# 202.8.40.10 — IP Intelligence Summary

202.8.40.10 is an IPv4 address operated by IRT-AHREFS-US (AS140577), geolocated to Ashburn, United States. Its reverse DNS name is sardine010.ahrefs.net. As of October 11, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/202.8.40.10
- Last updated: 2026-10-11

## Ownership

- Organization: IRT-AHREFS-US
- Network name: AHREFS-CRAWLER-A-USA
- Allocated block: 202.8.40.0/23
- ASN: AS140577 (https://ipdebrief.com/asn/140577)
- Regional registry: APNIC

## Location

- City: Ashburn
- Region: Virginia
- Country: United States
- Time zone: —

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (25/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Reverse DNS

- sardine010.ahrefs.net
- Forward-confirmed: yes

## Exposed services

- 22/tcp — ssh

## Analyst narrative

\# IP INTELLIGENCE BRIEFING

**Subject:** 202.8.40.10/32

**Classification:** Legitimate Infrastructure – Low Risk

**Date:** \[Current Date\]

**Analyst:** IPDebrief Intelligence Team

\---

\## EXECUTIVE SUMMARY

IP 202.8.40.10 is identified as part of Ahrefs Pte Ltd's crawler infrastructure. The address operates within a low-risk network environment with no active threat indicators. Classification analysis indicates legitimate web crawler operations, not malicious activity.

\---

\## OWNERSHIP & ATTRIBUTION

\- **Organization:** Ahrefs Pte Ltd administrator

\- **Network Name:** AHREFS-CRAWLER-A-USA

\- **ASN:** 140577

\- **CIDR Block:** 202.8.40.0/23

\- **RIR:** APNIC (Regional Internet Registry)

\- **Abuse Contact:** network-abuse@ahrefs.com

\---

\## GEOLOCATION

\- **Country:** United States (US)

\- **Region:** Virginia (VA)

\- **City:** Ashburn

\- **Coordinates:** 39.83°N, -98.58°W (inference-based)

\- **Timezone:** America/New_York

\- **Location Confidence:** Moderate (28% confidence on some signals)

\---

\## THREAT ASSESSMENT

\- **Overall Risk Score:** 25 (Low Risk)

\- **Reputation:** Low Risk

\- **Abuse Confidence Score:** Not applicable

\- **Blacklist Status:** Listed on 1 of 8 DNSBLs

\- **Known Attacker:** No

\- **Spam Source:** No

\- **Tor Exit Node:** No

\- **Known Campaigns:** None detected

\- **Persistently Malicious:** No

\---

\## NETWORK SERVICES

\- **Open Ports:** None

\- **Service Status:** Firewalled / No Services

\- **HTTP Title:** Not available

\- **TLS Certificate:** Not detected

\- **DNS PTR:** sardine010.ahrefs.net

\---

\## NEIGHBORHOOD ANALYSIS

**Subnet:** 202.8.40.10/24

\- **Total Neighbors Analyzed:** 100

\- **Abuse Density:** 0%

\- **Risk Distribution:**

\- High Risk: 0

\- Medium Risk: 5

\- Low Risk: 95

\- **Authority Score (Average):** 60

\- **Conclusion:** Subnet demonstrates low abuse density with predominantly legitimate infrastructure

\---

\## OBSERVATION HISTORY

**Total Observations:** 19

**Recent Activity (2026-07-24):**

\- Subnet classification: "mostly_clean"

\- Inherited risk: 4

\- Active siblings: 57

\- Threat siblings: 15

\- Ownership changes: 0

\- Threat persistence days: 0

\- Threat observation count: 1

**Temporal Indicators:**

\- No persistent malicious behavior detected

\- Stable network ownership

\- Single threat observation recorded

\---

\## RELATIONSHIP GRAPH

\- **DNS Associations:** sardine010.ahrefs.net (multiple entries)

\- **Network Associations:** AHREFS-CRAWLER-A-USA

\- **BGP Prefix:** 202.8.40.0/22

\- **Route Stability:** Unstable (isRouteStable: false)

\- **Route Changes (30d):** 0

\---

\## CONTROL PLANE

\- **Origin ASN:** 140577

\- **RPKI State:** Not validated

\- **IRR Consistency:** Not validated

\- **DNSSEC:** Valid

\- **CAA Records:** Present

\- **DNSBL Listed:** 1 of 8 lists

\---

\## RECOMMENDED ACTIONS

**Firewall Rule:** No blocking recommended

**Classification:** Allow traffic (legitimate infrastructure)

**Monitoring:** Standard monitoring applies

**Rationale:** This IP belongs to Ahrefs, a well-known SEO analytics provider. The network name (AHREFS-CRAWLER-A-USA) indicates legitimate web crawler operations. Low risk score and clean neighborhood analysis support permissive handling.

\---

\## INTELLIGENCE NOTES

This infrastructure appears designed for web crawling and SEO data collection operations typical of Ahrefs' business model. The presence of "crawling" in the network name and the associated hostname (sardine010.ahrefs.net) confirm legitimate operational use. The single DNSBL listing may relate to temporary rate-limiting during crawling operations rather than malicious behavior.

**Confidence Level:** High

**Recommendation:** Treat as legitimate infrastructure. No security action required.

## Nearby addresses

- 202.8.40.1 (https://ipdebrief.com/202.8.40.1)
- 202.8.40.2 (https://ipdebrief.com/202.8.40.2)
- 202.8.40.3 (https://ipdebrief.com/202.8.40.3)
- 202.8.40.5 (https://ipdebrief.com/202.8.40.5)
- 202.8.40.7 (https://ipdebrief.com/202.8.40.7)
- 202.8.40.9 (https://ipdebrief.com/202.8.40.9)
- 202.8.40.11 (https://ipdebrief.com/202.8.40.11)
- 202.8.40.13 (https://ipdebrief.com/202.8.40.13)
- 202.8.40.15 (https://ipdebrief.com/202.8.40.15)
- 202.8.40.16 (https://ipdebrief.com/202.8.40.16)
- 202.8.40.19 (https://ipdebrief.com/202.8.40.19)
- 202.8.40.21 (https://ipdebrief.com/202.8.40.21)

---

Source: IPDebrief, "202.8.40.10 IP intelligence", https://ipdebrief.com/202.8.40.10, updated 2026-10-11. Assessments are probabilistic.