IP INTELLIGENCE BRIEFING
Target: 157.245.233.97/32
Date: 2026-08-13
Risk Score: 65/100 (Moderate Risk)
---
1. Infrastructure Overview
IP 157.245.233.97 is assigned to DigitalOcean, LLC (ASN 14061) within the DIGITALOCEAN-157-245-0-0 network block (157.245.0.0/16). Geolocation data places the IP in Santa Clara, California, United States. The infrastructure is classified as cloud compute with no active open ports or services exposed. DNSSEC validation is confirmed as valid.
2. Threat Indicators
The IP exhibited a moderate risk profile with an overall score of 65/100. Blacklist monitoring detected listings across 3 of 8 total blacklist sources with maximum severity ratings of "high." No active threat indicators were identified as Tor exit nodes, known attackers, or spam sources. The IP did not resolve to any known hostnames and displayed no email authentication records (SPF/DMARC).
3. Observation History
Analysis of 12 historical observations revealed consistent geolocation signals pointing to the United States. Recent signals (observed 2026-08-13) confirmed ASN 14061 ownership and DNSSEC validity. Geographic consensus showed multiple location sources including Santa Clara, California and broader United States-level data. No persistent malicious behavior was detected over the observation period.
4. Network Context
No neighboring IP addresses were identified within the /24 subnet (157.245.233.0/24), indicating this IP operates in isolation within its subnet. The subnet abuse density registered at 0, suggesting the immediate network environment does not exhibit elevated abuse characteristics. Network relationships identified two entries linking to the DIGITALOCEAN-157-245-0-0 network block.
5. Control Plane Analysis
Routing stability flagged as false with no route changes observed in the past 30 days. The IP appears in BGP prefix 157.245.224.0/20. RPKI state and IRR consistency data were not available in the analysis.
6. Recommended Actions
Security operations recommended increased logging verbosity and activity review for this IP due to the elevated risk score of 65/100. The following rules are recommended for deployment:
- Firewall (iptables/nftables): DROP traffic from 157.245.233.97/32
- Web Application Firewall (nginx/pfSense): Block the IP address
- Cloudflare WAF: Configure rule to block 157.245.233.97 (Risk Score: 65)
- AWS WAF: Add 157.245.233.97/32 to block list
7. Assessment
This IP represents a moderate-risk cloud infrastructure asset with multiple blacklist associations. While no active attacks were observed during the analysis period, the risk profile warrants monitoring and consideration for blocking based on organizational threat posture policies.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | DigitalOcean, LLC |
| ASN | AS14061 |
| Network Name | DIGITALOCEAN-157-245-0-0 |
| CIDR Block | 157.245.0.0/16 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No β PTR hostname does not resolve back to this IP (weak signal) |
π DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting β Infrastructure provider without advanced routing |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 30% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 44% | 1 | 18 |
| geolocation | 27% | 2 | 3 |
| Overall | 27% | 10 | 31 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-08-11 17:58:08 UTC |
| Last Seen | 2026-09-11 15:49:08 UTC |
| Profile Built | 2026-09-11 09:47:54 UTC |
| Data Freshness | Live |
| Signal Types | 18 |
| Total Observations | 58 |
Full dossier details are available via our API.