# 202.8.40.101 — IP Intelligence Summary

202.8.40.101 is an IPv4 address operated by IRT-AHREFS-US (AS140577), geolocated to Ashburn, United States. Its reverse DNS name is sardine101.ahrefs.net. As of November 5, 2026, IPDebrief rates it Moderate Risk (50/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/202.8.40.101
- Last updated: 2026-11-05

## Ownership

- Organization: IRT-AHREFS-US
- Network name: AHREFS-CRAWLER-A-USA
- Allocated block: 202.8.40.0/23
- ASN: AS140577 (https://ipdebrief.com/asn/140577)
- Regional registry: APNIC

## Location

- City: Ashburn
- Region: Virginia
- Country: United States
- Time zone: —

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Moderate Risk (50/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Reverse DNS

- sardine101.ahrefs.net
- Forward-confirmed: yes

## Exposed services

- 22/tcp — ssh

## Analyst narrative

IP 202.8.40.101 was classified as Moderate Risk with an overall risk score of 50. Ownership records linked the address to Ahrefs Pte Ltd administrator (ASN 140577, netname: AHREFS-CRAWLER-A-USA) operating within the 202.8.40.0/23 block. Geolocation data assigned the IP to Ashburn, VA, US, though RTT physics measurements contradicted the claimed distance.

The address resolved to hostname sardine101.ahrefs.net with reverse DNS confirmation. No open ports or active services were detected, classifying the role as firewalled infrastructure. The IP was listed on two DNSBLs. Operational analysis recommended blocking the address due to elevated risk from multiple threat signals.

Network context showed a subnet abuse density of 0.0194. The address lacked RPKI validation and IRR consistency. No known campaigns or specific threat actor classifications were associated. The current intent classification remained Unknown.

## Nearby addresses

- 202.8.40.1 (https://ipdebrief.com/202.8.40.1)
- 202.8.40.2 (https://ipdebrief.com/202.8.40.2)
- 202.8.40.3 (https://ipdebrief.com/202.8.40.3)
- 202.8.40.5 (https://ipdebrief.com/202.8.40.5)
- 202.8.40.7 (https://ipdebrief.com/202.8.40.7)
- 202.8.40.9 (https://ipdebrief.com/202.8.40.9)
- 202.8.40.10 (https://ipdebrief.com/202.8.40.10)
- 202.8.40.11 (https://ipdebrief.com/202.8.40.11)
- 202.8.40.13 (https://ipdebrief.com/202.8.40.13)
- 202.8.40.15 (https://ipdebrief.com/202.8.40.15)
- 202.8.40.16 (https://ipdebrief.com/202.8.40.16)
- 202.8.40.19 (https://ipdebrief.com/202.8.40.19)

---

Source: IPDebrief, "202.8.40.101 IP intelligence", https://ipdebrief.com/202.8.40.101, updated 2026-11-05. Assessments are probabilistic.