202.8.43.254
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
Whitelisted Subnet
Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.
202.8.43.254 is on our whitelist as Ahrefs Crawler via the subnet 202.8.40.0/22.
- ISP
- Ahrefs Crawler B
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS140577
- Hostname(s)
- proxy-us004-sa2.ahrefs.net
- Domain Name
- ahrefs.com
- Country
- 🇺🇸 United States of America
- City
- Ashburn, Virginia
Abuse Reports
Total reports
29 from
16 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week.
This IP is on our whitelist as Ahrefs Crawler.
Shared services like this are often reported for traffic that is not abuse, so review the reports
before blocking.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 ipblock.com |
IPBlock protected site ID [4678-sl].
Bad agent, site scraper bot.
|
Bad Web Bot | |
| 🇺🇸 TPI-Abuse |
|
Brute-Force Bad Web Bot Web App Attack | |
| 🇬🇧 Mendip_Defender |
202.8.43.254 - - [13/Nov/2026:17:19:19 +0000] "GET /robots.txt HTTP/1.1" 304 6642 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)"
...
|
Bad Web Bot | |
| 🇺🇸 ipblock.com |
IPBlock protected site ID [4678-sl].
Bad agent, site scraper bot.
|
Bad Web Bot | |
| 🇩🇪 klaus_ph |
[Thu Nov 12 16:45:12.097442 2026] [authz_core:error] [pid 415352] [client 202.8.43.254:40324] AH01630: client denied by server configuration: /home/allegronet.de/public_html/robots.txt
...
|
Bad Web Bot | |
| 🇧🇷 ICS Labs |
ICS Labs threat intelligence (ICS Feeds): Brute-Force, Exploited Host. Last observed 2026-11-12 UTC.
|
Brute-Force Exploited Host | |
| 🇺🇸 ipblock.com |
IPBlock protected site ID [4678-sl].
Exploit request, vulnerability scanner.
|
Hacking Bad Web Bot Web App Attack | |
| 🇨🇭 blinx |
Suspicious activity detected by Modsecurity
|
Web Spam Port Scan Hacking Bad Web Bot Web App Attack | |
| 🇺🇸 TPI-Abuse |
|
Brute-Force Bad Web Bot Web App Attack | |
| 🇩🇪 ghostwarriors |
Webpage scraping
|
Brute-Force Bad Web Bot Web App Attack | |
| 🇺🇸 TPI-Abuse |
|
Brute-Force Bad Web Bot Web App Attack | |
| Anonymous |
|
Bad Web Bot | |
| Anonymous |
apache vulnerability scan
|
Web App Attack | |
| 🇺🇸 ipblock.com |
IPBlock protected site ID [4678-sl].
Bad agent, site scraper bot.
|
Bad Web Bot | |
| 🇺🇸 SX Communications |
HTTP application-layer DoS / botnet traffic from 202.8.43.254: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host.
|
DDoS Attack Bad Web Bot Exploited Host |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown