# 185.223.152.203 — IP Intelligence Summary

185.223.152.203 is an IPv4 address operated by netutils-mnt (AS396356), geolocated to Boston, United Kingdom. As of October 6, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/185.223.152.203
- Last updated: 2026-10-06

## Ownership

- Organization: netutils-mnt
- Network name: IPXO
- Allocated block: 185.223.152.0/23
- ASN: AS396356 (https://ipdebrief.com/asn/396356)
- Regional registry: RIPE

## Location

- City: Boston
- Region: US-MA
- Country: United Kingdom
- Time zone: Europe/London

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (25/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Analyst narrative

\# IPDebrief Intelligence Briefing: 185.223.152.203

**Classification**: LOW RISK / MONITOR

**Date**: Current

**Analyst**: Automated Intelligence System

\---

\## Executive Summary

IP address 185.223.152.203 is classified as LOW RISK with a risk score of 0. The address shows no active threat indicators, no blacklist entries, and no known malicious activity. No services are currently accessible on the IP, and it operates in a subnet with minimal abuse density.

\## Network Ownership & Infrastructure

| Attribute | Value |

|-----------|-------|

| **ASN** | 396356 |

| **Organization** | netutils-mnt (IPXO) |

| **CIDR Block** | 185.223.152.0/23 |

| **RIR** | RIPE |

| **Abuse Contact** | Available via RDAP |

| **Registration** | RIPE Network |

\## Geolocation Analysis

Geolocation data shows inconsistencies across multiple sources:

\- **Primary Consensus**: United States, Massachusetts, Boston

\- **Alternative Reports**: United Kingdom (Mostoles), California

\- **Confidence Level**: Mixed (0.70-0.95)

\- **Geo Source Count**: 2

This discrepancy warrants monitoring but does not indicate active malicious activity.

\## Threat Intelligence Indicators

\- **Threat Score**: 0 (Low Risk)

\- **Blacklist Count**: 0

\- **Known Attacker**: No

\- **Spam Source**: No

\- **Tor Exit Node**: No

\- **Campaign Associations**: None detected

\## Network Services & DNS

| Category | Status |

|----------|--------|

| Open Ports | None |

| TLS Certificate | Not detected |

| HTTP Banner | Not detected |

| PTR Hostnames | None |

| Forward Resolution | Not confirmed |

| Hosted Domains | 0 |

| Email Auth (SPF/DMARC) | Not configured |

The IP is classified as "Firewalled / No Services" with no active services exposed.

\## Subnet Context (185.223.152.0/24)

\- **Total Neighbors**: 100 IPs

\- **Abuse Density**: 0

\- **Risk Distribution**: 84 Low Risk, 10 Medium Risk, 0 High Risk

\- **Threat Siblings**: 0

The /24 subnet demonstrates minimal abuse activity with only 10 IPs flagged as medium risk.

\## Historical Observation Timeline

**Total Observations**: 11 signals

Recent observations (July 2026) show:

\- Geolocation signals from multiple sources

\- Organization and ASN data from RIPE database

\- Control plane signals showing DNSSEC validation

No escalating threat patterns detected in observation history.

\## Control Plane Analysis

\- **BGP Prefix**: 185.223.152.0/24

\- **Route Changes (30d)**: Active

\- **Route Stability**: False

\- **DNSSEC**: Valid

\- **DNSBL Listed**: 0 of 8 lists

\- **Operator Score**: 0.1304 (Minimal)

\## Recommended Actions

**Immediate Action Required**: None

**Monitoring Priority**: Routine

The IP presents no immediate security concerns. Standard monitoring protocols are sufficient.

\## SOC Analyst Notes

\- IP is owned by IPXO network infrastructure

\- No active services or open ports detected

\- Geolocation inconsistencies are common for infrastructure IPs

\- Subnet abuse density is negligible

\- No firewall rules required at this time

\- Continue standard IP reputation monitoring

\---

**Intelligence Confidence**: HIGH

**Data Sources**: IPDebrief Core, RIPE, Control Plane, Historical Signals

## Nearby addresses

- 185.223.152.4 (https://ipdebrief.com/185.223.152.4)
- 185.223.152.5 (https://ipdebrief.com/185.223.152.5)
- 185.223.152.6 (https://ipdebrief.com/185.223.152.6)
- 185.223.152.7 (https://ipdebrief.com/185.223.152.7)
- 185.223.152.8 (https://ipdebrief.com/185.223.152.8)
- 185.223.152.9 (https://ipdebrief.com/185.223.152.9)
- 185.223.152.10 (https://ipdebrief.com/185.223.152.10)
- 185.223.152.11 (https://ipdebrief.com/185.223.152.11)
- 185.223.152.12 (https://ipdebrief.com/185.223.152.12)
- 185.223.152.14 (https://ipdebrief.com/185.223.152.14)
- 185.223.152.15 (https://ipdebrief.com/185.223.152.15)
- 185.223.152.16 (https://ipdebrief.com/185.223.152.16)

---

Source: IPDebrief, "185.223.152.203 IP intelligence", https://ipdebrief.com/185.223.152.203, updated 2026-10-06. Assessments are probabilistic.