185.132.186.21 is an IPv4 address operated by es-digitalrm-1-mnt (AS206092), geolocated to Johannesburg, South Africa. As of October 6, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.
# IP Intelligence Briefing: 185.132.186.21/32
Date: 2026-07-28
Classification: Low Risk
---
## Executive Summary
IP address 185.132.186.21 is classified as Low Risk with a risk score of 25. The IP belongs to autonomous system 206092 and is associated with the network block 185.132.186.0/24. The address shows no active threat indicators, no known malicious campaigns, and no open services. Current observation indicates the IP is firewalled with no services exposed.
---
## Ownership and Network Profile
| Attribute | Value |
|---|---|
| ASN | 206092 |
| Organization | es-digitalrm-1-mnt |
| Netname | ZA-IPXO-DRM-20220602 |
| RIR | RIPE |
| CIDR Block | 185.132.186.0/24 |
| Country | GB (London) |
| Registration Date | 2015-12-23 |
| Abuse Contact | Available via RDAP |
---
## Threat Assessment
Overall Risk Score: 25 (Low Risk)
Threat Indicators:
- Known Attacker: No
- Spam Source: No
- Tor Exit Node: No
- Blacklist Count: 0 (control plane shows 1 DNSBL listing out of 8 total lists)
- Abuse Confidence Score: Not available
- Known Campaigns: None identified
Reputation Sources: Multiple sources queried; no active threat signals detected.
---
## Network Infrastructure and Services
Service Status: Firewalled / No Services
| Category | Status |
|---|---|
| Open Ports | None detected |
| TLS Certificate | None |
| HTTP Title | None |
| Hosted Domains | 0 |
| PTR Hostnames | None |
| DNS Forward Resolution | Not confirmed |
| Email Auth (SPF/DMARC) | Not configured |
Control Plane Data:
- DNSSEC Valid: Yes
- Route Stability: Not stable
- BGP Prefix: 185.132.186.0/24
- RPKI State: Not available
- IRR Consistency: Not available
---
## Neighborhood Analysis (185.132.186.0/24)
Subnet Overview:
- Total Siblings: 254 IPs in /24 block
- Abuse Density: 0
- Risk Distribution:
- High Risk: 0
- Medium Risk: 11
- Low Risk: 68
Sample Neighbor IPs:
| IP | Risk Score | Authority Score |
|---|---|---|
| 185.132.186.1 | 25 | 50 |
| 185.132.186.3 | 25 | 50 |
| 185.132.186.5 | 0 | 50 |
| 185.132.186.6 | 0 | 50 |
| 185.132.186.8 | 0 | 50 |
The subnet exhibits low overall abuse density with the majority of IPs (68 of 79 observed) classified as low risk.
---
## Geolocation Data
| Field | Value |
|---|---|
| Country | GB (Great Britain) |
| City | London |
| Region | Gauteng |
| Timezone | Europe/London |
| Geo Consensus | No |
| Geo Plausible | N/A |
Note: Geographic data shows inconsistencies (GB country with Gauteng region designation). Multiple geo sources were queried but consensus not achieved.
---
## Historical Observations
Total Observations: 13 signals recorded
Recent Activity (2026-07-28):
- DNSSEC validation confirmed on reverse zone 21.186.132.185.in-addr.arpa
- ASN information resolved as SECFIREWALLAS - F.N.S. HOLDINGS LIMITED, CY (RIPE registry)
- DNSBL listing detected with high severity rating
- Operator score: 0
- Threat persistence days: 0
---
## Relationships
Identified Entities:
- Network: ZA-IPXO-DRM-20220602 (Same Network relationship)
No additional relationships to organizations, hostnames, or certificates identified.
---
## Traceroute Analysis
| Metric | Value |
|---|---|
| Hop Count | 15 |
| First Hop RTT | 0.2ms |
| Last Hop RTT | 265.1ms |
| Timed Out Hops | 2 |
| Transit Networks | Comcast, Cogent |
---
## Recommended Actions
Current Status: No immediate action required.
Firewall Rules: None generated based on current risk profile.
Note: These recommendations are probabilistic and should be combined with other security signals before implementing blocking rules.
---
## Intelligence Assessment
IP 185.132.186.21 presents as a low-risk address with no active threat indicators. The IP is associated with a legitimate autonomous system and shows no evidence of malicious activity. The subnet environment is predominantly low-risk with minimal abuse density. Current service status indicates the IP is firewalled with no exposed services.
Threat Level: Low
Recommended Action: Monitor
Priority: Low
---
*This briefing was generated using IPDebrief intelligence tools. All data is derived from authoritative sources and should be validated against organizational threat intelligence policies before operational implementation.*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | es-digitalrm-1-mnt |
| ASN | AS206092 |
| Network Name | ZA-IPXO-DRM-20220602 |
| CIDR Block | 185.132.186.0/24 |
| RIR | RIPE |
| Country | ZA |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS206092 |
| Network Prefix | 185.132.186.0/24 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 0% | 0 | 0 |
| services | 0% | 0 | 0 |
| ownership | 25% | 1 | 2 |
| reputation | 25% | 1 | 1 |
| geolocation | 25% | 1 | 1 |
| Overall | 16% | 4 | 5 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-17 11:04:16 UTC |
| Last Seen | 2026-10-06 09:31:24 UTC |
| Profile Built | 2026-10-06 09:31:44 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 20 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 185.132.186.21
Who owns the IP address 185.132.186.21?
185.132.186.21 is registered to es-digitalrm-1-mnt. The address falls within the 185.132.186.0/24 network block. Registration is held at RIPE.
Where is 185.132.186.21 located?
Geolocation data places 185.132.186.21 in Johannesburg, Gauteng, South Africa. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 185.132.186.21 malicious or safe?
185.132.186.21 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.