23.9.227.232
Network intelligence identified IP 23.9.227.232/32 as a Low Risk endpoint with a risk score of 25, hosted within the Akamai Technologies, Inc. (ASN 16625) network. The address resolved to an AkamaiGHost service on TCP ports 80 and 443. Geolocation data placed the host in Boston, US, while the TLS certificate indicated issuance to Nintendo Co., Ltd. (Kyoto, JP). Control plane validation flagged a geolocation contradiction where the claimed distance contradicted RTT physics measurements.
Threat analysis classified the host as "Suspicious Host" with a coherence score of 48 (Contradictory), driven by three identified signal inconsistencies. The surrounding subnet (23.9.227.0/24) showed one threat sibling and an abuse density of 1. Despite a blacklist count of zero, the overall confidence level remained Very Low. Operational recommendations advised rate-limiting the IP to address the unreliable profile.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Akamai Technologies, Inc. |
| ASN | AS16625 |
| Network Name | AKAMAI |
| CIDR Block | 23.0.0.0/12 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | a23-9-227-232.deploy.static.akamaitechnologies.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | a23-9-227-232.deploy.static.akamaitechnologies.com |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | AkamaiGHost |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | 2014-05-09T22:29:22+00:00 |
| Valid Until | 2037-08-16T22:29:22+00:00 |
| TLS Protocol | Tls12 |
| Cipher Suite | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 8500 days |
| Serial Number | 00A7 |
| Thumbprint | B48ECF5C04B9CBB18D6215D0AD51DAA113929DE8 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 36% | 2 | 7 |
| routing | 13% | 1 | 1 |
| services | 27% | 2 | 4 |
| ownership | 27% | 2 | 4 |
| reputation | 27% | 1 | 5 |
| geolocation | 27% | 2 | 3 |
| Overall | 26% | 10 | 24 |
| Data Coherence | Contradictory (48%) — 3 contradiction(s) |
| Attribution | Low (40%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
⚠ Geo sources disagree on country: US, JP
⚠ TLS certificate claims JP but primary geo says US
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-01 06:19:20 UTC |
| Last Seen | 2026-09-20 08:32:20 UTC |
| Profile Built | 2026-09-23 00:00:08 UTC |
| Data Freshness | Live |
| Signal Types | 28 |
| Total Observations | 43 |
Full dossier details are available via our API.