23.197.75.125
IP 23.197.75.125 is registered to Akamai Technologies, Inc. (AS20940) and operates within the 23.192.0.0/11 CIDR block as a Content Delivery Network (CDN). The endpoint is classified as "Firewalled / No Services," with no open ports or active threat indicators detected. The IP maintains a Low Risk reputation with a risk score of 25 and zero blacklist entries.
Operational analysis identified a geolocation contradiction. While the IP was geolocated to the US, the Round-Trip Time (RTT) average of 98.8ms contradicted the minimum possible physics requirement of 152.5ms for the 7626km distance. The 23.197.75.125/24 subnet was classified as clean with zero abuse density.
Observations spanned from August 29, 2026, to September 8, 2026. Although the threat actor categorization labeled the host as "Suspicious," the overall confidence remained Very Low. The recommended action is to monitor the IP for signal changes, noting the presence of data contradictions, while maintaining a low-severity stance.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Akamai Technologies, Inc. |
| ASN | AS20940 |
| Network Name | AKAMAI |
| CIDR Block | 23.192.0.0/11 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | ae22.gw1-lon1.netarch.akamai.com |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | ae22.gw1-lon1.netarch.akamai.com |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 37% | 2 | 6 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 4 |
| reputation | 27% | 1 | 5 |
| geolocation | 36% | 2 | 7 |
| Overall | 27% | 10 | 25 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (65%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-08-29 18:31:27 UTC |
| Last Seen | 2026-09-24 15:37:19 UTC |
| Profile Built | 2026-09-24 16:00:37 UTC |
| Data Freshness | Live |
| Signal Types | 31 |
| Total Observations | 52 |
Full dossier details are available via our API.