2.18.73.120
Intelligence Briefing: 2.18.73.120/32
Summary
The IP address 2.18.73.120 was assessed as Low Risk with a risk score of 25. Ownership records attributed the address to Akamai Technologies (ASN 16625, Netname AKAMAI-PA). Network role analysis identified the infrastructure as a Content Delivery Network (CDN) functioning as a web server.
Technical Observations
Active network services included TCP port 80 (HTTP) and TCP port 443 (HTTPS). The server banner identified as "AkamaiGHost." DNS resolution resolved to the PTR hostname a2-18-73-120.deploy.static.akamaitechnologies.com within the akamaitechnologies.com domain. TLS configuration utilized a Let's Encrypt certificate. The control plane indicated an origin ASN of 16625 with a BGP prefix of 2.18.72.0/22.
Geolocation and Anomalies
Geolocation data placed the node in Boston, MA, Netherlands, with an accuracy radius of 150km. However, validation checks flagged a contradiction where the claimed geolocation contradicted RTT physics measurements (observed RTT 17.0ms vs. minimum possible 113.3ms for 5663km). The neighborhood classification for the 2.18.73.120/24 subnet remained clean with zero abuse density and no threat siblings.
Threat Assessment
No known campaigns, indicators, or blacklist entries were associated with the IP. Despite the clean neighborhood and CDN infrastructure, the threat actor profile tagged the host as "Suspicious Host." Signal contradictions prompted a recommendation to Monitor due to signal inconsistencies.
Conclusion
The profile remained live with the latest observation recorded on 2026-09-16. While the IP operates within a legitimate CDN infrastructure, the signal contradictions suggest continued monitoring is required until further clarification.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | AKAM1-RIPE-MNT |
| ASN | AS16625 |
| Network Name | AKAMAI-PA |
| CIDR Block | 2.18.64.0/20 |
| RIR | RIPE |
| Country | EU |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | a2-18-73-120.deploy.static.akamaitechnologies.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | a2-18-73-120.deploy.static.akamaitechnologies.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | 4/6 domains |
| DMARC | 4/6 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 6 domains |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | AkamaiGHost |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | cert.int-x1.letsencrypt.orgcert.int-x2.letsencrypt.orgcert.int-x3.letsencrypt.orgcert.int-x4.letsencrypt.orgcert.root-x1.letsencrypt.orgcert.staging-x1.letsencrypt.orgcert.stg-int-x1.letsencrypt.orgcert.stg-root-x1.letsencrypt.orgcrl.root-x1.letsencrypt.orge1.i.lencr.org |
| Valid From | 2026-08-14T10:54:14+00:00 |
| Valid Until | 2026-11-12T10:54:13+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 89 days |
| Serial Number | 05C89A8F07EF67B914C593011CB4DCAD61CE |
| Thumbprint | B5D1FE9A110CA1BDBCCC133A5BA71AB47F2DC9BA |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 33% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 38% | 2 | 5 |
| ownership | 27% | 2 | 3 |
| reputation | 22% | 1 | 3 |
| geolocation | 38% | 2 | 5 |
| Overall | 28% | 10 | 21 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-01 17:59:31 UTC |
| Last Seen | 2026-09-16 19:22:46 UTC |
| Profile Built | 2026-09-16 19:36:14 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 43 |
Full dossier details are available via our API.