168.100.149.204📋 Copy

IP Intelligence Briefing: 168.100.149.204

*Generated via IPDebrief Analysis*

---

**1. Core Profile**

• Risk Score: 25 (Low Risk)
• Ownership: Ahrefs Pte Ltd (ASN 140577, ARIN-regulated)
• Geolocation: Ashburn, VA, US (39.05°N, -77.49°E)
• Network Role: Firewalled / No Services (no open ports or TLS certs)
• Threat Indicators: No malware, phishing, or exploit activity detected.

---

**2. Observational History**

• Recent Activity:

- DNS resolution for `proxy-us004-san4.ahrefs.net` (confirmed).

- BGP prefix `168.100.144.0/20` associated with Ahrefs.

- DNSSEC and CAA records validated (no spoofing detected).

• Stability: No recent network changes or route instability.

---

**3. Relationship Graph**

• Key Associations:

- Directly linked to Ahrefs' `AHREFS-US` network (same /20 subnet).

- DNS ties to `proxy-us004-san4.ahrefs.net` (likely a proxy server).

- No connections to known malicious entities, C2 servers, or botnets.

---

**4. Neighborhood Analysis**

• Subnet: `168.100.149.204/24`
• Neighbor Risk:

- 79% low risk, 20% medium risk, 1% high risk.

- No abuse density detected in the subnet.

• Notable Neighbors:

- `168.100.149.2` (medium risk, likely benign).

- `168.100.149.0` (low risk, Ahrefs infrastructure).

---

**5. Threat Assessment**

• Likelihood of Malicious Use:

- Low: IP is part of a legitimate company's infrastructure.

- No historical exploitation, spam, or phishing signals.

• SOC Action:

- Monitor for unexpected traffic patterns or deviations from normal usage.

- No immediate mitigation required; focus on network segmentation if sensitive data is involved.

---

Conclusion:

168.100.149.204 is a benign IP associated with Ahrefs' proxy services. No evidence of compromise or malicious activity. Continue monitoring for anomalies but no urgent action needed.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.