# 185.223.152.200 — IP Intelligence Summary

185.223.152.200 is an IPv4 address operated by netutils-mnt (AS396356), geolocated to Boston, United Kingdom. As of October 6, 2026, IPDebrief rates it Moderate Risk (50/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/185.223.152.200
- Last updated: 2026-10-06

## Ownership

- Organization: netutils-mnt
- Network name: IPXO
- Allocated block: 185.223.152.0/23
- ASN: AS396356 (https://ipdebrief.com/asn/396356)
- Regional registry: RIPE

## Location

- City: Boston
- Region: US-MA
- Country: United Kingdom
- Time zone: Europe/London

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Moderate Risk (50/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Analyst narrative

\# IP Intelligence Briefing: 185.223.152.200

\## Executive Summary

The target IP address 185.223.152.200 is classified as **Low Risk** with a risk score of 25/100. No active threat indicators, blacklist entries, or malicious behavior patterns were detected. The address operates within the IPXO network under RIPE RIR with no persistent malicious activity observed.

\## Network Ownership & Classification

\- **ASN:** 396356

\- **Organization:** netutils-mnt (IPXO)

\- **CIDR Block:** 185.223.152.0/23

\- **RIR:** RIPE

\- **Network Role:** Firewall / No Services

\- **Geolocation:** GB (United Kingdom) with 750km accuracy radius

\## Threat Assessment

\- **Risk Score:** 25 (Low Risk)

\- **Abuse Confidence Score:** Not calculated

\- **Blacklist Status:** Clean (0 blacklist entries)

\- **Tor Exit Node:** No

\- **Known Attacker:** No

\- **Spam Source:** No

\- **Threat Feeds:** No matches detected

\## Service & Port Analysis

\- **Open Ports:** None detected

\- **DNS PTR Records:** None

\- **Forward Resolution:** 0

\- **HTTP Services:** None

\- **TLS Certificates:** None

\- **Banner Detection:** No active services

\## Neighborhood Analysis (185.223.152.0/24)

\- **Abuse Density:** 1.55% (0.0155)

\- **Subnet Classification:** Clean

\- **Total Siblings:** 193

\- **Active Siblings:** 46

\- **Threat Siblings:** 3

\- **Risk Distribution:** 0 High, 10 Medium, 84 Low

\- **Inherited Risk:** 0

**Notable Neighbors:** 185.223.152.4 (Risk: 50), 185.223.152.9 (Risk: 25), 185.223.152.10 (Risk: 0)

\## Historical Observation (Last 14 Signals)

\- **Most Recent:** 2026-07-28T14:40:54

\- **Ownership Changes:** 0

\- **Threat Persistence:** 0 days

\- **Threat Observation Count:** 0

\- **Persistently Malicious:** No

\- **Geolocation Consistency:** Mixed signals (GB and US coordinates observed across different probes)

\## Control Plane Data

\- **Origin ASN:** 396356

\- **BGP Prefix:** 185.223.152.0/24

\- **Route Stability:** False

\- **MOAS:** No

\- **RPKI State:** Not evaluated

\- **DNSSEC Valid:** True

\- **DNSBL Listed:** 1 of 8 lists checked

\## Behavioral Indicators

\- **Honeypot Hits:** 0

\- **Enumeration Strikes:** 0

\- **WAF Violations:** 0

\- **Total Incidents:** 0

\- **Traceroute Hops:** 12 (Comcast, GTT transit)

\## Security Recommendations

Based on the risk profile, **no immediate firewall rules or blocking actions are required**. The IP shows minimal threat characteristics and no actionable indicators of compromise.

**Suggested Actions:**

\- Monitor for changes in network behavior or service activation

\- Review if any recent traffic patterns correlate with known threat activity

\- No immediate blocking recommended

\## Conclusion

IP 185.223.152.200 presents minimal risk to network infrastructure. The address operates within a relatively clean subnet with low abuse density. No active threats or malicious behavior were identified during analysis. Continue standard monitoring practices.

## Nearby addresses

- 185.223.152.4 (https://ipdebrief.com/185.223.152.4)
- 185.223.152.5 (https://ipdebrief.com/185.223.152.5)
- 185.223.152.6 (https://ipdebrief.com/185.223.152.6)
- 185.223.152.7 (https://ipdebrief.com/185.223.152.7)
- 185.223.152.8 (https://ipdebrief.com/185.223.152.8)
- 185.223.152.9 (https://ipdebrief.com/185.223.152.9)
- 185.223.152.10 (https://ipdebrief.com/185.223.152.10)
- 185.223.152.11 (https://ipdebrief.com/185.223.152.11)
- 185.223.152.12 (https://ipdebrief.com/185.223.152.12)
- 185.223.152.14 (https://ipdebrief.com/185.223.152.14)
- 185.223.152.15 (https://ipdebrief.com/185.223.152.15)
- 185.223.152.16 (https://ipdebrief.com/185.223.152.16)

---

Source: IPDebrief, "185.223.152.200 IP intelligence", https://ipdebrief.com/185.223.152.200, updated 2026-10-06. Assessments are probabilistic.