# IP Intelligence Briefing: 201.193.167.9/32
## Executive Summary
IP address 201.193.167.9 is classified as Low Risk with a risk score of 0. The address operates from Costa Rica (CR), San José, and shows no active threat indicators or malicious behavior in current observations. The IP presents as a firewalled endpoint with no open services.
## Geolocation & Network Attribution
- Country: Costa Rica (CR)
- Region: Provincia de San José
- City: San José
- Coordinates: 9.93° N, 84.07° W
- ASN: 11830 (Control Plane)
- BGP Prefix: 201.193.167.0/24
- RIR: LACNIC
- ISP/Organization: Santo Domingo / ICE (based on historical signals)
## Network Classification
- Service Purpose: Firewalled / No Services
- Infrastructure Type: Not classified as CDN, Cloud, VPN, Proxy, or Hosting
- Network Role: Non-provider infrastructure
- Mobile/Residential: No
- Tor Exit: No
## Threat Intelligence
- Abuse Confidence Score: Not applicable
- Blacklist Count: 0
- Known Campaigns: None
- Threat Feeds: Empty
- DNSBL Listed: 0/8 lists
- Known Attacker: No
- Spam Source: No
## Technical Observations
- Open Ports: None detected
- TLS Certificate: Not present
- HTTP Banner: Not detected
- PTR Hostnames: Empty
- Forward Resolution: Confirmed false
- Hosted Domains: 0
- Email Authentication: SPF/DMARC not configured
- RTT: First hop 0.1ms, last hop 120.4ms
- Traceroute: 13 hops, 5 timed-out, transit includes Comcast
## Behavioral Profile
- Honeypot Hits: 0
- Enumeration Strikes: 0
- WAF Violations: 0
- Total Incidents: 0
- Auto-Banned: No
- Persistently Malicious: No
- Threat Persistence Days: 0
- Threat Observation Count: 0
## Signal History (12 observations)
Recent observations from 2026-07-24 show:
- Ownership: Santo Domingo organization, LACNIC RIR
- Abuse Contact: gspam@ice.go.cr
- CIDR Block: 201.193.160.0/21
- Operator Score: 0.1304 (Minimal)
- DNSSEC: Valid
- Data Sufficiency: 0.6667
## Relationship & Neighborhood Analysis
- Related Entities: None detected
- Subnet Neighbors (201.193.167.0/24): 0 active siblings
- Abuse Density: 0
- Inherited Risk: 0
## Recommended Actions
Based on the low-risk profile, no immediate firewall rules or blocking actions are recommended. The IP demonstrates normal operational characteristics consistent with legitimate infrastructure.
---
Classification: LOW RISK
Last Updated: 2026-07-24
Analyst Notes: IP shows stable operational patterns with no threat indicators. Continue monitoring for any behavioral changes.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | SANTO DOMINGO |
| ASN | AS11830 |
| Network Name | 201.193.160.0 - 201.193.167.255 |
| CIDR Block | 201.193.160.0/21 |
| RIR | LACNIC |
| Country | CR |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS11830 |
| Network Prefix | 201.193.167.0/24 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 16% | 4 | 4 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-07 12:35:22 UTC |
| Last Seen | 2026-08-27 07:56:52 UTC |
| Profile Built | 2026-08-29 05:10:28 UTC |
| Data Freshness | Live |
| Signal Types | 15 |
| Total Observations | 17 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 201.193.167.9
Who owns the IP address 201.193.167.9?
201.193.167.9 is registered to SANTO DOMINGO. The address falls within the 201.193.160.0/21 network block. Registration is held at LACNIC.
Where is 201.193.167.9 located?
Geolocation data places 201.193.167.9 in San José, Provincia de San José, CR. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 201.193.167.9 malicious or safe?
201.193.167.9 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.