198.167.206.199

Classification: Suspicious

198.167.206.199 is a suspicious IP address. Reported by 3 threat sources, last seen 2026-09-03. Network: AS39287 1337 Services LLC.

Current activity

  • TOR node — Part of the TOR anonymization network.
  • VPN node — Provides anonymization that can hide an attacker.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic Emerging Threats 2025-09-24 23:29:05 2026-09-03 11:02:11 anomalous-activity anonymization tor
ET TOR Known Tor Exit Node TCP Traffic Emerging Threats 2025-11-20 09:36:59 2026-09-03 11:01:25 anomalous-activity anonymization tor
TOR Exit Node TorProject.org 2025-03-16 10:50:18 2026-08-31 10:03:03 anomalous-activity anonymization tor
VPN IPWhois.io 2026-08-31 09:00:22 2026-08-31 09:00:22 anonymization vpn
Proxy IPWhois.io 2025-03-16 16:07:55 2025-11-19 05:00:22 anonymization

Tags

tor anonymization

Whois information

AS name
AS39287 1337 Services LLC
Registrant
1337 Services LLC
City
Copenhagen
Postal code
1550
Country
DK — Denmark 🇩🇰
First indexed
2025-03-16 10:50:18
Last updated
2026-09-03 11:02:11