IP Address
IPv4
23.208.208.173
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of 23.208.208.173
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
ASN
AS6057
ANTEL
Country
UY
Uruguay
Reverse DNS
a23-208-208-173.deploy.static.akamaitechnologies.com
PTR
Open Ports
1
Last scan
Autonomous System
Geolocation
Reverse DNS
Last seen
2026-07-18 20:38:49
Network
Prefix
RPKI
—
Open Ports
| Port | Proto | Service | Server | Last seen |
|---|---|---|---|---|
| 443 | tcp | https | AkamaiGHost | 2026-07-18 20:37:39.000 |
TLS Certificates
Port 443
8fc58e0d7d97…
Subject: eu.aswatson.com
Issuer: DigiCert Global G3 TLS ECC SHA384 2020 CA1
SANs: adayevrak.watsons.com.tr, api.drogas.lt, api.drogas.lv, api.eu.aswatson.com, api.iciparisxl.be, api.iciparisxl.lu, api.iciparisxl.nl, api.kruidvat.be, api.kruidvat.nl, api.savers.co.uk, api.trekpleister.nl, api.watsons.com.tr, app.drogas.lt, app.drogas.lv, app.iciparisxl.be, app.iciparisxl.lu, app.iciparisxl.nl, app.kruidvat.be, app.kruidvat.nl, app.savers.co.uk, app.watsons.com.tr, appdrglt.drogas.lt, appdrglv.drogas.lv, blog.watsons.com.tr, bulten.watsons.com.tr, campagne.iciparisxl.be, campagne.iciparisxl.lu, campagne.iciparisxl.nl, campaign.drogas.lt, campaign.eu.aswatson.com, campaign.kruidvat.be, campaign.kruidvat.nl, campaign.marionnaud.at, campaign.marionnaud.ch, campaign.marionnaud.cz, campaign.marionnaud.hu, campaign.marionnaud.it, campaign.marionnaud.ro, campaign.marionnaud.sk, campaign.savers.co.uk, campaign.superdrug.com, campaign.theperfumeshop.com, campaign.trekpleister.nl, campaign.watsons.com.tr, campaigns.theperfumeshop.com, cnddocapi.watsons.com.tr, community.iciparisxl.be, community.iciparisxl.nl, digital.kruidvat.be, digital.kruidvat.nl, drogas.lt, drogas.lv, eu.aswatson.com, game.watsons.ua, gc.watsons.com.tr, iciparisxl.be, iciparisxl.lu, iciparisxl.nl, ik.watsons.com.tr, innovation.superdrug.com, ivr-api.watsons.com.tr, jeux-concours.marionnaud.fr, latvija.drogas.lv, links.theperfumeshop.com, media.drogas.lt, media.drogas.lv, media.iciparisxl.be, media.iciparisxl.lu, media.iciparisxl.nl, media.kruidvat.be, media.kruidvat.nl, media.savers.co.uk, media.trekpleister.nl, media.watsons.com.tr, oddsi.watsons.com.tr, odul.watsons.com.tr, optimoconnect.com, scp.watsons.com.tr, scpapi.watsons.com.tr, survey.eu.aswatson.net, trekpleister.nl, uat-api.eu.aswatson.com, walert-api.watsons.com.tr, wasapi.watsons.com.tr, watsons.com.tr, watsonsbeautystudio.com, wbotapi.watsons.com.tr, www.drogas.lt, www.drogas.lv, www.iciparisxl.be, www.iciparisxl.lu, www.iciparisxl.nl, www.optimoconnect.com, www.trekpleister.nl, www.watsons.com.tr, www.watsonsbeautystudio.com
Valid 2026-05-07 00:00:00 → 2026-11-21 23:59:59
Tech Stack
Wappalyzer fingerprinting pending
HTTP-body analysis identifies web frameworks, CMS platforms, analytics, JS libraries and server-side languages from this host.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
aswatson.net
95% confidence
behind AS20940 cert 8fc58e0d7d97… · cert 8fc58e0d… served by 23.208.208.173 (AS6057) carries SAN survey.eu.aswatson.net which currently resolves through Akamai (AS20940) at 104.85.0.149, 2a02:26f0:1180:196::318a, 2a02:26f0:1180:182::318a, 184.30.156.198
