209.97.133.113📋 Copy

# IP INTELLIGENCE BRIEFING: 209.97.133.113/32

Classification: Low Risk / Cloud Infrastructure

Date: 2026-06-28

Analyst: IPDebrief Intelligence Team

---

## EXECUTIVE SUMMARY

IP 209.97.133.113 is classified as Low Risk with an overall risk score of 25. The address is associated with DigitalOcean cloud infrastructure deployed in London, England. No active threat indicators, open services, or malicious activity detected. The IP represents legitimate cloud compute infrastructure.

---

## OWNERSHIP & GEOLOCATION

Geolocation validation confirms the IP is plausible with geoConsensus=true across multiple sources. Distance from claimed location: 506.4 km from London coordinates.

---

## THREAT ASSESSMENT

Threat History: Single threat observation recorded. No persistent malicious activity detected. Threat observation count: 1.

---

## NETWORK SERVICES & DNS

• Open Ports: None detected
• Services: Firewalled / No Services
• DNS Records: No forward resolution, no hosted domains
• Email Authentication: SPF/DMARC not configured
• TLS Certificate: None detected
• HTTP Banner: None detected

---

## NEIGHBORHOOD ANALYSIS

Subnet: 209.97.133.0/24

Abuse Density: 50%

Total Siblings: 2

Active Siblings: 1

Threat Siblings: 1

Comparison indicates both IPs share identical provider (DigitalOcean), organization, and country attributes with matching risk scores.

---

## CONTROL PLANE & ROUTING

• Route Stability: Not stable
• Route Changes (30d): 0
• RPKI State: Not available
• DNSSEC Valid: Yes
• IRR Consistency: Not assessed
• Origin ASN: 14061
• Operator Score: 0.1304 (Minimal)

---

## OBSERVATION HISTORY

Total Observations: 19

Recent Activity: 2026-06-20

Key historical signals include:

• Cloud provider identification (DigitalOcean)
• Geolocation inference (GB, London)
• Network role classification (CloudCompute, Firewalled)
• Multiple probe counts confirming geo-plausibility

---

## RECOMMENDED ACTIONS

Security Posture: ACCEPT / MONITOR

1. Blocklist Status: No block required. Risk score (25) indicates low threat level.

2. Firewall Rules: No specific rules required for this IP.

3. Monitoring: Standard monitoring recommended. No elevated threat indicators.

4. Reputation: Maintain current classification as Low Risk.

Rationale: IP belongs to legitimate cloud infrastructure provider (DigitalOcean). No active threat indicators, no open services, no blacklist entries beyond minimal DNSBL presence. Neighbor IP analysis confirms consistent low-risk profile across the subnet.

---

End of Briefing

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.