198.163.192.157📋 Copy

# IP INTELLIGENCE BRIEFING: 198.163.192.157/32

Classification: High Risk (Score: 70/100)

Date: Intelligence gathered via IPDebrief platform

Status: Active Monitoring Required

## EXECUTIVE SUMMARY

Target IP 198.163.192.157 presents a high-risk profile (70/100) with multiple reputation indicators. The IP is assigned to Uzbektelecom JSC (ASN 8193) within the 198.163.192.0/24 block, but geolocation data places it in Boston, MA, indicating potential infrastructure misconfiguration or routing anomalies. The subnet is classified as "clean" with 0% abuse density, yet the target IP maintains 4 DNSBL listings, suggesting localized reputation issues.

## TECHNICAL PROFILE

Ownership & Infrastructure:

• ASN: 8193 (Role of Uzbektelecom JSC)
• Organization: UZTELECOM
• Network Block: 198.163.192.0/24
• Infrastructure Type: Residential Endpoint
• Connection Type: Not Cloud, CDN, VPN, or Hosting infrastructure
• RIR: ARIN

Geolocation:

• Country: United States (US)
• Region: Massachusetts (US-MA)
• City: Boston
• Timezone: America/New_York
• Geo-Consensus: False (Multiple conflicting sources)

Network Classification:

• Provider Score: 0
• Authority Score: 0
• Stability Score: 0 (No stability data)
• DNSBL Listings: 4 of 8 total lists
• Operator Score: 0.1304 (Minimal)

## THREAT INDICATORS

Current Threat Status:

• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Known Campaigns: None detected
• Threat Persistence: 0 days observed
• Persistently Malicious: No

Service Footprint:

• Open Ports: None detected
• TLS Certificate: None
• HTTP Title: None
• Hosted Domains: 0
• PTR Hostnames: None
• Email Auth: SPF/DMARC not configured

Behavioral Indicators:

• Honeypot Hits: 0
• Enumeration Strikes: 0
• WAF Violations: 0

## SUBNET ANALYSIS (198.163.192.0/24)

Neighborhood Risk Profile:

• Total Siblings: 8
• Active Siblings: 2
• Threat Siblings: 0
• Abuse Density: 0
• Subnet Classification: Clean

High-Risk Neighbors (Risk Score ≥ 70):

• 198.163.192.157 (Target): 70
• 198.163.192.139: 70
• 198.163.192.151: 70

Medium-Risk Neighbors (Risk Score 50-69):

• 198.163.192.131: 55
• 198.163.192.135: 55
• 198.163.192.138: 55
• 198.163.192.155: 55
• 198.163.192.166: 55

## OBSERVATION HISTORY

Signal Count: 16 observations recorded

Most Recent: 2026-07-28T13:10:41 UTC

Historical Trends:

• Ownership changes: 0
• Threat observation count: 0
• Threat persistence days: 0

Recent observations confirm residential infrastructure classification with subnet abuse density at 0 and clean classification maintained across multiple measurement points.

## RELATIONSHIP GRAPH

Connected Entities:

• UZTELECOM (3 relationships - Same Network)
• No associated hostnames, certificates, or external organizations detected
• No correlation to other IP addresses beyond subnet neighbors

## TRACEROUTE ANALYSIS

Hop Count: 30

First Hop RTT: 0.1ms

Last Hop RTT: 188.4ms

Timed Out Hops: 10

Transit Networks: Comcast, Zayo

## RECOMMENDED ACTIONS

Firewall Rules:

• Block inbound traffic if not required for legitimate residential use
• Implement rate limiting given residential classification
• Monitor for outbound connection patterns

Threat Intelligence:

• The 4 DNSBL listings warrant investigation but do not indicate active malicious use
• Monitor for any changes in reputation status
• Cross-reference with known threat feeds for additional context

SOC Analyst Notes:

This IP presents a high-risk reputation score (70/100) primarily driven by DNSBL listings rather than active threat indicators. The geolocation discrepancy (UZzbektelecom organization vs. US geolocation) suggests routing anomalies or infrastructure misconfiguration. The residential classification and clean subnet designation suggest this may be a legitimate residential endpoint with reputation issues, but the high risk score warrants blocking or strict monitoring.

Priority: Medium - Monitor for activity changes and reputation degradation

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.