23.201.56.23
Intellectual Property Intelligence Briefing
Target: 23.201.56.23/32
Ownership and Role
The address was registered to Akamai Technologies, Inc. under ASN 20940. It was identified as a CDN infrastructure node serving as a web server.
Risk Assessment
The profile assigned a risk score of 25 (Low Risk) and a reputation of Low Risk. However, the threat actor classification was recorded as "Suspicious Host" with the tag "suspicious."
Technical Observations
Activity was observed between 2026-09-03 and 2026-09-11. Ports 80 and 443 were open, returning a server banner of "AkamaiGHost." A TLS certificate issued by DigiCert was present, though DNS hygiene was rated Poor (20) due to missing SPF, DMARC, and DNSSEC records.
Anomalies and Contradictions
Control plane analysis indicated route stability was false. Geolocation validation flagged a contradiction between claimed location and RTT physics measurements.
Threat Context
No known campaigns, blacklist entries, or honeypot hits were associated with the address. The immediate neighborhood showed an abuse density of 0.0161 with one threat sibling among 62 total.
Recommendation
The profile recommended monitoring the address due to signal contradictions present in the data, despite a low overall severity rating.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Akamai Technologies, Inc. |
| ASN | AS20940 |
| Network Name | AKAMAI |
| CIDR Block | 23.192.0.0/11 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | a23-201-56-23.deploy.static.akamaitechnologies.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | a23-201-56-23.deploy.static.akamaitechnologies.com |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | 0/12 domains |
| DMARC | 0/12 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 12 domains |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | AkamaiGHost |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | a248.e.akamai.net*.akamaized.net*.akamaized-staging.net*.akamaihd.net*.akamaihd-staging.net |
| Valid From | 2025-12-22T00:00:00+00:00 |
| Valid Until | 2026-12-22T23:59:59+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha384ECDSA |
| Validity Period | 365 days |
| Serial Number | 0373AB420F54941B555742D9AC890626 |
| Thumbprint | 80B29FCE36F71B99CDBB7138B2107D022D478AF9 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 33% | 2 | 5 |
| routing | 13% | 1 | 1 |
| services | 38% | 2 | 5 |
| ownership | 27% | 2 | 4 |
| reputation | 22% | 1 | 3 |
| geolocation | 27% | 2 | 3 |
| Overall | 27% | 10 | 21 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-03 02:27:42 UTC |
| Last Seen | 2026-09-20 00:19:47 UTC |
| Profile Built | 2026-09-23 06:40:00 UTC |
| Data Freshness | Live |
| Signal Types | 27 |
| Total Observations | 60 |
Full dossier details are available via our API.