IPDebrief

198.167.206.247

IP Intelligence Dossier
Your IP: 216.73.217.131
{ } JSON 🔧 Full Actions API
🤖 Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

# IP Intelligence Briefing: 198.167.206.247

## Executive Summary

IP address 198.167.206.247 presents a low-risk profile with no active threat indicators. The address is assigned to 1337 Services LLC (ASN 39287) and resolves to njalla.net infrastructure, which is commonly associated with privacy/anonymization services. No malicious activity has been observed, and the subnet demonstrates minimal abuse density.

## Ownership and Registration

AttributeValue
Organization1337 Services LLC
Network Name1337-NET-KN
ASN39287
CIDR Block198.167.192.0/19
RIRARIN
Abuse Contactnoc@cyberdyne.is
Registration DateNot available

## Geolocation

AttributeValue
CountryUS
RegionUS-NJ
CityNewark
TimezoneAmerica/New_York
GeoValidationInconsistent signals detected

Note: Historical observations show conflicting geolocation data with some probes indicating Saint Kitts and Nevis. Multiple geo sources report US jurisdiction, creating consensus inconsistency.

## Network Classification

AttributeValue
Network RoleProvider - Tor Exit Nodes
Infrastructure TypeUnknown
Connection TypeFirewalled / No Services
Is CloudNo
Is CDNNo
Is VPNNo
Is ProxyNo
Is MobileNo
Is ResidentialNo

## DNS Analysis

AttributeValue
PTR Hostnamesc6a7cef7.vpn.njalla.net
Forward ResolutionConfirmed
Forward Hostnamesc6a7cef7.vpn.njalla.net
Hosted Domains0
SPF RecordNot configured
DMARC RecordNot configured

The reverse DNS record maps to njalla.net infrastructure, commonly used for privacy-focused network services.

## Threat Indicators

## Security Actions

No specific firewall rules or blocking recommendations are currently warranted. The IP demonstrates no active malicious behavior and poses minimal risk to network infrastructure.

## Neighborhood Analysis (198.167.206.0/24)

MetricValue
Total Siblings31
Active Siblings9
Threat Siblings2
Abuse Density6.45%
ClassificationMostly Clean
Risk Distribution0 High, 2 Medium, 28 Low

The subnet exhibits low-to-moderate abuse density with minimal malicious activity. The target IP is one of 31 sibling addresses, with the majority showing low risk scores.

## Observation History

Seventeen signal observations recorded between 2026-07-23. Historical analysis reveals:

## Relationship Graph

Relationship TypeTarget
DNS Associationc6a7cef7.vpn.njalla.net
Same Network1337-NET-KN
Same Network1337-NET-KN
DNS Associationc6a7cef7.vpn.njalla.net

## Control Plane Analysis

AttributeValue
Origin ASN39287
BGP Prefix198.167.192.0/19
Route StabilityInconsistent
DNSSEC ValidYes
IRR ConsistencyNot evaluated

## Recommendations

1. Monitor - Continue monitoring for any changes in network behavior or geolocation inconsistencies

2. No Blocking Required - Current risk profile does not warrant firewall blocking

3. Contextual Assessment - If traffic originates from this IP, evaluate based on destination and application context rather than IP reputation alone

4. Historical Baseline - The IP has maintained a consistent low-risk profile with no degradation observed

## Conclusion

IP 198.167.206.247 represents a standard privacy infrastructure endpoint with minimal threat characteristics. No immediate security actions are required. SOC analysts should treat this address with standard monitoring protocols rather than elevated threat handling.

---

*Report generated: 2026-07-23*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

Country🇺🇸 United States
RegionUS-NJ
CityNewark
TimezoneAmerica/New_York
Latitude40.74
Longitude-74.17

🏢 Ownership & Registration

Organization1337 Services LLC
ASNAS39287
Network Name1337-NET-KN
CIDR Block198.167.192.0/19
RIRARIN
Country—
Abuse ContactAvailable via RDAP

🌐 DNS Intelligence

PTRc6a7cef7.vpn.njalla.net
Forward ConfirmedYes — FCrDNS verified
Forward Hostnamesc6a7cef7.vpn.njalla.net

🔐 DNS Hygiene

Hygiene Score40% (Fair)
SPFNot configured
DMARCNot configured
FCrDNSVerified
DNSSECValid
CAANot configured

☁️ Network Classification

InfrastructureUnknown
Service PurposeFirewalled / No Services
Network TierUnknown — Insufficient routing data to classify
No specific classification

🔌 Services & Open Ports

PortServiceProtocolBanner
No open ports detected
Closed Ports22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned)
Server—
HTTP Title—

🔐 TLS Certificate

🔒
No certificate
Issued by —
N/A
SANsNone
Valid From—
Valid Until—

🛡️ Public Network Snapshot

Origin ASNAS39287
Network Prefix198.167.192.0/19
Route mappingFound

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
0%
00
routing
0%
00
services
25%
11
ownership
0%
00
reputation
0%
00
geolocation
25%
11
Overall8%22
Coverage: 2/6 dimensions · Data sufficiency: partial
Data CoherenceMostly Consistent (80%) — 1 contradiction(s)
AttributionModerate (55%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid
⚠ Geo sources disagree on country: SE, US

📅 Observation Timeline 🔄 Live

First Seen2026-07-05 19:24:32 UTC
Last Seen2026-08-27 07:11:55 UTC
Profile Built2026-08-29 05:22:18 UTC
Data FreshnessLive
Signal Types20
Total Observations22
🔍 20 signal types · 22 observations collected
This report is generated from 20+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API 🔧 Actions API 📧 Enterprise Access

❓ Frequently Asked Questions About 198.167.206.247

Who owns the IP address 198.167.206.247?

198.167.206.247 is registered to 1337 Services LLC. The address falls within the 198.167.192.0/19 network block. Registration is held at ARIN.

Where is 198.167.206.247 located?

Geolocation data places 198.167.206.247 in Newark, US-NJ, United States. The local time zone is America/New_York. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.

Is 198.167.206.247 malicious or safe?

198.167.206.247 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.

What is the hostname for 198.167.206.247?

The reverse DNS (PTR) record for 198.167.206.247 is c6a7cef7.vpn.njalla.net. This hostname is forward-confirmed, meaning it resolves back to the same address.

🏘️ Related IP Addresses

Nearby addresses in 198.167.192.0/19

Browse related networks

ℹ️ About This Report

All data shown is publicly available network metadata — IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.