# 185.132.186.21 — IP Intelligence Summary 185.132.186.21 is an IPv4 address operated by es-digitalrm-1-mnt (AS206092), geolocated to Johannesburg, South Africa. As of October 6, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected. - Canonical page: https://ipdebrief.com/185.132.186.21 - Last updated: 2026-10-06 ## Ownership - Organization: es-digitalrm-1-mnt - Network name: ZA-IPXO-DRM-20220602 - Allocated block: 185.132.186.0/24 - ASN: AS206092 (https://ipdebrief.com/asn/206092) - Regional registry: RIPE ## Location - City: Johannesburg - Region: Gauteng - Country: South Africa - Time zone: — ## Network classification - Infrastructure type: — - Datacenter / hosting: no - Residential: no - Mobile: no - Anycast: no - Tor exit node: no - VPN: no - Proxy: no ## Risk assessment - Assessment: Low Risk (25/100) - Blocklist listings: 0 - Suspicious activity indicators: no - Spam source: no ## Analyst narrative \# IP Intelligence Briefing: 185.132.186.21/32 **Date:** 2026-07-28 **Classification:** Low Risk \--- \## Executive Summary IP address 185.132.186.21 is classified as **Low Risk** with a risk score of 25. The IP belongs to autonomous system 206092 and is associated with the network block 185.132.186.0/24. The address shows no active threat indicators, no known malicious campaigns, and no open services. Current observation indicates the IP is firewalled with no services exposed. \--- \## Ownership and Network Profile | Attribute | Value | |-----------|-------| | ASN | 206092 | | Organization | es-digitalrm-1-mnt | | Netname | ZA-IPXO-DRM-20220602 | | RIR | RIPE | | CIDR Block | 185.132.186.0/24 | | Country | GB (London) | | Registration Date | 2015-12-23 | | Abuse Contact | Available via RDAP | \--- \## Threat Assessment **Overall Risk Score:** 25 (Low Risk) **Threat Indicators:** \- **Known Attacker:** No \- **Spam Source:** No \- **Tor Exit Node:** No \- **Blacklist Count:** 0 (control plane shows 1 DNSBL listing out of 8 total lists) \- **Abuse Confidence Score:** Not available \- **Known Campaigns:** None identified **Reputation Sources:** Multiple sources queried; no active threat signals detected. \--- \## Network Infrastructure and Services **Service Status:** Firewalled / No Services | Category | Status | |----------|--------| | Open Ports | None detected | | TLS Certificate | None | | HTTP Title | None | | Hosted Domains | 0 | | PTR Hostnames | None | | DNS Forward Resolution | Not confirmed | | Email Auth (SPF/DMARC) | Not configured | **Control Plane Data:** \- DNSSEC Valid: Yes \- Route Stability: Not stable \- BGP Prefix: 185.132.186.0/24 \- RPKI State: Not available \- IRR Consistency: Not available \--- \## Neighborhood Analysis (185.132.186.0/24) **Subnet Overview:** \- **Total Siblings:** 254 IPs in /24 block \- **Abuse Density:** 0 \- **Risk Distribution:** \- High Risk: 0 \- Medium Risk: 11 \- Low Risk: 68 **Sample Neighbor IPs:** | IP | Risk Score | Authority Score | |----|------------|-----------------| | 185.132.186.1 | 25 | 50 | | 185.132.186.3 | 25 | 50 | | 185.132.186.5 | 0 | 50 | | 185.132.186.6 | 0 | 50 | | 185.132.186.8 | 0 | 50 | The subnet exhibits low overall abuse density with the majority of IPs (68 of 79 observed) classified as low risk. \--- \## Geolocation Data | Field | Value | |-------|-------| | Country | GB (Great Britain) | | City | London | | Region | Gauteng | | Timezone | Europe/London | | Geo Consensus | No | | Geo Plausible | N/A | **Note:** Geographic data shows inconsistencies (GB country with Gauteng region designation). Multiple geo sources were queried but consensus not achieved. \--- \## Historical Observations **Total Observations:** 13 signals recorded **Recent Activity (2026-07-28):** \- DNSSEC validation confirmed on reverse zone 21.186.132.185.in-addr.arpa \- ASN information resolved as SECFIREWALLAS - F.N.S. HOLDINGS LIMITED, CY (RIPE registry) \- DNSBL listing detected with high severity rating \- Operator score: 0 \- Threat persistence days: 0 \--- \## Relationships **Identified Entities:** \- **Network:** ZA-IPXO-DRM-20220602 (Same Network relationship) No additional relationships to organizations, hostnames, or certificates identified. \--- \## Traceroute Analysis | Metric | Value | |--------|-------| | Hop Count | 15 | | First Hop RTT | 0.2ms | | Last Hop RTT | 265.1ms | | Timed Out Hops | 2 | | Transit Networks | Comcast, Cogent | \--- \## Recommended Actions **Current Status:** No immediate action required. **Firewall Rules:** None generated based on current risk profile. **Note:** These recommendations are probabilistic and should be combined with other security signals before implementing blocking rules. \--- \## Intelligence Assessment IP 185.132.186.21 presents as a low-risk address with no active threat indicators. The IP is associated with a legitimate autonomous system and shows no evidence of malicious activity. The subnet environment is predominantly low-risk with minimal abuse density. Current service status indicates the IP is firewalled with no exposed services. **Threat Level:** Low **Recommended Action:** Monitor **Priority:** Low \--- *This briefing was generated using IPDebrief intelligence tools. All data is derived from authoritative sources and should be validated against organizational threat intelligence policies before operational implementation.* ## Nearby addresses - 185.132.186.1 (https://ipdebrief.com/185.132.186.1) - 185.132.186.3 (https://ipdebrief.com/185.132.186.3) - 185.132.186.5 (https://ipdebrief.com/185.132.186.5) - 185.132.186.6 (https://ipdebrief.com/185.132.186.6) - 185.132.186.8 (https://ipdebrief.com/185.132.186.8) - 185.132.186.10 (https://ipdebrief.com/185.132.186.10) - 185.132.186.12 (https://ipdebrief.com/185.132.186.12) - 185.132.186.13 (https://ipdebrief.com/185.132.186.13) - 185.132.186.15 (https://ipdebrief.com/185.132.186.15) - 185.132.186.16 (https://ipdebrief.com/185.132.186.16) - 185.132.186.18 (https://ipdebrief.com/185.132.186.18) - 185.132.186.19 (https://ipdebrief.com/185.132.186.19) --- Source: IPDebrief, "185.132.186.21 IP intelligence", https://ipdebrief.com/185.132.186.21, updated 2026-10-06. Assessments are probabilistic.