kruidvat.nl
95% confidence
behind AS20940 cert 8fc58e0d7d97… · cert 8fc58e0d… served by 23.208.208.173 (AS6057) carries SAN api.kruidvat.nl which currently resolves through Akamai (AS20940) at 104.85.0.149, 2.23.244.206, 23.202.152.180, 184.30.156.198
marionnaud.fr
95% confidence
behind AS20940 cert 8fc58e0d7d97… · cert 8fc58e0d… served by 23.208.208.173 (AS6057) carries SAN jeux-concours.marionnaud.fr which currently resolves through Akamai (AS20940) at 104.85.0.149, 2a02:26f0:1180:196::318a, 2a02:26f0:1180:182::318a, 2a02:26f0:480:59e::318a
theperfumeshop.com
95% confidence
behind AS20940 cert 8fc58e0d7d97… · cert 8fc58e0d… served by 23.208.208.173 (AS6057) carries SAN campaign.theperfumeshop.com which currently resolves through Akamai (AS20940) at 104.85.0.149, 2a02:26f0:1180:196::318a, 2a02:26f0:1180:182::318a, 23.56.162.200
drogas.lt
95% confidence
behind AS20940 cert 8fc58e0d7d97… · cert 8fc58e0d… served by 23.208.208.173 (AS6057) carries SAN api.drogas.lt which currently resolves through Akamai (AS20940) at 104.85.0.149, 184.30.156.198, 104.99.232.151, 23.210.16.203
marionnaud.sk
95% confidence
behind AS20940 cert 8fc58e0d7d97… · cert 8fc58e0d… served by 23.208.208.173 (AS6057) carries SAN campaign.marionnaud.sk which currently resolves through Akamai (AS20940) at 104.85.0.149, 2a02:26f0:1180:196::318a, 2a02:26f0:1180:182::318a, 2.23.244.206
marionnaud.cz
95% confidence
behind AS20940 cert 8fc58e0d7d97… · cert 8fc58e0d… served by 23.208.208.173 (AS6057) carries SAN campaign.marionnaud.cz which currently resolves through Akamai (AS20940) at 104.85.0.149, 2a02:26f0:1180:196::318a, 2a02:26f0:1180:182::318a, 2600:1408:ec00:294::318a
kruidvat.be
95% confidence
behind AS20940 cert 8fc58e0d7d97… · cert 8fc58e0d… served by 23.208.208.173 (AS6057) carries SAN campaign.kruidvat.be which currently resolves through Akamai (AS20940) at 104.85.0.149, 2a02:26f0:1180:196::318a, 2a02:26f0:1180:182::318a, 23.62.168.200
trekpleister.nl
95% confidence
behind AS20940 cert 8fc58e0d7d97… · cert 8fc58e0d… served by 23.208.208.173 (AS6057) carries SAN api.trekpleister.nl which currently resolves through Akamai (AS20940) at 104.85.0.19, 23.202.152.22, 23.56.163.127, 23.222.200.22
drogas.lv
95% confidence
behind AS16625 cert 8fc58e0d7d97… · cert 8fc58e0d… served by 23.208.208.173 (AS6057) carries SAN app.drogas.lv which currently resolves through Akamai (AS16625) at 184.30.156.198, 104.85.0.149, 2.23.244.206, 104.99.232.151
aswatson.com
95% confidence
behind AS20940 cert 8fc58e0d7d97… · cert 8fc58e0d… served by 23.208.208.173 (AS6057) carries SAN api.eu.aswatson.com which currently resolves through Akamai (AS20940) at 104.85.0.149, 23.62.168.200, 23.56.162.200, 104.99.232.151
co.uk
95% confidence
behind AS20940 cert 8fc58e0d7d97… · cert 8fc58e0d… served by 23.208.208.173 (AS6057) carries SAN api.savers.co.uk which currently resolves through Akamai (AS20940) at 104.85.0.149, 2.23.244.206, 23.220.112.168, 23.222.124.186
com.tr
95% confidence
