209.38.232.190
INTELLIGENCE BRIEFING: 209.38.232.190/32
Executive Summary
The IP address 209.38.232.190 was classified as Low Risk with an overall risk score of 25. The address belongs to DigitalOcean, LLC (ASN 14061) within the DO-13 network block (209.38.0.0/16). Geolocation data indicated Frankfurt am Main, Germany, though historical signals also registered Colorado, United States, suggesting potential routing discrepancies.
Ownership and Infrastructure
The IP is hosted on DigitalOcean's cloud infrastructure as part of a cloud computing environment. No open ports were detected, and the service status indicated "Firewalled / No Services." The address resolved to no hostnames and had zero forward DNS records. Email authentication records (SPF, DMARC) were not present.
Threat Indicators
The address showed no known threat indicators. It was not identified as a Tor exit node, known attacker, or spam source. Blacklist enumeration returned zero entries. One DNSBL listing was observed out of eight total lists checked. No malicious campaigns were correlated with this address.
Network Context
The immediate /24 neighborhood (209.38.232.0/24) exhibited an abuse density of zero and was classified as clean. Only one neighboring IP (209.38.232.34) was identified in the subnet, carrying a risk score of 25. The subnet showed no threat siblings among its active addresses.
Temporal Analysis
Observation history captured 13 data points. Ownership remained stable with zero ownership changes recorded. No threat persistence was detected, and the IP was not flagged as persistently malicious. The threat observation count remained at zero throughout the observation window.
Recommended Actions
No specific security actions or firewall rules were generated due to the low-risk profile. The address presented no immediate threat indicators requiring active mitigation.
Classification
Status: Low Risk
Infrastructure Type: Cloud Computing (DigitalOcean)
Network Role: Firewalled / No Services
Action Required: Monitor as part of routine traffic analysis; no immediate blocking recommended.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | DigitalOcean, LLC |
| ASN | AS14061 |
| Network Name | DO-13 |
| CIDR Block | 209.38.0.0/16 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 40% | 2 | 3 |
| routing | 17% | 1 | 1 |
| services | 24% | 2 | 2 |
| ownership | 35% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 17% | 1 | 1 |
| Overall | 25% | 9 | 12 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-08-03 17:30:37 UTC |
| Last Seen | 2026-08-13 05:15:16 UTC |
| Profile Built | 2026-08-13 05:26:22 UTC |
| Data Freshness | Live |
| Signal Types | 17 |
| Total Observations | 20 |
Full dossier details are available via our API.