# 198.163.193.164 — IP Intelligence Summary 198.163.193.164 is an IPv4 address operated by Role of Uzbektelecom JSC (AS8193), geolocated to Amsterdam, Netherlands. It belongs to a residential connection. As of October 6, 2026, IPDebrief rates it High Risk (80/100); no anonymizing service was detected. - Canonical page: https://ipdebrief.com/198.163.193.164 - Last updated: 2026-10-06 ## Ownership - Organization: Role of Uzbektelecom JSC - Network name: UZTELECOM - Allocated block: 198.163.193.0/24 - ASN: AS8193 (https://ipdebrief.com/asn/8193) - Regional registry: ARIN ## Location - City: Amsterdam - Region: Samarqand Region - Country: Netherlands - Time zone: Europe/Amsterdam ## Network classification - Infrastructure type: Residential - Datacenter / hosting: no - Residential: yes - Mobile: no - Anycast: no - Tor exit node: no - VPN: no - Proxy: no ## Risk assessment - Assessment: High Risk (80/100) - Blocklist listings: 0 - Suspicious activity indicators: no - Spam source: no ## Analyst narrative \# IPDebrief Intelligence Briefing **Target:** 198.163.193.164/32 **Date:** July 28, 2026 **Classification:** High Risk Residential Endpoint \--- \## Executive Summary IP address 198.163.193.164 operates as a residential endpoint under UZTELECOM (ASN 8193) with an overall risk score of 70/100. While the immediate subnet shows low abuse density (0), the target IP is individually flagged as high-risk. The IP demonstrates no persistent malicious campaign indicators, no Tor exit node association, and no known attacker classifications. Four DNSBL listings detected, though blacklist count remains at zero. \--- \## Ownership and Network Context \- **Organization:** Role of Uzbektelecom JSC (UZTELECOM) \- **ASN:** 8193 \- **CIDR Block:** 198.163.193.0/24 \- **Geolocation:** Amsterdam, Netherlands (NL) \- **Infrastructure Type:** Residential \- **ISP Score:** 0.1304 (Minimal) \- **Route Stability:** Unstable (route changes recorded) \--- \## Threat Indicators | Indicator | Status | |-----------|--------| | Tor Exit Node | No | | Known Attacker | No | | Spam Source | No | | Cloud Infrastructure | No | | CDN | No | | VPN/Proxy | No | | Hosting Service | No | | Bogon Address | No | | Anycast | No | | DNSBL Listed | Yes (4/8 lists) | **Threat Feeds:** No active indicators in threat feeds **Campaign Correlation:** None identified **Known Campaigns:** None \--- \## Network Neighborhood Analysis The /24 subnet (198.163.193.0/24) contains 13 total sibling addresses with 4 currently active. **Risk Distribution:** \- High Risk: 0 \- Medium Risk: 8 \- Low Risk: 4 \- Abuse Density: 0 (classified as clean) **Notable High-Risk Siblings:** \- 198.163.193.152 (Risk: 70) \- 198.163.193.160 (Risk: 70) \- 198.163.193.172 (Risk: 70) \- 198.163.193.12 (Risk: 55) \- 198.163.193.146 (Risk: 55) \- 198.163.193.254 (Risk: 55) \--- \## Observation History **Total Observations:** 16 **Most Recent Signal:** 2026-07-28 13:10:41 UTC **Recent Signal Types:** \- Residential classification confirmed \- Subnet classification: Clean \- No banner matches or certificate subjects \- No campaign likelihood detected \- No ownership changes recorded **Temporal Analysis:** \- Threat Persistence Days: 0 \- Threat Observation Count: 0 \- Persistently Malicious: False \- Ownership Changes: 0 \--- \## Network Services and DNS **DNS Resolution:** \- Forward Resolution: None detected \- PTR Hostnames: None \- Hosted Domains: 0 \- SPF/DMARC: Not configured \- TXT Records: 0 **Service Scan:** \- Open Ports: None detected \- TLS Certificate: Not detected \- HTTP Title: Not detected \- Server Banner: Not detected \- Active Services: None observed \--- \## Control Plane Data \- **Origin ASN:** 8193 \- **BGP Prefix:** 198.163.193.0/24 \- **Route Changes (30d):** 0 \- **Is Route Stable:** False \- **RPKI State:** Not validated \- **IRR Consistency:** Not checked \- **DNSSEC Valid:** Yes \- **DNSBL Listed Count:** 4 \- **DNSBL Total Lists:** 8 \--- \## Recommended Security Actions Based on the high-risk classification and residential endpoint nature, the following actions are recommended: 1. **Monitor** this IP for suspicious outbound traffic patterns 2. **Block** or rate-limit inbound connections if not business-required 3. **Investigate** DNSBL listing sources to determine if this is legitimate or misconfiguration 4. **Correlate** with other high-risk siblings in the /24 subnet (198.163.193.152, 198.163.193.160, 198.163.193.172) \--- \## Intelligence Conclusion IP 198.163.193.164 presents an elevated risk profile (70/100) despite operating in a subnet classified as clean. The IP lacks direct malicious indicators but is DNSBL-listed and operates as a residential endpoint. The presence of three additional high-risk siblings (all with risk score 70) within the same /24 suggests potential coordinated activity or shared infrastructure. Recommend monitoring for lateral threat indicators and consider blocking inbound traffic unless business requirements dictate otherwise. **Threat Level:** Elevated **Action Required:** Monitor and investigate DNSBL listing cause **Campaign Association:** None ## Nearby addresses - 198.163.193.0 (https://ipdebrief.com/198.163.193.0) - 198.163.193.12 (https://ipdebrief.com/198.163.193.12) - 198.163.193.13 (https://ipdebrief.com/198.163.193.13) - 198.163.193.14 (https://ipdebrief.com/198.163.193.14) - 198.163.193.29 (https://ipdebrief.com/198.163.193.29) - 198.163.193.30 (https://ipdebrief.com/198.163.193.30) - 198.163.193.39 (https://ipdebrief.com/198.163.193.39) - 198.163.193.51 (https://ipdebrief.com/198.163.193.51) - 198.163.193.61 (https://ipdebrief.com/198.163.193.61) - 198.163.193.62 (https://ipdebrief.com/198.163.193.62) - 198.163.193.63 (https://ipdebrief.com/198.163.193.63) - 198.163.193.72 (https://ipdebrief.com/198.163.193.72) --- Source: IPDebrief, "198.163.193.164 IP intelligence", https://ipdebrief.com/198.163.193.164, updated 2026-10-06. Assessments are probabilistic.