behind AS16625 cert 8fc58e0d7d97… · cert 8fc58e0d… served by 23.208.208.173 (AS6057) carries SAN adayevrak.watsons.com.tr which currently resolves through Akamai (AS16625) at 184.30.156.198, 104.85.0.149, 2.23.244.206, 104.99.232.151
marionnaud.ch
95% confidence
behind AS20940 cert 8fc58e0d7d97… · cert 8fc58e0d… served by 23.208.208.173 (AS6057) carries SAN campaign.marionnaud.ch which currently resolves through Akamai (AS20940) at 104.85.0.149, 2a02:26f0:1180:196::318a, 2a02:26f0:1180:182::318a, 2600:141b:1c00:da7::318a
drogas.lv
95% confidence
behind AS20940 cert 8fc58e0d7d97… · cert 8fc58e0d… served by 23.208.208.173 (AS6057) carries SAN api.drogas.lv which currently resolves through Akamai (AS20940) at 104.85.0.149, 2.23.244.206, 104.99.232.151, 23.222.51.200
marionnaud.at
95% confidence
behind AS20940 cert 8fc58e0d7d97… · cert 8fc58e0d… served by 23.208.208.173 (AS6057) carries SAN campaign.marionnaud.at which currently resolves through Akamai (AS20940) at 104.85.0.149, 2a02:26f0:1180:196::318a, 2a02:26f0:1180:182::318a, 184.30.156.198
drogas.lt
95% confidence
behind AS16625 cert 8fc58e0d7d97… · cert 8fc58e0d… served by 23.208.208.173 (AS6057) carries SAN appdrglt.drogas.lt which currently resolves through Akamai (AS16625) at 2.23.244.206, 2a02:26f0:1180:196::318a, 2a02:26f0:1180:182::318a, 184.30.156.198
iciparisxl.be
95% confidence
behind AS16625 cert 8fc58e0d7d97… · cert 8fc58e0d… served by 23.208.208.173 (AS6057) carries SAN api.iciparisxl.be which currently resolves through Akamai (AS16625) at 184.30.156.198, 104.85.0.149, 104.99.232.151, 23.210.16.203
iciparisxl.lu
95% confidence
behind AS16625 cert 8fc58e0d7d97… · cert 8fc58e0d… served by 23.208.208.173 (AS6057) carries SAN iciparisxl.lu which currently resolves through Akamai (AS16625) at 23.222.200.180, 2.23.244.206, 184.30.156.198, 104.85.0.149
marionnaud.it
95% confidence
behind AS20940 cert 8fc58e0d7d97… · cert 8fc58e0d… served by 23.208.208.173 (AS6057) carries SAN campaign.marionnaud.it which currently resolves through Akamai (AS20940) at 104.85.0.149, 2a02:26f0:1180:196::318a, 2a02:26f0:1180:182::318a, 23.56.162.200
kruidvat.be
95% confidence
behind AS16625 cert 8fc58e0d7d97… · cert 8fc58e0d… served by 23.208.208.173 (AS6057) carries SAN api.kruidvat.be which currently resolves through Akamai (AS16625) at 184.30.156.198, 104.85.0.149, 23.56.162.200, 104.99.232.151
superdrug.com
95% confidence
behind AS20940 cert 8fc58e0d7d97… · cert 8fc58e0d… served by 23.208.208.173 (AS6057) carries SAN campaign.superdrug.com which currently resolves through Akamai (AS20940) at 104.85.0.149, 2a02:26f0:1180:196::318a, 2a02:26f0:1180:182::318a, 173.222.169.13
watsonsbeautystudio.com
95% confidence
behind AS20940 cert 8fc58e0d7d97… · cert 8fc58e0d… served by 23.208.208.173 (AS6057) carries SAN www.watsonsbeautystudio.com which currently resolves through Akamai (AS20940) at 104.85.0.149, 104.99.232.151, 23.210.16.203, 184.30.156.198
optimoconnect.com
95% confidence
behind AS20940 cert 8fc58e0d7d97… · cert 8fc58e0d… served by 23.208.208.173 (AS6057) carries SAN optimoconnect.com which currently resolves through Akamai (AS20940) at 104.85.0.149, 184.30.156.198, 23.56.162.200, 23.220.112.168
com.tr
95% confidence
