23.227.147.163📋 Copy

## IP Intelligence Briefing: 23.227.147.163/32

Classification: Moderate Risk (Score: 40/100)

Date Generated: 2026-06-23

Analysis Status: Complete

Executive Summary

IP address 23.227.147.163 is assigned to Data World Net (AS55081), a Canadian Internet Service Provider operating from Piscataway, NJ. The IP exhibits a moderate risk profile primarily attributable to DNSBL listings rather than active malicious behavior. No open services or active threat indicators were observed.

Ownership and Geolocation

Network State Assessment

Service Status: Firewalled / No Services

• Zero open ports detected
• No TLS certificates or HTTP fingerprints
• No reverse DNS PTR records
• Forward DNS resolution: Not confirmed

Control Plane Indicators:

• Operator Score: 0.2174 (Minimal)
• DNSSEC: Valid
• CAA Records: Present
• DNSBL Listings: 2 of 8 total lists
• Route Stability: Unstable

Threat Intelligence Profile

Threat Indicators:

• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Proxy/VPN/Hosting: No
• Blacklist Count: 0 active blocks
• Known Campaigns: None

Reputation Sources: No active threat feeds flagged

Neighborhood Analysis (23.227.147.0/24)

Historical Trend Analysis

Observation Count: 22 signals tracked

Key Temporal Findings:

• June 18, 2026: Initial geolocation signal (CA, 3000km accuracy) and operator scoring (Minimal)
• June 23, 2026: Latest observation confirms minimal operator score (0.2174), clean subnet classification
• Risk Persistence: 0 days (not persistently malicious)
• Ownership Changes: 0 (stable assignment)

Signal Evolution: Consistent "clean" classification with no escalation in risk signals over the observation window.

Relationship Graph

Total Relationships: 57 entities

• Primary Association: DWNL (Data World Net) network relationships
• No external organization or certificate correlations identified

Recommended Security Actions

Based on risk profile and observed behavior:

1. No Immediate Blocking Required – Risk score (40) does not warrant aggressive filtering

2. Monitor DNSBL Status – Two DNSBL listings present; track for changes

3. Standard Logging – Include in SIEM for baseline network activity

4. No Firewall Rules – No actionable iptables/nftables rules generated

Conclusion

IP 23.227.147.163 represents a low-to-moderate risk endpoint with no active malicious indicators. The moderate risk score reflects DNSBL presence rather than observed attack behavior. No immediate defensive action required; standard monitoring recommended.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.