159.223.97.27
159.223.97.27 is an IPv4 address operated by DigitalOcean, LLC (AS14061), geolocated to North Bergen, United States. It belongs to datacenter or hosting infrastructure. As of November 6, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.
# INTELLIGENCE BRIEFING: 159.223.97.27
## OVERVIEW
IP address 159.223.97.27/32 is a DigitalOcean cloud infrastructure endpoint located in North Bergen, New Jersey, US (ASN 14061). Current risk assessment: Low Risk (Score: 25).
## OWNERSHIP & CLASSIFICATION
- Provider: DigitalOcean, LLC (ASN 14061)
- Network: DO-13 (159.223.0.0/16)
- Infrastructure Type: CloudCompute
- Network Role: Firewalled / No Services Detected
- Classification: Cloud infrastructure, not CDN, VPN, proxy, Tor, or mobile
## THREAT INDICATORS
- Risk Score: 25 (Low)
- Abuse Confidence: Not elevated
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
- Blacklist Status: Listed on 1 of 8 DNSBL checks
- Threat Feeds: No active threat indicators
## NETWORK BEHAVIOR
- Open Ports: None detected
- DNS Resolution: No forward or reverse DNS records
- TLS/SSL: No certificates detected
- HTTP Services: No web services active
- Route Stability: Route changes observed in last 30 days (not stable)
## NEIGHBORHOOD ANALYSIS (159.223.97.0/24)
- Abuse Density: 0.25 (Low-Moderate)
- Subnet Classification: Mostly Clean
- Total Siblings: 4 (3 active)
- Threat Siblings: 1
- Neighbor Risk Distribution:
- 159.223.97.71: Risk 25 (Low)
- 159.223.97.91: Risk 25 (Low)
- 159.223.97.218: Risk 65 (Medium-Elevated)
## OBSERVATION HISTORY
- Total Observations: 21 signals recorded
- Most Recent: 2026-08-04
- Threat Persistence: No persistent malicious activity detected
- Geolocation Consensus: Validated across multiple sources
## RELATIONSHIP GRAPH
- Network Relationships: 13 connections to DO-13 network
- Organizational Links: None identified
- Hostname Associations: None identified
- Certificate Links: None identified
## RECOMMENDATIONS
- Monitoring Level: Standard monitoring appropriate
- Firewall Rules: No restrictive rules required for low-risk status
- Alert Thresholds: Standard thresholds apply
- Note: Monitor neighbor IP 159.223.97.218 (risk score 65) separately for elevated activity
## CONCLUSION
This IP represents standard DigitalOcean cloud infrastructure with no active malicious indicators. The single DNSBL listing is minimal and does not indicate active abuse. SOC analysts may treat this IP as low-risk, but should note the elevated-risk neighbor in the same subnet for potential correlation analysis.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | DigitalOcean, LLC |
| ASN | AS14061 |
| Network Name | DO-13 |
| CIDR Block | 159.223.0.0/16 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS14061 |
| Network Prefix | 159.223.96.0/20 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 24% | 2 | 3 |
| routing | 24% | 2 | 3 |
| services | 12% | 2 | 2 |
| ownership | 27% | 3 | 5 |
| reputation | 13% | 1 | 2 |
| geolocation | 24% | 2 | 3 |
| Overall | 21% | 12 | 18 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-02 04:21:05 UTC |
| Last Seen | 2026-11-06 12:53:23 UTC |
| Profile Built | 2026-11-06 12:57:35 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 25 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 159.223.97.27
Who owns the IP address 159.223.97.27?
159.223.97.27 is registered to DigitalOcean, LLC. The address falls within the 159.223.0.0/16 network block. Registration is held at ARIN.
Where is 159.223.97.27 located?
Geolocation data places 159.223.97.27 in North Bergen, New Jersey, United States. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 159.223.97.27 malicious or safe?
159.223.97.27 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
Is 159.223.97.27 a VPN, proxy, or data center address?
159.223.97.27 is classified as cloud infrastructure and hosting infrastructure based on network ownership and behavioural analysis.