## IP Intelligence Briefing: 137.184.9.197/32
Classification: Low Risk / Legitimate Cloud Infrastructure
Date: 2026-07-29
Executive Summary
IP 137.184.9.197 is a low-risk cloud computing resource hosted on DigitalOcean infrastructure in Santa Clara, California. The IP exhibits standard web server behavior with no threat indicators, blacklist presence, or malicious activity detected.
Technical Profile
- Owner: DigitalOcean, LLC (ASN 14061)
- Network Block: DIGITALOCEAN-137-184-0-0 (137.184.0.0/16)
- Geolocation: United States, California, Santa Clara
- Infrastructure Type: Cloud Compute / Hosting
- Risk Score: 0 (Low Risk)
- Abuse Confidence: Not applicable
Network Services & Signatures
- Open Ports: TCP/80 (HTTP), TCP/443 (HTTPS)
- Web Server: Caddy
- TLS Certificate: None detected
- Email Authentication: Not configured (no SPF/DMARC records)
- DNS: No PTR hostnames, forward resolution unavailable
Threat Intelligence Assessment
- Blacklist Status: Clean (0 blacklist entries)
- Known Attacker: No
- Spam Source: No
- Tor Exit Node: No
- Active Campaigns: None identified
- Control Plane: BGP prefix stable, DNSSEC valid
- DNSBL Listed: 0/8 lists
Neighborhood Analysis
The /24 subnet (137.184.9.0/24) demonstrates clean characteristics:
- Abuse Density: 0 (clean)
- Subnet Classification: Clean
- Sibling IPs: 2 total, 1 active
- Threat Siblings: 0
- Adjacent IP: 137.184.9.209 (Risk: 25, Authority: 50)
Historical Observations
Fifteen observations recorded since deployment. Recent signals indicate:
- Standard port scanning activity on HTTP/HTTPS ports
- No persistent malicious behavior
- Ownership stable with DigitalOcean
- Classification consistently clean
Recommended Actions
No immediate security actions recommended based on current risk profile. The IP operates as expected for cloud hosting infrastructure.
SOC Guidance: Monitor as standard cloud infrastructure. No blocking or special handling required unless additional threat indicators emerge.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | DigitalOcean, LLC |
| ASN | AS14061 |
| Network Name | DIGITALOCEAN-137-184-0-0 |
| CIDR Block | 137.184.0.0/16 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No β PTR hostname does not resolve back to this IP (weak signal) |
π DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Hosting β Infrastructure provider without advanced routing |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | β |
| 443 | https | tcp | β |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | Caddy |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 30% | 2 | 3 |
| ownership | 27% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 13% | 1 | 1 |
| Overall | 22% | 9 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-07-23 20:04:56 UTC |
| Last Seen | 2026-08-12 17:53:29 UTC |
| Profile Built | 2026-08-12 18:08:01 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 21 |
Full dossier details are available via our API.