14.1.78.166📋 Copy

# INTELLIGENCE BRIEFING: IP 14.1.78.166/32

Classification: Low Risk – Legitimate Starlink Customer Endpoint

Date: 2026-07-29

Intel ID: IP-14.1.78.166

---

## EXECUTIVE SUMMARY

IP 14.1.78.166 is identified as a legitimate Starlink satellite internet customer endpoint located in Colombo, Sri Lanka. The address demonstrates low-risk characteristics with no active threat indicators, no open services, and no blacklist associations. Recommended action: ALLOW with standard logging.

---

## OWNERSHIP & NETWORK CLASSIFICATION

---

## RISK PROFILE

• Overall Risk Score: 25/100 (Low Risk)
• Abuse Confidence: Not applicable
• Threat Classification: Legitimate endpoint
• Reputation: Clean
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Blacklist Status: 0 lists

---

## NETWORK BEHAVIOR

• Open Ports: None detected (firewalled/no services)
• DNS Resolution: customer.sngesgp1.isp.starlink.com (Starlink customer endpoint)
• Email Auth: SPF and DMARC records present
• Service Purpose: Firewalled / No Services
• Network Role: Residential/Enterprise endpoint (not cloud, CDN, VPN, proxy)

---

## THREAT INTELLIGENCE

• Threat Indicators: None detected
• Active Campaigns: None
• Historical Threat Persistence: 0 days
• Persistent Malicious Activity: No
• Control Plane: Route stable, DNSSEC valid, DNSBL listed count: 1 (minor)

---

## SUBNET ANALYSIS (14.1.78.0/24)

• Abuse Density: 0.1111 (Low)
• Classification: Mostly Clean
• Total Siblings: 9
• Active Siblings: 5
• Threat Siblings: 1
• Risk Distribution: 6 Low, 0 Medium, 0 High

Notable Neighbors:

• 14.1.78.112: Risk Score 25 (Low)
• 14.1.78.126: Risk Score 25 (Low)
• 14.1.78.201: Risk Score 25 (Low)

---

## OBSERVATION HISTORY

• Total Observations: 20 signals
• Recent Activity: Consistent low-risk profile
• Ownership Changes: 0
• Geolocation Validation: Plausible (ICMP blocked, distance ~8,264km)
• Network Stability: No significant changes observed

---

## RELATIONSHIP GRAPH

• Same Network: Multiple entries for STARLINK_SNGESGP1_LK
• DNS Associations: customer.sngesgp1.isp.starlink.com (5 associations)
• Organizations: SpaceX Services Inc.

---

## SECURITY RECOMMENDATIONS

Recommended Action: ALLOW with standard logging

Firewall Rules: No restrictive rules required. IP demonstrates legitimate operational patterns consistent with Starlink satellite internet customer endpoints.

Monitoring Priority: LOW

Justification: This IP represents a residential/enterprise customer endpoint on the Starlink satellite internet service. No malicious indicators detected. Subnet shows low abuse density. No firewall restrictions warranted.

---

## INTELLIGENCE SOURCES

• IPDebrief Profile Analysis
• Historical Signal Observations (20 signals)
• Neighborhood Subnet Assessment
• DNS & Relationship Mapping
• Control Plane Verification

---

*Intel generated by IPDebrief – Defensive Security Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.