185.191.171.19📋 Copy

# IP Intelligence Briefing: 185.191.171.19/32

Date: 2026-07-23

Classification: Low Risk

Risk Score: 25/100

## Executive Summary

IP address 185.191.171.19 is a low-risk address associated with legitimate infrastructure. The IP is part of a subnet (185.191.171.0/24) with minimal abuse density and is DNS-resolved to Semrush bot infrastructure. No active threat campaigns or malicious indicators were identified.

## Technical Profile

## Threat Indicators

• Blacklist Count: 0
• DNSBL Listed: 1 of 8 lists
• Threat Campaigns: None detected
• Abuse Confidence Score: Not applicable
• Known Campaigns: None

## Network Neighborhood Analysis

The IP resides in subnet 185.191.171.0/24 with the following characteristics:

• Subnet Classification: Mostly Clean
• Abuse Density: 0.0526 (5.26%)
• Total Siblings: 19
• Active Siblings: 9
• Threat Siblings: 1
• Inherited Risk: 2

Neighbor risk distribution shows 17 low-risk, 1 medium-risk, and 0 high-risk IPs. The subnet demonstrates stable infrastructure with minimal malicious activity.

## Observations History

Analysis of 20 recent observations reveals:

• DNS Signals: Consistent resolution to semrush.com with valid CAA records
• Geolocation: London area (51.4964°N, 0.1224°W) with 473.7 km validation distance
• Threat Signals: One DNSBL listing observed with "high" severity classification
• RTT Metrics: Average 26.8ms, minimum 9.5ms

## Key Relationships

• Network Association: SCL66-rented1 (repeated multiple times)
• DNS Hostnames: 19.bl.bot.semrush.com
• Infrastructure Type: Cloud/Hosting infrastructure

## Recommended Actions

No immediate action required. The IP demonstrates:

• Legitimate DNS associations with established security tooling (Semrush)
• No open services or exposed ports
• Low-risk classification across all indicators
• Stable network infrastructure

SOC Monitoring Recommendation: Continue passive monitoring. No blocking or filtering recommended unless additional threat intelligence indicates otherwise. The single DNSBL listing appears to be a false positive given the legitimate infrastructure associations.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.