185.132.186.22
185.132.186.22 is an IPv4 address operated by es-digitalrm-1-mnt (AS206092), geolocated to Johannesburg, South Africa. As of October 7, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.
# IP INTELLIGENCE BRIEFING
Target: 185.132.186.22/32
Classification: Low Risk / Non-Threatening
Report Date: Current Analysis Cycle
## Executive Summary
IP address 185.132.186.22 is assessed as low-risk with no active threat indicators. The address belongs to a residential/business subnet with minimal abuse density and no evidence of malicious activity.
## Technical Profile
- Risk Score: 0 (Low Risk)
- ASN: 206092 (SECFIREWALLAS - F.N.S. HOLDINGS LIMITED, CY)
- Geolocation: GB (United Kingdom) / Europe/London
- BGP Prefix: 185.132.186.0/24
- Network Role: Firewalled / No Services Detected
- DNSSEC Status: Valid
- PTR Records: None resolved
## Threat Assessment
- Malicious Activity: None detected
- Blacklist Status: Listed on 8 DNSBLs (current listed count: 0)
- Tor Exit: No
- Known Attacker: No
- Spam Source: No
- Campaign Indicators: None
- Honeypot Hits: 0
- WAF Violations: 0
## Network Context
- Subnet Abuse Density: 0
- Subnet Classification: Residential/Commercial
- Neighbor Analysis: 79 sibling IPs in /24 subnet
- High risk neighbors: 0
- Medium risk neighbors: 11
- Low risk neighbors: 68
- Route Stability: False
- MOAS Status: No
## Observation History
11 signal observations recorded. Recent observations indicate:
- DNSSEC validation confirmed
- ASN 206092 consistently identified
- No PTR record resolution
- No threat persistence detected
## Relationship Graph
No correlated relationships identified (subnets, hostnames, organizations, certificates).
## Recommended Actions
- Firewall Rules: None required
- Blocking Recommendation: Not recommended
- Monitoring Status: Standard monitoring sufficient
- Alerting: No threshold exceeded
## Intelligence Narrative
The target IP 185.132.186.22 presents no security concerns. The address belongs to ASN 206092 under F.N.S. HOLDINGS LIMITED (Cyprus) and routes through the 185.132.186.0/24 prefix. No active services or open ports detected on the host, indicating the system is either headless, firewalled, or in maintenance mode. The subnet exhibits low abuse density (0.0) with the majority of neighbors (68/79) classified as low-risk. No threat intelligence feeds correlate this IP to malicious activity, and behavioral indicators show no enumeration strikes or honeypot hits. The absence of PTR records suggests this may be a non-routed or non-public-facing system. Standard network monitoring practices are sufficient; no blocking or escalation required.
---
*Analysis based on IPDebrief intelligence platform data. All indicators current as of analysis timestamp.*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | es-digitalrm-1-mnt |
| ASN | AS206092 |
| Network Name | ZA-IPXO-DRM-20220602 |
| CIDR Block | 185.132.186.0/24 |
| RIR | RIPE |
| Country | ZA |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS206092 |
| Network Prefix | 185.132.186.0/24 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 0% | 0 | 0 |
| services | 0% | 0 | 0 |
| ownership | 0% | 0 | 0 |
| reputation | 25% | 1 | 1 |
| geolocation | 25% | 1 | 1 |
| Overall | 12% | 3 | 3 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-17 11:04:16 UTC |
| Last Seen | 2026-10-07 07:09:39 UTC |
| Profile Built | 2026-10-07 07:10:16 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 20 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 185.132.186.22
Who owns the IP address 185.132.186.22?
185.132.186.22 is registered to es-digitalrm-1-mnt. The address falls within the 185.132.186.0/24 network block. Registration is held at RIPE.
Where is 185.132.186.22 located?
Geolocation data places 185.132.186.22 in Johannesburg, Gauteng, South Africa. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 185.132.186.22 malicious or safe?
185.132.186.22 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.