200.188.226.9📋 Copy

## IP Intelligence Briefing: 200.188.226.9/32

Classification: Low Risk Residential Endpoint

Date: 2026-07-27

Risk Score: 25/100

Executive Summary

IP 200.188.226.9 is a residential endpoint located in Florianópolis, Santa Catarina, Brazil (ASN 11844 - Empresa Catarinense de Tecnologia em Telecom. Ltda). The IP presents a low-risk profile with no active threat indicators, no known campaign associations, and minimal neighborhood abuse density. The address appears to be a legitimate residential endpoint with standard DNS resolution patterns.

Ownership and Infrastructure

The IP resolves to the hostname `host-9.226.188.200.fns.freefone.com.br` and exhibits residential infrastructure characteristics with no cloud, CDN, VPN, or proxy indicators.

Threat Indicators

• Abuse Confidence Score: Null
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Blacklist Count: 0
• Known Campaigns: None
• Threat Feeds: Empty

Network Behavior and Services

• Open Ports: None detected
• TLS Certificate: None
• HTTP Title/Server Banner: None
• DNS Records: Single PTR record with forward resolution confirmed
• Email Auth: No SPF or DMARC records present

Geographic Information

• Country: Brazil (BR)
• Region: Santa Catarina
• City: Florianópolis
• Coordinates: -14.24, -51.93 (2,500km accuracy radius)
• Geo Source Count: 1

Neighborhood Analysis (200.188.226.0/24)

The /24 subnet demonstrates minimal abuse activity with no threat-adjacent neighbors.

Control Plane and Routing

• Origin ASN: 11844
• BGP Prefix: 200.188.224.0/22
• Route Changes (30d): 0
• Route Stability: Unstable
• DNSSEC: Valid
• DNSBL Listed: 1 of 8 lists (high severity)

Temporal Observations

Historical Signals (16 observations):

• Abuse density consistently reported as 0
• Classification consistently "clean"
• Threat persistence: 0 days
• No persistent malicious activity detected
• Ownership changes: 0
• Threat observation count: 0

Recent signals confirm residential infrastructure classification with geolocation consistent with Brazilian origin.

Relationship Graph

• Network Associations: 11701 (Same Network)
• DNS Associations: host-9.226.188.200.fns.freefone.com.br

Recommended Actions

Based on the low-risk profile (25/100), no immediate firewall blocking is recommended. However, the following considerations apply:

1. Monitor DNSBL Status: IP listed on 1 of 8 blacklist categories with high severity designation. Monitor for persistence or escalation.

2. Geolocation Validation: GeoPlausible flag is false; verify legitimacy if traffic patterns are unexpected.

3. Route Stability: BGP prefix shows route instability; monitor for potential route hijacking attempts.

SOC Analyst Guidance: Treat traffic from this IP as legitimate residential traffic. No specific firewall rules or blocking actions are warranted. Monitor for any behavioral changes that might indicate compromise or abuse.

---

*Report generated via IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.