# 202.8.40.37 — IP Intelligence Summary 202.8.40.37 is an IPv4 address operated by Ahrefs Pte Ltd administrator (AS140577), geolocated to Ashburn, United States. Its reverse DNS name is sardine037.ahrefs.net. As of September 1, 2026, IPDebrief rates it Low Risk (0/100); no anonymizing service was detected. - Canonical page: https://ipdebrief.com/202.8.40.37 - Last updated: 2026-09-01 ## Ownership - Organization: Ahrefs Pte Ltd administrator - Network name: AHREFS-CRAWLER-A-USA - Allocated block: 202.8.40.0/23 - ASN: AS140577 (https://ipdebrief.com/asn/140577) - Regional registry: APNIC ## Location - City: Ashburn - Region: Virginia - Country: United States - Time zone: — ## Network classification - Infrastructure type: — - Datacenter / hosting: no - Residential: no - Mobile: no - Anycast: no - Tor exit node: no - VPN: no - Proxy: no ## Risk assessment - Assessment: Low Risk (0/100) - Blocklist listings: 0 - Suspicious activity indicators: no - Spam source: no ## Reverse DNS - sardine037.ahrefs.net - Forward-confirmed: yes ## Analyst narrative \# INTELLIGENCE BRIEFING: 202.8.40.37 **Date:** 2026-07-24 **Classification:** LOW RISK **Analyst:** SOC Intelligence Team \--- \## EXECUTIVE SUMMARY IP address 202.8.40.37 is classified as a low-risk infrastructure endpoint with no active threat indicators. The address resolves to Ahrefs network infrastructure and presents minimal operational risk to defensive networks. No immediate blocking or mitigation actions are recommended. \--- \## PROFILE ANALYSIS **Basic Information** \- **IP Address:** 202.8.40.37/32 \- **Reputation:** Low Risk \- **Risk Score:** 0.00 \- **Provider Score:** 0.00 \- **Authority Score:** 0.00 \- **Stability Score:** 0.00 **Geolocation** \- **Country:** United States (US) \- **Region:** Virginia \- **City:** Ashburn \- **Coordinates:** 39.05°N, -77.49°W \- **Timezone:** America/New_York \- **Geo Validation:** Consensus verified across multiple sources **Network Registration** \- **Origin ASN:** 140577 \- **BGP Prefix:** 202.8.40.0/23 \- **Control Plane Operator Score:** 0.3478 (Basic) \- **Route Stability:** Unstable (isRouteStable: false) \- **Route Changes (30d):** 0 \--- \## OWNERSHIP & INFRASTRUCTURE **DNS Resolution** \- **PTR Hostname:** sardine037.ahrefs.net \- **Forward Resolution:** Confirmed \- **Domain:** ahrefs.net \- **Hosted Domain Count:** 0 **Network Role Classification** \- **Infrastructure Type:** Infrastructure \- **Services:** Firewalled / No Services \- **Open Ports:** None detected \- **TLS Certificate:** Not present \- **HTTP Banner:** Not present **Security Classifications** \- **Is Cloud:** False \- **Is CDN:** False \- **Is VPN:** False \- **Is Proxy:** False \- **Is Tor Exit:** False \- **Is Hosting:** False \- **Is Mobile:** False \- **Is Residential:** False \- **Is Bogon:** False \- **Is Anycast:** False \--- \## THREAT INDICATORS **Active Threat Status:** CLEAN **Threat Feed Analysis** \- **Blacklist Count:** 0 \- **Abuse Confidence Score:** Not applicable (low risk profile) \- **Known Campaigns:** None \- **Threat Feeds:** None **Historical Observations** \- **Total Signal Observations:** 14 \- **Threat Persistence Days:** 0 \- **Is Persistently Malicious:** False \- **Honeypot Hits:** 0 \- **Enumeration Strikes:** 0 \- **WAF Violations:** 0 \- **Total Incidents:** 0 \--- \## NETWORK