behind AS20940 cert 8fc58e0d7d97… · cert 8fc58e0d… served by 23.208.208.173 (AS6057) carries SAN api.watsons.com.tr which currently resolves through Akamai (AS20940) at 104.85.0.149, 23.62.168.200, 23.202.152.180, 104.99.232.151
watsons.ua
95% confidence
behind AS20940 cert 8fc58e0d7d97… · cert 8fc58e0d… served by 23.208.208.173 (AS6057) carries SAN game.watsons.ua which currently resolves through Akamai (AS20940) at 104.85.0.149, 2a02:26f0:1180:196::318a, 2a02:26f0:1180:182::318a, 2600:141b:1c00:da7::318a
marionnaud.hu
95% confidence
behind AS20940 cert 8fc58e0d7d97… · cert 8fc58e0d… served by 23.208.208.173 (AS6057) carries SAN campaign.marionnaud.hu which currently resolves through Akamai (AS20940) at 104.85.0.149, 2a02:26f0:1180:196::318a, 2a02:26f0:1180:182::318a, 23.222.124.186
iciparisxl.nl
95% confidence
behind AS20940 cert 8fc58e0d7d97… · cert 8fc58e0d… served by 23.208.208.173 (AS6057) carries SAN api.iciparisxl.nl which currently resolves through Akamai (AS20940) at 104.85.0.149, 104.99.232.151, 23.210.16.203, 184.30.156.198
iciparisxl.be
95% confidence
behind AS20940 cert 8fc58e0d7d97… · cert 8fc58e0d… served by 23.208.208.173 (AS6057) carries SAN app.iciparisxl.be which currently resolves through Akamai (AS20940) at 104.85.0.149, 184.30.156.198, 104.99.232.151, 23.210.16.203
iciparisxl.lu
95% confidence
behind AS20940 cert 8fc58e0d7d97… · cert 8fc58e0d… served by 23.208.208.173 (AS6057) carries SAN api.iciparisxl.lu which currently resolves through Akamai (AS20940) at 104.85.0.149, 23.220.112.168, 2.23.244.206, 104.99.232.151
marionnaud.ro
95% confidence
behind AS20940 cert 8fc58e0d7d97… · cert 8fc58e0d… served by 23.208.208.173 (AS6057) carries SAN campaign.marionnaud.ro which currently resolves through Akamai (AS20940) at 104.85.0.149, 2a02:26f0:1180:196::318a, 2a02:26f0:1180:182::318a, 184.30.156.198
Multi-Vantage Check
Reachability accrued passively from real user-triggered checks across our 65+ probe nodes. Run a live check to add fresh data.
ICMP responsive
This IP replied to our global ICMP sweep — last confirmed 2026-08-03.
No accumulated reachability data yet
Reachability accrues from real user-triggered checks. Trigger a Ping or HTTP check from our 65+ probe nodes to contribute the first data point.
Web Pages
| Port | Page title | Status | Flags |
|---|---|---|---|
| 443 | Invalid URL | 400 |
Threat Intelligence
No threat-intel matches
This IP doesn't appear in any of the feeds we mirror (Tor exits, FireHOL Level 1-3, Spamhaus DROP/EDROP, URLhaus, OpenPhish). Absence here doesn't prove the IP is clean — it just means none of our public-feed sources flag it.
Co-Hosted Domains
No DNS-confirmed domains yet
We cross-reference body-cited domains against our DNS resolver records. Confirmations appear here once both sides have data for the same name.
External References
No external references found yet
As HTML bodies get banner-grabbed, references to external domains land here.
History
First observed
2026-07-18 20:37
Last observed
2026-07-18 20:37
Scan observations
2
The full change-log (ASN moves, cert rotations, port-state diffs) accumulates as our archives grow.