Intelligence Briefing: 2.21.116.24/32
Ownership and Infrastructure
The IP 2.21.116.24/32 is registered to Akamai Technologies (AS32787) within the 2.21.112.0/20 CIDR block. Network role identification classifies the infrastructure as a Content Delivery Network (CDN) located in Newark, New Jersey, US.
Threat Assessment
Risk analysis returned a Low Risk classification with a risk score of 25. No specific threat indicators, known campaigns, or active attacker status were detected. Behavioral analysis recorded zero honeypot hits, enumeration strikes, and WAF violations. However, control plane data indicated one DNSBL listing against eight total lists.
Anomalies and Contradictions
Geolocation sources disagreed between US and FR, though geo validation deemed the location plausible. A threat actor tag labeled "Suspicious Host" was assigned due to general threat indicators despite low specific classification.
Recommendation
The profile recommendation was Monitor due to signal contradictions present. Data freshness confirmed as Live with the newest observation dated 2026-09-15. No immediate firewall rules were recommended.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | AKAM1-RIPE-MNT |
| ASN | AS32787 |
| Network Name | AKAMAI-PA |
| CIDR Block | 2.21.112.0/20 |
| RIR | RIPE |
| Country | NL |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | a2-21-116-24.deploy.static.akamaitechnologies.com |
| Forward Confirmed | No β PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | a2-21-116-24.deploy.static.akamaitechnologies.com |
π DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | 0/2 domains |
| DMARC | 0/2 domains |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting β Infrastructure provider without advanced routing |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 22% | 1 | 3 |
| geolocation | 33% | 2 | 4 |
| Overall | 23% | 10 | 17 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-09-04 10:37:28 UTC |
| Last Seen | 2026-09-24 22:17:35 UTC |
| Profile Built | 2026-09-24 22:30:34 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 37 |
Full dossier details are available via our API.