# 185.223.152.19 — IP Intelligence Summary

185.223.152.19 is an IPv4 address operated by netutils-mnt (AS396356), geolocated to Los Angeles, United States. As of October 6, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/185.223.152.19
- Last updated: 2026-10-06

## Ownership

- Organization: netutils-mnt
- Network name: IPXO
- Allocated block: 185.223.152.0/23
- ASN: AS396356 (https://ipdebrief.com/asn/396356)
- Regional registry: RIPE

## Location

- City: Los Angeles
- Region: US-CA
- Country: United States
- Time zone: America/Los_Angeles

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (25/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Analyst narrative

\# IP Intelligence Briefing: 185.223.152.19

**Classification:** Low Risk | **Risk Score:** 25 | **Status:** Active Monitoring

\## Executive Summary

IP 185.223.152.19 operates within the IPXO network (ASN 396356) under netutils-mnt organization. The address demonstrates low-risk characteristics with no active open services detected, though historical signals indicate intermittent threat associations. The subnet exhibits minimal abuse density (0.0107), with 90% of 100 sampled neighbors showing low-risk profiles.

\## Technical Profile

\- **Network Assignment:** 185.223.152.0/24, RIPE registry

\- **Geolocation:** Primary consensus indicates US (Boston, MA); historical signals show conflicting Los Angeles, CA assignments from different geolocation sources

\- **Service Status:** No open ports detected; classified as "Firewalled / No Services"

\- **DNS Configuration:** No PTR records; forward resolution inactive; 0 hosted domains

\- **Reputation:** 0 blacklists; 1 DNSBL listing among 8 total lists checked

\## Threat Indicators

\- **Known Threats:** False

\- **Tor Exit Node:** False

\- **Spam Source:** False

\- **Campaign Associations:** None identified

\- **Historical Signals:** 15 observations recorded, with one signal (2026-07-27T15:25:38) flagging threat presence with 3 Pulse names

\- **Route Stability:** Not stable; no route changes in 30 days

\## Network Neighborhood Analysis

\- **Subnet Classification:** Clean

\- **Abuse Density:** 0.0107 (low)

\- **Risk Distribution (100 sampled neighbors):** 0 high-risk, 10 medium-risk, 90 low-risk

\- **Active Siblings:** 31 out of 187 total addresses in /24 block

\- **Notable Neighbors:** 185.223.152.4 (Risk: 50), 185.223.152.8 (Risk: 20), 185.223.152.9 (Risk: 25)

\## Network Behavior

\- **Traceroute:** 12 hops; transit networks include Comcast and GTT

\- **Honeypot Hits:** 0

\- **Enumeration Strikes:** 0

\- **WAF Violations:** 0

\## Related Entities

\- **Primary Network Relationship:** IPXO (same network designation)

\- **Control Plane:** RPKI state not validated; DNSSEC valid

\## SOC Recommendations

1. **Monitor** for service activation or port opening activity

2. **Correlate** with the 10 medium-risk neighbors in the same /24 subnet

3. **Validate** geolocation claims through active probing if threat correlation emerges

4. **Review** DNSBL listing (1 of 8 lists) for context on reputation management

5. **No immediate blocking recommended** given low-risk classification and lack of active service indicators

\---

*Generated: Intelligence Analysis | Source: IPDebrief Platform*

## Nearby addresses

- 185.223.152.4 (https://ipdebrief.com/185.223.152.4)
- 185.223.152.5 (https://ipdebrief.com/185.223.152.5)
- 185.223.152.6 (https://ipdebrief.com/185.223.152.6)
- 185.223.152.7 (https://ipdebrief.com/185.223.152.7)
- 185.223.152.8 (https://ipdebrief.com/185.223.152.8)
- 185.223.152.9 (https://ipdebrief.com/185.223.152.9)
- 185.223.152.10 (https://ipdebrief.com/185.223.152.10)
- 185.223.152.11 (https://ipdebrief.com/185.223.152.11)
- 185.223.152.12 (https://ipdebrief.com/185.223.152.12)
- 185.223.152.14 (https://ipdebrief.com/185.223.152.14)
- 185.223.152.15 (https://ipdebrief.com/185.223.152.15)
- 185.223.152.16 (https://ipdebrief.com/185.223.152.16)

---

Source: IPDebrief, "185.223.152.19 IP intelligence", https://ipdebrief.com/185.223.152.19, updated 2026-10-06. Assessments are probabilistic.