# 185.223.152.228 — IP Intelligence Summary 185.223.152.228 is an IPv4 address operated by netutils-mnt (AS396356), geolocated to Los Angeles, United Kingdom. As of September 30, 2026, IPDebrief rates it Moderate Risk (50/100); no anonymizing service was detected. - Canonical page: https://ipdebrief.com/185.223.152.228 - Last updated: 2026-09-30 ## Ownership - Organization: netutils-mnt - Network name: IPXO - Allocated block: 185.223.152.0/23 - ASN: AS396356 (https://ipdebrief.com/asn/396356) - Regional registry: RIPE ## Location - City: Los Angeles - Region: CA - Country: United Kingdom - Time zone: Europe/London ## Network classification - Infrastructure type: — - Datacenter / hosting: no - Residential: no - Mobile: no - Anycast: no - Tor exit node: no - VPN: no - Proxy: no ## Risk assessment - Assessment: Moderate Risk (50/100) - Blocklist listings: 0 - Suspicious activity indicators: no - Spam source: no ## Analyst narrative \## THREAT INTELLIGENCE BRIEFING **Target:** 185.223.152.228/32 **Classification:** Low Risk **Report Date:** 2026-07-28 \### Executive Summary The target IP (185.223.152.228) presents a low-risk profile with a risk score of 25. The address belongs to the IPXO network (ASN 396356, netutils-mnt) registered under RIPE. No active threat indicators, known attacker reputation, or spam source classification were detected. The IP shows "Firewalled / No Services" with no open ports detected during scanning. \### Network Ownership & Geolocation \- **Organization:** netutils-mnt (IPXO) \- **ASN:** 396356 \- **Country:** United States (Boston, MA) \- **RIR:** RIPE \- **CIDR Block:** 185.223.152.0/23 \- **Abuse Contact:** report@abuseradar.com \### Threat Assessment \- **Risk Score:** 25 (Low) \- **Abuse Confidence:** Not flagged \- **Tor Exit Node:** No \- **Known Attacker:** No \- **Spam Source:** No \- **Blacklist Count:** 0 \- **DNSBL Listings:** 1 of 8 lists \- **Control Plane:** BGP prefix 185.223.152.0/24, operator score 0.1304 (Minimal) \### Service & Network Behavior \- **Open Ports:** None detected \- **Services:** No services running \- **TLS Certificate:** None \- **PTR Hostnames:** None \- **Forward Resolution:** 0 records \- **HTTP Response:** No HTTP service detected \### Subnet Analysis (185.223.152.0/24) \- **Total Siblings:** 100 \- **Abuse Density:** 0 \- **Risk Distribution:** 0 high-risk, 10 medium-risk, 84 low-risk neighbors \- **Neighborhood Context:** Majority of subnet shows low-risk profiles \### Historical Observation Analysis 11 observations recorded. Notable signals include: \- Geolocation signals showing US (Los Angeles, California) and GB (Mostoles) reporting with confidence scores 0.30-0.95 \- ASN and organization data consistent across observations \- Operator score: 0.1304 (Minimal) \- No persistent malicious behavior detected \- Zero threat observation count and zero threat persistence days \### Related Entities \- **Network Relationships:** IPXO network associations confirmed \- **No additional hostnames, certificates, or organizational links detected** \### Recommended Actions Based on current risk profile, no immediate blocking or firewall actions are recommended. The IP presents minimal threat characteristics with no active malicious indicators. \--- *Intelligence compiled from IPDebrief platform data. Analysts should correlate with internal security logs and other threat feeds before taking action.* ## Nearby addresses - 185.223.152.4 (https://ipdebrief.com/185.223.152.4) - 185.223.152.5 (https://ipdebrief.com/185.223.152.5) - 185.223.152.6 (https://ipdebrief.com/185.223.152.6) - 185.223.152.7 (https://ipdebrief.com/185.223.152.7) - 185.223.152.8 (https://ipdebrief.com/185.223.152.8) - 185.223.152.9 (https://ipdebrief.com/185.223.152.9) - 185.223.152.10 (https://ipdebrief.com/185.223.152.10) - 185.223.152.11 (https://ipdebrief.com/185.223.152.11) - 185.223.152.12 (https://ipdebrief.com/185.223.152.12) - 185.223.152.14 (https://ipdebrief.com/185.223.152.14) - 185.223.152.15 (https://ipdebrief.com/185.223.152.15) - 185.223.152.16 (https://ipdebrief.com/185.223.152.16) --- Source: IPDebrief, "185.223.152.228 IP intelligence", https://ipdebrief.com/185.223.152.228, updated 2026-09-30. Assessments are probabilistic.