185.223.152.19
185.223.152.19 is an IPv4 address operated by netutils-mnt (AS396356), geolocated to Los Angeles, United States. As of October 6, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.
# IP Intelligence Briefing: 185.223.152.19
Classification: Low Risk | Risk Score: 25 | Status: Active Monitoring
## Executive Summary
IP 185.223.152.19 operates within the IPXO network (ASN 396356) under netutils-mnt organization. The address demonstrates low-risk characteristics with no active open services detected, though historical signals indicate intermittent threat associations. The subnet exhibits minimal abuse density (0.0107), with 90% of 100 sampled neighbors showing low-risk profiles.
## Technical Profile
- Network Assignment: 185.223.152.0/24, RIPE registry
- Geolocation: Primary consensus indicates US (Boston, MA); historical signals show conflicting Los Angeles, CA assignments from different geolocation sources
- Service Status: No open ports detected; classified as "Firewalled / No Services"
- DNS Configuration: No PTR records; forward resolution inactive; 0 hosted domains
- Reputation: 0 blacklists; 1 DNSBL listing among 8 total lists checked
## Threat Indicators
- Known Threats: False
- Tor Exit Node: False
- Spam Source: False
- Campaign Associations: None identified
- Historical Signals: 15 observations recorded, with one signal (2026-07-27T15:25:38) flagging threat presence with 3 Pulse names
- Route Stability: Not stable; no route changes in 30 days
## Network Neighborhood Analysis
- Subnet Classification: Clean
- Abuse Density: 0.0107 (low)
- Risk Distribution (100 sampled neighbors): 0 high-risk, 10 medium-risk, 90 low-risk
- Active Siblings: 31 out of 187 total addresses in /24 block
- Notable Neighbors: 185.223.152.4 (Risk: 50), 185.223.152.8 (Risk: 20), 185.223.152.9 (Risk: 25)
## Network Behavior
- Traceroute: 12 hops; transit networks include Comcast and GTT
- Honeypot Hits: 0
- Enumeration Strikes: 0
- WAF Violations: 0
## Related Entities
- Primary Network Relationship: IPXO (same network designation)
- Control Plane: RPKI state not validated; DNSSEC valid
## SOC Recommendations
1. Monitor for service activation or port opening activity
2. Correlate with the 10 medium-risk neighbors in the same /24 subnet
3. Validate geolocation claims through active probing if threat correlation emerges
4. Review DNSBL listing (1 of 8 lists) for context on reputation management
5. No immediate blocking recommended given low-risk classification and lack of active service indicators
---
*Generated: Intelligence Analysis | Source: IPDebrief Platform*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | netutils-mnt |
| ASN | AS396356 |
| Network Name | IPXO |
| CIDR Block | 185.223.152.0/23 |
| RIR | RIPE |
| Country | GB |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS396356 |
| Network Prefix | 185.223.152.0/24 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 39% | 2 | 5 |
| routing | 8% | 1 | 1 |
| services | 20% | 2 | 2 |
| ownership | 23% | 2 | 4 |
| reputation | 25% | 1 | 4 |
| geolocation | 20% | 2 | 2 |
| Overall | 22% | 10 | 18 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-14 09:43:07 UTC |
| Last Seen | 2026-10-06 02:58:34 UTC |
| Profile Built | 2026-10-06 02:59:36 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 21 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 185.223.152.19
Who owns the IP address 185.223.152.19?
185.223.152.19 is registered to netutils-mnt. The address falls within the 185.223.152.0/23 network block. Registration is held at RIPE.
Where is 185.223.152.19 located?
Geolocation data places 185.223.152.19 in Los Angeles, US-CA, United States. The local time zone is America/Los_Angeles. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 185.223.152.19 malicious or safe?
185.223.152.19 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.