23.210.92.209
Intelligence Briefing: 23.210.92.209
Executive Summary: Analysis identified the IP address as a Low Risk asset (Risk Score 25) operating within Akamai Technologies, Inc. infrastructure. While no specific attack indicators were logged, the system tagged the host as "Suspicious" due to signal contradictions.
Infrastructure & Ownership: The address is registered to Akamai Technologies, Inc. under ASN 20940 (AKAMAI). The network role confirmed the system as a CDN Web Server (AkamaiGHost) serving traffic on ports 80 and 443. DNS records resolved to a23-210-92-209.deploy.static.akamaitechnologies.com with a DigiCert TLS certificate issued for a248.e.akamai.net.
Threat Intelligence: No known campaigns or specific attacker associations were correlated. The threat actor classification listed as "Suspicious Host." No specific threat indicators were returned in the active scan.
Technical Observations: Geolocation data placed the host in Cambridge, MA, US, yet RTT measurements contradicted this with a calculated distance of 5965.7km. DNS hygiene was rated Poor (Score 20), with no SPF or DMARC records. The control plane showed 4 route changes within the 30-day window.
Recommendation: The assessment recommended Monitor action.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Akamai Technologies, Inc. |
| ASN | AS20940 |
| Network Name | AKAMAI |
| CIDR Block | 23.192.0.0/11 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | a23-210-92-209.deploy.static.akamaitechnologies.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | a23-210-92-209.deploy.static.akamaitechnologies.com |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | 0/6 domains |
| DMARC | 0/6 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 6 domains |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | AkamaiGHost |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | a248.e.akamai.net*.akamaized.net*.akamaized-staging.net*.akamaihd.net*.akamaihd-staging.net |
| Valid From | 2025-12-22T00:00:00+00:00 |
| Valid Until | 2026-12-22T23:59:59+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha384ECDSA |
| Validity Period | 365 days |
| Serial Number | 0373AB420F54941B555742D9AC890626 |
| Thumbprint | 80B29FCE36F71B99CDBB7138B2107D022D478AF9 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 3 |
| routing | 27% | 2 | 3 |
| services | 33% | 2 | 4 |
| ownership | 30% | 3 | 4 |
| reputation | 13% | 1 | 2 |
| geolocation | 35% | 2 | 2 |
| Overall | 27% | 12 | 18 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-07 04:01:16 UTC |
| Last Seen | 2026-09-18 21:05:08 UTC |
| Profile Built | 2026-09-18 21:18:10 UTC |
| Data Freshness | Live |
| Signal Types | 30 |
| Total Observations | 43 |
Full dossier details are available via our API.