129.224.207.59📋 Copy

# IP Intelligence Briefing: 129.224.207.59/32

Classification: LOW RISK – SpaceX Starlink Infrastructure

Risk Score: 25/100

Briefing Date: July 29, 2026

## Executive Summary

IP 129.224.207.59 is identified as SpaceX Starlink infrastructure belonging to SpaceX Services, Inc. (ASN 14593). The IP presents a low-risk profile with no active threat indicators, no open services, and minimal neighborhood abuse density. No immediate blocking or mitigation actions are recommended.

## Ownership and Infrastructure

• Organization: SpaceX Services, Inc.
• Network Name: STARLINK-915624288692371493-US-RDMDWAX3RK3-IPV4
• ASN: 14593
• CIDR Block: 129.224.207.0/25
• RIR: ARIN
• Classification: Starlink satellite terminal IP

## Technical Profile

• Network Role: Firewalled / No Services
• Open Ports: None detected
• DNS Resolution: customer.frntdeu1.isp.starlink.com
• Reverse DNS: customer.frntdeu1.isp.starlink.com
• Email Auth: SPF and DMARC records present
• Control Plane: Origin ASN 14593, BGP prefix 129.224.206.0/23

## Geolocation Assessment

• Reported Location: Damascus, Syria (SY)
• Note: Geographic data shows low confidence (2500km accuracy radius). Starlink terminal locations should be validated against physical deployment records.

## Threat Indicators

• Abuse Confidence Score: Not calculated
• Blacklist Status: No blacklist entries
• Threat Feeds: No matches
• Known Campaigns: None identified
• Tor/Exit Node: No
• Known Attacker: No
• Spam Source: No

## Neighborhood Analysis (129.224.207.0/24)

• Abuse Density: 0.0909 (9.09%)
• Subnet Classification: mostly_clean
• Total Siblings: 11
• Active Siblings: 5
• Threat Siblings: 1
• Risk Distribution: 9 low-risk, 0 medium-risk, 0 high-risk
• Notable Neighbors: Multiple IPs with risk score 25 (consistent with Starlink profile)

## Observation History

• Total Observations: 19
• Most Recent: July 29, 2026
• Threat Persistence: 0 days
• Ownership Changes: 0
• Signals: Banner scans, port scans, geolocation probes, subnet classification

## SOC Analyst Recommendations

1. Action: Monitor but do not block. This is legitimate Starlink infrastructure.

2. Firewall: No specific rules required. Allow outbound connections as normal.

3. Alerting: No elevated alerting needed. Risk score 25 falls within acceptable operational parameters.

4. Investigation: If traffic from this IP shows anomalous patterns (e.g., unusual outbound connections, data exfiltration), investigate endpoint rather than blocking the IP.

5. Documentation: Maintain as known benign infrastructure.

## Conclusion

IP 129.224.207.59 represents SpaceX Starlink satellite terminal infrastructure with no malicious indicators. The low risk score (25), absence of threat indicators, clean neighborhood profile, and legitimate organizational ownership support continued monitoring without intervention.

---

*Intel generated from IPDebrief platform data. Verify with additional signals before implementing security controls.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.