Intelligence Briefing: IP 23.201.56.226/32
Ownership and Role
The address was owned by Akamai Technologies, Inc. (ASN 20940) under the network name AKAMAI. Infrastructure classification identified the resource as Content Delivery Network (CDN) Web Server infrastructure.
Technical Configuration
Ports 80 (HTTP) and 443 (HTTPS) were open. The server banner was "AkamaiGHost" with a response status code of 400. TLS certificates were issued by DigiCert Global G3 with a subject CN of a248.e.akamai.net. Reverse DNS resolution confirmed the hostname a23-201-56-226.deploy.static.akamaitechnologies.com.
Threat Assessment
The IP reputation was recorded as Low Risk with a risk score of 20. No known attacker, spam source, or Tor exit node indicators were present. The address was not listed on any public threat feeds or associated with known campaigns. Behavioral analysis showed zero honeypot hits, enumeration strikes, or WAF violations.
Anomalies and Contradictions
Geolocation data placed the resource in Southfield, MI, US. However, RTT physics measurements indicated a distance of 5663km with a minimum possible RTT of 113.3ms, contradicting the observed 15ms latency.
Recommendation
The address was classified as Low Severity. Monitoring was recommended due to the presence of signal contradictions. No immediate blocking action was required.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Akamai Technologies, Inc. |
| ASN | AS20940 |
| Network Name | AKAMAI |
| CIDR Block | 23.192.0.0/11 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | a23-201-56-226.deploy.static.akamaitechnologies.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | a23-201-56-226.deploy.static.akamaitechnologies.com |
π DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | 0/12 domains |
| DMARC | 0/12 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 12 domains |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Tier 3 β Basic operator with some routing infrastructure |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | β |
| 443 | https | tcp | β |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | AkamaiGHost |
| HTTP Title | β |
π TLS Certificate
| SANs | a248.e.akamai.net*.akamaized.net*.akamaized-staging.net*.akamaihd.net*.akamaihd-staging.net |
| Valid From | 2025-12-22T00:00:00+00:00 |
| Valid Until | 2026-12-22T23:59:59+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha384ECDSA |
| Validity Period | 365 days |
| Serial Number | 0373AB420F54941B555742D9AC890626 |
| Thumbprint | 80B29FCE36F71B99CDBB7138B2107D022D478AF9 |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 37% | 2 | 6 |
| routing | 30% | 3 | 4 |
| services | 38% | 2 | 5 |
| ownership | 30% | 3 | 4 |
| reputation | 22% | 1 | 4 |
| geolocation | 27% | 2 | 4 |
| Overall | 30% | 13 | 27 |
| Data Coherence | Mostly Consistent (80%) β 1 contradiction(s) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-09-05 04:54:27 UTC |
| Last Seen | 2026-09-21 21:49:46 UTC |
| Profile Built | 2026-09-21 22:02:40 UTC |
| Data Freshness | Live |
| Signal Types | 29 |
| Total Observations | 57 |
Full dossier details are available via our API.