IP Intelligence Briefing: 209.97.151.45
Date: 2026-05-31
---
**1. Risk Profile**
- Overall Risk Score: 25 (Low Risk)
- Provider Score: 0 (No provider-specific risks detected)
- Authority Score: 0 (No authoritative malicious indicators)
- Stability Score: 0 (No instability detected)
---
**2. Ownership & Geolocation**
- ISP/Organization: DigitalOcean, LLC (ASN: 14061)
- Geolocation:
- Country: United States (US)
- Region: New Jersey (NJ)
- City: Clifton
- Accuracy Radius: 2,500 km (approximate)
---
**3. Threat Indicators**
- Malicious Activity: None detected.
- Blacklist Status: Not listed in known threat feeds.
- TOR/VPN/Proxy: Not associated with Tor exit nodes, VPNs, or proxies.
- Spam/Campaigns: No spam sources or correlated malicious campaigns.
---
**4. Network Role**
- Infrastructure Type: CloudCompute (DigitalOcean)
- Hosting: Yes (likely a virtual machine or container)
- Services: No open ports or active services detected.
- BGP Analysis:
- AS Path: 22652 β 14061 (DigitalOcean)
- Route Stability: Stable (no recent route changes)
- DNSSEC: Validated
---
**5. Observation History**
- Consistency: Stable over time (no spikes in risk or activity).
- Key Trends:
- Geolocation inferred via multi-signal analysis (US, NJ).
- No changes in ownership or threat indicators.
---
**6. Relationships**
- Network Links:
- Linked to subnet DIGITALOCEAN-209-97-128-0 (same provider).
- No external hostnames or certificates associated.
---
**7. Neighborhood Analysis**
- Subnet: 209.97.151.45/24
- Abuse Density: 1 (mostly clean, minimal risk).
- Neighbors: No active neighboring IPs detected.
---
**8. Recommendations**
- Monitoring: Continue routine monitoring as part of cloud infrastructure oversight.
- Firewall Rules: No immediate action required due to low risk.
- Investigation: If new threats emerge, re-evaluate using `ipdebrief_actions` for tailored rules.
---
Conclusion:
The IP 209.97.151.45 is a low-risk cloud compute instance owned by DigitalOcean. No malicious activity or threats were detected. It aligns with normal cloud infrastructure behavior and does not require immediate defensive action. SOC teams should maintain standard monitoring practices for cloud assets.
Source: IPDebrief Threat Intelligence Platform
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | DigitalOcean, LLC |
| ASN | AS14061 |
| Network Name | β |
| CIDR Block | 209.97.144.0/20 |
| RIR | ARIN |
| Country | β |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No β PTR hostname does not resolve back to this IP (weak signal) |
π DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting β Infrastructure provider without advanced routing |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 34% | 2 | 5 |
| routing | 20% | 2 | 3 |
| services | 12% | 2 | 2 |
| ownership | 35% | 3 | 6 |
| reputation | 28% | 1 | 3 |
| geolocation | 25% | 2 | 2 |
| Overall | 26% | 12 | 21 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-05-19 23:49:44 UTC |
| Last Seen | 2026-06-28 10:36:35 UTC |
| Profile Built | 2026-06-29 04:43:05 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 28 |
Full dossier details are available via our API.