198.167.206.199
Analysis of IP address 198.167.206.199 classified the host as a Tor exit node responsible for anonymized traffic. The address maintained a moderate risk reputation with a risk score of 66. Ownership records linked the IP to 1337 Services LLC (ASN 39287) within the 198.167.192.0/19 CIDR block. DNS reverse resolution pointed to njalla.net, specifically hostname c6a7cec7.vpn.njalla.net. Geolocation data presented inconsistencies indicating the United States and Southeast Asia. The network role was firewalled with no active services observed.
The surrounding neighborhood exhibited a mixed classification with an abuse density of 0.2973 and 11 threat siblings. Recommendations dictated a high-severity block action based on elevated risk signals. Firewall rules were generated for iptables, nginx, and pf environments.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | 1337 Services LLC |
| ASN | AS39287 |
| Network Name | 1337-NET-KN |
| CIDR Block | 198.167.192.0/19 |
| RIR | ARIN |
| Country | — |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | c6a7cec7.vpn.njalla.net |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | c6a7cec7.vpn.njalla.net |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS39287 |
| Network Prefix | 198.167.192.0/19 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 6 |
| routing | 24% | 2 | 3 |
| services | 12% | 2 | 2 |
| ownership | 29% | 3 | 6 |
| reputation | 31% | 1 | 11 |
| geolocation | 20% | 2 | 3 |
| Overall | 25% | 12 | 31 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-10 20:33:39 UTC |
| Last Seen | 2026-09-10 11:50:36 UTC |
| Profile Built | 2026-09-10 11:57:10 UTC |
| Data Freshness | Live |
| Signal Types | 26 |
| Total Observations | 51 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 198.167.206.199
Who owns the IP address 198.167.206.199?
198.167.206.199 is registered to 1337 Services LLC. The address falls within the 198.167.192.0/19 network block. Registration is held at ARIN.
Where is 198.167.206.199 located?
Geolocation data places 198.167.206.199 in Newark, US-NJ, United States. The local time zone is America/New_York. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 198.167.206.199 malicious or safe?
198.167.206.199 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 198.167.206.199?
The reverse DNS (PTR) record for 198.167.206.199 is c6a7cec7.vpn.njalla.net. This hostname is forward-confirmed, meaning it resolves back to the same address.