NEIGHBORHOOD ANALYSIS **Subnet:** 202.8.40.0/24 **Abuse Metrics** \- **Abuse Density:** 0.1135 (Low) \- **Subnet Classification:** Mostly Clean \- **Inherited Risk:** 4/100 **Neighbor Distribution** \- **Total Siblings:** 141 \- **Active Siblings:** 59 \- **Threat Siblings:** 16 \- **High Risk Neighbors:** 0 \- **Medium Risk Neighbors:** 5 \- **Low Risk Neighbors:** 95 **Notable Neighbor Risk Scores** \- 202.8.40.1: Risk Score 25, Authority Score 60 \- 202.8.40.2: Risk Score 0, Authority Score 60 \- 202.8.40.3: Risk Score 0, Authority Score 60 \--- \## RELATIONSHIP GRAPH **Connected Entities** \- **Type:** DNS Association \- **Target:** sardine037.ahrefs.net (hostname) \- **Total Relationships:** 1 **Cert Matches:** 0 **Correlated IPs:** 0 **Campaign Likelihood:** Not applicable \--- \## OBSERVATION HISTORY **Timeline of Signals (Recent 14 Observations)** | Timestamp | Signal Type | Key Finding | |-----------|-------------|-------------| | 2026-07-24 23:09:44 | Threat Indicator | ASN AS134078 (netpluz holdings private limited), Singapore | | 2026-07-24 23:09:36 | Subnet Analysis | Abuse density 0.1135, classification mostly_clean | | 2026-07-24 23:08:47 | Geolocation | Ashburn, Virginia, US (MaxMind GeoLite2) | | 2026-07-24 23:08:37 | Network Role | Not cloud/VPN/proxy/Tor/hosting | | 2026-07-24 23:08:10 | Operator Score | Basic (0.3478) | **Temporal Analysis** \- **Ownership Changes:** 0 \- **Avg Ownership Days:** Not applicable \- **Threat Observation Count:** 0 \--- \## RECOMMENDED ACTIONS **Security Recommendations:** None **Firewall Rules:** Not applicable **Rationale:** The IP address presents no active threat indicators, has a clean reputation score of 0, and is associated with Ahrefs infrastructure. No blocking or rate-limiting actions are warranted at this time. \--- \## TRACERoute & Performance **Hop Count:** 22 **First Hop RTT:** 0.2ms **Last Hop RTT:** 31ms **Timed Out Hops:** 13 **Transit Networks:** Comcast, Zayo \--- \## CONCLUSION IP 202.8.40.37 is a low-risk infrastructure endpoint associated with Ahrefs. The address demonstrates stable DNS resolution with no open services, no threat indicators, and resides within a subnet with low abuse density (0.1135). Historical data shows 14 observations with no persistent malicious activity. The single relationship to airmail hostname sardine037.ahrefs.net confirms association with Ahrefs' operational infrastructure. **SOC Recommendation:** Monitor passively. No blocking required. \--- **Generated by:** IPDebrief Intelligence Platform **Data Currency:** Real-time as of 2026-07-24 ## Nearby addresses - 202.8.40.1 (https://ipdebrief.com/202.8.40.1) - 202.8.40.2 (https://ipdebrief.com/202.8.40.2) - 202.8.40.3 (https://ipdebrief.com/202.8.40.3) - 202.8.40.5 (https://ipdebrief.com/202.8.40.5) - 202.8.40.7 (https://ipdebrief.com/202.8.40.7) - 202.8.40.9 (https://ipdebrief.com/202.8.40.9) - 202.8.40.10 (https://ipdebrief.com/202.8.40.10) - 202.8.40.11 (https://ipdebrief.com/202.8.40.11) - 202.8.40.13 (https://ipdebrief.com/202.8.40.13) - 202.8.40.15 (https://ipdebrief.com/202.8.40.15) - 202.8.40.16 (https://ipdebrief.com/202.8.40.16) - 202.8.40.19 (https://ipdebrief.com/202.8.40.19) --- Source: IPDebrief, "202.8.40.37 IP intelligence", https://ipdebrief.com/202.8.40.37, updated 2026-09-01. Assessments are probabilistic.