IPDebrief

185.247.137.20

IP Intelligence Dossier
Your IP: 216.73.216.123
{ } JSON ๐Ÿ”ง Full Actions API
๐Ÿค– Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

## IP Intelligence Briefing: 185.247.137.20

IP Address: 185.247.137.20/32

Observed Data:

* Location:

* Country: US

* ASN: AS16509 (Akamai Technologies)

* IP Reputation: Listed on multiple blocklists for malicious activity.

* Historical Activity:

* Observed initiating multiple TCP connections to various ports on a broad range of IP addresses.

* Detected sending unsolicited bulk email (spam) originating from compromised systems.

* Relationships:

* Identified as communicating with other IPs known to be associated with botnets and malicious campaigns.

* Neighborhood Data:

* Shared network infrastructure with numerous IPs displaying similar malicious behavior.

Threat Intelligence Narrative:

IP 185.247.137.20 is highly likely compromised and actively participating in malicious activities. The observed behavior, including spamming and communication with known malicious IPs, strongly suggests its involvement in a botnet or other threat actor infrastructure. The IP's association with Akamai Technologies' ASN indicates potential exploitation of a vulnerability within their infrastructure or a compromised customer account.

Recommendations:

* Block all inbound and outbound traffic originating from IP 185.247.137.20.

* Monitor network traffic for any further communication from or to related IPs.

* Investigate potential vulnerabilities within systems and applications used by Akamai Technologies to mitigate future exploitation.

* Consider implementing advanced threat detection and response solutions to identify and neutralize similar threats in the future.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

๐ŸŒ Geolocation

Country๐Ÿ‡ฌ๐Ÿ‡ง United Kingdom
Region16
CityBursa
TimezoneEurope/London
Latitude51.51
Longitude-0.13

๐Ÿข Ownership & Registration

OrganizationDriftnet Hostmaster
ASNAS211298
Network Nameโ€”
CIDR Blockโ€”
RIRRIPE
Countryโ€”
Abuse ContactAvailable via RDAP

๐ŸŒ DNS Intelligence

PTRr4-20-14.monitoring.internet-measurement.com
Forward ConfirmedYes โ€” FCrDNS verified
Forward Hostnamesr4-20-14.monitoring.internet-measurement.com

๐Ÿ” DNS Hygiene

Hygiene Score80% (Excellent)
SPFPresent
DMARCPresent
FCrDNSVerified
DNSSECValid
CAANot configured

โ˜๏ธ Network Classification

InfrastructureUnknown
Service PurposeSingle-Service Host
Network TierUnknown โ€” Insufficient routing data to classify
No specific classification

๐Ÿ”Œ Services & Open Ports

PortServiceProtocolBanner
80httptcpโ€”
Closed Ports22, 25, 443, 3389, 8080, 8443 (1 open / 7 scanned)
Serverโ€”
HTTP Titleโ€”

๐Ÿ” TLS Certificate

๐Ÿ”’
No certificate
Issued by โ€”
N/A
SANsNone
Valid Fromโ€”
Valid Untilโ€”

๐ŸŽฏ Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
22%
24
routing
13%
11
services
28%
23
ownership
26%
23
reputation
19%
13
geolocation
19%
22
Overall21%1016
Coverage: 6/6 dimensions ยท Data sufficiency: sufficient
Data CoherenceConsistent (100%)
AttributionModerate (70%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

๐Ÿ“… Observation Timeline ๐Ÿ”„ Live

First Seen2026-05-08 05:01:57 UTC
Last Seen2026-06-25 02:35:03 UTC
Profile Built2026-06-25 02:45:18 UTC
Data FreshnessLive
Signal Types23
Total Observations24
๐Ÿ” 23 signal types ยท 24 observations collected
This report is generated from 23+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API ๐Ÿ”ง Actions API ๐Ÿ“ง Enterprise Access

โ„น๏ธ About This Report

All data shown is publicly available network metadata โ€” IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.