23.221.236.165

{ } JSON 🔧 Full Actions API

🤖 Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

INTELLIGENCE BRIEFING: 23.221.236.165/32

Subject: Network Intelligence Summary

Classification: Low Risk Infrastructure Asset

Date: Current

Analyst: IPDebrief Intelligence Team

---

EXECUTIVE SUMMARY

IP 23.221.236.165 is a legitimate Akamai Technologies Content Delivery Network (CDN) endpoint operating from Cambridge, Massachusetts. The IP presents low-risk characteristics consistent with enterprise-grade CDN infrastructure. No active malicious indicators detected.

---

IDENTITY & OWNERSHIP

Organization: Akamai Technologies, Inc.
ASN: 20940 (AKAMAI)
CIDR Block: 23.192.0.0/11
Network Role: CDN Provider, Web Server
Geolocation: Cambridge, MA, US (RIR: ARIN)

---

RISK ASSESSMENT

Overall Risk Score: 25/100 (Low Risk)
Abuse Confidence: Negligible
Blacklist Status: Clean (0 blacklist hits)
Known Campaigns: None detected
Threat Feeds: No matches

---

NETWORK PROFILE

DNS Resolution: a23-221-236-165.deploy.static.akamaitechnologies.com
Open Ports: TCP/80 (HTTP), TCP/443 (HTTPS)
Server Banner: AkamaiGHost
TLS Certificate: DigiCert Global G3 ECC SHA384 2020 CA1
Certificate Subject: a248.e.akamai.net
Route Stability: Stable (no recent route changes)
DNSBL Status: 1 of 8 lists (minimal impact)

---

NEIGHBORHOOD CONTEXT

Subnet: 23.221.236.0/24
Abuse Density: 0.5% (Low)
Classification: mostly_clean
Sibling IPs: 4 active, all exhibiting low-risk scores (20-25)
Peer Risk Profile: Consistent CDN infrastructure pattern

---

OBSERVATION HISTORY

Total Observations: 30 signal events
Recent Activity: CDN hostname resolutions to akamaized.net, akamaihd.net, and related staging domains
HTTP Response: Status code 400 observed during probing
Persistence: No persistent malicious behavior detected
Temporal Analysis: No significant risk escalation patterns

---

RELATIONSHIP ANALYSIS

Primary Associations: DNS hostname mappings to Akamai infrastructure
Network Links: Multiple same-network relationships to AKAMAI network
Correlated Entities: 16 total relationships (primarily DNS and network-level)

---

RECOMMENDATION

No defensive action required. IP 23.221.236.165 is a legitimate Akamai CDN endpoint with established infrastructure patterns. Standard monitoring applies. Firewall rules may permit inbound HTTPS/HTTP traffic to services utilizing Akamai for content delivery.

END BRIEFING

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

Country	🇺🇸 United States
Region	Massachusetts
City	Boston
Timezone	—
Latitude	42.36
Longitude	-71.06

🏢 Ownership & Registration

Organization	Akamai Technologies, Inc.
ASN	AS20940
Network Name	AKAMAI
CIDR Block	23.192.0.0/11
RIR	ARIN
Country	United States
Abuse Contact	Available via RDAP

🌐 DNS Intelligence

PTR	a23-221-236-165.deploy.static.akamaitechnologies.com
Forward Confirmed	Yes — FCrDNS verified
Forward Hostnames	`a23-221-236-165.deploy.static.akamaitechnologies.com`

🔐 DNS Hygiene

Hygiene Score	40% (Fair)
SPF	0/6 domains
DMARC	0/6 domains
FCrDNS	Verified
DNSSEC	Valid
CAA	Not configured
Domains Checked	6 domains

☁️ Network Classification

Infrastructure	Infrastructure / Datacenter
Service Purpose	Web Server
Network Tier	Tier 3 — Basic operator with some routing infrastructure

CDN

🔌 Services & Open Ports

Port	Service	Protocol	Banner
80	http	tcp	—
443	https	tcp	—
Closed Ports	22, 25, 3389, 8080, 8443 (2 open / 7 scanned)

Server	AkamaiGHost
HTTP Title	—

🔐 TLS Certificate

🔒

CN=a248.e.akamai.net, O="Akamai Technologies, Inc.", L=Cambridge, S=Massachusetts, C=US

Issued by CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1, O=DigiCert Inc, C=US

Self-signed: No

SANs	a248.e.akamai.net.akamaized.net.akamaized-staging.net.akamaihd.net.akamaihd-staging.net
Valid From	2025-12-22T00:00:00+00:00
Valid Until	2026-12-22T23:59:59+00:00
TLS Protocol	Tls13
Cipher Suite	TLS_AES_256_GCM_SHA384
Signature Algorithm	sha384ECDSA
Validity Period	365 days
Serial Number	0373AB420F54941B555742D9AC890626
Thumbprint	80B29FCE36F71B99CDBB7138B2107D022D478AF9

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

Dimension	Score	Sources	Observations
threat	31%	2	4
routing	13%	1	1
services	30%	2	3
ownership	30%	2	3
reputation	28%	1	3
geolocation	27%	2	3
Overall	26%	10	17

Coverage: 6/6 dimensions · Data sufficiency: sufficient

Data Coherence	Mostly Consistent (80%) — 1 contradiction(s)
Attribution	Moderate (55%)
	OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

⚠ Claimed geolocation contradicts RTT physics measurement

📅 Observation Timeline 🔄 Live

First Seen	2026-08-01 19:40:25 UTC
Last Seen	2026-08-13 03:05:23 UTC
Profile Built	2026-08-13 03:15:38 UTC
Data Freshness	Live
Signal Types	23
Total Observations	29

🔍 23 signal types · 29 observations collected

This report is generated from 23+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.

{ } JSON API 🔧 Actions API 📧 Enterprise Access

ℹ️ About This Report

All data shown is publicly available network metadata — IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.

23.221.236.165📋 Copy