185.132.186.72📋 Copy

# IP Intelligence Briefing: 185.132.186.72/32

## Executive Summary

The target IP 185.132.186.72 presents a low-risk profile with no active threat indicators. The address is firewalled with no open services, exhibits minimal operator risk, and belongs to a subnet with negligible abuse density. No recommended blocking actions are warranted at this time.

---

## Network Profile & Classification

• IP Address: 185.132.186.72/32
• Risk Score: 0/100
• Provider Score: 0/100
• Authority Score: 0/100
• Operator Score: 0.1304 (Minimal)
• Network Role: Firewalled / No Services
• Service Purpose: None detected
• BGP Prefix: 185.132.186.0/24
• Origin ASN: 206092
• Route Stability: Unstable (0 route changes in 30 days)

---

## Geolocation Data

• Country: United Kingdom (GB)
• City: London
• Region: Gauteng
• Timezone: Europe/London
• GeoSource Count: 2
• Geo Consensus: Inconsistent (multiple sources disagree)

---

## Threat Intelligence Indicators

• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Blacklist Count: 0
• Abuse Confidence Score: Not reported
• Known Campaigns: None
• Threat Observation Count: 0
• Threat Persistence Days: 0
• Persistently Malicious: False

---

## Service & DNS Analysis

• Open Ports: None detected
• TLS Certificate: Not present
• HTTP Title: Not present
• Reverse DNS PTR: None
• Forward Resolution: None
• Hosted Domains: 0
• DNSSEC Valid: Yes
• DNSBL Listings: 0/8 total lists

---

## Neighborhood Assessment (185.132.186.0/24)

• Subnet Size: 256 addresses (/24)
• Total Siblings: 79 active IPs
• Abuse Density: 0%
• Risk Distribution:

- High Risk: 0

- Medium Risk: 11

- Low Risk: 68

• Threat Siblings: 0
• Inherited Risk: 0

---

## Observation History

Nine signals observed, with key observations including:

• Geolocation: Mixed signals showing Johannesburg, South Africa (confidence: 0.70) and London, GB (confidence: 0.30)
• DNSSEC: Validated (confidence: 0.90)
• Operator Score: Minimal (confidence: 0.50)
• DNS Listings: 8 total lists checked, 0 listings

---

## Relationship Graph

No external relationships detected. The IP has no associations with:

• Related subnets
• Hostnames
• Organizations
• Certificates

---

## Recommended Actions

No immediate actions required. The IP presents no actionable threat indicators:

• No firewall rules recommended
• No WAF rules required
• No blocking necessary

---

## Analyst Notes

The IP is properly firewalled with no exposed services. While the subnet contains 11 medium-risk neighbors, the target IP itself shows no malicious activity. The conflicting geolocation data (London vs Johannesburg) suggests potential routing anomalies but does not indicate compromise. Monitor for any changes in service exposure or threat indicators.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.