185.15.170.17📋 Copy

# IP Intelligence Briefing: 185.15.170.17/32

## Executive Summary

IP address 185.15.170.17 is classified as Low Risk with a risk score of 0. The address shows no active threat indicators, no open services, and no historical malicious activity. However, neighborhood analysis reveals elevated abuse density within the subnet, requiring contextual awareness.

## Ownership and Registration

• Registrant: DONATO CONTE
• Network Name: METIS-V4-NET-2
• CIDR Block: 185.15.170.0/23
• RIR: RIPE
• ASN: Not available in current profile
• Abuse Contact: Available via RDAP

## Geolocation

• Primary Location: United States, New York, NY
• Secondary Signals: Italy (historical ASN data indicates ASN 57558 - METIS-AS, IT)
• GeoConsensus: False (multiple conflicting sources)
• Accuracy: Mixed geolocation confidence with 2 sources

## Threat Intelligence Assessment

• Risk Score: 0
• Abuse Confidence: Not scored
• Blacklist Status: 0 listings
• Campaign Indicators: None detected
• Known Attacker: False
• Tor Exit Node: False
• Spam Source: False

The IP profile shows no active threat indicators. No threat feeds, campaigns, or blacklist associations were identified. The address is currently firewalled with no open services detected.

## Network Behavior and Services

• Open Ports: None detected
• DNS Resolution: No PTR hostnames; forward resolution failed
• Email Reputation: No SPF or DMARC records configured
• Service Purpose: Firewalled / No Services
• Control Plane: Network not stable; not MOAS

## Neighborhood Analysis (185.15.170.0/24)

• Total Neighbors: 57 IPs
• Abuse Density: 0.175 (moderate)
• Risk Distribution: High (10), Medium (36), Low (11)
• Notable Neighbors:

- 185.15.170.1: Risk Score 55, Authority Score 60

- 185.15.170.2: Risk Score 15, Authority Score 60

The subnet exhibits moderate abuse density with 10 high-risk neighbors, suggesting this block may host mixed legitimate and suspicious traffic.

## Historical Observations

15 total observations recorded. Recent activity (2026-07-22) includes:

• 8 blacklist listings with 4 active, maximum severity: high
• Domain association: retemetis.net
• DNSSEC: Valid for reverse zone
• ASN data indicates association with METIS-AS (Italy)

## Relationships

• Connected Network: METIS-V4-NET-2 (same network relationship)

## Recommended Actions

• Security Actions: None required at this time
• Firewall Rules: Not recommended
• Monitoring: Monitor subnet 185.15.170.0/24 for abuse patterns
• Context: While the IP itself shows no malicious activity, the neighborhood's abuse density warrants awareness

## Conclusion

IP 185.15.170.17 presents no immediate threat. The address is associated with a firewalled endpoint with no services. However, SOC teams should monitor the broader 185.15.170.0/24 subnet due to its 0.175 abuse density and presence of multiple high-risk neighbors. The mixed geolocation signals (US/Italy) and recent blacklist associations warrant periodic review but do not currently indicate active compromise.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.