2.20.152.7
Intelligence Briefing: IP 2.20.152.7
Subject: Network Profile and Threat Assessment
Date: 2026-09-06
Status: Low Risk (Score 25)
Overview
The IP address 2.20.152.7 was observed with a Low Risk reputation. Ownership records identify the address as part of the AKAMAI-PA network (ASN 16625) under the Akamai infrastructure provider. The network role is classified as a Web Server.
Technical Services
The host served HTTP (port 80) and HTTPS (port 443) traffic. A TLS certificate associated with the IP was issued to Microsoft Corporation (Subject: *.xboxlive.com). DNS records resolved to `a2-20-152-7.deploy.static.akamaitechnologies.com`.
Geolocation and Anomalies
Geolocation data presented significant contradictions. While one source located the IP in Boston, US-MA, another reported the Netherlands. RTT measurements (avg 15.2ms) violated physics for the reported distance (5663km), indicating a claim of geolocation contradicts RTT physics measurements.
Threat Indicators
No active threat indicators were present. Abuse confidence scores were unavailable, blacklist counts remained at zero, and the IP was not identified as a known attacker, spam source, or Tor exit node. Three specific contradictions were identified regarding geolocation physics, source consensus, and certificate region alignment.
Assessment and Recommendation
Overall confidence in the profile was Low (0.325) due to data inconsistencies and signal contradictions. The profile was labeled as "Contradictory" with a coherence score of 48. Operational analysis recommended a Rate-Limit action with medium severity due to the unreliable profile.
Observation Window
Signals ranged from 2026-08-29 to 2026-09-06. No WAF violations, honeypot hits, or total incidents were recorded.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | AKAM1-RIPE-MNT |
| ASN | AS16625 |
| Network Name | AKAMAI-PA |
| CIDR Block | 2.20.144.0/20 |
| RIR | RIPE |
| Country | EU |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | a2-20-152-7.deploy.static.akamaitechnologies.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | a2-20-152-7.deploy.static.akamaitechnologies.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | 1/2 domains |
| DMARC | 1/2 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | AkamaiGHost |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | *.xboxlive.com |
| Valid From | 2026-08-13T17:59:38+00:00 |
| Valid Until | 2027-02-27T17:59:38+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha384ECDSA |
| Validity Period | 198 days |
| Serial Number | 61000472936238414FA63B91B6000000047293 |
| Thumbprint | 58C3E1FBFC408D600BDD652358AC077DFD789FA4 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 38% | 2 | 5 |
| routing | 13% | 1 | 1 |
| services | 33% | 2 | 4 |
| ownership | 27% | 2 | 3 |
| reputation | 22% | 1 | 3 |
| geolocation | 19% | 2 | 2 |
| Overall | 25% | 10 | 18 |
| Data Coherence | Contradictory (48%) — 3 contradiction(s) |
| Attribution | Low (40%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
⚠ Geo sources disagree on country: NL, US
⚠ TLS certificate claims US but primary geo says NL
📅 Observation Timeline 🔄 Live
| First Seen | 2026-08-29 05:08:09 UTC |
| Last Seen | 2026-09-06 19:44:03 UTC |
| Profile Built | 2026-09-09 19:47:44 UTC |
| Data Freshness | Live |
| Signal Types | 27 |
| Total Observations | 39 |
Full dossier details are available via our API.