198.167.206.248

Classification: Suspicious

198.167.206.248 is a suspicious IP address. Reported by 3 threat sources, last seen 2026-08-22. Network: AS39287 1337 Services LLC.

Current activity

  • TOR node — Part of the TOR anonymization network.
  • VPN node — Provides anonymization that can hide an attacker.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic Emerging Threats 2021-11-23 00:38:14 2026-08-22 11:02:58 anomalous-activity anonymization tor
VPN IPWhois.io 2026-07-23 13:59:32 2026-07-23 13:59:32 anonymization vpn
ET TOR Known Tor Exit Node TCP Traffic Emerging Threats 2021-11-23 00:36:17 2026-01-29 05:04:33 anonymization
TOR Exit Node TorProject.org 2021-09-17 04:49:15 2026-01-28 16:05:03 anonymization anonymizer
Proxy IPWhois.io 2026-01-26 20:00:47 2026-01-26 20:00:47 anonymization

Tags

tor anonymization anonymizer

Whois information

AS name
AS39287 1337 Services LLC
AS registry
arin
AS date
2013-02-11 00:00:00
AS CIDR
198.167.192.0/19
CIDR
198.167.192.0/19
Registrant
1337 Services LLC
Address
P.O. Box 590, Springates East, Government Road
City
Copenhagen
State
Nevis
Postal code
1550
Country
DK — Denmark 🇩🇰
Contact email
[email protected]
First indexed
2021-09-17 04:49:15
Last updated
2026-08-22 11:02:58