Context for 103.208.220.198

103.208.220.198 is part of Proton VPN. Proton VPN users can hide their activity online using 103.208.220.198. 103.208.220.198 has indicators of geo-fraud. 103.208.220.198 is hosted in JP, however it's users are located in US. Users from 103.208.220.198 have connected to VPNs or Proxies. About 100 devices are using 103.208.220.198 at any given time.


Proton VPN

103.208.220.198 belongs to the Proton VPN anonymization network. Proton VPN users route traffic through 103.208.220.198 to obscure their traffic from ISPs and mask their identity from servers on the internet.

100 Devices

There are typically around 100 unique devices active on 103.208.220.198. This means that individual user activity may blend in with other devices. This is a moderately large gateway.

Proxies Traffic

103.208.220.198 has proxied traffic on behalf of call-back proxy networks. This could indicate malware, or other surreptitious software on devices on 103.208.220.198. These networks build up inventories of endpoints and lease out bandwidth/IPs for use by criminal and bot networks.

San Carlos, US

Usage of 103.208.220.198 has been concentrated in the San Carlos area. This is significantly different than the hosting location for 103.208.220.198 (Tokyo, JP) For more detailed geo-fraud information you must use our API.

This IP may be trying to spoof it's location

Device Behaviors

We have identified at least 1 behavior relevant to devices using 103.208.220.198. We evaluate connection patterns for 103.208.220.198 to establish tradecraft behaviors. Consult our API for more details on how this can help you prevent fraud.

DATACENTER

This IP is owned by PERFORMIVE and is hosted in Tokyo, JP. This IP belongs to DATACENTER infrastructure. Datacenter IPs like 103.208.220.198 typically route user traffic when they are acting as a VPN, Proxy, Cloud Gateway or are performing some automated activity.

Similar IPs Detected

We have identified at least 21 IPs that are similar to this one. Our fingerprints look for IPs that have similar characteristics to 103.208.220.198.

Want more answers?

Attackers have changed; fortunately, so has threat intelligence. Use our API to get more details on 103.208.220.198. Check out our subscription tiers.

individual


$35 / month
  • - 1,500 API queries per month
  • - IP based search only
  • - Reduced geo accuracy
  • - Licensed for internal use
  • - No SLA, basic support

team


$350 / month
  • - 15,000 API queries per month
  • - Download access to the Anonymous US Feed (All US VPNs)
  • - Improved IP and Geo accuracy
  • - Licensed for internal use
  • - SLA, basic support

enterprise


$3,500 / month
  • - 150,000 queries per month
  • - Download Access to the Anonymous IP Feed (Global)
  • - Highest accuracy IP and Geo based search
  • - Licensed for commercial use
  • - SLA with premium support

Need Something Else?

We work with clients to provide custom threat intelligence, product integrations, and raw data. Get in touch with our sales team to find out if we can help.