# 185.223.152.181 — IP Intelligence Summary

185.223.152.181 is an IPv4 address operated by netutils-mnt (AS396356), geolocated to Los Angeles, United Kingdom. As of September 14, 2026, IPDebrief rates it Moderate Risk (60/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/185.223.152.181
- Last updated: 2026-09-14

## Ownership

- Organization: netutils-mnt
- Network name: IPXO
- Allocated block: 185.223.152.0/23
- ASN: AS396356 (https://ipdebrief.com/asn/396356)
- Regional registry: RIPE

## Location

- City: Los Angeles
- Region: CA
- Country: United Kingdom
- Time zone: Europe/London

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Moderate Risk (60/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Analyst narrative

The IP address 185.223.152.181/32 was classified as a Moderate Risk source with a risk score of 60. First-party behavioral analysis indicated active attacker status with an intent to perform credential stuffing. Sensors detected one honeypot hit, confirming credential testing against login pages.

Ownership data linked the address to AS396356, IPXO, within the 185.223.152.0/23 block. Observations were recorded between July 10, 2026, and September 14, 2026. Geolocation validation failed consistency checks, showing contradictions between United States and Great Britain sources alongside RTT physics violations. The neighborhood classification was mixed with an abuse density of 0.303 and 70 active threat siblings.

Technical scanning revealed no open ports, and DNS hygiene was rated Poor due to missing SPF and DMARC records. Given the direct attack evidence and honeypot trap triggers, the address was recommended for blocking with high severity.

## Nearby addresses

- 185.223.152.4 (https://ipdebrief.com/185.223.152.4)
- 185.223.152.5 (https://ipdebrief.com/185.223.152.5)
- 185.223.152.6 (https://ipdebrief.com/185.223.152.6)
- 185.223.152.7 (https://ipdebrief.com/185.223.152.7)
- 185.223.152.8 (https://ipdebrief.com/185.223.152.8)
- 185.223.152.9 (https://ipdebrief.com/185.223.152.9)
- 185.223.152.10 (https://ipdebrief.com/185.223.152.10)
- 185.223.152.11 (https://ipdebrief.com/185.223.152.11)
- 185.223.152.12 (https://ipdebrief.com/185.223.152.12)
- 185.223.152.14 (https://ipdebrief.com/185.223.152.14)
- 185.223.152.15 (https://ipdebrief.com/185.223.152.15)
- 185.223.152.16 (https://ipdebrief.com/185.223.152.16)

---

Source: IPDebrief, "185.223.152.181 IP intelligence", https://ipdebrief.com/185.223.152.181, updated 2026-09-14. Assessments are probabilistic.