# IP Intelligence Briefing: 138.197.189.224/32
## Executive Summary
IP address 138.197.189.224 is classified as Low Risk with an overall risk score of 25. The address operates on DigitalOcean cloud infrastructure in Frankfurt, Germany, with no active malicious indicators, no open services, and no threat observations.
## Ownership and Infrastructure
| Field | Value |
|---|---|
| **ASN** | 14061 |
| **Organization** | DigitalOcean, LLC |
| **CIDR Block** | 138.197.0.0/16 |
| **Infrastructure Type** | CloudCompute |
| **Network Role** | Hosting |
| **Country** | DE (Germany) |
| **City** | Frankfurt am Main, Hesse |
## Risk Assessment
- Overall Risk Score: 25 / 100
- Reputation: Low Risk
- Provider Score: 0
- Authority Score: 0
- Abuse Confidence: Not applicable
- Known Attacker: False
- Spam Source: False
- Tor Exit Node: False
- Blacklist Count: 0
- DNSBL Listed: 1 of 8 lists
## Network Services and Ports
- Open Ports: None detected
- Status: Firewalled / No Services
- TLS Certificate: None
- HTTP Title: None
- Server Banner: None
## Control Plane Analysis
- BGP Prefix: 138.197.176.0/20
- Route Stability: False
- DNSSEC Valid: True
- Operator Score: 0.1304 (Minimal)
- Honeypot Hits: 0
- Enumeration Strikes: 0
- WAF Violations: 0
## Observation History
- Total Observations: 15 signals recorded
- Most Recent: 2026-07-30 16:19:56 UTC
- Ownership Changes: 0
- Threat Persistence Days: 0
- Threat Observation Count: 0
- Persistently Malicious: False
## Neighborhood Analysis
- Subnet: 138.197.189.224/24
- Abuse Density: 0
- Total Siblings: 0
- High Risk Neighbors: 0
- Medium Risk Neighbors: 0
## Relationships
- Same Network: DIGITALOCEAN-138-197-0-0 (repeated relationships)
- External Relationships: None identified
## Recommended Actions
No specific firewall rules or security actions are currently recommended. The IP presents minimal threat and operates on legitimate cloud infrastructure.
## Analyst Notes
This IP address represents a standard DigitalOcean cloud compute instance with no malicious activity detected. The absence of open ports, zero threat indicators, and clean neighborhood metrics support benign classification. No immediate defensive actions are required, though standard monitoring is advised for cloud infrastructure traffic.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | DigitalOcean, LLC |
| ASN | AS14061 |
| Network Name | DIGITALOCEAN-138-197-0-0 |
| CIDR Block | 138.197.0.0/16 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No โ PTR hostname does not resolve back to this IP (weak signal) |
๐ DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting โ Infrastructure provider without advanced routing |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 30% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 30% | 2 | 3 |
| Overall | 23% | 10 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-07-28 10:06:10 UTC |
| Last Seen | 2026-08-12 22:21:20 UTC |
| Profile Built | 2026-08-12 22:27:04 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 21 |
Full dossier details are available via our API.