23.209.165.129
An intelligence assessment was conducted on IP address 23.209.165.129. The address is owned by Akamai Technologies, Inc. (ASN 20940) and operates within the AKAMAI infrastructure network (23.192.0.0/11). The address is classified as a Content Delivery Network (CDN).
The overall reputation score was 25, categorized as Low Risk. Threat indicators were absent, and the address was not identified as a known attacker or spam source. However, control plane data indicated one DNSBL listing among eight total checks. Geolocation data placed the address in Seoul, South Korea, though a contradiction existed between the claimed location and measured Round-Trip Time (RTT). The observed RTT of 27ms violated the minimum possible physics threshold of 152.5ms for the reported distance.
Network services showed no open ports, and behavioral analysis recorded zero enumeration strikes or WAF violations. The surrounding subnet (23.209.165.0/24) maintained a mostly clean classification with an abuse density of 0.0571. Two threat siblings were identified among 35 total siblings. The final recommendation was to monitor the address due to signal contradictions present in the dataset. The threat actor type was labeled as suspicious with a low confidence attribution score.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Akamai Technologies, Inc. |
| ASN | AS20940 |
| Network Name | AKAMAI |
| CIDR Block | 23.192.0.0/11 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | ae4.r23.iad04.icn.netarch.akamai.com |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | ae4.r23.iad04.icn.netarch.akamai.com |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 39% | 2 | 8 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 22% | 1 | 4 |
| geolocation | 27% | 2 | 4 |
| Overall | 24% | 10 | 22 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-09 18:54:20 UTC |
| Last Seen | 2026-09-26 14:16:20 UTC |
| Profile Built | 2026-09-26 14:30:30 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 41 |
Full dossier details are available via our API.