# IP Intelligence Briefing: 200.131.5.205
Classification: Low Risk | Date: 2026-07-27 | Analyst: IPDebrief
---
## Executive Summary
IP 200.131.5.205 is a low-risk Brazilian infrastructure address associated with Rede Nacional de Ensino e Pesquisa (RNP). The IP shows minimal threat indicators with a risk score of 15. No active malicious campaigns or known attacker behavior observed. Neighborhood analysis reveals one adjacent address (200.131.5.202) with elevated risk scoring (40).
---
## Ownership and Network Classification
| Attribute | Value |
|---|---|
| **ASN** | 1916 |
| **Organization** | Rede Nacional de Ensino e Pesquisa |
| **CIDR Block** | 200.131.0.0/16 |
| **Country** | Brazil (BR) |
| **City** | Salinas, Minas Gerais |
| **RIR** | LACNIC |
| **Service Purpose** | Firewalled / No Services |
| **Network Type** | Residential / Infrastructure |
The IP belongs to a Brazilian academic/research network (RNP) with minimal abuse activity. No open ports, services, or TLS certificates detected on the endpoint.
---
## Threat Indicators
- Risk Score: 15 (Low)
- Abuse Confidence Score: Not detected
- Blacklist Count: 0
- DNSBL Listed: 1 of 8 lists
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
No active threat indicators or malicious behavior patterns identified. The IP shows stable ownership with no recent changes.
---
## Control Plane Analysis
- Route Stability: Stable (0 changes in 30 days)
- RPKI State: Not verified
- DNSSEC Valid: Yes
- Operator Score: 0.1304 (Minimal)
- MoAS: No
---
## Observation History
Twelve signal observations recorded since 2026-07-27. Consistent geolocation signals from Brazil (Minas Gerais, Salinas). No threat-related observations or persistence patterns detected.
---
## Neighborhood Analysis
Subnet: 200.131.5.205/24
Abuse Density: 0
Total Siblings: 1
| Neighbor IP | Risk Score | Authority Score |
|---|---|---|
| 200.131.5.202 | 40 | 50 |
One adjacent IP (200.131.5.202) shows elevated risk scoring. Recommend monitoring this neighbor for potential lateral threat activity.
---
## Relationships
Two network-level relationships identified:
- Same Network: 2576 (RNP)
---
## Recommended Actions
- Monitor: Adjacent IP 200.131.5.202 (risk score 40)
- Block: No immediate action required
- Investigate: No active threats identified
---
End of Briefing
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Rede Nacional de Ensino e Pesquisa |
| ASN | AS1916 |
| Network Name | 2576 |
| CIDR Block | 200.131.0.0/16 |
| RIR | LACNIC |
| Country | BR |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS1916 |
| Network Prefix | 200.131.0.0/16 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 30% | 2 | 5 |
| routing | 8% | 1 | 1 |
| services | 12% | 2 | 2 |
| ownership | 25% | 2 | 3 |
| reputation | 20% | 1 | 3 |
| geolocation | 17% | 2 | 3 |
| Overall | 19% | 10 | 17 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-13 21:32:20 UTC |
| Last Seen | 2026-09-05 20:20:29 UTC |
| Profile Built | 2026-09-05 20:20:40 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 24 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 200.131.5.205
Who owns the IP address 200.131.5.205?
200.131.5.205 is registered to Rede Nacional de Ensino e Pesquisa. The address falls within the 200.131.0.0/16 network block. Registration is held at LACNIC.
Where is 200.131.5.205 located?
Geolocation data places 200.131.5.205 in Salinas, Minas Gerais, Brazil. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 200.131.5.205 malicious or safe?
200.131.5.205 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.