138.197.137.141📋 Copy

## IP Intelligence Briefing: 138.197.137.141/32

Classification: Moderate Risk (Score: 40/100)

Date: August 2026

Ownership & Infrastructure

• ASN: 14061 (DigitalOcean, LLC)
• CIDR Block: 138.197.0.0/16
• Location: Toronto, Ontario, Canada
• Infrastructure Type: Cloud Compute Environment
• Control Plane Status: Route instability detected; not MoAS; DNSSEC valid

Network Signals

• Open Ports: TCP/80 (HTTP), TCP/22 (SSH)
• HTTP Server: nginx/1.31.3 (HTTP/1.1)
• DNSBL Status: Listed on 2 of 8 total lists
• Certificate Status: No TLS certificate detected

Threat Indicators

• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Known Campaigns: None identified
• Abuse Confidence Score: Not available

Neighborhood Assessment

The /24 subnet (138.197.137.0/24) shows:

• Abuse Density: 0%
• Active Siblings: 2
• Threat Siblings: 0
• Classification: Clean

Observation History

18 total observations recorded. Recent activity shows:

• Last HTTP response: 301 redirect with nginx server banner
• Historical operator score: 0.15 (Minimal)
• No persistent malicious behavior observed
• Threat observation count: 0

Relationships

All 8 identified relationships link to the same DIGITALOCEAN-138-197-0-0 network block, indicating this IP is part of DigitalOcean's cloud infrastructure.

Recommended Actions

Based on the moderate risk profile and DNSBL listings, the following controls are recommended:

Analyst Notes

The IP exhibits moderate risk primarily due to DNSBL listings (2/8) and presence in a cloud hosting environment. No active threat indicators or campaign associations detected. The neighborhood shows low abuse density. Consider blocking at perimeter firewall level if traffic from this IP has been observed, but monitor for legitimate use cases before implementing permanent block rules.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.