IoC Investigation

198.167.206.152

IP IN DATABASE

IP Address · threat 0.50 · 2× seen · 0 datasets · IP Blocklists · last seen 22h ago

🔄 Pivot:📁 IP Blocklists

Threat Score

0.50

Sightings

2
0 sources

Detected Type

IP

Enrichments

0

Related IoCs

20
IP Profile Dossier → Full OSINT Pivot + Case Create Case Takedown Export STIX/MISP ← Browse All

Network & Geo

ASN-
Organization-
Netblock-
Country-
City / Region-
Reverse DNSc6a7ce98.vpn.njalla.net

Local netblock/geo from ip_ranges dataset. Full live enrichment (AbuseIPDB, Shodan, GreyNoise) on the IP dossier.

Seen in Datasets (0)

Not linked to any dataset.

OSINT Pivots

Full OSINT (30+ lookups) ↗ VirusTotal ↗ AbuseIPDB ↗ Shodan ↗ Censys ↗ GreyNoise ↗ BGP.HE ↗ ThreatFox Link Analysis ↗ OpenSanctions

Related Indicators (20)

Indicators sharing the same category.

IndicatorTypeCategoryThreat
154.201.82.0/24 CIDR IP Blocklists investigate →
85.239.144.0/24 CIDR IP Blocklists investigate →
198.167.206.152/31 CIDR IP Blocklists investigate →
186.240.149.160 IP IP Blocklists investigate →
223.167.168.150 IP IP Blocklists investigate →
223.146.54.154 IP IP Blocklists investigate →
223.108.55.38 IP IP Blocklists investigate →
223.80.234.74 IP IP Blocklists investigate →
223.74.4.224 IP IP Blocklists investigate →
223.73.37.62 IP IP Blocklists investigate →
223.72.11.177 IP IP Blocklists investigate →
223.11.85.115 IP IP Blocklists investigate →
222.176.201.146 IP IP Blocklists investigate →
222.176.200.251 IP IP Blocklists investigate →
222.137.80.21 IP IP Blocklists investigate →
221.11.5.54/31 CIDR IP Blocklists investigate →
220.202.112.214 IP IP Blocklists investigate →
220.202.112.12 IP IP Blocklists investigate →
220.197.85.178 IP IP Blocklists investigate →
220.197.85.130 IP IP Blocklists investigate →

Copy as STIX 2.1 

{
    "type": "indicator",
    "spec_version": "2.1",
    "id": "indicator--3b95753e-3ee6-4330-2f59-0000c4491676",
    "created": "2026-09-09T00:35:59Z",
    "modified": "2026-09-09T00:35:59Z",
    "name": "IP Address: 198.167.206.152",
    "pattern": "[ipv4-addr:value = '198.167.206.152']",
    "pattern_type": "stix",
    "valid_from": "2026-09-09T00:35:59Z",
    "labels": [
        "ip blocklists"
    ],
    "confidence": 50
}

Linked Cases (0)

Not linked to any case yet.

+ Add to Case Create Alert
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

⚡ AI Skills

All SkillsResolveEnrichCorrelateSummarize

🔍 Lookup & Enrich

EnrichmentsPivotLink Analysis

📚 Docs & Reports

DocumentationGenerate ReportAPIPlatforms Hub

💡 Recommendations

⚙ Automation

Operations Center

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php

📜 Playbook

Open Response Playbook

🔗 Related Tools

Mission CommandAdvanced SearchOperations Center