184.108.40.206 - Express VPN
220.127.116.11 belongs to the Express VPN anonymization network. Express VPN users route traffic through 18.104.22.168 to obscure their traffic from ISPs and mask their identity from servers on the internet.
Few Devices Online
This IP address (22.214.171.124) is not being used by many devices. The low device count for 126.96.36.199 indicates that it may be privately allocated to specific customers. Datacenter IPs like 188.8.131.52 can be used in fake user or bot activity which is not accounted for in this metric. IP Addresses that have fewer unique users are generally less effective at anonymizing activity online.
184.108.40.206 has proxied traffic on behalf of call-back proxy networks. This could indicate malware, or other surreptitious software on devices on 220.127.116.11. These networks build up inventories of endpoints and lease out bandwidth/IPs for use by criminal and bot networks. The following proxy services are providing access to this network:
Rogers City, US
Usage of 18.104.22.168 has been concentrated in the Rogers City area. This is significantly different than the hosting location for 22.214.171.124 (Paris, FR) For more detailed geo-fraud information you must use our API.
We have identified at least 2 behavior s relevant to devices using 126.96.36.199. We evaluate connection patterns for 188.8.131.52 to establish tradecraft behaviors. Consult our API for more details on how this can help you prevent fraud.
This IP is owned by M247 Ltd and is hosted in Paris, FR. This IP belongs to DATACENTER infrastructure. Datacenter IPs like 184.108.40.206 typically route user traffic when they are acting as a VPN, Proxy, Cloud Gateway or are performing some automated activity.
Similar IPs Detected
We have identified at least 21 IPs that are similar to this one. Our fingerprints look for IPs that have similar characteristics to 220.127.116.11.
Want more answers?
Attackers have changed; fortunately, so has threat intelligence. Our context API provides IP insights for you to make business risk decisions on 18.104.22.168.
50k Query Pack
250k Query Pack
1M Query Pack