There are typically around 100 unique devices active on 18.104.22.168. This means that individual user activity may blend in with other devices. This is a moderately large gateway.
22.214.171.124 has proxied traffic on behalf of call-back proxy networks. This could indicate malware, or other surreptitious software on devices on 126.96.36.199. These networks build up inventories of endpoints and lease out bandwidth/IPs for use by criminal and bot networks.
Usage of 188.8.131.52 has been concentrated in the Addison area. This is significantly different than the hosting location for 184.108.40.206 (Osaka, JP) For more detailed geo-fraud information you must use our API.
We have identified at least 1 behavior relevant to devices using 220.127.116.11. We evaluate connection patterns for 18.104.22.168 to establish tradecraft behaviors. Consult our API for more details on how this can help you prevent fraud.
AS4785 - xTom
This IP is owned by xTom and is hosted in Osaka, JP. In today's dynamic cloud infrastructure environment, making security decisions about entire net-blocks (such as AS4785) often leads to mistakes. Use our context data to help inform your business decisions instead.
Similar IPs Detected
We have identified at least 21 IPs that are similar to this one. Our fingerprints look for IPs that have similar characteristics to 22.214.171.124.
Want more answers?
Attackers have changed; fortunately, so has threat intelligence. Our context API provides IP insights for you to make business risk decisions on 126.96.36.199.
50k Query Pack
250k Query Pack
1M Query Pack