# 185.132.186.18 — IP Intelligence Summary

185.132.186.18 is an IPv4 address operated by es-digitalrm-1-mnt (AS206092), geolocated to Johannesburg, South Africa. As of September 2, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/185.132.186.18
- Last updated: 2026-09-02

## Ownership

- Organization: es-digitalrm-1-mnt
- Network name: ZA-IPXO-DRM-20220602
- Allocated block: 185.132.186.0/24
- ASN: AS206092 (https://ipdebrief.com/asn/206092)
- Regional registry: RIPE

## Location

- City: Johannesburg
- Region: Gauteng
- Country: South Africa
- Time zone: —

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (25/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Analyst narrative

\# IP Intelligence Briefing: 185.132.186.18/32

\## Executive Summary

**185.132.186.18** is a low-risk IP address located in Johannesburg, South Africa, associated with RIPE NCC-registered network ZA-IPXO-DRM-20220602 (ASN 206092). The address presents minimal threat indicators and operates within a subnet classified as "mostly_clean" with 6.25% abuse density. No active security actions or firewall rules are recommended at this time.

\---

\## Risk Profile Assessment

| Metric | Value |

|--------|-------|

| Overall Risk Score | 25 (Low Risk) |

| Reputation | Low Risk |

| Provider Score | 0 |

| Authority Score | 0 |

| Stability Score | 0 |

| Threat Observation Count | 0 |

| Is Persistently Malicious | No |

\### Network Classification

\- **Infrastructure Type:** Firewalled / No Services

\- **Open Ports:** None detected

\- **Tor Exit Node:** No

\- **Known Attacker:** No

\- **Spam Source:** No

\- **Blacklist Count:** 0

\- **DNSBL Listed:** 1 of 8 lists

\---

\## Geolocation and Network Context

**Location:** Johannesburg, Gauteng Province, South Africa (ZA)

\- **ASN:** 206092

\- **Organization:** es-digitalrm-1-mnt

\- **CIDR Block:** 185.132.186.0/24

\- **RIR:** RIPE

\- **Registration Date:** Not available

**Network Connectivity:**

\- **Hop Count:** 15

\- **RTT:** Average 257.8ms (Minimum 255ms)

\- **Transit Networks:** Comcast, Cogent

\- **Geo Validation:** Plausible (Distance: 8,993.8km)

\- **DNSSEC:** Valid

\---

\## Neighborhood Analysis (185.132.186.0/24)

The /24 subnet contains 80 total sibling IP addresses with the following risk distribution:

\- **High Risk:** 0

\- **Medium Risk:** 11

\- **Low Risk:** 68

**Subnet Metrics:**

\- **Abuse Density:** 0.0625 (6.25%)

\- **Classification:** mostly_clean

\- **Active Siblings:** 4

\- **Threat Siblings:** 5

Sample neighbor IPs with risk score 25 include: 185.132.186.1, 185.132.186.3, 185.132.186.5, 185.132.186.6, 185.132.186.8. The subnet demonstrates consistent low-risk profiles across the majority of addresses.

\---

\## Observed History

**Total Observations:** 16 signals recorded (most recent: July 28, 2026)

**Key Historical Indicators:**

\- **Ownership Changes:** 0

\- **Threat Persistence Days:** 0

\- **Operator Score:** 0.1304 (Minimal)

\- **Geo Consensus:** Valid

\- **Stability:** No changes detected

The IP has maintained consistent characteristics throughout the observation period with no degradation in reputation or emergence of new threat signals.

\---

\## Relationship Graph

**Connected Entities:** 3 relationships identified

\- All relationships classified as "Same Network"

\- Target network identifier: ZA-IPXO-DRM-20220602

\- No cross-boundary associations detected (hostnames, organizations, or certificates)

\---

\## Security Actions & Recommendations

**Current Status:** No actionable security measures required

**Rationale:** The IP presents no active threat indicators. Firewall rules, WAF policies, and blocking measures are not recommended at this time. Monitor for any changes in threat profile or neighborhood activity.

\---

\## Threat Intelligence Conclusion

185.132.186.18 is a benign infrastructure IP with low-risk characteristics. The address is firewalled with no accessible services, operates within a predominantly clean subnet, and shows no historical threat behavior. SOC teams may treat traffic from this IP as low-priority with standard monitoring practices. No immediate blocking or investigation actions are warranted.

## Nearby addresses

- 185.132.186.1 (https://ipdebrief.com/185.132.186.1)
- 185.132.186.3 (https://ipdebrief.com/185.132.186.3)
- 185.132.186.5 (https://ipdebrief.com/185.132.186.5)
- 185.132.186.6 (https://ipdebrief.com/185.132.186.6)
- 185.132.186.8 (https://ipdebrief.com/185.132.186.8)
- 185.132.186.10 (https://ipdebrief.com/185.132.186.10)
- 185.132.186.12 (https://ipdebrief.com/185.132.186.12)
- 185.132.186.13 (https://ipdebrief.com/185.132.186.13)
- 185.132.186.15 (https://ipdebrief.com/185.132.186.15)
- 185.132.186.16 (https://ipdebrief.com/185.132.186.16)
- 185.132.186.19 (https://ipdebrief.com/185.132.186.19)
- 185.132.186.21 (https://ipdebrief.com/185.132.186.21)

---

Source: IPDebrief, "185.132.186.18 IP intelligence", https://ipdebrief.com/185.132.186.18, updated 2026-09-02. Assessments are probabilistic.