the Proton VPN anonymization network. Proton VPN users route traffic through 103.208.220.195 to obscure their traffic from ISPs and mask their identity from servers on the internet.
250 Devices
There are typically around 250 unique devices active on 103.208.220.195. This means that individual user activity may blend in with other devices. This is a moderately large gateway.
Proxies Traffic
103.208.220.195 has proxied traffic on behalf of call-back proxy networks. This could indicate malware, or other surreptitious software on devices on 103.208.220.195. These networks build up inventories of endpoints and lease out bandwidth/IPs for use by criminal and bot networks.
Tehran, IR
Usage of 103.208.220.195 has been concentrated in the Tehran area. This is significantly different than the hosting location for 103.208.220.195 (Tokyo, JP) For more detailed geo-fraud information you must use our API.
Device Behaviors
We have identified at least 1 behavior relevant to devices using 103.208.220.195. We evaluate connection patterns for 103.208.220.195 to establish tradecraft behaviors. Consult our API for more details on how this can help you prevent fraud.
DATACENTER
This IP is owned by PERFORMIVE and is hosted in Tokyo, JP. This IP belongs to DATACENTER infrastructure. Datacenter IPs like 103.208.220.195 typically route user traffic when they are acting as a VPN, Proxy, Cloud Gateway or are performing some automated activity.
Similar IPs Detected
We have identified at least 21 IPs that are similar to this one. Our fingerprints look for IPs that have similar characteristics to 103.208.220.195.
Want more answers?
Attackers have changed; fortunately, so has threat intelligence. Use our API to get more details on 103.208.220.195. Check out our subscription tiers.
individual
$35 / month
- - 1,500 API queries per month
- - IP based search only
- - Reduced geo accuracy
- - Licensed for internal use
- - No SLA, basic support
team
$350 / month
- - 15,000 API queries per month
- - Download access to the Anonymous US Feed (All US VPNs)
- - Improved IP and Geo accuracy
- - Licensed for internal use
- - SLA, basic support