202.8.40.10📋 Copy

# IP INTELLIGENCE BRIEFING

Subject: 202.8.40.10/32

Classification: Legitimate Infrastructure – Low Risk

Date: [Current Date]

Analyst: IPDebrief Intelligence Team

---

## EXECUTIVE SUMMARY

IP 202.8.40.10 is identified as part of Ahrefs Pte Ltd's crawler infrastructure. The address operates within a low-risk network environment with no active threat indicators. Classification analysis indicates legitimate web crawler operations, not malicious activity.

---

## OWNERSHIP & ATTRIBUTION

• Organization: Ahrefs Pte Ltd administrator
• Network Name: AHREFS-CRAWLER-A-USA
• ASN: 140577
• CIDR Block: 202.8.40.0/23
• RIR: APNIC (Regional Internet Registry)
• Abuse Contact: network-abuse@ahrefs.com

---

## GEOLOCATION

• Country: United States (US)
• Region: Virginia (VA)
• City: Ashburn
• Coordinates: 39.83°N, -98.58°W (inference-based)
• Timezone: America/New_York
• Location Confidence: Moderate (28% confidence on some signals)

---

## THREAT ASSESSMENT

• Overall Risk Score: 25 (Low Risk)
• Reputation: Low Risk
• Abuse Confidence Score: Not applicable
• Blacklist Status: Listed on 1 of 8 DNSBLs
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Known Campaigns: None detected
• Persistently Malicious: No

---

## NETWORK SERVICES

• Open Ports: None
• Service Status: Firewalled / No Services
• HTTP Title: Not available
• TLS Certificate: Not detected
• DNS PTR: sardine010.ahrefs.net

---

## NEIGHBORHOOD ANALYSIS

Subnet: 202.8.40.10/24

• Total Neighbors Analyzed: 100
• Abuse Density: 0%
• Risk Distribution:

- High Risk: 0

- Medium Risk: 5

- Low Risk: 95

• Authority Score (Average): 60
• Conclusion: Subnet demonstrates low abuse density with predominantly legitimate infrastructure

---

## OBSERVATION HISTORY

Total Observations: 19

Recent Activity (2026-07-24):

• Subnet classification: "mostly_clean"
• Inherited risk: 4
• Active siblings: 57
• Threat siblings: 15
• Ownership changes: 0
• Threat persistence days: 0
• Threat observation count: 1

Temporal Indicators:

• No persistent malicious behavior detected
• Stable network ownership
• Single threat observation recorded

---

## RELATIONSHIP GRAPH

• DNS Associations: sardine010.ahrefs.net (multiple entries)
• Network Associations: AHREFS-CRAWLER-A-USA
• BGP Prefix: 202.8.40.0/22
• Route Stability: Unstable (isRouteStable: false)
• Route Changes (30d): 0

---

## CONTROL PLANE

• Origin ASN: 140577
• RPKI State: Not validated
• IRR Consistency: Not validated
• DNSSEC: Valid
• CAA Records: Present
• DNSBL Listed: 1 of 8 lists

---

## RECOMMENDED ACTIONS

Firewall Rule: No blocking recommended

Classification: Allow traffic (legitimate infrastructure)

Monitoring: Standard monitoring applies

Rationale: This IP belongs to Ahrefs, a well-known SEO analytics provider. The network name (AHREFS-CRAWLER-A-USA) indicates legitimate web crawler operations. Low risk score and clean neighborhood analysis support permissive handling.

---

## INTELLIGENCE NOTES

This infrastructure appears designed for web crawling and SEO data collection operations typical of Ahrefs' business model. The presence of "crawling" in the network name and the associated hostname (sardine010.ahrefs.net) confirm legitimate operational use. The single DNSBL listing may relate to temporary rate-limiting during crawling operations rather than malicious behavior.

Confidence Level: High

Recommendation: Treat as legitimate infrastructure. No security action required.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.