IP Intelligence Briefing: 202.8.41.37
Date: 2026-06-13
---
**1. Core Profile**
- Risk Score: 25 (Low Risk)
- Ownership: Registered to Ahrefs Pte Ltd (ASN 140577, APNIC).
- Geolocation:
- Primary: Boston, MA, USA (via MaxMind).
- Secondary: Ashburn, VA, USA (potential false positive or routing anomaly).
- Threat Indicators:
- No malicious activity detected (no blacklists, Tor, or known attacker campaigns).
- No DNS-based threats or phishing indicators.
---
**2. Network & Infrastructure**
- Network Role: Firewalled IP with no open services (no TLS/HTTP/FTP ports).
- Subnet: Part of 202.8.40.0/23 (Ahrefs-Crawler network).
- Neighbors:
- 100 IPs in subnet (94 low-risk, 6 medium-risk).
- No high-risk neighbors or subnet-wide abuse.
- BGP:
- Origin ASN: 140577 (Ahrefs).
- Route stability: Unstable (potential network reconfiguration).
---
**3. Historical Observations (30 Days)**
- Geolocation: Minor fluctuations (Boston vs. Ashburn).
- Ownership: Stable (no changes in ASN or registrant).
- Threat Signals:
- No new abuse reports or DNS anomalies.
- DNS resolution consistent with sardine293.ahrefs.net.
---
**4. Relationships**
- DNS: Linked to sardine293.ahrefs.net (likely a crawler or data collection host).
- Network: Shares subnet with other Ahrefs IPs (AHREFS-CRAWLER-A-USA).
- Certificates: No TLS certificates or server banners detected.
---
**5. Recommendations**
- Monitor: Track geolocation consistency and subnet stability.
- Firewall: No immediate blocking required; ensure no accidental exposure of internal services.
- Context: Ahrefs is a legitimate SEO company, but verify if this IP is part of their public crawler infrastructure.
Conclusion: 202.8.41.37 is a low-risk, legitimate IP associated with Ahrefsβ network. No actionable threats detected.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Ahrefs Pte Ltd administrator |
| ASN | AS140577 |
| Network Name | AHREFS-CRAWLER-A-USA |
| CIDR Block | 202.8.40.0/23 |
| RIR | APNIC |
| Country | US |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | sardine293.ahrefs.net |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | sardine293.ahrefs.net |
π DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
βοΈ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown β Insufficient routing data to classify |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 0% | 0 | 0 |
| services | 0% | 0 | 0 |
| ownership | 0% | 0 | 0 |
| reputation | 25% | 1 | 1 |
| geolocation | 0% | 0 | 0 |
| Overall | 8% | 2 | 2 |
| Data Coherence | Mostly Consistent (80%) β 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-06-05 19:23:38 UTC |
| Last Seen | 2026-06-13 07:23:41 UTC |
| Profile Built | 2026-06-13 07:32:04 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 22 |
Full dossier details are available via our API.