185.183.152.166📋 Copy

# IP Intelligence Briefing: 185.183.152.166/32

Classification: Low Risk | Risk Score: 25/100

Date of Analysis: 2026-07-30

Data Source: IPDebrief Intelligence Platform

---

## Executive Summary

IP 185.183.152.166 is a single-service host presenting a low-risk profile overall. The address operates with minimal threat indicators but exhibits one DNS blacklist listing with high severity. No organizational or geographic attribution has been confirmed. The IP hosts HTTPS service on port 8443 with a TLS certificate associated with Google Inc/Widevine infrastructure.

---

## Network Classification & Control Plane

---

## Technical Services

• Open Ports: 8443/TCP (HTTPS-alt)
• TLS Certificate: Issued by Google Inc/Widevine infrastructure (CN=lge-tv-ap K25LP realtek RTD2875QDA Cast ICA)
• Certificate Subject: CN=-6331848375485615447, OU=Widevine, O=Google Inc, L=Kirkland, S=Washington, C=US
• TLS Protocol: TLS 1.2
• Cipher Suite: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

---

## Threat Indicators

---

## Observation History

Eight observations recorded as of 2026-07-30. Key temporal findings:

• Blacklist Activity: 1 listing detected among 8 DNSBL checks (max severity: HIGH)
• Geolocation Signals: Multiple observations linked to Google Inc infrastructure (Kirkland, Washington, US)
• TLS Certificate Scans: Confirmed certificate issuance and validity parameters
• Operator Score: Consistent minimal rating (0.1304) across observations

---

## Neighborhood Analysis

Subnet: 185.183.152.166/24

• Neighbor Count: 0
• Abuse Density: 0
• High/Medium/Low Risk Neighbors: 0/0/0

No adjacent IPs detected in the /24 subnet. The IP operates in isolation without observable subnet-level threat correlation.

---

## Related Entities

No relationships detected between this IP and other entities (subnets, hostnames, organizations, or certificates).

---

## Recommended Actions

1. Monitor DNSBL Listings: Investigate the single high-severity blacklist listing. Review the specific blacklist to determine context.

2. TLS Certificate Verification: Confirm the Google/Widevine certificate legitimacy. This may indicate legitimate CDN or streaming infrastructure.

3. Port 8443 Traffic Analysis: If traffic to this port is observed, verify if it constitutes expected traffic patterns for your environment.

4. No Immediate Blocking Required: Current risk profile (25/100) does not warrant aggressive blocking. Implement monitoring if the IP appears in your traffic.

---

## Conclusion

IP 185.183.152.166 presents a low-risk profile suitable for standard monitoring. The single DNS blacklist listing requires contextual investigation but does not indicate active malicious activity. The Google/Widevine TLS certificate suggests legitimate use, possibly related to video streaming or CDN services. No immediate defensive action is recommended beyond standard monitoring.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.