185.223.152.200📋 Copy

# IP Intelligence Briefing: 185.223.152.200

## Executive Summary

The target IP address 185.223.152.200 is classified as Low Risk with a risk score of 25/100. No active threat indicators, blacklist entries, or malicious behavior patterns were detected. The address operates within the IPXO network under RIPE RIR with no persistent malicious activity observed.

## Network Ownership & Classification

• ASN: 396356
• Organization: netutils-mnt (IPXO)
• CIDR Block: 185.223.152.0/23
• RIR: RIPE
• Network Role: Firewall / No Services
• Geolocation: GB (United Kingdom) with 750km accuracy radius

## Threat Assessment

• Risk Score: 25 (Low Risk)
• Abuse Confidence Score: Not calculated
• Blacklist Status: Clean (0 blacklist entries)
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Threat Feeds: No matches detected

## Service & Port Analysis

• Open Ports: None detected
• DNS PTR Records: None
• Forward Resolution: 0
• HTTP Services: None
• TLS Certificates: None
• Banner Detection: No active services

## Neighborhood Analysis (185.223.152.0/24)

• Abuse Density: 1.55% (0.0155)
• Subnet Classification: Clean
• Total Siblings: 193
• Active Siblings: 46
• Threat Siblings: 3
• Risk Distribution: 0 High, 10 Medium, 84 Low
• Inherited Risk: 0

Notable Neighbors: 185.223.152.4 (Risk: 50), 185.223.152.9 (Risk: 25), 185.223.152.10 (Risk: 0)

## Historical Observation (Last 14 Signals)

• Most Recent: 2026-07-28T14:40:54
• Ownership Changes: 0
• Threat Persistence: 0 days
• Threat Observation Count: 0
• Persistently Malicious: No
• Geolocation Consistency: Mixed signals (GB and US coordinates observed across different probes)

## Control Plane Data

• Origin ASN: 396356
• BGP Prefix: 185.223.152.0/24
• Route Stability: False
• MOAS: No
• RPKI State: Not evaluated
• DNSSEC Valid: True
• DNSBL Listed: 1 of 8 lists checked

## Behavioral Indicators

• Honeypot Hits: 0
• Enumeration Strikes: 0
• WAF Violations: 0
• Total Incidents: 0
• Traceroute Hops: 12 (Comcast, GTT transit)

## Security Recommendations

Based on the risk profile, no immediate firewall rules or blocking actions are required. The IP shows minimal threat characteristics and no actionable indicators of compromise.

Suggested Actions:

• Monitor for changes in network behavior or service activation
• Review if any recent traffic patterns correlate with known threat activity
• No immediate blocking recommended

## Conclusion

IP 185.223.152.200 presents minimal risk to network infrastructure. The address operates within a relatively clean subnet with low abuse density. No active threats or malicious behavior were identified during analysis. Continue standard monitoring practices.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.